This privacy notice tells you what to expect when WEBS Training Ltd collects personal information. It applies to information we collect about you.
WEBS Training Ltd is the “data controller” in respect of your personal information. This privacy notice sets out the basis on which any of your personal information we collect from you or that you provide to us will be processed.
Your privacy is important to us and we will keep your Personal Data secure in accordance with our legal responsibilities. We will take reasonable steps to safeguard your Personal Data against it being accessed unlawfully or maliciously by a third party.
Until 24 May 2018, we shall process your personal data in accordance with the Data Protection Act 1998 (DPA). From 25 May 2018, we shall process your personal data in accordance with the General Data Protection Regulation (GDPR). This notice complies with requirements under both the DPA and the GDPR.
The principles of the Data Protection Act shall be applied to all data processed:
Any updates will be made available to all WEBS visitors and can be accessed on the WEBS Training website at www.webstraining.com
If there is anything you are unclear about please contact our Data Protection Champion who can answer any queries you may have concerning this Notice, or the way in which we process your personal data. Our Data Protection Champion’s contact details can be found at the end of this Notice.
Please read the following carefully to understand our practices regarding your personal information and how it will be treated.
In any contact, you may choose to voluntarily give us certain information which we may process. Examples of this and the purpose include:-
in response to an enquiry from you in relation to any information, products and services
When you visit WEBS premises you may inadvertently be recorded on CCTV. This is used for the purpose of staff and learner security and safeguarding. In exceptional cases recordings may be shown/passed to the Police in any unlawful situations. All recordings are automatically deleted after 3 months.
We will only process your personal information where we have a lawful requirement to do so. The lawful requirement will depend on the purposes for which we have collected and will use your personal information. In almost every case the lawful requirement will be one of the following (ref Article 6 of the GDPR):
WEBS Training Ltd will ensure any use of personal data is justified using at least one of the conditions for processing and this will be specifically documented. All staff that are responsible for processing personal data will be aware of the conditions for processing.
We may collect and process the following personal information about you which you provide to us:
Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes, by gathering and remembering information about your preferences.
When someone visits www.webstraining.com we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it. For more information on cookies please go to https://ico.org.uk/for-the-public/online/cookies/
When visiting our website/social media platforms, personally identifying information like Internet Protocol (IP) addresses may from time to time be used to identify visitors. Statistics about the behaviour of visitors to the website may also be used.
Dependent upon the reason for collecting and processing your data, storage may differ.
WEBS Training Ltd will not retain personal information for longer than necessary and only for the purpose for which it was given. We will hold onto the information you provide either while a contract is in existence, or as needed to be able to provide the required service to you. This is done by following our data retention policy. After the retention deadline has passed the data will be deleted/securely destroyed. This includes electronic and hard copy data.
WEBS are committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorised access, use or disclosure. For example, we store the personal information you provide in computer servers with limited access that are located in controlled facilities. When we transmit sensitive information (such as address or date of birth) over the internet, we protect it through the use of encryption, such as the Secure Socket Layer (SSL) protocol. SSL is an industry standard to ensure internet messages are not intercepted.
Webs Training Ltd uses third party services to help maintain the security and performance of the WEBS Training networks and website. When contracting with 3rd parties we will work hard to ensure that the service provider is fully GDPR compliant.
We will not sell, distribute or lease your personal information to third parties unless we have your express permission to do so or are required by law.
You may request details of personal information which we hold about you via a subject access request.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
WEBS Training Ltd recognises that the secure disposal of redundant data is an integral element to compliance with legal requirements and an area of increased risk.
All data held in any form of media (paper, tape, electronic) shall only be passed to a disposal partner with demonstrable competence in providing secure disposal services. All data shall be destroyed or eradicated to agreed levels meeting recognised national standards.
Disposal of IT assets holding data shall be in compliance with ICO guidance:
You have certain rights in relation to your personal information. These include: the right to:-
For more information on your rights, please visit https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
We will handle any request to exercise your rights in accordance with applicable law and any relevant legal exemptions. If you wish to exercise any of these rights please contact us using the contact details below.
You may also have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or breaches your rights. In the first instance, if you have such concerns we ask that you initially contact us (using the contact details below) so that we can investigate, and hopefully resolve, your concerns.
Where this has been explored and you feel you have not had a satisfactory response with regard to the processing of your data you can write to:-
Information Governance Department
Information Commissioner's Office
All individuals whose data is held by us, have a legal right to request access to such data or information about what is held, provided there is no undue burden and it does not compromise the privacy of other individuals. If you wish to make a Subject Access request, please complete the ‘Subject Access Request’ form here and return it to the Data Protection Champion at email@example.com
Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will cease any further processing of your data and delete/securely destroy. Please complete the ‘Request to Withdraw Consent’ Form here or contact WEBS Training Ltd via the details below.
Questions and comments regarding this privacy notice should be sent to: firstname.lastname@example.org marked for the attention of the Data Protection Champion, or you can write to The Data Protection Champion at WEBS Training Ltd, The Poplars, Wollaton Road, Beeston, Nottingham NG9 9PD.