1. 介绍
APM Group Limited("APMG"、"我们"、"本公司"、"我方")致力于保护并尊重您的数据隐私。我们希望您了解我们如何使用和保护您的个人信息。这包括告知您对我们持有的您的个人信息所享有的权利。
本隐私政策说明了我们如何使用、处理和存储您的个人数据。个人数据是指任何可以用来识别或可合理关联到特定个人的信息。
我们需要您的个人数据以履行您可能与我们或我们的业务伙伴之间的合同/法律义务,或使我们能够为您提供服务。在其他情况下,我们将在征得您的许可和同意后收集该信息。
当APMG代表自己向您提供服务时(例如当您使用我们的网站或向我们购买考试时),APMG是所有收集的个人数据的"控制者"。
当APMG代表SFIA许可评估合作伙伴通过Credly平台发放SFIA数字徽章时,APMG是数字管理的"处理者",负责您的评估和认证的许可合作伙伴是"控制者"。
2. 法律法规
在英国管理个人数据的法律包括:
- 2018年数据保护法 和
- 英国通用数据保护条例 (UK GDPR)
- 2016年4月27日欧洲议会和理事会关于保护自然人个人数据处理和此类数据自由流动的第(EU) 2016/679号条例(通用数据保护条例)(EU GDPR)。
在英国维护公共利益信息权利的独立机构是信息专员办公室("ICO")。更多信息可在ICO网站上找到。
我们在ICO的注册详情如下:-
- The APM Group Limited Z6934466
请注意,这些法规适用于所有APMG办事处以及通过APMG获得个人信息访问权限的所有业务合作伙伴。这些法规不仅限于英国公民。
3. 公司详情
这是APMG的注册地址、公司编号和联系信息:
The APM Group Limited
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG
邮箱: dataprivacy@apmgroup.co.uk
电话:+44 (0) 1494 452450
我们的欧盟办事处是:
APMG Benelux
Unit 1.15 BusinessCenter Spoetnik
Spoetnik 20
3824 MG Amersfoort
如果您对本隐私政策有任何疑问、意见或投诉,请使用上述详细信息联系我们。
4. 我们可能从您那里收集的个人信息
APMG可能会收集您的信息,因为我们有合法理由(法律允许或合同规定)收集这些信息,或者因为您已同意我们为特定目的这样做,或者我们有合法权益。
您提供给我们的信息
您可能在同意的情况下或根据使用我们服务的要求向我们提供有关您的信息,例如:
- 您为在我们这里创建账户而提供的信息
- 您发送给我们或以其他方式贡献的表格、电子邮件和其他通信,例如支持查询或发布到我们留言板或论坛的帖子。请注意,我们网站和在线平台公共部分的信息对其他人是可见的
- 您的营销偏好
- 您在调查或促销活动中与我们分享的信息
- 您在申请APMG职位时与我们分享的信息
- 您在会议、展览或在线活动中提交给我们的信息
这些信息可能是个人信息、财务信息、教育信息或与您的就业历史相关的信息。
有时我们会因法律原因要求您向我们提供信息,例如与我们签订合同时、当您从我们这里购买考试、评估或其他商品或服务时,或者当您申请APMG职位时。
如果您是经APMG认证或批准的培训师、引导师或监考员,概述您数据处理情况的培训师、引导师、监考员数据保护声明可在APMG网络和/或通过您的赞助ATO获取。
从其他来源获得的信息
如果您从我们的商业伙伴或培训提供商之一购买APMG考试,他们可能会向我们提供关于您的某些个人信息(如您的姓名和电子邮件地址),以便我们为您提供服务。相关商业伙伴/培训提供商的隐私政策将控制他们如何使用您的信息并与我们分享这些信息。请通过查看他们的隐私政策确保您对他们的隐私条款感到满意。
如果您通过我们的授权合作伙伴之一获得了SFIA数字徽章,他们可能会向我们提供关于您的某些个人信息(如您的姓名和电子邮件地址),以便我们为您提供服务。
从您使用我们服务中获得的信息
当您使用我们的服务时,我们会收集有关您在我们网站和/或在线平台上的活动和互动的信息,例如您的IP地址、您的设备和浏览器类型、您的偏好、您在访问我们网站和/或在线平台之前访问的网页,以及有关您如何与我们网站和/或在线平台互动的信息。
当您使用我们的服务时,其中一些信息会通过cookie和类似技术自动收集。您可以在下面第5节中了解更多关于我们使用cookie的信息。
网站和在线平台使用信息
我们使用第三方服务Google Analytics来收集标准网站性能信息。这些信息的处理方式不会识别个人身份。网页使用信息由我们的网络服务器和其他来源收集,包括搜索引擎、互联网服务提供商、包括JavaScript在内的页面标记技术和cookie。我们使用IP地址来分析趋势、跟踪用户移动,并收集广泛的人口统计信息用于汇总使用。IP地址不与个人身份信息关联。
如果您访问我们的网站之一或使用我们的在线平台之一,我们可能会自动收集有关您的信息,例如:
- IP地址
- 您用于连接我们网站和/或在线平台的技术信息
- 您点击我们网站或在线平台的哪些部分以及您查看我们网站或在线平台的时间长度。
除了您提供的信息外,每当您使用我们的网站或在线平台之一时,我们都会接收和存储一系列网站和在线平台使用信息。如果我们想收集个人信息,我们会清楚具体地说明为什么需要这些信息,并要求您选择同意。
我们使用这些信息来:
- 评估营销活动的效果
- 开发和提供更好满足您需求的服务和信息
- 在您同意就此类目的接受联系的情况下,向您通知我们认为与您相关的活动、服务和产品。
我们还使用Matomo通过匿名IP地址跟踪网站使用趋势。这些原始数据保存24个月以创建报告,但不归属于个人。
实时聊天服务(APMG实时聊天)
此服务允许您与我们或我们的支持代理实时聊天,以便于您导航我们的任何网站或在线平台。
APMG使用Chatlio的聊天功能,Chatlio地址:1329 N 47th ST #31231, Seattle, WA 98107, USA。
您和/或APMG或其分包商在Chatlio聊天窗口中输入的消息和其他信息通过Slack发送给APMG,Slack是Slack Inc.的服务,地址:500 Howard Street, San Francisco, CA 94105, United States。Chatlio使用cookie来识别重复访问者,并使用您的位置数据向我们的支持团队提供您来自何处的指示。
我们在您同意和/或为履行我们的合同义务、提供我们的服务、履行我们的法律义务、保护我们系统的安全或实现其他合法利益所必需的情况下收集和处理您的个人信息。当与我们的支持代理或工作人员进行实时聊天会话时,APMG、Slack和Chatlio可能存储以下信息:
- 姓名
- 电子邮件地址
- 考生编号(如适用)
- 浏览器
- 操作系统
- 发起聊天的页面URL
- 本地时间
- 位置
- 代理评级
- 您在消息中可能向我们提供的任何其他个人信息
通过使用我们的实时聊天,您同意Chatlio和Slack的数据存储和使用方法。如需更多信息,请参考Chatlio的隐私政策:Chatlio隐私政策和Slack:Slack隐私政策
APMG技术服务台
支持电话会被录音,以确保在支持电话期间不会违反最终用户的数据安全和权利。这些录音在90天后删除。为个人的合法利益,我们需要有此类事件的录音,以便我们可以调查任何不当行为或不满意服务的投诉。
APMG通信
APMG使用电子邮件/营销自动化平台向我们的认证组织和培训师发送通信,并向通讯列表收件人发送新闻通讯。如果您在我们网站上注册接收新闻通讯或在考生门户中提供同意接收营销信息,我们会收集和处理您的信息。您可以随时通过点击新闻通讯中的取消订阅或在考生门户中更改您的营销偏好来撤销接收新闻通讯的同意
APMG也可能向考生发送通信,在他们参加考试后要求反馈,以便我们了解如何改进我们的服务。调查回复使用Survey Monkey捕获Survey Monkey隐私政策
APMG使用自动化平台Mailchimp。
Mailchimp是由The Rocket Science Group LLC运营的在线营销平台,该公司总部位于美国乔治亚州。如需更多信息,请参考他们的隐私政策:MailChimp隐私政策
社交媒体活动
APMG使用第三方平台运行社交媒体活动来录制媒体、编辑和托管。这些平台包括LinkedIn和YouTube。社交媒体活动的参与者已同意APMG捕获他们的图像和推荐,并为各种活动编辑这些内容。
在线活动
APMG在包括Zoom在内的第三方平台上举办在线活动。要注册活动,参与者需提供他们的联系详情并同意被APMG和活动合作伙伴联系,以在活动后提供进一步信息以及任何相关产品、培训或其他活动。当APMG有多个活动合作伙伴时,参与者详情将与其地区的相应活动合作伙伴共享。参与者数据不会出于上述目的以外的任何其他目的进行处理,也不会提供给除上述目的外的任何其他第三方。
个人可以通过使用任何APMG通信中的取消订阅链接来选择不接收来自APMG的通信。
5. Cookie
我们的网站(包括 apmg-international.com、apmg-businessbooks.com 和 ppp-certification.com)和在线平台(包括 APMG 学习平台和 APMG 考生门户)会在您的计算机上放置小文件(称为"cookies")来收集您如何使用我们网站的信息。
Cookies 用于:
- 衡量您如何使用网站/在线平台,以便根据您的需求进行更新和改进
- 记住您已看过的通知,这样我们就不会再次向您显示它们
APMG 网站和在线平台不会使用 cookies 来识别您的个人身份,而是为了获得有关网站使用情况的有用知识,以便我们能够不断为用户改进网站。
在我们在您的计算机上存储 cookie 之前,您通常会看到网站上出现一条消息。
通过访问 关于 cookies 或 所有关于 cookies 了解更多关于 如何管理 cookies 的信息
我们如何在网站上使用 cookies
衡量网站使用情况
APMG 网站和在线平台使用 Google Analytics 收集数据,我们用这些数据来改善您在我们网站和平台上的体验。
我们在网站上使用的 cookies 有:
| 名称 | 目的 | 持续时间 |
|---|---|---|
| _ga | 用于区分用户。 | 2年 |
| _gid | 用于区分用户。 | 24小时 |
| _gat | 用于限制请求频率。 | 1分钟 |
| AMP_TOKEN | 包含可用于从 AMP 客户端 ID 服务检索客户端 ID 的令牌。其他可能的值表示选择退出、进行中的请求或从 AMP 客户端 ID 服务检索客户端 ID 时出错。 | 30秒到1年 |
| _gac_ | 包含用户的广告系列相关信息。如果您已关联 Google Analytics 和 AdWords 账户,AdWords 网站转化标签将读取此 cookie,除非您选择退出。了解更多。 | 90天 |
阅读 Google Analytics 隐私文档(可在 Google Analytics 隐私获取)了解 Google Analytics 收集数据的更多详细信息。要退出 Google Analytics,请访问:Google Analytics 退出
我们的介绍信息
我们的介绍信息
我们有法律义务告知您我们在网站和在线平台上使用 cookies,并获得您对其使用的同意。我们通过您首次访问我们网站或在线平台时的弹出消息来做到这一点。我们在您的计算机上存储一个 cookie,这样我们就知道您已经确认了弹出窗口,网站知道不再显示它:
| 名称 | 目的 | 持续时间 |
|---|---|---|
| cookie-agreed | 记录用户是否已确认 cookie 通知弹出窗口 | 11个月 |
内容管理系统
我们在网站和在线平台上使用 Drupal 内容管理系统,它也会设置一些 cookies:
| has_js | 允许网站确定您的浏览器是否兼容 javascript | 浏览器会话 |
|---|---|---|
| SESSxxxx | 用于确定用户是否已登录网站 | 23天 |
我们如何在在线平台上使用 cookies
有关在所有 APMG-International 在线平台上使用 Cookies 的更多信息,请参见 APMG Cookie 政策
Google AdWords
Google Analytics 允许我们记录用户在我们网站上看过的页面信息,例如页面的 URL。Google Analytics JavaScript 库使用 HTTP Cookies 来"记住"用户在之前页面/与网站的交互中做过什么。
重要提示:Google Analytics 不存储任何关于网站用户的个人信息。更多详细信息请参考 Google Analytics 隐私文档。
关于访问者如何选择退出 Google 使用 cookies 的信息可在 Google 广告设置中查看。
第三方 Cookies
第一方 cookies 是我们为网站和在线平台设置的 cookies;第三方 cookies 是来自不同网站的 cookies。我们无法控制第三方 cookies 的设置,所以如果您有担忧,您应该查看第三方网站的政策。
我们使用的第三方网站的一个例子是 YouTube。我们在 apmg-international.com 上有许多视频,虽然我们拥有(或有权使用)它们,但视频内容实际上是从 YouTube 流式传输的。因此,如果您观看我们的视频之一,您可能会收到 YouTube cookie。
6. 儿童
我们致力于保护儿童的隐私。基于这一理念,我们不会故意收集或保存16岁以下人员的个人信息用于我们的公开考试,我们的任何网站或在线平台都不面向16岁以下人员。如果您未满16岁,请不要在任何时候以任何方式使用或访问我们的网站或在线平台。如果16岁以下人员直接提供了个人信息,我们将采取适当措施删除这些信息。
如果您是父母、法定监护人或照护者(负责任的成年人),并且认为您的孩子向我们提供了信息,您可以通过 dataprivacy@apmgroup.co.uk 联系我们,我们将采取适当措施调查和处理此问题。
如果您未满16岁并且参加了我们的考试,作为培训机构与您学校之间协议的一部分,APMG在您的父母、监护人或照护者(负责任的成年人)同意下处理您的数据,除了拥有相关资格认证的方案所有者(如适用 - 请参见下文第10部分了解更多信息)外,不会将您的数据转移给任何第三方。
如果您是父母、监护人或照护者(负责任的成年人),已签署申请表授权为16岁以下考生提供考试服务,APMG将保留您的个人信息(如申请表中提供的信息)自申请表完成之日起5年,以便我们保留对所有13-16岁儿童的同意记录,直到他们达到不再需要父母、监护人或照护者同意的年龄。
请注意,如果父母、监护人或照护者(负责任的成年人)撤回其同意,APMG将停止处理16岁以下考生的个人数据,因此将无法验证授予该考生的任何认证。
7. APMG为什么收集个人信息?
APMG收集信息的部分或全部原因如下:
- 为您提供服务,例如:
- 识别您身份的信息,如您的姓名、用户名和电子邮件地址
- 允许您在我们这里注册并参加考试
- 提供您从我们或我们的商业合作伙伴/培训提供商处购买的在线培训
- 在您获得我们的教育认证/资格后,管理您的认证,包括由我们验证您的认证/资格
- 通过我们的网站和/或在线平台为您提供任何可用服务。
- 如果您是现有的APMG客户,在合理时间内向您提供有关您表示有兴趣购买的产品或服务的信息。
- 向您提供有关您从我们处购买的产品或服务,或相关产品或服务的信息。
- 在您持有现有认证的产品有任何更新时通知您。
- 如果您同意接收,向您提供有关我们产品和服务的信息。
- 雇用您或考虑雇用您。
- 根据合同向您提供商品或服务。
- 出于法律原因,例如,如果您与我们签订了合同。
8. APMG处理我的信息有什么法律依据?
APMG可能会处理您的信息,因为:
- 我们与您签有合同;
- 您已授权我们这样做;
- 在您从我们或我们的业务合作伙伴处购买产品后,我们必须为您提供服务;
- 因为您已获得我们的某项资格认证,我们必须为您提供服务;
- 基于合理权益,告知您现有认证的任何变更;
- 遵守法律规定。
以上都是APMG可能合法处理我们所掌握的您的信息的理由。
9. 我们在哪里存储您的个人数据
我们主要在英国和欧盟/欧洲经济区("EEA")存储和处理您的个人数据。如果我们确实将您的个人数据传输到英国或欧洲经济区之外,那将是因为您已同意或因为我们有法律理由这样做。您的数据也可能由在欧洲经济区之外工作的员工(为我们工作)处理,所有这些员工都受本政策约束。
您的数据可能在英国和欧洲经济区之外处理的一些示例原因包括:
- 订单履行
- 支付处理
- 技术支持服务
- 在线客服服务。
如果您的个人数据无法在英国和欧洲经济区内处理,我们将:
- 遵守所有其他数据保护原则;
- 在可能的情况下,在英国专员列出的为数据主体权利和自由提供充分保护的国家名单中的国家进行处理;
- 确保我们在所有其他情况下评估了保护措施的充分性。
APMG还将把您的个人信息转移给您选择进行的计划资格认证的所有者以及您从中购买我们服务的业务合作伙伴(如有)。更多详情请参见下面第10节。
通过使用我们的服务或提交您的个人数据,您同意此转移、存储和/或处理。
10. 我们可能会与谁分享您的信息?
APMG may share your personal information with third parties, either because you have consented to allow us to do so or for a legitimate purpose or to comply with the law. For example, we may share your personal information with:
- The training organization who provided training to you before you took an examination (for example, to share your examination result or to deal with a complaint);
- A scheme owner who provides an online platform for training and/or additional resources for a training course you have enrolled in;
- Our group companies, which means our subsidiaries, or our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
- With third parties because you have given consent;
- With third parties who provide shipping or publishing services because you have purchased goods or services;
- On our Successful Candidate Register if you have consented;
- Subcontractors and third parties for the purpose of the performance of a contract we hold with them or that we hold with you for a service you have chosen. They only receive data needed to provide their services to us and are required to use such data only in order to perform the services we have hired them to do (unless otherwise required by law). We have agreements with our service providers that say that they cannot use any of this data for their own purposes or for the purposes of another third party. A list of these organisations can be found here Copyright, Legal and Policies.
Please note some of these organisations may be located outside UK and/or EEA, for example:
- Taking an on-line exam at home or in the office via ProctorU
- This service allows you to take an online exam from the comfort of your own home or office with online proctoring. We use a third party supplier, ProctorU, to provide this service. Their privacy policy can be seen here ProctorU Privacy Policy. For APMG test-takers, ProctorU retain any recordings from the exam session for 7 months, in line with the APMG appeals period, and other data is retained for 1 year from the last interaction with the test-taker.
- Taking an on-line exam at home or in the office via APMG In Person Proctoring (AIPP)
- This service allows you to take an online exam from the comfort of your own home or office using the APMG proctors, where your organisations level of security prevents you installing the software required to be proctored via ProctorU. APMG use Zoom Zoom Privacy Policy and Calendly Calendly Privacy Policy as the platform and scheduling mechanism for proctoring the exam. APMG does not record the exam sessions.
- Obtaining a digital badge and certificate via Credly
- This service allows successful candidates and SFIA badge recipients to claim a digital badge to embed on an email signature, website, social media or a digital CV. Successful candidates and those claiming SFIA badges following assessment by a SFIA Licensed Assessment Partner are required to register and accept their digital badge on Credly. A digital certificate will also be available on their personal account of successful candidates only, SFIA badges do not have a digital certificate. Each certificate has a unique verifiable link built into it allowing individuals, teams, managers and employers to quickly validate any certificate presented electronically. Candidates can also print their own certificate on demand from their Credly account. Their privacy policy can be seen here Credly Privacy Policy
- IP owners of the APMG qualification you have chosen to undertake. Please note that some Scheme Owners are based outside the UK and/or EEA as shown in the table below (if required, each organisation has its own Privacy Policy published on their website, links to which can be found on the product pages) Where APMG transfers data outside the UK and EEA, we have implemented appropriate safeguards to protect your data:
| Product | Owner | Location | |||
|---|---|---|---|---|---|
| AAB Scheme (Aerospace Auditors) | EAQG | US | |||
| Agile Business Consortium Scrum Master & Product Owner | Agile Business Consortium | UK | |||
| AgileBA, Agile DS, AgilePgM, AgilePM, & AgilePM for Scrum | Agile Business Consortium | UK | |||
| Agile Change Agent | Agile Change Management Limited | UK | |||
| Analytics Translations | GoDataDriven | EEA | |||
| APMG Lean IT | APMG | UK | |||
| APMP & Micro Certifications | APMP | US | |||
| Artificial Intelligence | BCS | UK | |||
| Artificial Intelligence Practitioner | Cyber Skills | UK | |||
| ASL | Van Haren Rights B.V. | EEA | |||
| Better Business Cases | HM Treasury/Welsh Treasury | UK | |||
| Business Case Development for Infrastructure Projects (BDIP) | HM Treasury/Welsh Treasury | UK | |||
| Better Business Cases (If booked through New Zealand) | New Zealand Treasury | New Zealand | |||
| BiSL | Van Haren Rights B.V. | EEA | |||
| BRMP & CBRM | BRM Institute | US | |||
| Business Agility Works | Agile Business Consortium | UK | |||
| Business Resilience | Professional Resilience | UK | |||
| CCP | NCSC | UK | |||
| CDCAT | DSTL / Ploughshare / APMG | UK | |||
| Certificate of Cloud Auditing Knowledge | ISACA | US | |||
| Certified Data Privacy Solutions Engineer | ISACA | US | |||
| Certified in Emerging Technology | ISACA | US | |||
| Certified in the Governance of Enterprise IT | ISACA | US | |||
| Certified Information Systems Auditor | ISACA | US | |||
| Certified Information Security Manager | ISACA | US | |||
| Certified Local Change Agent (CLCA) | APMG | UK | |||
| Certified Medical Device Auditor (CMDA) | Johner Institut GmbH | EEA | |||
| Certified Public-Private Partnerships Professional (CP3P) | APMG/World Bank | US | |||
| Certified in Risk and Information Systems Control | ISACA | US | |||
| Change Management | APMG | UK | |||
| Change Ninja | The Change Ninja Ltd | UK | |||
| Clear Path to Cash Professional | Cash Flow Mike | US | |||
| Cloud Computing | NAVICA | US | |||
| Climate-Resilient Infrastructure Officer | Global Center on Adaption | EEA | |||
| COBIT 5 and COBIT 2019 | ISACA | US | |||
| Critical Communication Capability | TSO | UK | |||
| Customs Clearance Agent | The British Chamber of Commerce | UK | |||
| Cyber Essentials | Capula | UK | |||
| Data Literacy Fundamentals | Cybiant | EEA | |||
| Data Science with Python | GoDataDriven | EEA | |||
| Digital Information Design (DID) | Van Haren Rights B.V. | EEA | |||
| Digital Risk Management | EuEP Srl | EEA | |||
| DNV Auditor Competence | DNV | EEA | |||
| DTMethod | InProgress Design Labs | EEA | |||
| Earned Value | APM | UK | |||
| Enterprise Big Data | The Big Data Framework BV | EEA | |||
| Facilitation | Resource Developing Business by Developing People | UK | |||
| FitSM | IT Education Management Organization e.V. (ITEMO e.V.), | EEA | |||
| Forest Garden Certification (FGC) | Trees for the Future | US | |||
| Half Double | Half Double Institute | EEA | |||
| House of PMO- Essentials for PMO Suite | House of PMO | UK | |||
| IAITAM | IAITAM | US | |||
| Information and Cyber Security Foundation | CIISec | UK | |||
| Information Technology Certified Associate | ISACA | US | |||
| International Project Management Association (IPMA) | IPMA US | US | |||
| ISO/IEC 20000 | APMG | UK | |||
| ISO/IEC 27001 | APMG | UK | |||
| IS0 37000 Governance of Organisations | FluidRock Governance Academy | South Africa | |||
| ISO/IEC 42001 AI Management Systems | APMG | UK | |||
| IT Risk Fundamentals | ISACA | US | |||
| Lean IT Association | APMG (in association with LITA) | UK | |||
| Lean Green Belt | LSSA / APMG | EEA/UK | |||
| Lean Six Sigma | LSSA / APMG | EEA/UK | |||
| Managing Benefits | APMG | UK | |||
| Managing Portfolios | Portfolio Solutions | UK | |||
| Model Based System Engineering | Learning Tree US | US | |||
| NCSP Specialist certifications | ITSM Solutions | US | |||
| Neuroscience for Change | Sparkling Performance Ltd / Agile Change Management Ltd | UK | |||
| NCSC Certified Training | NCSC | UK | |||
| NCSP Specialisms, NIST Cyber Security Professional | ITSM Solutions | US | |||
| OpenSM | IN.SI Srl | EEA | |||
| Organizational Behaviour Management | OBM Dynamics BV | EEA | |||
| Praxis | Praxis Framework Limited | UK | |||
| Private Brand Fundamentals | Daymon | US | |||
| Process Communication | KCF | EEA | |||
| Project Canvas | Antonio Nieto-Rodriguez | EEA | |||
| Project Planning & Control (PPC) | APM | UK | |||
| PS Professional | Positive Momentum | UK | |||
| PuMP Certification | Stacey Barr Pty Ltd | Australia | |||
| Robotic Process Automation | SAF Alliance | EEA | |||
| Service Automation Framework (SAF) | SAF Alliance | EEA | |||
| Site Reliability Engineering (SRE) | Xebia Nederland B.V. | EEA | |||
| Sourcing Governance Foundation (SGF) | APMG (IAOP) | UK | |||
| Stakeholder Engagement | APMG | UK | |||
| STAR Method | Notion Limited | UK | |||
| Strategy Implementation Professional | Strategy Implementation Institute | Singapore | |||
| Technology Business Management | Learning Tree US | US | |||
| Telehealth Service Implementation Model | TSO | UK | |||
| Unified Service Management (USM) | SURVUZ Foundation | EEA | |||
| WISP | New View Management BV | EEA | |||
| XLA Institute Experience Management and XLA® | TSO | UK | |||
*Note: in the event that the owner of a scheme changes, and we have a contractual obligation to share data with the new Scheme Owner, we will do so after notifying you of a change of Scheme Owner.
Other reasons APMG may share your personal information with a third party
If APMG or substantially all of its assets are acquired by a third party, personal data held by APMG about its customers will be one of the transferred assets of the company.
In addition, APMG will share your personal data with third parties for the following reasons:
- If we are under a duty to disclose or share your information in order to comply with any legal obligation,
- To enforce or apply our Website Terms of Use, Terms and Conditions of Sale, or other agreements
- To protect our rights, property, or safety, our users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- For audit purposes by National Accreditation Bodies i.e. UKAS, by whom we are accredited.
Aggregated or anonymized data with personal information removed
APMG may, from time to time, provide third parties with data that has been aggregated or anonymized. This means that personal information that could be used to identify you has been removed from the data. An example of this may be how many candidates have taken an exam in a country.
Data provided to third parties in this way is not personal data; however, we do respect your right to object to your data being used in this way.
Access to your stored personal data via password
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site or online platform, you are responsible for keeping that password confidential. We ask you not to share passwords with anyone.
Transmission and storage of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.
Transmission and storage of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.
11. 我们会保留您的个人信息多长时间?
APMG will not retain your personal information for longer than required.
We will keep your personal information:
- For as long as required by law
- Until we no longer have a valid reason for keeping it
- Until you request us to stop processing it
We will retain personal data collected for as long as required to do what we say we will in this policy, unless a longer retention period is required by law.
We may keep just enough of your personal information to ensure that we comply with your requests not to use your personal information or comply with your right to erasure. For example, we must keep your request to be erased, even if it includes your personal data, as an audit trail that requests are dealt with in accordance with UK GDPR.
If you have questions about our Data Retention Policy. Please contact: dataprivacy@apmgroup.co.uk
If you have visited an APMG website and/or registered for an online event
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| To provide information to you | Web users sales leads data | Name, address, email, phone number | To provide information about training courses that you have requested | Contractual fulfilment (art 6. (1) (b)) | Data subject | Training companies | For as long as it is required to provide the service |
| Service/ product development |
Web user Survey responses |
Name, email address, phone number, country | To develop services and products to meet the expectations and requirement of our customers | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
| Service/ product development | Event attendee | Name, email address | To promote our products and services | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
| Service/ product development | Campaign subscriber | Name, email address | To promote our products and services | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
If you have sat an exam with APMG
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful Basis for Processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| To provide information to you | Web users sales leads data | Name, email address, phone number | To provide information about training courses that you have requested |
Contractual fulfilment (art 6 (1) (b)) |
Data Subject | Training Companies | 2 years |
| Service / product development | Web user Survey responses | Name, email address, phone number, country |
To develop services and products to meet the expectations and requirement of our customers. |
Consent (art 6.(1) (a)) | Data Subject | None | 2 years |
| Transactional Information | Candidate | Name* | To provide examination services to an individual |
Contractual fulfilment (art 6 (1) (b)) |
Training Company in order to register candidate for the exam, or data subject for public exams |
External Proctor, digital badge provider and scheme owners |
For as long as is required to verify certification** Can only be amended by APMG |
| Email address* | To send notification emails to an individual |
Contractual fulfilment (art 6 (1) (b)) |
Training Company in order to register candidate for the exam, or data subject for public exams |
External Proctor, digital badge provider and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Address* | As an alternative method of communication |
Contractual fulfilment (art 6 (1) (b)) |
Data subject | Country only with external Proctor, and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Telephone number* | To follow up regarding provision of examination services |
Contractual fulfilment (art 6 (1) (b)) |
Data subject | External Proctor, and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
|
Candidate/ Session ID |
Unique Identifier created by the candidate portal |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External Proctor, and scheme owners |
For as long as is required to verify certification** Cannot be changed |
||
| Memorable word* | To verify identity in case of candidate queries | Legitimate interests (art 6.(1) (f)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Memorable date* | To verify identity in case of candidate queries | Legitimate interests (art 6.(1) (f)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Company | For research purposes | Legitimate interests (art 6.(1) (f)) | Data subject | External scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Industry Sector* | For research purposes | Legitimate interests (art 6.(1) (f)) | Data subject | External scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Successful Candidate Register preference | To add the candidate to the online Successful Candidate Register, if they choose | Consent (art 6 (1) (a)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
|
Consent preferences for Marketing from APMG |
To communicate with you about our other products | Consent (art 6 (1) (a)) | Data subject | None | Candidate can change preference at any time | ||
|
Consent preferences for Marketing from scheme owner |
To communicate with you about their other products | Consent (art 6 (1) (a)) | Data subject | None | Candidate can change preference at any time | ||
|
Accredited Training Organisation, if applicable |
Details of the training company and trainer providing the training to verify accredited training for booking exams |
Contractual fulfilment (art 6 (1) (b)) |
Training Company | External scheme owner |
For as long as is required to verify certification** Cannot be changed |
||
| Exam and Level | Details of the exam being sat |
Contractual fulfilment (art 6 (1) (b)) |
Training Company, or data subject for public exams | External scheme owner |
For as long as is required to verify certification** Cannot be changed |
||
| Exam Results | The exam score and pass/fail status |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External scheme owner |
For as long as is required to verify certification** Can only be changed by APMG in the event of a successful appeal |
||
| Exam Certificate (if candidate passes exam) | Digital certificates (for exams sat prior to 2021) |
Contractual fulfilment (art 6 (1) (b)) |
APMG | None |
For as long as is required to verify certification** Cannot be changed |
||
|
E-certificate and digital badge (if candidate passes exam) |
Link to claim digital badge and e-certificate |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External badge provider (only if claimed by the data subject) |
For as long as is required to verify certification** Cannot be changed |
||
| Medical Information | In support of adjustments or accommodations required, due to medical reasons, during the exam | Legal obligation (art 6.(1) (c) and art 9(2)(e) substantial public interest (condition 6 of the DPA 2018 Part 2 Schedule1)) | Training Company, or data subject for public exams | None | 7 months from the certification decision date to align with our appeals period | ||
| Transactional information | Parent, guardian, carer (responsible adult) | Name* | Evidence of consent to process data of children under the aged of 13-16 | Consent (art 6 (1) (a)) | Training Company | None | 5 years to provide evidence of consent until all ages reach 18*** |
| Service/ product development | Candidate | Feedback on services provided | For research purposes and to improve the services we provide | Consent (art 6.(1) (a)) | Candidate | Only aggregated anonymised data shared | 6 months, after which it is anonymised |
*mandatory field
**unless the candidate exercises their right to erasure, however this does void their certification(s).
***if a parent, guardian or carer withdraws consent for us to process the personal data of a child under the agree of 16, we will stop processing and will be unable to verify the certification.
Note 1:- The data is only shared with an external proctor if the candidate sits an online proctored exam, and the data is only shared with external scheme owners if the exam sat is owned by an external scheme owner, in accordance with the table in section 10.
Note 2:- If the candidate is under the age of 16 they do not receive a digital badge and their data is not shared with an external badge provider. We do not publish their data on the Successful Candidate Register and we also do not send marketing materials to under 16’s so their marketing preference is automatically defaulted to not receive marketing.
For schemes that are course only and have no exam, course details will be reported to APMG via an online form, for the purpose of invoicing, and may include personal data. This information will be stored securely for 7 years
If you have attended a course only
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transactional information | Course only delegates | Name, email address, | To invoice for training courses attended | Legitimate interests (art 6.(1) (f)) | Training provider | None | 7 Years |
If you have made a purchase from the APMG Store
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transaction information | APMG Store customers | Name, email address, phone number | To deliver the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | Courier companies | Until you delete your account |
| APMG Store customers | Payment card details | To charge for the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | Third party payment company | Not retained by APMG | |
| APMG Store customers | Name, email address, phone number | To provide a receipt for the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | 7 years |
If you are a user of one of our online portals
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transaction information | CDCAT Portal Users | Name, email address, phone number | To provide access to the tool | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | For as long as is required to provide the service |
| CDCAT Assessors | Name, email address, company | To provide access to the tool to conduct assessments | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | For as long as is required to provide the service | |
| CDCAT Assessments | Name, company* | To conduct assessments | Contractual fulfilment (art 6.(1) (b)) | Assessors | None | For as long as is required to provide the service | |
| Transaction information | 5CS Portal | Name, email address, username, password | To provide access to the tool | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | 90 days from licence termination |
| 5CS Portal | Time zone | To improve collaboration as user time zone will be shown for scheduling purposes | Legitimate interests (art 6.(1) (f)) | Data subject | None | 90 days from licence termination | |
| 5CS Portal | User profile picture | To improve collaboration of users | Consent (art 6.(1) (a)) | Data subject | None | 90 days from licence termination |
12. 自动化决策的使用
APMG在评阅考生考试答案时使用自动化决策。对于在线和纸质考试,考试要么直接由在线考试门户评阅,要么答题卡被扫描并由我们的考试系统评阅。在APMG正式发布结果之前,会向考生提供临时结果。评分算法是每个正确答案得一分,通过或不通过的结果由各产品的最低通过分数决定,这可以在各个产品页面上找到。考生可以直接联系APMG表达意见并对决定提出异议,要求人工干预手动评阅他们的考试答案。或者,如果他们通过我们的培训公司之一参加了培训,他们的培训公司可以代表他们向APMG提出此请求。应要求,APMG将手动评阅考试并作出决定。APMG通过手动评阅考试作出的决定将是最终决定。
13. 安全
一旦我们不再需要信息,我们会安全地销毁它。我们使用商业上合理的技术、组织和管理措施来保护我们的服务免受未经授权或非法访问或处理,以及防止意外丢失、盗窃、泄露、复制、修改、破坏或损坏。尽管如此,我们无法保证您信息的传输始终是安全的,或者未经授权的第三方永远无法破坏我们或我们的服务提供商采取的安全措施。您不应与任何人分享您账户的用户名、密码或其他安全信息。如果您有理由相信您与我们的互动不再安全(例如,如果您觉得您可能在我们这里拥有的任何账户的安全性已受到损害),请立即按照下面第15节中详述的方式联系我们。
14. 如果我选择不提供个人信息会怎样?
如果个人信息是根据您与APMG或通过我们的商业合作伙伴之间的合同向您提供商品或服务所必需的,那么如果您不向我们提供您的个人信息,我们将不会签订该合同或提供服务或商品。
15. 控制您的个人信息
如果您已同意接收我们的通讯或目前正在接收与我们产品或服务相关的材料,您可以随时通过联系我们要求停止发送此类材料。
我们不会向第三方出售、分发或租赁您的个人信息。
APMG International 是 The APM Group Limited 的子公司。您可以根据 GDPR 要求了解我们持有的关于您的个人信息详情。如果您想要获得我们保存的关于您的信息副本,请通过 dataprivacy@apmgroup.co.uk 联系我们的数据保护官或写信至:
收件人:数据保护官
APM Group Ltd
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG
16. 您的权利
APMG将尊重您对数据的合法权利。
以下是您根据法律享有的权利,以及APMG为保护这些权利所采取的措施:
| 合法权利 | APMG为保护您权利所采取的措施 | ||
|---|---|---|---|
| 知情权 | APMG发布此隐私声明是为了让您了解我们如何处理您的个人信息。我们努力透明地告知您我们如何使用您的数据。 | ||
| 访问权 | 您有权访问您的信息。如果您希望获得APMG持有的关于您的个人信息副本,请联系APMG的数据保护经理:dataprivacy@apmgroup.co.uk。 | ||
| 更正权 | 如果APMG持有的关于您的信息不准确或不完整,您有权要求我们进行更正。如果该数据已经在您同意或出于法律原因的情况下传递给第三方,那么我们也必须要求他们更正数据。请通过以下方式联系我们:dataprivacy@apmgroup.co.uk。如果您通过我们的考生门户拥有账户,您也可以通过登录您的个人资料页面来更新您的个人信息。 | ||
| 删除权 |
这有时被称为"被遗忘权"。如果您希望APMG删除您的所有个人数据,而我们没有合法理由继续处理和保留这些数据,请通过以下方式联系我们:dataprivacy@apmgroup.co.uk 请注意,行使此权利可能会影响验证您资质的能力。
|
||
| 限制处理权 | 您有权要求APMG限制我们如何处理您的数据。这意味着我们被允许存储数据,但不能进一步处理它。我们只保留足够的数据以确保我们在将来尊重您的请求。如果您希望我们限制对您数据的处理,请联系:dataprivacy@apmgroup.co.uk | ||
| 数据可携带权 | APMG必须允许您获取并重复使用您的个人数据,以便在不影响数据可用性的情况下,以安全可靠的方式跨服务为您自己的目的使用。如果您想了解如何将数据迁移到其他地方的信息:请联系dataprivacy@apmgroup.co.uk。此权利仅适用于您作为数据控制者向我们提供的个人数据。我们必须基于同意或合同履行的目的持有该数据。 | ||
| 反对权 | 您有权反对APMG处理您的数据,即使这基于我们的合法利益、行使官方Authority、直接营销(包括数据聚合)以及出于统计目的的处理。如果您希望提出反对,请联系:dataprivacy@apmgroup.co.uk | ||
| 撤回同意权 | 如果您已经同意我们处理您的数据但改变了主意,由于您有权随时撤回同意,APMG必须停止处理您的数据。如果您想撤回同意,请联系:dataprivacy@apmgroup.co.uk。撤回同意不会影响我们在您撤回之前进行的任何处理的合法性,也不会影响基于同意以外的合法处理依据对您个人信息的处理。 | ||
| 向APMG投诉的权利 | 如果您认为此隐私政策中没有为您提供充分的信息,或者您认为APMG没有按照英国数据保护法处理您的数据,您有权向APMG投诉。您可以向我们的数据保护官员提交投诉:dataprivacy@apmgroup.co.uk | ||
| 向监管Authority投诉的权利 | 如果您认为APMG没有在合理时间内回应您的请求以解决问题,您有权向ICO投诉。他们的联系方式可以在这里找到:ICO投诉。欧洲经济区、瑞士和某些非欧洲国家(包括美国和加拿大)的数据保护当局的联系方式也可查阅。 | ||
如果您对此隐私声明或APMG的任何数据处理活动有任何问题、关切或只是想提供反馈,请联系数据保护官员:dataprivacy@apmgroup.co.uk
17. 链接到其他网站
我们的网站和在线平台可能包含指向其他网站的链接。匿名访问或会话信息可能会传递给其他网站,用于上述网站使用信息目的。这些信息均无法关联到网站的个别用户。其他网站的运营商可能会收集您的信息,他们将根据自己的条款和条件以及隐私政策来使用这些信息。
本隐私声明仅适用于我们的网站和在线平台。我们不对任何其他网站的隐私做法负责。当您离开本网站时,您应始终注意这一点,我们建议您阅读所访问的所有其他网站的隐私声明。
18. 我们隐私政策的变更
我们可能会不时更新或修改本隐私政策,以遵守法律或满足我们不断变化的业务要求。当我们更新隐私声明时,我们将采取适当措施通知您,措施的力度与我们所做更改的重要性相符。任何更新或修改都将发布在APMG International网站上。我们鼓励您定期查看APMG International网站,以获取有关我们隐私做法的最新信息。通过继续访问我们的网站和/或在线平台或使用我们的任何服务,您的访问和使用将受这些更新和修改的约束。