1. 简介
APM Group Limited("APMG"、"我们"、"我方")致力于保护您的数据隐私。我们希望您了解我们如何使用和保护您的个人信息,包括告知您就我们所持有的个人信息享有哪些权利。
本隐私政策说明我们可能以何种方式使用、处理和存储您的个人数据。个人数据是指任何可用于识别特定个人身份或与特定个人合理关联的信息。
我们需要您的个人数据,以履行您与我们或我们业务合作伙伴之间可能存在的合同/法律义务,或为您提供相关服务。在其他情况下,我们将在获得您的许可和同意后收集相关信息。
当 APMG 以自身名义向您提供服务时(例如您使用我们的网站或向我们购买考试),APMG 是所收集全部个人数据的"控制方"。
当 APMG 代表 SFIA 授权评估合作伙伴,通过 Credly 平台颁发 SFIA 数字徽章时,APMG 是数字化管理事务的"处理方",而负责您的评估与认证的授权合作伙伴则是"控制方"。
2. 法律法规
英国管理个人数据的法律包括:
- 2018年《数据保护法》及
- 《英国通用数据保护条例》(UK GDPR)
- 《欧洲议会和欧盟理事会于2016年4月27日颁布的关于保护自然人个人数据处理及数据自由流通的第2016/679号条例》(《通用数据保护条例》)(EU GDPR)。
在英国代表公众利益维护信息权利的独立监管机构为信息专员办公室("ICO")。更多信息请参阅 ICO官方网站。
我们在ICO的注册信息如下:
- The APM Group Limited Z6934466
请注意,上述法规适用于APMG的所有办公室,以及所有通过APMG接触个人信息的业务合作方。这些法规不仅限于英国公民。
3. 公司详情
以下是APMG的注册地址、公司编号及联系方式:
The APM Group Limited
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG
电子邮件: dataprivacy@apmgroup.co.uk
电话:+44 (0) 1494 452450
我们的欧盟办事处地址如下:
APMG Benelux
Unit 1.15 BusinessCenter Spoetnik
Spoetnik 20
3824 MG Amersfoort
如您对本隐私政策有任何疑问、意见或投诉,请通过上述联系方式与我们联系。
4. 我们可能收集的您的个人信息
APMG 可能会因具有合法理由(法律允许或合同规定)、您已就特定目的表示同意,或出于正当利益,而向您收集信息。
您提供给我们的信息
您可能在获得您的同意后,或因使用我们服务的需要,向我们提供您的相关信息,例如:
- 您为在我们处创建账户而提供的信息
- 您发送给我们或以其他方式提交的表格、电子邮件及其他通讯,例如支持请求或在我们的留言板或论坛上发布的内容。请注意,我们网站及在线平台公开区域的信息可供他人查阅
- 您的营销偏好
- 您在参与调查或促销活动时与我们分享的信息
- 您在向 APMG 申请工作时与我们分享的信息
- 您在会议、展览或线上活动中向我们提交的信息
这些信息可能涉及个人、财务、教育或就业经历等方面。
在某些情况下,我们出于法律原因需要您提供信息,例如在与我们签订合同时、购买考试、评估或其他商品或服务时,或向 APMG 申请工作时。
如果您是经 APMG 认证或批准的培训师、主持人或监考员,有关您数据处理方式的《培训师、主持人、监考员数据保护声明》可在 APMG 网络上和/或通过您的主办 ATO 获取。
从其他来源获取的信息
如果您通过我们的业务合作伙伴或培训提供商购买 APMG 考试,他们可能会向我们提供您的某些个人信息(例如您的姓名和电子邮件地址),以便我们为您提供服务。相关业务合作伙伴/培训提供商的隐私政策将规定其如何使用您的信息并与我们共享。请仔细阅读其隐私政策,确保您接受其隐私条款。
如果您通过我们的授权合作伙伴之一获得了 SFIA 数字徽章,他们可能会向我们提供您的某些个人信息(例如您的姓名和电子邮件地址),以便我们为您提供相关服务。
从您使用我们服务中获取的信息
当您使用我们的服务时,我们会收集您在我们网站和/或在线平台上的活动及互动信息,例如您的 IP 地址、设备和浏览器类型、您的偏好、您访问我们网站和/或在线平台之前所浏览的网页,以及您与我们网站和/或在线平台互动方式的相关信息。
当您使用我们的服务时,其中部分信息会通过 Cookie 及类似技术自动收集。您可在下方第 5 节中进一步了解我们对 Cookie 的使用情况。
网站及在线平台使用信息
我们使用第三方服务 Google Analytics 收集标准网站性能信息。这些信息的处理方式不会识别个人身份。网站使用信息由我们的网络服务器及其他来源收集,包括搜索引擎、互联网服务提供商、含 JavaScript 在内的页面标记技术以及 Cookie。我们使用 IP 地址分析趋势、追踪用户行为,并收集汇总使用的广泛人口统计信息。IP 地址不会与可识别个人身份的信息相关联。
如果您访问我们的某个网站或使用我们的某个在线平台,我们可能会自动收集有关您的信息,例如:
- IP 地址
- 您用于连接我们网站和/或在线平台的技术信息
- 您点击我们网站或在线平台的哪些部分,以及您浏览我们网站或在线平台的时长
除您主动提供的信息外,每当您使用我们的某个网站或在线平台时,我们还会接收并存储一系列网站及在线平台使用信息。如果我们需要收集个人信息,我们将明确说明收集该信息的具体原因,并请您选择加入。
我们将这些信息用于:
- 评估营销活动的效果
- 开发和提供更符合您需求的服务与信息
- 在您已同意为此类目的被联系的前提下,向您告知我们认为与您相关的活动、服务和产品
我们还使用 Matomo,通过匿名 IP 地址追踪网站使用趋势。该原始数据将保留 24 个月用于生成报告,但不会归因于特定个人。
在线客服(APMG Live Chat)
该服务允许您与我们或我们的支持专员进行实时聊天,以便您更顺畅地浏览我们的网站或在线平台。
APMG 使用 Chatlio 的聊天功能,地址为:1329 N 47th ST #31231, Seattle, WA 98107, USA。
您和/或 APMG 或其分包商在 Chatlio 聊天窗口中输入的消息及其他信息,将通过 Slack(Slack Inc. 旗下服务,地址:500 Howard Street, San Francisco, CA 94105, United States)发送至 APMG。Chatlio 使用 Cookie 识别回访用户,并利用您的位置数据向我们的支持团队提供您所在位置的参考信息。
我们在获得您同意和/或为履行合同义务、提供服务、遵守法律规定、保障系统安全或实现其他正当利益的必要情况下,收集和处理您的个人信息。在与我们的支持专员或员工进行实时聊天时,APMG、Slack 和 Chatlio 可能会存储以下信息:
- 姓名
- 电子邮件地址
- 考生编号(如适用)
- 浏览器
- 操作系统
- 发起聊天时所在页面的 URL
- 本地时间
- 位置
- 客服评分
- 您在消息中提供的任何其他个人信息
使用我们的在线客服即表示您同意 Chatlio 和 Slack 的数据存储和使用方式。如需进一步了解,请参阅 Chatlio 的隐私政策:Chatlio 隐私政策以及 Slack 的隐私政策:Slack 隐私政策
APMG 技术支持台
支持通话将被录音,以确保在支持通话过程中不会侵犯最终用户的数据安全和权利。这些录音将在 90 天后删除。保留此类事件的录音符合个人的正当利益,以便我们能够调查任何不当行为或服务不满意的投诉。
APMG 通讯
APMG 使用电子邮件/营销自动化平台向我们的认证机构和培训师发送通讯,并向新闻通讯订阅者发送电子报。如果您在我们的网站上注册订阅电子报,或在考生门户中同意接收营销信息,我们将收集并处理您的相关信息。您可以随时通过点击电子报中的取消订阅链接,或在考生门户中更改您的营销偏好,撤回对接收电子报的同意。
APMG 还可能在考生完成考试后向其发送通讯,征求反馈意见,以便我们了解如何改进服务。调查回复通过 Survey Monkey 收集:Survey Monkey 隐私政策
APMG 使用自动化平台 Mailchimp。
Mailchimp 是由 The Rocket Science Group LLC 运营的在线营销平台,该公司总部位于美国佐治亚州。如需进一步了解,请参阅其隐私政策:MailChimp 隐私政策
社交媒体推广活动
APMG 使用第三方平台开展社交媒体推广活动,用于录制、编辑和托管媒体内容。这些平台包括 LinkedIn 和 YouTube。参与社交媒体推广活动的人员已授权 APMG 采集其图像和证言,并将其用于各类推广活动的编辑制作。
线上推广活动
APMG 在包括 Zoom 在内的第三方平台上举办线上活动。参会者在注册活动时需提供其联系方式,并同意接受 APMG 及活动合作伙伴的联系,以便在活动结束后获取更多信息及相关产品、培训或其他活动资讯。如果 APMG 有多个活动合作伙伴,参会者信息将根据其所在地区与相应的活动合作伙伴共享。参会者数据不会用于上述目的以外的任何用途,也不会提供给任何其他第三方。
个人可通过点击任何 APMG 通讯中的取消订阅链接,选择退出接收来自 APMG 的通讯。
5. Cookies
我们的网站(包括 apmg-international.com、apmg-businessbooks.com 和 ppp-certification.com)及在线平台(包括 APMG 学习平台和 APMG 考生门户)会在您的计算机上存放小型文件(即"Cookie"),以收集您使用我们网站的相关信息。
Cookie 的用途包括:
- 衡量您使用网站/在线平台的方式,以便根据您的需求进行更新和改进
- 记录您已查看过的通知,避免再次向您展示
APMG 网站和在线平台使用 Cookie 并非为了识别您的个人身份,而是为了深入了解网站的使用情况,从而持续为用户优化体验。
在我们将 Cookie 存储到您的计算机之前,您通常会在网站上看到相应提示信息。
如需了解更多关于管理 Cookie 的信息,请访问 关于 Cookie 或 Cookie 详解
我们如何在网站上使用 Cookie
衡量网站使用情况
APMG 网站和在线平台使用 Google Analytics 收集数据,以改善您在我们网站和平台上的使用体验。
我们在网站上使用的 Cookie 如下:
| 名称 | 用途 | 有效期 |
|---|---|---|
| _ga | 用于区分用户。 | 2 年 |
| _gid | 用于区分用户。 | 24 小时 |
| _gat | 用于限制请求频率。 | 1 分钟 |
| AMP_TOKEN | 包含一个令牌,可用于从 AMP Client ID 服务检索客户端 ID。其他可能的值表示已选择退出、请求正在处理中,或从 AMP Client ID 服务检索客户端 ID 时出现错误。 | 30 秒至 1 年 |
| _gac_ | 包含与用户相关的广告活动信息。如果您已将 Google Analytics 与 AdWords 账户关联,AdWords 网站转化标签将读取此 Cookie,除非您选择退出。了解更多。 | 90 天 |
请阅读 Google Analytics 隐私政策文档(可在 Google Analytics 隐私政策 页面获取),了解 Google Analytics 所收集数据的更多详情。如需退出 Google Analytics,请访问:Google Analytics 退出
我们的入门提示
我们的入门提示
我们在法律上有义务告知您,我们在网站和在线平台上使用 Cookie,并需获得您的同意。我们通过弹出消息的方式实现这一目的,该消息将在您首次访问我们的网站或在线平台时出现。我们会在您的计算机上存储一个 Cookie,以记录您已确认该弹出提示,从而避免网站再次向您显示:
| 名称 | 用途 | 有效期 |
|---|---|---|
| cookie-agreed | 记录用户是否已确认 Cookie 通知弹出提示 | 11 个月 |
内容管理系统
我们在网站和在线平台上使用 Drupal 内容管理系统,该系统也会设置若干 Cookie:
| has_js | 允许网站检测您的浏览器是否支持 JavaScript | 浏览器会话期间 |
|---|---|---|
| SESSxxxx | 用于判断用户是否已登录网站 | 23 天 |
我们如何在在线平台上使用 Cookie
有关所有 APMG-International 在线平台上 Cookie 使用的更多信息,请参阅 APMG Cookie 政策
Google AdWords
Google Analytics 允许我们记录用户在我们网站上所访问页面的相关信息,例如页面的 URL。Google Analytics JavaScript 库使用 HTTP Cookie 来"记住"用户在之前页面上的操作及与网站的互动行为。
重要提示:Google Analytics 不存储任何网站用户的个人信息。如需了解更多详情,请参阅 Google Analytics 隐私文档。
关于访客如何选择退出 Google 使用 Cookie 的信息,请参阅 Google 广告设置。
第三方 Cookie
第一方 Cookie 是我们为自己的网站和在线平台设置的 Cookie;第三方 Cookie 则是来源于其他网站的 Cookie。我们无法控制第三方 Cookie 的设置,因此如果您有所顾虑,建议您查阅相关第三方网站的政策。
我们使用的第三方网站示例之一是 YouTube。apmg-international.com 上有多个视频,尽管这些视频由我们拥有(或已获得使用许可),但视频内容实际上是从 YouTube 流式传输的。因此,当您观看我们的视频时,可能会收到来自 YouTube 的 Cookie。
6. 儿童
我们致力于保护儿童隐私。基于这一理念,我们不会有意收集或保存16岁以下人士的个人信息(用于我们的公开考试),我们的任何网站或在线平台均不面向16岁以下人士。如果您未满16岁,请勿以任何方式或在任何时候使用或访问我们的网站或在线平台。若相关个人信息系由16岁以下人士直接提供,我们将采取适当措施予以删除。
如果您是父母、法定监护人或照护人(负责任的成年人),且认为您的孩子已向我们提供了信息,请通过 dataprivacy@apmgroup.co.uk 与我们联系,我们将采取适当措施进行调查并处理相关问题。
如果您未满16岁,并已作为培训机构与您所在学校协议的一部分参加了我们的某项考试,APMG将在获得您的父母、监护人或照护人(负责任的成年人)同意的前提下处理您的数据,且不会将您的数据转移给除相关资质所属计划所有者之外的任何第三方(如适用——详见下文第10节)。
如果您是父母、监护人或照护人(负责任的成年人),并已签署申请表,授权向16岁以下候选人提供考试服务,APMG将自申请表填写完成之日起保留您的个人信息(如申请表中所提供)5年,以便我们保存所有13至16岁儿童的同意记录,直至其达到无需父母、监护人或照护人同意的年龄为止。
请注意,若父母、监护人或照护人(负责任的成年人)撤回其同意,APMG将停止处理该16岁以下候选人的个人数据,因此将无法核实向该候选人颁发的任何证书。
7. 为什么 APMG 要收集个人信息?
APMG出于以下部分或全部原因收集信息:
- 为向您提供服务,例如:
- 用于识别您身份的信息,如您的姓名、用户名和电子邮件地址
- 允许您在我们处注册并参加考试
- 提供您从我们或我们的业务合作伙伴/培训机构购买的在线培训
- 在您完成我们的教育认证/资格考试后,管理您的认证,包括由我们对您的认证/资格进行验证
- 通过我们的网站和/或在线平台为您提供任何可用服务。
- 如果您是APMG的现有客户,在合理期限内向您提供您曾表示有意购买的产品或服务的相关信息。
- 向您提供您已从我们处购买的产品或服务,以及相关产品或服务的信息。
- 在您持有现有认证的产品有更新时及时通知您。
- 在您同意接收的前提下,向您提供有关我们产品和服务的信息。
- 雇用您或考虑您的就业申请。
- 依据合同向您提供商品或服务。
- 出于法律原因,例如,您已与我们签订合同。
8. APMG 处理我的信息有何法律依据?
APMG可能处理您的信息,原因如下:
- 我们与您之间存在合同关系;
- 您已授权我们处理您的信息;
- 您向我们或我们的业务合作伙伴购买产品后,我们须向您提供相关服务;
- 您参加了我们的资质认证考试,我们须向您提供相关服务;
- 基于正当利益,向您告知您现有认证的任何变更;
- 遵守法律法规的要求。
我们可能会对系统中的个人数据进行分析,以了解用户如何参与我们的活动、通讯、考试及产品。这有助于我们改善服务质量,并评估各项活动的效果。我们基于正当利益开展此类分析,并采取适当的保障措施。这不涉及对您产生法律效力或类似重大影响的自动化决策,您也不会因此分析而被拒绝享受任何服务或机会。
以上均为APMG合法处理您相关信息的依据。 您可依据以下第16条的规定,就上述任何处理活动行使您的权利。
9. 我们在哪里存储您的个人数据
我们主要在英国及欧盟/欧洲经济区("EEA")存储和处理您的个人数据。如需将您的个人数据传输至英国或EEA以外的地区,须基于您的同意或我们具有合法依据。您的数据也可能由在EEA以外工作的员工(为我们服务)进行处理,所有相关人员均受本政策约束。
以下是您的数据可能在英国及EEA以外被处理的部分原因:
- 订单履行
- 支付处理
- 技术支持服务
- 在线客服服务
如果您的个人数据无法在英国及EEA范围内处理,我们将:
- 遵守所有其他数据保护原则;
- 在可能的情况下,在英国专员认定的能够为数据主体的权利和自由提供充分保护的国家进行处理;
- 在所有其他情况下,确保我们已对相关保护措施的充分性进行评估。
APMG还将把您的个人信息传输给您所选择参加的资质认证项目的所有者,以及您购买我们服务的业务合作伙伴(如有)。详情请参阅以下第10节。
使用我们的服务或提交您的个人数据,即表示您同意上述数据的传输、存储和/或处理。
10. 我们可能会与哪些方共享您的信息?
APMG may share your personal information with third parties, either because you have consented to allow us to do so or for a legitimate purpose or to comply with the law. For example, we may share your personal information with:
- The training organization who provided training to you before you took an examination (for example, to share your examination result or to deal with a complaint);
- A scheme owner who provides an online platform for training and/or additional resources for a training course you have enrolled in;
- Our group companies, which means our subsidiaries, or our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
- With third parties because you have given consent;
- With third parties who provide shipping or publishing services because you have purchased goods or services;
- On our Successful Candidate Register if you have consented;
- Subcontractors and third parties for the purpose of the performance of a contract we hold with them or that we hold with you for a service you have chosen. They only receive data needed to provide their services to us and are required to use such data only in order to perform the services we have hired them to do (unless otherwise required by law). We have agreements with our service providers that say that they cannot use any of this data for their own purposes or for the purposes of another third party. A list of these organisations can be found here Copyright, Legal and Policies.
Please note some of these organisations may be located outside UK and/or EEA, for example:
- Taking an on-line exam at home or in the office via ProctorU
- This service allows you to take an online exam from the comfort of your own home or office with online proctoring. We use a third party supplier, ProctorU, to provide this service. Their privacy policy can be seen here ProctorU Privacy Policy. For APMG test-takers, ProctorU retain any recordings from the exam session for 7 months, in line with the APMG appeals period, and other data is retained for 1 year from the last interaction with the test-taker.
- Taking an on-line exam at home or in the office via APMG In Person Proctoring (AIPP)
- This service allows you to take an online exam from the comfort of your own home or office using the APMG proctors, where your organisations level of security prevents you installing the software required to be proctored via ProctorU. APMG use Zoom Zoom Privacy Policy and Calendly Calendly Privacy Policy as the platform and scheduling mechanism for proctoring the exam. APMG does not record the exam sessions.
- Obtaining a digital badge and certificate via Credly
- This service allows successful candidates and SFIA badge recipients to claim a digital badge to embed on an email signature, website, social media or a digital CV. Successful candidates and those claiming SFIA badges following assessment by a SFIA Licensed Assessment Partner are required to register and accept their digital badge on Credly. A digital certificate will also be available on their personal account of successful candidates only, SFIA badges do not have a digital certificate. Each certificate has a unique verifiable link built into it allowing individuals, teams, managers and employers to quickly validate any certificate presented electronically. Candidates can also print their own certificate on demand from their Credly account. Their privacy policy can be seen here Credly Privacy Policy
- IP owners of the APMG qualification you have chosen to undertake. Please note that some Scheme Owners are based outside the UK and/or EEA as shown in the table below (if required, each organisation has its own Privacy Policy published on their website, links to which can be found on the product pages) Where APMG transfers data outside the UK and EEA, we have implemented appropriate safeguards to protect your data:
| Product | Owner | Location | |||
|---|---|---|---|---|---|
| AAB Scheme (Aerospace Auditors) | EAQG | US | |||
| Agile Business Consortium Scrum Master & Product Owner | Agile Business Consortium | UK | |||
| AgileBA, Agile DS, AgilePgM, AgilePM, & AgilePM for Scrum | Agile Business Consortium | UK | |||
| Agile Change Agent | Agile Change Management Limited | UK | |||
| Analytics Translations | GoDataDriven | EEA | |||
| APMG Lean IT | APMG | UK | |||
| APMP & Micro Certifications | APMP | US | |||
| Artificial Intelligence | BCS | UK | |||
| Artificial Intelligence Practitioner | Cyber Skills | UK | |||
| ASL | Van Haren Rights B.V. | EEA | |||
| Better Business Cases | HM Treasury/Welsh Treasury | UK | |||
| Business Case Development for Infrastructure Projects (BDIP) | HM Treasury/Welsh Treasury | UK | |||
| Better Business Cases (If booked through New Zealand) | New Zealand Treasury | New Zealand | |||
| BiSL | Van Haren Rights B.V. | EEA | |||
| BRMP & CBRM | BRM Institute | US | |||
| Business Agility Works | Agile Business Consortium | UK | |||
| Business Resilience | Professional Resilience | UK | |||
| CCP | NCSC | UK | |||
| CDCAT | DSTL / Ploughshare / APMG | UK | |||
| Certificate of Cloud Auditing Knowledge | ISACA | US | |||
| Certified Data Privacy Solutions Engineer | ISACA | US | |||
| Certified in Emerging Technology | ISACA | US | |||
| Certified in the Governance of Enterprise IT | ISACA | US | |||
| Certified Information Systems Auditor | ISACA | US | |||
| Certified Information Security Manager | ISACA | US | |||
| Certified Local Change Agent (CLCA) | APMG | UK | |||
| Certified Medical Device Auditor (CMDA) | Johner Institut GmbH | EEA | |||
| Certified Public-Private Partnerships Professional (CP3P) | APMG/World Bank | US | |||
| Certified in Risk and Information Systems Control | ISACA | US | |||
| Change Management | APMG | UK | |||
| Change Ninja | The Change Ninja Ltd | UK | |||
| Clear Path to Cash Professional | Cash Flow Mike | US | |||
| Cloud Computing | NAVICA | US | |||
| Climate-Resilient Infrastructure Officer | Global Center on Adaption | EEA | |||
| COBIT 5 and COBIT 2019 | ISACA | US | |||
| Critical Communication Capability | TSO | UK | |||
| Customs Clearance Agent | The British Chamber of Commerce | UK | |||
| Cyber Essentials | Capula | UK | |||
| Data Literacy Fundamentals | Cybiant | EEA | |||
| Data Science with Python | GoDataDriven | EEA | |||
| Digital Information Design (DID) | Van Haren Rights B.V. | EEA | |||
| Digital Risk Management | EuEP Srl | EEA | |||
| DNV Auditor Competence | DNV | EEA | |||
| DTMethod | InProgress Design Labs | EEA | |||
| Earned Value | APM | UK | |||
| Enterprise Big Data | The Big Data Framework BV | EEA | |||
| Facilitation | Resource Developing Business by Developing People | UK | |||
| FitSM | IT Education Management Organization e.V. (ITEMO e.V.), | EEA | |||
| Forest Garden Certification (FGC) | Trees for the Future | US | |||
| Half Double | Half Double Institute | EEA | |||
| House of PMO- Essentials for PMO Suite | House of PMO | UK | |||
| IAITAM | IAITAM | US | |||
| Information and Cyber Security Foundation | CIISec | UK | |||
| Information Technology Certified Associate | ISACA | US | |||
| International Project Management Association (IPMA) | IPMA US | US | |||
| ISO/IEC 20000 | APMG | UK | |||
| ISO/IEC 27001 | APMG | UK | |||
| IS0 37000 Governance of Organisations | FluidRock Governance Academy | South Africa | |||
| ISO/IEC 42001 AI Management Systems | APMG | UK | |||
| IT Risk Fundamentals | ISACA | US | |||
| Lean IT Association | APMG (in association with LITA) | UK | |||
| Lean Green Belt | LSSA / APMG | EEA/UK | |||
| Lean Six Sigma | LSSA / APMG | EEA/UK | |||
| Managing Benefits | APMG | UK | |||
| Managing Portfolios | Portfolio Solutions | UK | |||
| Model Based System Engineering | Learning Tree US | US | |||
| NCSP Specialist certifications | ITSM Solutions | US | |||
| Neuroscience for Change | Sparkling Performance Ltd / Agile Change Management Ltd | UK | |||
| NCSC Certified Training | NCSC | UK | |||
| NCSP Specialisms, NIST Cyber Security Professional | ITSM Solutions | US | |||
| OpenSM | IN.SI Srl | EEA | |||
| Organizational Behaviour Management | OBM Dynamics BV | EEA | |||
| Praxis | Praxis Framework Limited | UK | |||
| Private Brand Fundamentals | Daymon | US | |||
| Process Communication | KCF | EEA | |||
| Project Canvas | Antonio Nieto-Rodriguez | EEA | |||
| Project Planning & Control (PPC) | APM | UK | |||
| PS Professional | Positive Momentum | UK | |||
| PuMP Certification | Stacey Barr Pty Ltd | Australia | |||
| Robotic Process Automation | SAF Alliance | EEA | |||
| Service Automation Framework (SAF) | SAF Alliance | EEA | |||
| Site Reliability Engineering (SRE) | Xebia Nederland B.V. | EEA | |||
| Sourcing Governance Foundation (SGF) | APMG (IAOP) | UK | |||
| Stakeholder Engagement | APMG | UK | |||
| STAR Method | Notion Limited | UK | |||
| Strategy Implementation Professional | Strategy Implementation Institute | Singapore | |||
| Technology Business Management | Learning Tree US | US | |||
| Telehealth Service Implementation Model | TSO | UK | |||
| Unified Service Management (USM) | SURVUZ Foundation | EEA | |||
| WISP | New View Management BV | EEA | |||
| XLA Institute Experience Management and XLA® | TSO | UK | |||
*Note: in the event that the owner of a scheme changes, and we have a contractual obligation to share data with the new Scheme Owner, we will do so after notifying you of a change of Scheme Owner.
Other reasons APMG may share your personal information with a third party
If APMG or substantially all of its assets are acquired by a third party, personal data held by APMG about its customers will be one of the transferred assets of the company.
In addition, APMG will share your personal data with third parties for the following reasons:
- If we are under a duty to disclose or share your information in order to comply with any legal obligation,
- To enforce or apply our Website Terms of Use, Terms and Conditions of Sale, or other agreements
- To protect our rights, property, or safety, our users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- For audit purposes by National Accreditation Bodies i.e. UKAS, by whom we are accredited.
Aggregated or anonymized data with personal information removed
APMG may, from time to time, provide third parties with data that has been aggregated or anonymized. This means that personal information that could be used to identify you has been removed from the data. An example of this may be how many candidates have taken an exam in a country.
Data provided to third parties in this way is not personal data; however, we do respect your right to object to your data being used in this way.
Access to your stored personal data via password
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site or online platform, you are responsible for keeping that password confidential. We ask you not to share passwords with anyone.
Transmission and storage of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.
Transmission and storage of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.
11. 我们将保留您的个人信息多长时间?
APMG will not retain your personal information for longer than required.
We will keep your personal information:
- For as long as required by law
- Until we no longer have a valid reason for keeping it
- Until you request us to stop processing it
We will retain personal data collected for as long as required to do what we say we will in this policy, unless a longer retention period is required by law.
We may keep just enough of your personal information to ensure that we comply with your requests not to use your personal information or comply with your right to erasure. For example, we must keep your request to be erased, even if it includes your personal data, as an audit trail that requests are dealt with in accordance with UK GDPR.
If you have questions about our Data Retention Policy. Please contact: dataprivacy@apmgroup.co.uk
If you have visited an APMG website and/or registered for an online event
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| To provide information to you | Web users sales leads data | Name, address, email, phone number | To provide information about training courses that you have requested | Contractual fulfilment (art 6. (1) (b)) | Data subject | Training companies | For as long as it is required to provide the service |
| Service/ product development |
Web user Survey responses |
Name, email address, phone number, country | To develop services and products to meet the expectations and requirement of our customers | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
| Service/ product development | Event attendee | Name, email address | To promote our products and services | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
| Service/ product development | Campaign subscriber | Name, email address | To promote our products and services | Consent (art 6. (1) (b)) | Data subject | Campaign partners named in the campaign | Until you unsubscribe from the service |
If you have sat an exam with APMG
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful Basis for Processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| To provide information to you | Web users sales leads data | Name, email address, phone number | To provide information about training courses that you have requested |
Contractual fulfilment (art 6 (1) (b)) |
Data Subject | Training Companies | 2 years |
| Service / product development | Web user Survey responses | Name, email address, phone number, country |
To develop services and products to meet the expectations and requirement of our customers. |
Consent (art 6.(1) (a)) | Data Subject | None | 2 years |
| Transactional Information | Candidate | Name* | To provide examination services to an individual |
Contractual fulfilment (art 6 (1) (b)) |
Training Company in order to register candidate for the exam, or data subject for public exams |
External Proctor, digital badge provider and scheme owners |
For as long as is required to verify certification** Can only be amended by APMG |
| Email address* | To send notification emails to an individual |
Contractual fulfilment (art 6 (1) (b)) |
Training Company in order to register candidate for the exam, or data subject for public exams |
External Proctor, digital badge provider and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Address* | As an alternative method of communication |
Contractual fulfilment (art 6 (1) (b)) |
Data subject | Country only with external Proctor, and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Telephone number* | To follow up regarding provision of examination services |
Contractual fulfilment (art 6 (1) (b)) |
Data subject | External Proctor, and scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
|
Candidate/ Session ID |
Unique Identifier created by the candidate portal |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External Proctor, and scheme owners |
For as long as is required to verify certification** Cannot be changed |
||
| Memorable word* | To verify identity in case of candidate queries | Legitimate interests (art 6.(1) (f)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Memorable date* | To verify identity in case of candidate queries | Legitimate interests (art 6.(1) (f)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Company | For research purposes | Legitimate interests (art 6.(1) (f)) | Data subject | External scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Industry Sector* | For research purposes | Legitimate interests (art 6.(1) (f)) | Data subject | External scheme owners |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
| Successful Candidate Register preference | To add the candidate to the online Successful Candidate Register, if they choose | Consent (art 6 (1) (a)) | Data subject | None |
For as long as is required to verify certification** Can be changed at any time by the candidate in the portal |
||
|
Consent preferences for Marketing from APMG |
To communicate with you about our other products | Consent (art 6 (1) (a)) | Data subject | None | Candidate can change preference at any time | ||
|
Consent preferences for Marketing from scheme owner |
To communicate with you about their other products | Consent (art 6 (1) (a)) | Data subject | None | Candidate can change preference at any time | ||
|
Accredited Training Organisation, if applicable |
Details of the training company and trainer providing the training to verify accredited training for booking exams |
Contractual fulfilment (art 6 (1) (b)) |
Training Company | External scheme owner |
For as long as is required to verify certification** Cannot be changed |
||
| Exam and Level | Details of the exam being sat |
Contractual fulfilment (art 6 (1) (b)) |
Training Company, or data subject for public exams | External scheme owner |
For as long as is required to verify certification** Cannot be changed |
||
| Exam Results | The exam score and pass/fail status |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External scheme owner |
For as long as is required to verify certification** Can only be changed by APMG in the event of a successful appeal |
||
| Exam Certificate (if candidate passes exam) | Digital certificates (for exams sat prior to 2021) |
Contractual fulfilment (art 6 (1) (b)) |
APMG | None |
For as long as is required to verify certification** Cannot be changed |
||
|
E-certificate and digital badge (if candidate passes exam) |
Link to claim digital badge and e-certificate |
Contractual fulfilment (art 6 (1) (b)) |
APMG | External badge provider (only if claimed by the data subject) |
For as long as is required to verify certification** Cannot be changed |
||
| Medical Information | In support of adjustments or accommodations required, due to medical reasons, during the exam | Legal obligation (art 6.(1) (c) and art 9(2)(e) substantial public interest (condition 6 of the DPA 2018 Part 2 Schedule1)) | Training Company, or data subject for public exams | None | 7 months from the certification decision date to align with our appeals period | ||
| Transactional information | Parent, guardian, carer (responsible adult) | Name* | Evidence of consent to process data of children under the aged of 13-16 | Consent (art 6 (1) (a)) | Training Company | None | 5 years to provide evidence of consent until all ages reach 18*** |
| Service/ product development | Candidate | Feedback on services provided | For research purposes and to improve the services we provide | Consent (art 6.(1) (a)) | Candidate | Only aggregated anonymised data shared | 6 months, after which it is anonymised |
*mandatory field
**unless the candidate exercises their right to erasure, however this does void their certification(s).
***if a parent, guardian or carer withdraws consent for us to process the personal data of a child under the agree of 16, we will stop processing and will be unable to verify the certification.
Note 1:- The data is only shared with an external proctor if the candidate sits an online proctored exam, and the data is only shared with external scheme owners if the exam sat is owned by an external scheme owner, in accordance with the table in section 10.
Note 2:- If the candidate is under the age of 16 they do not receive a digital badge and their data is not shared with an external badge provider. We do not publish their data on the Successful Candidate Register and we also do not send marketing materials to under 16’s so their marketing preference is automatically defaulted to not receive marketing.
For schemes that are course only and have no exam, course details will be reported to APMG via an online form, for the purpose of invoicing, and may include personal data. This information will be stored securely for 7 years
If you have attended a course only
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transactional information | Course only delegates | Name, email address, | To invoice for training courses attended | Legitimate interests (art 6.(1) (f)) | Training provider | None | 7 Years |
If you have made a purchase from the APMG Store
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transaction information | APMG Store customers | Name, email address, phone number | To deliver the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | Courier companies | Until you delete your account |
| APMG Store customers | Payment card details | To charge for the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | Third party payment company | Not retained by APMG | |
| APMG Store customers | Name, email address, phone number | To provide a receipt for the product purchased | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | 7 years |
If you are a user of one of our online portals
| Purpose of Collection | Data Category | Data Collected | Purpose for Collection | Lawful basis for processing | Provided by | Data Shared with third parties? | Retention Period |
|---|---|---|---|---|---|---|---|
| Transaction information | CDCAT Portal Users | Name, email address, phone number | To provide access to the tool | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | For as long as is required to provide the service |
| CDCAT Assessors | Name, email address, company | To provide access to the tool to conduct assessments | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | For as long as is required to provide the service | |
| CDCAT Assessments | Name, company* | To conduct assessments | Contractual fulfilment (art 6.(1) (b)) | Assessors | None | For as long as is required to provide the service | |
| Transaction information | 5CS Portal | Name, email address, username, password | To provide access to the tool | Contractual fulfilment (art 6.(1) (b)) | Data subject | None | 90 days from licence termination |
| 5CS Portal | Time zone | To improve collaboration as user time zone will be shown for scheduling purposes | Legitimate interests (art 6.(1) (f)) | Data subject | None | 90 days from licence termination | |
| 5CS Portal | User profile picture | To improve collaboration of users | Consent (art 6.(1) (a)) | Data subject | None | 90 days from licence termination |
12. 自动化决策的使用
APMG在评阅考生试题答案时采用自动化决策系统。对于线上及纸质考试,试卷either直接由线上考试门户评分,或将答题纸扫描后由我们的考试系统进行评阅。临时成绩将在APMG正式发布前提供给考生。评分算法为每道正确答案得一分,及格或不及格的结果由各产品的最低及格分数决定,具体分数可在各产品页面上查阅。考生可直接联系APMG表达意见并对结果提出异议,申请由人工对其考试答案进行手动评阅。或者,若考生曾通过我们旗下的培训机构参加培训,其培训机构可代其向APMG提出此申请。收到申请后,APMG将对试卷进行人工评阅并作出裁定。APMG人工评阅后的裁定为最终结果。
13. 安全
一旦我们不再需要相关信息,我们会以安全的方式将其销毁。我们采用符合行业标准的技术、组织及管理措施,保护我们的服务免受未经授权或非法的访问、处理,以及防止信息意外丢失、被盗、泄露、复制、篡改、销毁或损坏。尽管如此,我们无法保证您的信息传输始终处于安全状态,也无法保证未经授权的第三方绝对无法突破我们或我们的服务提供商所采取的安全措施。您不应与任何人共享您的用户名、密码或账户的其他安全信息。如果您有理由认为您与我们的互动已不再安全(例如,您认为您在我们处的账户安全已遭到损害),请立即按照下文第15条的详细说明与我们联系。
14. 如果我选择不向您提供我的个人信息,会怎样?
如果个人信息是根据您与APMG之间的合同或通过我们的业务合作伙伴向您提供商品或服务所必需的,那么如果您不向我们提供您的个人信息,我们将无法签订该合同或提供相关服务或商品。
15. 控制您的个人信息
如果您已同意接收我们的通讯,或目前正在接收与我们产品或服务相关的资料,您可随时联系我们,要求我们停止向您发送此类资料。
我们不会向第三方出售、分发或出租您的个人信息。
APMG International 是 The APM Group Limited 的子公司。您可根据 GDPR 要求查阅我们所持有的您的个人信息详情。如需获取我们所持有的您的相关信息副本,请通过 dataprivacy@apmgroup.co.uk 联系我们的数据保护官,或致函:
F.A.O. Data Protection Officer
APM Group Ltd
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG
16. 您的权利
APMG将尊重您对个人数据所享有的法律权利。
以下是您依法享有的权利,以及APMG为保护这些权利所采取的措施:
| 法律权利 | APMG为保护您的权利所采取的措施 | ||
|---|---|---|---|
| 知情权 | APMG发布本隐私声明,旨在向您说明我们如何处理您的个人信息。我们致力于以透明的方式使用您的数据。 | ||
| 访问权 | 您有权访问您的个人信息。如需获取APMG所持有的关于您的个人信息副本,请联系APMG数据保护专员:dataprivacy@apmgroup.co.uk | ||
| 更正权 | 若APMG所持有的您的信息不准确或不完整,您有权要求我们予以更正。如该数据已在您同意或因法律原因的情况下转交给第三方,我们还须要求该第三方同步更正相关数据。请通过以下方式联系我们:dataprivacy@apmgroup.co.uk。若您在我们的考生门户拥有账户,您也可以登录个人资料页面更新您的个人信息。 | ||
| 删除权 |
此权利有时被称为"被遗忘权"。如果您希望APMG删除您的所有个人数据,且我们没有继续处理和保留该数据的法律依据,请通过以下方式联系我们:dataprivacy@apmgroup.co.uk 请注意,行使此权利可能会影响对您资质的核实。
|
||
| 限制处理权 | 您有权要求APMG限制对您数据的处理方式。这意味着我们可以存储该数据,但不得进一步处理。我们仅保留必要的数据,以确保在未来遵守您的请求。如需限制对您数据的处理,请联系:dataprivacy@apmgroup.co.uk | ||
| 数据可携权 | APMG必须允许您以安全可靠的方式获取并重新使用您的个人数据,用于您自己在不同服务间的目的,且不影响数据的可用性。如需了解如何将您的数据迁移至其他地方,请联系:dataprivacy@apmgroup.co.uk。此权利仅适用于您作为数据主体向我们(作为数据控制者)提供的个人数据,且该数据须基于您的同意或履行合同的目的而由我们持有。 | ||
| 反对权 | 即使APMG对您数据的处理基于我们的合法利益、行使官方Authority、直接营销(包括数据汇总)或统计目的,您仍有权提出反对。如需提出反对,请联系:dataprivacy@apmgroup.co.uk | ||
| 撤回同意权 | 若您曾同意我们处理您的数据,但之后改变主意,您有权随时撤回同意,APMG必须停止处理您的数据。如需撤回同意,请联系:dataprivacy@apmgroup.co.uk。撤回同意不影响撤回前我们依据您同意所进行的任何处理活动的合法性,也不影响我们基于其他合法处理依据(非同意)对您个人信息的处理。 | ||
| 向APMG投诉的权利 | 如果您认为本隐私政策未能提供足够的信息,或您认为APMG未按照英国数据保护法律处理您的数据,您有权向APMG投诉。您可以通过以下方式向我们的数据保护官提交投诉:dataprivacy@apmgroup.co.uk | ||
| 向监管机构投诉的权利 | 如果您认为APMG未在合理时间内回应您的请求以解决问题,您有权向ICO投诉。其联系方式可在此处查阅:ICO Concerns。欧洲经济区、瑞士及部分非欧洲国家(包括美国和加拿大)的数据保护机构联系方式也可查询获取。 | ||
如果您对本隐私声明或APMG的任何数据处理活动有任何疑问、顾虑或反馈意见,请通过以下方式联系数据保护官:dataprivacy@apmgroup.co.uk
17. 链接至其他网站
我们的网站和在线平台可能包含指向其他网站的链接。匿名访问或会话信息可能会被传递至其他网站,用于上述网络使用信息的相关目的。这些信息均无法与网站的个人用户相关联。其他网站的运营商可能会向您收集信息,并依据其自身的条款与条件及隐私政策使用这些信息。
本隐私声明仅适用于我们的网站和在线平台。我们对其他任何网站的隐私实践概不负责。当您离开本网站时,请务必注意这一点,我们建议您阅读所有访问网站的隐私声明。
18. 我们隐私政策的变更
我们可能会不时更新或修订本隐私政策,以遵守法律或满足我们不断变化的业务需求。当我们更新隐私声明时,我们将采取适当措施通知您,通知方式将与所作变更的重要程度相符。任何更新或修订均将发布在 APMG International 网站上。我们鼓励您定期访问 APMG International 网站,以获取有关我们隐私实践的最新信息。如您继续访问我们的网站和/或在线平台,或使用我们的任何服务,您的访问和使用将受这些更新和修订的约束。