EU GDPR Regulation
Alpha Training has adopted the following principles for processing personal data, as laid down in the EU GDPR Regulation:
• Personal data shall be processed lawfully, fairly and in a transparent way.
• Personal data shall be collected for specified, explicit and legitimate purposes only.
• Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
• Personal data shall be accurate and, kept up to date i.e. process shall be in place to identify and address out-of-date, incorrect and redundant personal data.
• Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
• The integrity and confidentiality of personal data is maintained at all times through appropriate technical and organisational measures, including protection against unauthorised or unlawful processing, and against accidental loss, destruction or damage.
Data we may collect from you
Alpha Training may collect and process the following data about you:
• If you enquire about our services via our website, we may keep your contact details.
• When you visit our website, we may collect information that is available from your browser using a cookie.
• If you contact us via post, we may keep a record of that correspondence.
• If you send us personal data via email, we may keep your email and email address.
• If you provide CVs or other information about yourself for specific purposes.
• If you complete optional surveys for research purposes.
How we use your data
• To provide you with the information and services that you request from us.
• To carry out our obligations arising from any contracts entered into between you and us.
• To update and enhance our records.
• To compile information relating to your use of our services.
• To provide you with information about our services and other areas that may interest you.
• To invite you to participate in market research activities.
Disclosure of your data
We may disclose your personal information to third parties without obtaining further consent from you including:
• To our business partners, suppliers and subcontractors for the performance of any contract we enter into with you.
• Where we outsource any of our business functions under which we collect or store your data, in which case we will ensure that any such service provider adheres to at least the same obligations of security with regard to your data as undertaken by us.
• Where we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Website Terms & Conditions and other agreements; or to protect our rights, property, or safety of our employees, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We will never sell your data to third parties for the purposes of marketing.
Where we store your data
Ensuring your personal data is kept and transferred securely is of the highest importance to us.
• All personal data that we process in relation to our services is processed by our staff in the UK.
• For the purposes of IT hosting and maintenance, your personal data is located on secure servers mainly based in the European Economic Area (EEA).
• We have technical and organisational measures in place to ensure your personal data is kept securely and to prevent any unauthorised access.
• You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we wish to use your data for such purposes and request your consent to these activities.
Access to information
• The Act gives you the right to access information held about you.
• Your right of access can be exercised in accordance with the Act.
• Any access request may be subject to a fee (as amended from time to time) to meet our costs in providing you with details of the information we hold about you.
• We will take reasonable steps to create an accurate record of any personal data you have submitted.
• We do not assume responsibility for confirming the ongoing accuracy of your personal data.
• Please note that it may take up to 21 days for the changes to come into effect.
We may change this policy by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
Last modified May 2018