1. 简介
APM Group Limited("APMG"、"我们"、"本公司"、"我方")致力于保护和尊重您的数据隐私。我们希望您了解我们如何使用和保护您的个人信息。这包括告知您有关我们持有的您的个人信息的相关权利。
本隐私政策阐述了我们可能如何使用、处理和存储您的个人数据。个人数据是指任何可用于识别或合理关联到特定个人的信息。
我们需要您的个人数据以履行您可能与我们或我们的业务合作伙伴之间的合同/法律义务,或使我们能够向您提供我们的服务。在其他情况下,我们将在获得您的许可和同意后收集这些信息。
当APMG代表自己向您提供服务时(例如当您使用我们的网站或从我们这里购买考试时),APMG是所有收集的个人数据的"控制者"。
当APMG代表SFIA许可评估合作伙伴通过Credly平台颁发SFIA数字徽章时,APMG是数字管理的"处理者",负责您的评估和认证的许可合作伙伴是"控制者"。
2. 法律法规
在英国管理个人数据的法律包括:
- 2018年数据保护法 和
- 英国通用数据保护条例 (UK GDPR)
- 2016年4月27日欧洲议会和理事会关于保护自然人个人数据处理和此类数据自由流动的第(EU) 2016/679号条例(通用数据保护条例)(EU GDPR)。
在英国为公共利益维护信息权利的独立机构是信息专员办公室("ICO")。更多信息可在ICO网站上找到。
我们在ICO的注册详情如下:-
- The APM Group Limited Z6934466
请注意,这些法规适用于所有APMG办事处以及所有通过APMG获得个人信息访问权的业务合作伙伴。这些法规不仅限于英国公民。
3. 公司详情
这是APMG的注册地址、公司编号和联系信息:
The APM Group Limited
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG
邮箱: dataprivacy@apmgroup.co.uk
电话:+44 (0) 1494 452450
我们的欧盟办事处地址为:
APMG Benelux
Unit 1.15 BusinessCenter Spoetnik
Spoetnik 20
3824 MG Amersfoort
如果您对本隐私政策有任何疑问、意见或投诉,请使用上述详细信息与我们联系。
4. 我们可能收集的您的个人信息
APMG可能会收集您的信息,因为我们有法律理由(法律允许或根据合同)收集信息,或者因为您已同意我们为特定目的这样做,或者我们有合法权益。
您提供给我们的信息
您可以在同意的情况下或根据使用我们服务的要求向我们提供关于您的信息,例如:
- 您为在我们这里创建账户而提供的信息
- 您发送给我们或以其他方式提供的表格、电子邮件和其他通信,例如支持咨询或在我们的留言板或论坛上发布的帖子。请注意,我们网站和在线平台公共部分的信息对其他人是可见的
- 您的营销偏好
- 您在调查或促销活动中与我们分享的信息
- 您在申请APMG职位时与我们分享的信息
- 您在会议、展览或在线活动中向我们提交的信息
这些信息可能是个人的、财务的、教育的或与您的就业经历相关的。
有时我们因法律原因要求您向我们提供信息,例如与我们签订合同时,当您从我们这里购买考试、评估或其他商品或服务时,或者当您申请APMG职位时。
如果您是经APMG认可或批准的培训师、辅导员或监考员,培训师、辅导员、监考员数据保护声明(概述对您数据的处理)可在APMG网络和/或通过您的赞助ATO获取。
从其他来源获得的信息
如果您从我们的业务合作伙伴或培训提供商之一购买APMG考试,他们可能会向我们提供关于您的某些个人信息(例如您的姓名和电子邮件地址),以便我们向您提供服务。适用的业务合作伙伴/培训提供商的隐私政策将控制他们如何使用您的信息以及与我们分享这些信息。请通过查看他们的隐私政策确保您对他们的隐私条款感到满意。
如果您通过我们的授权合作伙伴之一获得了SFIA数字徽章,他们可能会向我们提供关于您的某些个人信息(例如您的姓名和电子邮件地址),以便我们向您提供服务。
从您使用我们服务中获得的信息
当您使用我们的服务时,我们收集关于您在我们网站和/或在线平台上的活动和互动的信息,例如您的IP地址、您的设备和浏览器类型、您的偏好、您在访问我们网站和/或在线平台之前访问的网页,以及关于您如何与我们的网站和/或在线平台互动的信息。
当您使用我们的服务时,其中一些信息是使用cookies和类似技术自动收集的。您可以在下面第5节中了解更多关于我们使用cookies的信息。
网站和在线平台使用信息
我们使用第三方服务Google Analytics来收集标准网站性能信息。这些信息的处理方式不会识别个人身份。网站使用信息由我们的网络服务器和其他来源收集,包括搜索引擎、互联网服务提供商、页面标记技术(包括JavaScript)和cookies。我们使用IP地址来分析趋势、跟踪用户移动,并收集广泛的人口统计信息以供汇总使用。IP地址不会与可识别个人身份的信息关联。
如果您访问我们的网站之一或使用我们的在线平台之一,我们可能会自动收集关于您的信息,例如:
- IP地址
- 关于您用来连接我们网站和/或在线平台的技术信息
- 您点击我们网站或在线平台的哪些部分以及您查看我们网站或在线平台多长时间。
除了您提供的信息外,每当您使用我们的网站或在线平台之一时,我们都会接收并存储一系列网站和在线平台使用信息。如果我们想收集个人信息,我们会清楚具体地说明我们需要这些信息的原因,并要求您选择加入。
我们使用这些信息来:
- 评估营销活动的有效性
- 开发和提供更好满足您需求的服务和信息
- 在您同意接受此类目的联系的情况下,向您通报我们认为与您相关的活动、服务和产品。
我们还使用Matomo通过匿名IP地址跟踪网站使用趋势。这些原始数据保存24个月以创建报告,但不能归属到个人。
实时聊天服务(APMG实时聊天)
此服务允许您与我们或我们的支持代理实时聊天,以便于您在我们的任何网站或在线平台上的导航。
APMG使用Chatlio的聊天功能,1329 N 47th ST #31231, Seattle, WA 98107, USA。
您和/或APMG或其分包商在Chatlio聊天窗口中输入的消息和其他信息通过Slack发送给APMG,Slack是Slack Inc.的服务,500 Howard Street, San Francisco, CA 94105, United States。Chatlio使用cookies来识别回访访客,并使用您的位置数据向我们的支持团队提供您来自何处的指示。
我们在您同意和/或为履行我们的合同义务、提供我们的服务、履行我们的法律义务、保护我们系统的安全或实现其他合法权益所必需的情况下收集和处理关于您的个人信息。在与我们的支持代理或工作人员进行实时聊天会话时,APMG、Slack和Chatlio可能存储以下信息:
- 姓名
- 电子邮件地址
- 考生编号(如适用)
- 浏览器
- 操作系统
- 发起聊天的页面URL
- 本地时间
- 位置
- 代理评级
- 您在消息中可能向我们提供的任何其他个人信息
通过使用我们的实时聊天,您同意Chatlio和Slack的数据存储和使用方法。如需更多信息,请参考Chatlio的隐私政策:Chatlio隐私政策和Slack:Slack隐私政策
APMG技术服务台
支持电话会被录音,以确保在支持电话过程中不违反最终用户的数据安全和权利。这些录音在90天后删除。为了我们能够调查任何不当行为或不满意服务的投诉,录制这些事件符合个人的合法权益。
APMG通信
APMG使用电子邮件/营销自动化平台向我们的认证机构和培训师发送通信,向新闻简报列表接收者发送新闻简报。如果您在我们的网站上注册接收新闻简报或在考生门户中同意接收营销信息,我们会收集和处理关于您的信息。您可以随时通过点击新闻简报中的取消订阅或在考生门户中更改您的营销偏好来撤回接收新闻简报的同意
APMG也可能向考生发送通信,在他们参加考试后询问反馈,以便我们了解如何改进我们的服务。调查回复使用Survey Monkey收集Survey Monkey隐私政策
APMG使用自动化平台Mailchimp。
Mailchimp是由The Rocket Science Group LLC运营的在线营销平台,该公司总部位于美国乔治亚州。如需更多信息,请参考他们的隐私政策:MailChimp隐私政策
社交媒体活动
APMG使用第三方平台运行社交媒体活动来录制媒体、编辑和托管。这些平台包括LinkedIn和YouTube。社交媒体活动的参与者已向APMG提供同意,允许收集他们的图像和推荐信,并为各种活动编辑这些内容。
在线活动
APMG在包括Zoom在内的第三方平台上举办在线活动。要注册活动,参与者需提供他们的联系详情,并同意APMG和活动合作伙伴联系,以在活动后提供进一步信息以及任何相关产品、培训或其他活动。如果APMG有多个活动合作伙伴,参与者详情将与其地区的相应活动合作伙伴共享。参与者数据不会用于任何其他目的或提供给除上述目的以外的任何其他第三方。
个人可以通过使用任何APMG通信中的取消订阅链接来选择不接收来自APMG的通信。
5. Cookies
我们的网站(包括 apmg-international.com、apmg-businessbooks.com 和 ppp-certification.com)和在线平台(包括 APMG 学习平台和 APMG 考生门户)会在您的计算机上放置小文件(称为"cookies"),以收集有关您如何使用我们网站的信息。
Cookies 用于:
- 衡量您如何使用网站/在线平台,以便根据您的需求进行更新和改进
- 记住您已看过的通知,这样我们就不会再次向您显示它们
APMG 网站和在线平台不使用 cookies 来识别您的个人身份,而是获取有关网站使用情况的有用知识,以便我们能够持续改进为用户提供的服务。
在我们在您的计算机上存储 cookie 之前,您通常会看到网站上出现一条消息。
了解更多关于如何管理 cookies 的信息,请访问 about cookies 或 all about cookies
我们如何在网站上使用 cookies
衡量网站使用情况
APMG 网站和在线平台使用 Google Analytics 收集数据,我们用这些数据来改善您对我们网站和平台的使用体验。
我们在网站上使用的 cookies 包括:
| 名称 | 用途 | 持续时间 |
|---|---|---|
| _ga | 用于区分用户。 | 2年 |
| _gid | 用于区分用户。 | 24小时 |
| _gat | 用于限制请求速率。 | 1分钟 |
| AMP_TOKEN | 包含可用于从 AMP 客户端 ID 服务检索客户端 ID 的令牌。其他可能值表示选择退出、正在进行的请求或从 AMP 客户端 ID 服务检索客户端 ID 时出现错误。 | 30秒至1年 |
| _gac_ | 包含用户的广告系列相关信息。如果您已将 Google Analytics 和 AdWords 账户关联,AdWords 网站转化跟踪代码将读取此 cookie,除非您选择退出。了解更多。 | 90天 |
阅读 Google Analytics 隐私 文档(可在 Google Analytics Privacy 查看)了解 Google Analytics 收集数据的更多详情。要退出 Google Analytics,请访问:Google Analytics Opt Out
我们的介绍性消息
我们的介绍性消息
法律要求我们告知您我们在网站和在线平台上使用 cookies 并获得您同意使用它们。我们通过您首次访问我们网站或在线平台时的弹窗消息来做到这一点。我们在您的计算机上存储一个 cookie,以便我们知道您已确认弹窗,网站知道不再显示它:
| 名称 | 用途 | 持续时间 |
|---|---|---|
| cookie-agreed | 记录用户是否已确认 cookie 通知弹窗 | 11个月 |
内容管理系统
我们在网站和在线平台上使用 Drupal 内容管理系统,该系统也会设置一些 cookies:
| has_js | 允许网站确定您的浏览器是否兼容 javascript | 浏览器会话 |
|---|---|---|
| SESSxxxx | 用于确定用户是否已登录网站 | 23天 |
我们如何在在线平台上使用 cookies
有关在所有 APMG-International 在线平台上使用 Cookies 的更多信息,请参见 APMG Cookie 政策
Google AdWords
Google Analytics 允许我们记录用户在我们网站上查看页面的信息,例如页面的 URL。Google Analytics JavaScript 库使用 HTTP Cookies 来"记住"用户在之前页面/与网站交互中的行为。
重要提示: Google Analytics 不存储有关网站用户的任何个人信息。请参阅 Google Analytics 隐私文档了解更多详情。
访客如何选择退出 Google 使用 cookies 的信息可在 Google 广告设置中查看。
第三方 Cookies
第一方 cookies 是我们为网站和在线平台设置的;第三方 cookies 是来自不同网站的 cookies。我们不控制第三方 cookies 的设置,所以如果您有疑虑,应该查看第三方网站的政策。
我们使用的第三方网站的一个例子是 YouTube。我们在 apmg-international.com 上有很多视频,虽然我们拥有(或有权使用)它们,但视频内容实际上是从 YouTube 流式传输的。因此,如果您观看我们的视频之一,您可能会收到一个 YouTube cookie。
6. 儿童
我们致力于保护儿童隐私。基于这一理念,我们不会有意收集或保留16岁以下人员的个人信息用于我们的公开考试,我们的网站或在线平台的任何部分也不面向16岁以下人员。如果您未满16岁,请勿在任何时间以任何方式使用或访问我们的网站或在线平台。如果16岁以下人员直接提供了个人信息,我们将采取适当措施予以删除。
如果您是家长、法定监护人或照护者(负责任的成年人),并且认为您的孩子向我们提供了信息,您可以通过dataprivacy@apmgroup.co.uk联系我们,我们将采取适当措施调查并解决该问题。
如果您未满16岁并且参加了我们的考试,作为培训机构与您学校之间协议的一部分,APMG在您的家长、监护人或照护者(负责任的成年人)同意下处理您的数据,除了拥有相关资格认证的计划所有者(如适用——详见下文第10节)外,不会将您的数据转让给任何第三方。
如果您是家长、监护人或照护者(负责任的成年人),并且已签署申请表授权向16岁以下考生提供考试服务,APMG将保留您的个人信息(如申请表中所提供的)5年,从申请表完成之日起计算,以便我们保留对所有13-16岁儿童的同意记录,直至他们达到不再需要家长、监护人或照护者同意的年龄。
请注意,如果家长、监护人或照护者(负责任的成年人)撤回其同意,APMG将停止处理16岁以下考生的个人数据,因此将无法验证颁发给该考生的任何认证。
7. 为什么APMG收集个人信息?
APMG 收集信息的部分或全部原因如下:
- 为您提供服务,例如:
- 识别您身份的信息,如您的姓名、用户名和电子邮件地址
- 允许您在我们这里注册并参加考试
- 提供您从我们或我们的业务合作伙伴/培训提供商处购买的在线培训
- 在您获得我们的教育认证/资格之一后,管理您的认证,包括我们对您的认证/资格进行验证
- 通过我们的网站和/或在线平台为您提供任何可用的服务。
- 如果您是 APMG 的现有客户,在合理的时间内为您提供您已表示有兴趣购买的产品或服务的信息。
- 为您提供关于您从我们处购买的产品或服务,或相关产品或服务的信息。
- 通知您持有现有认证的产品的任何更新。
- 如果您已同意接收,为您提供关于我们产品和服务的信息。
- 雇用您或考虑雇用您。
- 根据合同为您提供商品或服务。
- 出于法律原因,例如,如果您与我们签订了合同。
8. APMG处理我的信息的法律依据是什么?
APMG可能会处理您的信息,因为:
- 我们与您签订了合同;
- 您已授权我们这样做;
- 在您从我们或我们的商业伙伴处购买产品后,我们必须为您提供服务;
- 因为您已获得我们的资质认证,我们必须为您提供服务;
- 作为合法权益,让您了解现有认证的任何变更;
- 遵守法律规定。
这些都是APMG可以合法处理我们掌握的您的信息的理由。
9. 我们在何处存储您的个人数据
我们主要在英国和欧盟/欧洲经济区("EEA")存储和处理您的个人数据。如果我们确实将您的个人数据转移到英国或欧洲经济区之外,那将是因为您已同意或因为我们有合法理由这样做。您的数据也可能由在欧洲经济区之外运营的员工(为我们工作)处理,他们均受本政策约束。
您的数据可能在英国和欧洲经济区之外处理的一些原因示例包括:
- 订单履行
- 付款处理
- 技术支持服务
- 在线聊天服务。
如果您的个人数据无法在英国和欧洲经济区内处理,我们将:
- 遵守所有其他数据保护原则;
- 在可能的情况下,在英国专员列出的为数据主体权利和自由提供充分保护的国家名单中的国家处理;
- 确保我们已评估所有其他情况下保护措施的充分性。
APMG还将把您的个人信息转移给您选择进行的计划资格认证的所有者以及您从中购买我们服务的业务合作伙伴(如有)。更多详情请参见下面第10节。
通过使用我们的服务或提交您的个人数据,您同意此转移、存储和/或处理。
10. 我们可能会与谁分享您的信息?
APMG may share your personal information with third parties, either because you have consented to allow us to do so or for a legitimate purpose or to comply with the law. For example, we may share your personal information with:
- The training organization who provided training to you before you took an examination (for example, to share your examination result or to deal with a complaint);
- A scheme owner who provides an online platform for training and/or additional resources for a training course you have enrolled in;
- Our group companies, which means our subsidiaries, or our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
- With third parties because you have given consent;
- With third parties who provide shipping or publishing services because you have purchased goods or services;
- On our Successful Candidate Register if you have consented;
- Subcontractors and third parties for the purpose of the performance of a contract we hold with them or that we hold with you for a service you have chosen. They only receive data needed to provide their services to us and are required to use such data only in order to perform the services we have hired them to do (unless otherwise required by law). We have agreements with our service providers that say that they cannot use any of this data for their own purposes or for the purposes of another third party. A list of these organisations can be found here Copyright, Legal and Policies.
Please note some of these organisations may be located outside UK and/or EEA, for example:
- Taking an on-line exam at home or in the office via ProctorU
- This service allows you to take an online exam from the comfort of your own home or office with online proctoring. We use a third party supplier, ProctorU, to provide this service. Their privacy policy can be seen here ProctorU Privacy Policy. For APMG test-takers, ProctorU retain any recordings from the exam session for 7 months, in line with the APMG appeals period, and other data is retained for 1 year from the last interaction with the test-taker.
- Taking an on-line exam at home or in the office via APMG In Person Proctoring (AIPP)
- This service allows you to take an online exam from the comfort of your own home or office using the APMG proctors, where your organisations level of security prevents you installing the software required to be proctored via ProctorU. APMG use Zoom Zoom Privacy Policy and Calendly Calendly Privacy Policy as the platform and scheduling mechanism for proctoring the exam. APMG does not record the exam sessions.
- Obtaining a digital badge and certificate via Credly
- This service allows successful candidates and SFIA badge recipients to claim a digital badge to embed on an email signature, website, social media or a digital CV. Successful candidates and those claiming SFIA badges following assessment by a SFIA Licensed Assessment Partner are required to register and accept their digital badge on Credly. A digital certificate will also be available on their personal account of successful candidates only, SFIA badges do not have a digital certificate. Each certificate has a unique verifiable link built into it allowing individuals, teams, managers and employers to quickly validate any certificate presented electronically. Candidates can also print their own certificate on demand from their Credly account. Their privacy policy can be seen here Credly Privacy Policy
- IP owners of the APMG qualification you have chosen to undertake. Please note that some Scheme Owners are based outside the UK and/or EEA as shown in the table below (if required, each organisation has its own Privacy Policy published on their website, links to which can be found on the product pages) Where APMG transfers data outside the UK and EEA, we have implemented appropriate safeguards to protect your data:
| Product | Owner | Location | |||
|---|---|---|---|---|---|
| AAB Scheme (Aerospace Auditors) | EAQG | US | |||
| Agile Business Consortium Scrum Master & Product Owner | Agile Business Consortium | UK | |||
| AgileBA, Agile DS, AgilePgM, AgilePM, & AgilePM for Scrum | Agile Business Consortium | UK | |||
| Agile Change Agent | Agile Change Management Limited | UK | |||
| Analytics Translations | GoDataDriven | EEA | |||
| APMG Lean IT | APMG | UK | |||
| APMP & Micro Certifications | APMP | US | |||
| Artificial Intelligence | BCS | UK | |||
| Artificial Intelligence Practitioner | Cyber Skills | UK | |||
| ASL | Van Haren Rights B.V. | EEA | |||
| Better Business Cases | HM Treasury/Welsh Treasury | UK | |||
| Business Case Development for Infrastructure Projects (BDIP) | HM Treasury/Welsh Treasury | UK | |||
| Better Business Cases (If booked through New Zealand) | New Zealand Treasury | New Zealand | |||
| BiSL | Van Haren Rights B.V. | EEA | |||
| BRMP & CBRM | BRM Institute | US | |||
| Business Agility Works | Agile Business Consortium | UK | |||
| Business Resilience | Professional Resilience | UK | |||
| CCP | NCSC | UK | |||
| CDCAT | DSTL / Ploughshare / APMG | UK | |||
| Certificate of Cloud Auditing Knowledge | ISACA | US | |||
| Certified Data Privacy Solutions Engineer | ISACA | US | |||
| Certified in Emerging Technology | ISACA | US | |||
| Certified in the Governance of Enterprise IT | ISACA | US | |||
| Certified Information Systems Auditor | ISACA | US | |||
| Certified Information Security Manager | ISACA | US | |||
| Certified Local Change Agent (CLCA) | APMG | UK | |||
| Certified Medical Device Auditor (CMDA) | Johner Institut GmbH | EEA | |||
| Certified Public-Private Partnerships Professional (CP3P) | APMG/World Bank | US | |||
| Certified in Risk and Information Systems Control | ISACA | US | |||
| Change Management | APMG | UK | |||
| Change Ninja | The Change Ninja Ltd | UK | |||
| Clear Path to Cash Professional | Cash Flow Mike | US | |||
| Cloud Computing | NAVICA | US | |||
| Climate-Resilient Infrastructure Officer | Global Center on Adaption | EEA | |||
| COBIT 5 and COBIT 2019 | ISACA | US | |||
| Critical Communication Capability | TSO | UK | |||
| Customs Clearance Agent | The British Chamber of Commerce | UK | |||
| Cyber Essentials | Capula | UK | |||
| Data Literacy Fundamentals | Cybiant | EEA | |||
| Data Science with Python | GoDataDriven | EEA | |||
| Digital Information Design (DID) | Van Haren Rights B.V. | EEA | |||
| Digital Risk Management | EuEP Srl | EEA | |||
| DNV Auditor Competence | DNV | EEA | |||
| DTMethod | InProgress Design Labs | EEA | |||
| Earned Value | APM | UK | |||
| Enterprise Big Data | The Big Data Framework BV | EEA | |||
| Facilitation | Resource Developing Business by Developing People | UK | |||
| FitSM | IT Education Management Organization e.V. (ITEMO e.V.), | EEA | |||
| Forest Garden Certification (FGC) | Trees for the Future | US | |||
| Half Double | Half Double Institute | EEA | |||
| House of PMO- Essentials for PMO Suite | House of PMO | UK | |||
| IAITAM | IAITAM | US | |||
| Information and Cyber Security Foundation | CIISec | UK | |||
| Information Technology Certified Associate | ISACA | US | |||
| International Project Management Association (IPMA) | IPMA US | US | |||
| ISO/IEC 20000 | APMG | UK | |||
| ISO/IEC 27001 | APMG | UK | |||
| IS0 37000 Governance of Organisations | FluidRock Governance Academy | South Africa | |||
| ISO/IEC 42001 AI Management Systems | APMG | UK | |||
| IT Risk Fundamentals | ISACA | US | |||
| Lean IT Association | APMG (in association with LITA) | UK | |||
| Lean Green Belt | LSSA / APMG | EEA/UK | |||
| Lean Six Sigma | LSSA / APMG | EEA/UK | |||
| Managing Benefits | APMG | UK | |||
| Managing Portfolios | Portfolio Solutions | UK | |||
| Model Based System Engineering | Learning Tree US | US | |||
| NCSP Specialist certifications | ITSM Solutions | US | |||
| Neuroscience for Change | Sparkling Performance Ltd / Agile Change Management Ltd | UK | |||
| NCSC Certified Training | NCSC | UK | |||
| NCSP Specialisms, NIST Cyber Security Professional | ITSM Solutions | US | |||
| OpenSM | IN.SI Srl | EEA | |||
| Organizational Behaviour Management | OBM Dynamics BV | EEA | |||
| Praxis | Praxis Framework Limited | UK | |||
| Private Brand Fundamentals | Daymon | US | |||
| Process Communication | KCF | EEA | |||
| Project Canvas | Antonio Nieto-Rodriguez | EEA | |||
| Project Planning & Control (PPC) | APM | UK | |||
| PS Professional | Positive Momentum | UK | |||
| PuMP Certification | Stacey Barr Pty Ltd | Australia | |||
| Robotic Process Automation | SAF Alliance | EEA | |||
| Service Automation Framework (SAF) | SAF Alliance | EEA | |||
| Site Reliability Engineering (SRE) | Xebia Nederland B.V. | EEA | |||
| Sourcing Governance Foundation (SGF) | APMG (IAOP) | UK | |||
| Stakeholder Engagement | APMG | UK | |||
| STAR Method | Notion Limited | UK | |||
| Strategy Implementation Professional | Strategy Implementation Institute | Singapore | |||
| Technology Business Management | Learning Tree US | US | |||
| Telehealth Service Implementation Model | TSO | UK | |||
| Unified Service Management (USM) | SURVUZ Foundation | EEA | |||
| WISP | New View Management BV | EEA | |||
| XLA Institute Experience Management and XLA® | TSO | UK | |||
*Note: in the event that the owner of a scheme changes, and we have a contractual obligation to share data with the new Scheme Owner, we will do so after notifying you of a change of Scheme Owner.
Other reasons APMG may share your personal information with a third party
If APMG or substantially all of its assets are acquired by a third party, personal data held by APMG about its customers will be one of the transferred assets of the company.
In addition, APMG will share your personal data with third parties for the following reasons:
- If we are under a duty to disclose or share your information in order to comply with any legal obligation,
- To enforce or apply our Website Terms of Use, Terms and Conditions of Sale, or other agreements
- To protect our rights, property, or safety, our users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- For audit purposes by National Accreditation Bodies i.e. UKAS, by whom we are accredited.
Aggregated or anonymized data with personal information removed
APMG may, from time to time, provide third parties with data that has been aggregated or anonymized. This means that personal information that could be used to identify you has been removed from the data. An example of this may be how many candidates have taken an exam in a country.
Data provided to third parties in this way is not personal data; however, we do respect your right to object to your data being used in this way.
Access to your stored personal data via password
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site or online platform, you are responsible for keeping that password confidential. We ask you not to share passwords with anyone.
Transmission and storage of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.
Transmission and storage of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.
11. 我们会将您的个人信息保留多长时间?
APMG will not retain your personal information for longer than required.
We will keep your personal information:
- For as long as required by law
- Until we no longer have a valid reason for keeping it
- Until you request us to stop processing it
We will retain personal data collected for as long as required to do what we say we will in this policy, unless a longer retention period is required by law.
We may keep just enough of your personal information to ensure that we comply with your requests not to use your personal information or comply with your right to erasure. For example, we must keep your request to be erased, even if it includes your personal data, as an audit trail that requests are dealt with in accordance with UK GDPR.
If you have questions about our Data Retention Policy. Please contact: dataprivacy@apmgroup.co.uk
If you have visited an APMG website and/or registered for an online event
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| To provide information to you | Web users sales leads data | Name, address, email, phone number | To provide information about training courses that you have requested | Contractual fulfilment (art 6. (1) (b)) | Data subject | Training companies | For as long as it is required to provide the service |
| Service/ product development |
Web user Survey responses |
Name, email address, phone number, country | To develop services and products to meet the expectations and requirement of our customers | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
| Service/ product development | Event attendee | Name, email address | To promote our products and services | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
| Service/ product development | Campaign subscriber | Name, email address | To promote our products and services | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
If you have sat an exam with APMG
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful Basis for Processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| To provide information to you | Web users sales leads data | Name, email address, phone number | To provide information about training courses that you have requested |
Contractual fulfilment (art 6 (1) (b)) |
Data Subject | Training Companies | 2 years |
| Service / product development | Web user Survey responses | Name, email address, phone number, country |
To develop services and products to meet the expectations and requirement of our customers. |
Consent (art 6.(1) (a)) | Data Subject | None | 2 years |
| Transactional Information | Candidate | Name* | To provide examination services to an individual |
Contractual fulfilment (art 6 (1) (b)) |
Training Company in order to register candidate for the exam, or data subject for public exams |
External Proctor, digital badge provider and scheme owners |
For as long as is required to verify certification** Can only be amended by APMG |
| Email address* | To send notification emails to an individual |
Contractual fulfilment (art 6 (1) (b)) |
Training Company in order to register candidate for the exam, or data subject for public exams |
External Proctor, digital badge provider and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Address* | As an alternative method of communication |
Contractual fulfilment (art 6 (1) (b)) |
Data subject | Country only with external Proctor, and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Telephone number* | To follow up regarding provision of examination services |
Contractual fulfilment (art 6 (1) (b)) |
Data subject | External Proctor, and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
|
Candidate/ Session ID |
Unique Identifier created by the candidate portal |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External Proctor, and scheme owners |
For as long as is required to verify certification** Cannot be changed |
||
| Memorable word* | To verify identity in case of candidate queries | Legitimate interests (art 6.(1) (f)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Memorable date* | To verify identity in case of candidate queries | Legitimate interests (art 6.(1) (f)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Company | For research purposes | Legitimate interests (art 6.(1) (f)) | Data subject | External scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Industry Sector* | For research purposes | Legitimate interests (art 6.(1) (f)) | Data subject | External scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Successful Candidate Register preference | To add the candidate to the online Successful Candidate Register, if they choose | Consent (art 6 (1) (a)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
|
Consent preferences for Marketing from APMG |
To communicate with you about our other products | Consent (art 6 (1) (a)) | Data subject | None | Candidate can change preference at any time | ||
|
Consent preferences for Marketing from scheme owner |
To communicate with you about their other products | Consent (art 6 (1) (a)) | Data subject | None | Candidate can change preference at any time | ||
|
Accredited Training Organisation, if applicable |
Details of the training company and trainer providing the training to verify accredited training for booking exams |
Contractual fulfilment (art 6 (1) (b)) |
Training Company | External scheme owner |
For as long as is required to verify certification** Cannot be changed |
||
| Exam and Level | Details of the exam being sat |
Contractual fulfilment (art 6 (1) (b)) |
Training Company, or data subject for public exams | External scheme owner |
For as long as is required to verify certification** Cannot be changed |
||
| Exam Results | The exam score and pass/fail status |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External scheme owner |
For as long as is required to verify certification** Can only be changed by APMG in the event of a successful appeal |
||
| Exam Certificate (if candidate passes exam) | Digital certificates (for exams sat prior to 2021) |
Contractual fulfilment (art 6 (1) (b)) |
APMG | None |
For as long as is required to verify certification** Cannot be changed |
||
|
E-certificate and digital badge (if candidate passes exam) |
Link to claim digital badge and e-certificate |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External badge provider (only if claimed by the data subject) |
For as long as is required to verify certification** Cannot be changed |
||
| Medical Information | In support of adjustments or accommodations required, due to medical reasons, during the exam | Legal obligation (art 6.(1) (c) and art 9(2)(e) substantial public interest (condition 6 of the DPA 2018 Part 2 Schedule1)) | Training Company, or data subject for public exams | None | 7 months from the certification decision date to align with our appeals period | ||
| Transactional information | Parent, guardian, carer (responsible adult) | Name* | Evidence of consent to process data of children under the aged of 13-16 | Consent (art 6 (1) (a)) | Training Company | None | 5 years to provide evidence of consent until all ages reach 18*** |
| Service/ product development | Candidate | Feedback on services provided | For research purposes and to improve the services we provide | Consent (art 6.(1) (a)) | Candidate | Only aggregated anonymised data shared | 6 months, after which it is anonymised |
*mandatory field
**unless the candidate exercises their right to erasure, however this does void their certification(s).
***if a parent, guardian or carer withdraws consent for us to process the personal data of a child under the agree of 16, we will stop processing and will be unable to verify the certification.
Note 1:- The data is only shared with an external proctor if the candidate sits an online proctored exam, and the data is only shared with external scheme owners if the exam sat is owned by an external scheme owner, in accordance with the table in section 10.
Note 2:- If the candidate is under the age of 16 they do not receive a digital badge and their data is not shared with an external badge provider. We do not publish their data on the Successful Candidate Register and we also do not send marketing materials to under 16’s so their marketing preference is automatically defaulted to not receive marketing.
For schemes that are course only and have no exam, course details will be reported to APMG via an online form, for the purpose of invoicing, and may include personal data. This information will be stored securely for 7 years
If you have attended a course only
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transactional information | Course only delegates | Name, email address, | To invoice for training courses attended | Legitimate interests (art 6.(1) (f)) | Training provider | None | 7 Years |
If you have made a purchase from the APMG Store
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transaction information | APMG Store customers | Name, email address, phone number | To deliver the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | Courier companies | Until you delete your account |
| APMG Store customers | Payment card details | To charge for the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | Third party payment company | Not retained by APMG | |
| APMG Store customers | Name, email address, phone number | To provide a receipt for the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | 7 years |
If you are a user of one of our online portals
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transaction information | CDCAT Portal Users | Name, email address, phone number | To provide access to the tool | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | For as long as is required to provide the service |
| CDCAT Assessors | Name, email address, company | To provide access to the tool to conduct assessments | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | For as long as is required to provide the service | |
| CDCAT Assessments | Name, company* | To conduct assessments | Contractual fulfilment (art 6.(1) (b)) | Assessors | None | For as long as is required to provide the service | |
| Transaction information | 5CS Portal | Name, email address, username, password | To provide access to the tool | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | 90 days from licence termination |
| 5CS Portal | Time zone | To improve collaboration as user time zone will be shown for scheduling purposes | Legitimate interests (art 6.(1) (f)) | Data subject | None | 90 days from licence termination | |
| 5CS Portal | User profile picture | To improve collaboration of users | Consent (art 6.(1) (a)) | Data subject | None | 90 days from licence termination |
12. 自动化决策的使用
APMG在评阅考生考试答案时使用自动化决策。对于在线考试和纸质考试,考试要么直接由在线考试门户进行评阅,要么将答题卷扫描后由我们的考试系统进行评阅。在APMG正式发布结果之前,会向考生提供临时成绩。评分算法是每个正确答案得一分,通过或不通过的结果由各产品的最低及格分数决定,具体分数可在各产品页面上找到。考生可直接联系APMG表达意见并对决定提出异议,要求人工干预手动评阅其考试答案。或者,如果他们通过我们的培训公司之一参加了培训,其培训公司可代表他们向APMG提出此请求。应要求,APMG将手动评阅考试并做出决定。APMG手动评阅考试的决定将是最终的。
13. 安全性
一旦我们不再需要相关信息,我们会安全地销毁这些信息。我们采用商业上合理的技术、组织和管理措施来保护我们的服务,防止未经授权或非法访问或处理,以及防止意外丢失、盗窃、泄露、复制、修改、破坏或损坏。尽管如此,我们无法保证您信息的传输始终安全,也无法保证未经授权的第三方永远无法突破我们或我们服务提供商采取的安全措施。您不应与任何人分享您的用户名、密码或账户的其他安全信息。如果您有理由相信您与我们的互动不再安全(例如,如果您认为您在我们这里的任何账户的安全性已受到损害),请按照下文第15节的详细说明立即与我们联系。
14. 如果我选择不提供个人信息会怎样?
如果个人信息是根据您与APMG之间的合同或通过我们的业务合作伙伴之一向您提供商品或服务所必需的,那么如果您不向我们提供您的个人信息,我们将不会签订该合同或提供服务或商品。
15. 控制您的个人信息
如果您同意接收我们的通讯或目前正在接收与我们产品或服务相关的材料,您可随时联系我们,要求我们停止向您发送此类材料。
我们不会向第三方出售、分发或出租您的个人信息。
APMG International是The APM Group Limited的子公司。根据GDPR,您可以要求获取我们持有的关于您的个人信息详情。如果您希望获得我们保存的关于您的信息副本,请通过dataprivacy@apmgroup.co.uk联系我们的数据保护官,或写信至:
收件人:数据保护官
APM Group Ltd
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG
16. 您的权利
APMG将尊重您对数据享有的合法权利。
以下是您在法律下享有的权利,以及APMG为保护这些权利所采取的措施:
| 法定权利 | APMG为保护您权利所采取的措施 | ||
|---|---|---|---|
| 知情权 | APMG发布此隐私声明是为了让您了解我们如何处理您的个人信息。我们努力在如何使用您数据方面保持透明。 | ||
| 访问权 | 您有权访问您的信息。如果您希望获得APMG持有的关于您的个人信息副本,请通过 dataprivacy@apmgroup.co.uk 联系APMG的数据保护经理。 | ||
| 更正权 | 如果APMG持有的关于您的信息不准确或不完整,您有权要求我们进行更正。如果该数据已在您同意或出于法律原因传递给第三方,那么我们也必须要求他们更正数据。请通过以下方式联系我们: dataprivacy@apmgroup.co.uk。如果您通过我们的考生门户拥有账户,您也可以通过登录个人资料页面更新您的个人信息。 | ||
| 删除权 |
这有时被称为"被遗忘权"。如果您希望APMG删除您的所有个人数据,而我们没有继续处理和保留数据的法律理由,请通过以下方式联系我们: dataprivacy@apmgroup.co.uk 请注意,行使此权利可能会影响验证您资质的能力。
|
||
| 限制处理权 | 您有权要求APMG限制我们如何处理您的数据。这意味着我们被允许存储数据但不进一步处理。我们只保留足够的数据以确保将来尊重您的请求。如果您希望我们限制对您数据的处理,请联系: dataprivacy@apmgroup.co.uk | ||
| 数据可携权 | APMG必须允许您获取并重复使用您的个人数据,以安全可靠的方式用于您在各种服务中的自身目的,且不影响您数据的可用性。如果您希望了解如何将数据转移到其他地方的信息:请联系 dataprivacy@apmgroup.co.uk。此权利仅适用于您作为数据控制者提供给我们的个人数据。该数据必须是我们基于同意或履行合同而持有的。 | ||
| 反对权 | 即使基于我们的合法利益、行使官方Authority、直接营销(包括数据汇总)以及为统计目的进行的处理,您也有权反对APMG处理您的数据。如果您希望提出反对,请联系: dataprivacy@apmgroup.co.uk | ||
| 撤回同意权 | 如果您已给予我们处理您数据的同意但改变了主意,由于您有权随时撤回同意,APMG必须停止处理您的数据。如果您想撤回同意,请联系: dataprivacy@apmgroup.co.uk。撤回同意不会影响我们在您撤回之前进行的任何处理的合法性,也不会影响基于同意以外的合法处理依据对您个人信息的处理。 | ||
| 向APMG投诉的权利 | 如果您认为本隐私政策未向您提供充分信息,或您认为APMG未按照英国数据保护法律处理您的数据,您有权向APMG投诉。您可以向我们的数据保护官员提交投诉,邮箱: dataprivacy@apmgroup.co.uk | ||
| 向监管Authority投诉的权利 | 如果您认为APMG未在合理时间内回应您的请求以解决问题,您有权向ICO投诉。他们的联系方式可在此处找到:ICO关切事项。欧洲经济区、瑞士和某些非欧洲国家(包括美国和加拿大)的数据保护机构联系方式可查阅。 | ||
如果您对此隐私声明或APMG的任何数据处理活动有任何问题或关切,或只是想提供反馈,请通过dataprivacy@apmgroup.co.uk联系数据保护官员
17. 链接到其他网站
我们的网站和在线平台可能包含指向其他网站的链接。匿名访问或会话信息可能会传递给其他网站,用于上述网络使用信息目的。这些信息都无法与网站的个人用户关联。其他网站的运营商可能会收集您的信息,他们将根据自己的条款和条件以及隐私政策使用这些信息。
本隐私声明仅适用于我们的网站和在线平台。我们不对任何其他网站内的隐私做法负责。当您离开本网站时,您应该始终意识到这一点,我们建议您阅读您访问的所有其他网站上的隐私声明。
18. 我们隐私政策的变更
我们可能会不时更新或修订本隐私政策,以遵守法律或满足我们不断变化的业务要求。当我们更新隐私声明时,我们将根据所做更改的重要程度,采取适当措施通知您。任何更新或修订都将发布在APMG International网站上。我们建议您定期查看APMG International网站,以获取有关我们隐私做法的最新信息。通过继续访问我们的网站和/或在线平台或使用我们的任何服务,您的访问和使用将受这些更新和修订的约束。