MYDAS DATA PROTECTION STATEMENT
MYDAS EDUCATION & TRAINING CONSULTANCY LTD
DATA PROTECTION STATEMENT
We are committed to observing the requirements of fair processing within current data protection legislation. While MYDAS ETC will not share your data with any external agencies or third parties for marketing purposes, we do have a duty to report on request to the Information Commissioners Office (ICO) and upon request (by law or legislation) based on public interest.
YOUR INFORMATION AND PRIVACY
Terms of Usage (For the website)
Welcome to our website. If you continue to browse and use this website you are agreeing to comply with and be bound by the following terms and conditions of usage: Privacy Policy&Cookies Use
Privacy PolicyPage
Mydas Education and Training (UK) Consultancy LTD has strict rules and guidance on the use of your data.
Cookies Use Information Page
How we use cookies.
Mydas Education and Training (and sister sites)
Privacy & Policy Content
Last updated May 2020.
Privacy and Cookie Policy
Our Education and Training Consultancy takes its duty to process your personal data seriously. This policy explains how we collect, manage, use and protect your personal data.
(1) Introduction
1.1 This policy references the MYDAS Education and Training (MydasETC, we, us, our), a registered charity (registration no: 12388178) and company limited by guarantee. It also includes our subsidiary company, MYDAS Tutors and The Online Skill School.
1.2 The MydasETCis privately incorporated sector-owned workforce development body for the education and training sector. Our mission is to support the continuing transformation of our country’s technical and vocational education system by ensuring the sector has quality support staff, teachers, tutors, assessors and leaders. We work to develop a cordial working relationship with our stakeholders by improving the standard of education through system-friendly support services and ICT resource interventions. Our approach is to assist schools and colleges (including families) to meet their areas of critical need through staff support services, after-school programme and more.This translates to ever-improving learner outcomes, a sustained career in the education sector, a stronger economyand a better society.More information about us can be found on the MYDASETC website.
1.3 This Privacy Policy (together with our Terms of Usage) sets out the basis on which we may process your personal data and information. MYDASETC is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this Privacy Policy.
1.4 The MYDASETC may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
1.5 Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting our sites, you are accepting and consenting to the practices described in this Privacy Policy.
(2) What personal data we collect:
2.1 We may process personal data that you provide to us directly (for example, through the websites that we operate, correspondence, phone, email, social media etc), via third parties who you have given permission to pass on your information, and from publicly available sources or otherwise.
2.2 Data provided by yourself may include:
• at the time of registering to use an MYDASETC owned site; booking onto our schools support services, staff recruitment or private tuition programmes
• subscribing to our newsletters and communications; joining or renewing your contract withMYDASETC, subscribing to marketing or programme updates (including through Mydas Tutors); when updating any of the information provided at the time of registering; accepting cookies on an MYDASETC owned site
• at the time of subscribing to our services or posting material to our sites; if you complete any surveys that we may invite you to participate in; interacting with social media accounts; and in connection with your other communications with us
• through attendance registers at any of our events, programmes or courses, including those run by third parties
• as a decision maker within an organisation
• as a supplier of services.
2.3 The information you give us may include, but is not limited to, your name, age, address, postcode, email address, phone number, gender, ethnicity, employer, affiliated organisations (for example, professional body), job details, related financial details (for example bank/account and debit/credit card details related to a specific financial transaction), enhanced DBS certificate and personal description. For some purposes, additional requirements may be needed, such as criminal convictions (for example, should you apply for Qualified Teacher Learning and Skills status or accessibility requirements for courses).
2.4 At the time of providing this personal information we will be clear of the purpose it is being collected, how you can subsequently ask for your data to be amended and how you can ask for it to be deleted.
2.5 We may also collect and process technical information about your computer, including (where available) your Internet Protocol address, login information, operating system and browser type and version, for system administration purposes, Site optimisation and to report aggregate information to other organisations (including our financiers). When reporting to other organisations, this is statistical data about the browsing actions and patterns of usage of our sites, and does not (of itself) identify any individual by name. For more information on this please refer to our Cookie Policy below.
(3) Our ‘lawful basis’ for collecting information
3.1 We have a number of legal reasons (or the ‘lawful basis’) that mean we can use (or ‘process’) your personal information, including consent, contractual, legitimate interest and public task (there are six in total). These are outlined in the following sections. Sometimes more than one lawful basis will apply when we process your personal data. You can find out more about this from the by visiting the ICO website.
3.2 Legitimate interest: means we can process your personal information if: we have a genuine and legitimate reason; we are not harming any of your rights and interests; and you would not be surprised or likely to object to receiving the communication.
3.3 We will process the personal information you have supplied to us to conduct and manage our business to enable us to give you the most appropriate marketing, information, service and products, and provide the best and most secure experience. These are what we consider to be our ‘Legitimate Interests’. When processing your data in this way, we will also carefully consider and balance any potential impact on you and your rights.
3.4 Some typical examples of when we might use this approach are for preventing fraud, recording our reach and impact, direct marketing (including providing information regarding our products and services, where sought), promoting resources or materials in areas you have expressed interest, maintaining the security of our system, data analytics, enhancing, modifying or improving our services, gaining insights and understanding journeys related to usage of our services and sites, identifying usage trends and determining the effectiveness of our campaigns.
3.5 Consent: means we can process your personal information if consent can be freely given and you have real choice and control over how the we use your data. You must be able to give your consent through opting in and we must provide you with a clear explanation of why we want your data and what we’ll do with it. MYDASETC seeks consent from individuals for example to receive our regular newsletter.
3.6 Contractual: means we can process your personal data to fulfil our current or planned contractual obligations with you. For example, we will process personal data as part of our tendering process with bidding and contracted organisations (our ‘delivery partners’ or suppliers). We will also process the personal data of individuals who register on a course, admissionor recruitment drive through MYDASETC Forms, using this basis.
3.7 Public task: means we can process your personal data where we have ‘official authority’ or are performing a task which is in the public interest (set out in law). As part of our Department for Education grant and contractual funding we are required to meet a number of targets, including evidencing the reach and impact of support programmes, such as the number of individuals who attended a course. We will store and share personal information related to our work which may have been contracted or commissioned by our partner institutions, bodies, Office of Quality, the Department for Education or any other third party.
(4) How we use information about you
4.1 We require your personal data to understand your needs and provide you with a better service, and in particular for the following reasons:
• internal record keeping and audit purposes
• to provide details of and improve our products and services (including Mydas Tutors and The Online Skill School)
• to provide a tailored experience and customise the website according to your interests
• if you register with us, to provide you with information (including our newsletter, job notification) relating to similar services, programmes or projects that we may offer from time to time
• to advise of changes to our organisation or services.
4.2 The MYDASETC will not sell or lease your personal information to third parties and we will only share your data with third parties when:
• it is to provide you with a service or information including any benefits and services (including membership, if relevant) provided by third parties as set out above. The MYDASETC requires all such third-parties to treat your personal information as confidential and to comply with all applicable UK Data Protection Legislation (including the General Data Protection Regulation and Data Protection Act 2018) and Consumer Legislation in place at any given time, or
• you have given your explicit consent to do so, or
• where it is necessary to comply with an order from a statutory body which is empowered to require us to release your data; or to comply with any legal obligation; or to enforce or apply any of our terms which you are subject to; or to protect the rights, property, or safety of MYDASETC, our staff or others, or
• the MYDASETC is acquired by a third party, in which case personal data held by it will be one of the transferred assets.
4.3 The MYDASETC will complete due diligence on third parties we ask to process data on our behalf. As part of our contract management processes, we keep an overview of how your data is processed by third parties.
4.4 You can unsubscribe from marketing and communications from the MYDASETC at any time by using unsubscribe link on any marketing or communications or by contacting us by email at: info@mydasetc.co.uk.
4.5 We will stop processing and or delete your personal data if you ask us to. Please contact us at dataprotection@mydasetc.co.uk.
4.6 We retain your information as long as necessary for each purpose we use it. In some instances, we are obliged by law to keep it for a defined period and in this event, this negates your right to be forgotten. For example, we keep all financial transaction for seven years as outlined by the Companies Act 2006. At the end of specified retention periods we dispose of your data securely.
(5) Security
5.1 All information you provide to us is stored on secure servers. We adopt appropriate technical and organisational measures to protect the security of all personal data held by the MYDASETC, including sensitive personal data. All payment transactions are encrypted and stored securely.
5.2 Although the MYDASETC try to ensure your personal data is protected, we cannot guarantee the security of your data transmitted to our site; any transmission of data is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
5.3 The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing and/or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
(6) What are your rights
6.1 The General Data Protection Regulation (GDPR), gives everyone a number of rights. These are:
• Transparency over how we use your personal information (right to be informed).
• Request a copy of the information we hold about you, which will be provided to you within one month (right of access).
• Update or amend the information we hold about you if it is wrong (right of rectification).
• Ask us to stop using your information (right to restrict processing).
• Ask us to remove your personal information from our records (right to be ‘forgotten’).
• Object “opt-out” to the processing of your information for marketing purposes (right to object).
• Obtain and reuse your personal data for your own purposes (right to data portability).
• Not be subject to a decision when it is based on automated processing (automated decision making and profiling).
6.2 If you would like to know more about your rights under the data protection law see the Information Commissioner’s Office website.
6.3 You can change the way you hear from us or withdraw your permission for us processing your personal data by contacting dataprotection@mydasetc.co.uk.
6.4 You have a right to access the personal data that is stored about you. Any person wishing to exercise this right should complete a Subject Access Request Form and send the completed form to dataprotection@mydasetc.co.uk. The form and further information can be found on the MYDASETC website.
6.5 For any other queries related to your individual rights you can contact dataprotection@mydasetc.co.uk.
6.6 You can complain to the UK regulator, the Information Commissioner’s Office, if you feel we are not acting fairly.
(7) Links to other sites
7.1 Our website may contain links to other websites. MYDASETC does not have any control over the content or security of other websites and cannot be responsible for your privacy and protection if you choose to visit these websites.
(8) Cookie Policy
8.1 It is important to the MYDASETC that our websites are easy to use, accessible and reliable. Small files, called cookies, place small amounts of information on your computer or other device used to access the internet, such as a mobile phone.
8.2 Cookies may be used on this site to help personalise your visit, to improve how you use the site and to record your online activity. This information cannot be used to identify you personally. You can disable cookies by adjusting your browser settings, but some functions of the site may not work correctly.
8.3 Specifically, the MYDASETC uses cookies to measure how people are using the website so that we can improve the capacity and overall user experience.
8.4 Google Analytics generates statistical and other information about website use by means of cookies (tags), which are stored on users’ computers not more than 30 minutes of you visiting our website pages. The information generated relating to our website is used to create reports about the use of the website. Google will store and use this information. Google’s privacy policy is available here.
8.5 In addition to Google Analytics, we also may use a range of other cookies, web beacons and flash cookies when relevant, these include, but are not limited to: Facebook Advertising, DoubleClick, Lotame, AppNexus, EXelate, MediaMath, TradeDEsk, Semasio,Eyeota, Hotjae, Bombora and Mouseflow.
8.6 It is usually possible to stop your browser accepting cookies, or to stop it accepting cookies from a particular website. All modern browsers allow you to change your cookie settings. You can usually find these settings in the ‘options’ or ‘preferences’ menu of your browser. To understand these settings, the following links may be helpful, or you can use the ‘Help’ option in your browser for more details.
8.7 The BBC website provides a user-friendly outline of cookies and how they work.
8.8 Please note the MYDASETC is not responsible for the content on other websites.
8.9 If content is shared through social media, you may be sent cookies from those sites. We do not control the settings of these cookies so do check third party sites for more information about the cookies they use and how to manage them.
(9) Contacting us and who to complain to
9.1 If you would like to talk through anything in this policy, find out more about your rights or obtain a copy of the information we hold about you, please contact us.
9.2 If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Lead who will investigate the matter. Contact details can be found below. Alternatively, you can complain directly to the Information Commissioner’s Office (ICO).
9.3 Our Data Protection Lead, Patrick Oni, can be contacted by writing to: MYDASETC, 157-197 Buckingham Palace Road, London SW1W 9SP; e-mailing dataprotection@MydasETC.co.uk; or calling 020 7340 8280.
Annex 1
1. The following are some examples of MYDASETC’s interests, outlining when and why we would use ‘legitimate interest’:
• Direct Marketing: We will send postal, text and e-marketing communications and marketing asks which further the aims and objectives of the MYDASETC and the Mydas Tutors or The Online Skill School. We will also make sure our marketing communications is relevant for you, tailored to your interests.
• Ordering online: In order for us to process an order, payment has to be taken and contact information collected, such as name, delivery address, email address and telephone number, provided.
• Your best interest: Processing your information to protect you against fraud when transacting on our website, and to ensure our websites and systems are secure.
• Personalisation: Where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our supporters.
• Analytics: To process your personal information for the purposes of customer analysis, assessment, profiling and direct marketing, on a personalised or aggregated basis, to help us with our activities and to provide you with the most relevant information as long as this does not harm any of your rights and interests. Please see our privacy policy above for further details.
• Research and evidence: To determine the effectiveness of our services and products, marketing and communications and to develop our products, services, systems and relationships with you.
• Due Diligence: We may need to conduct investigations on supporters, potential customers and business partners to determine if those companies and individuals have been involved or convicted of offences such as fraud, bribery and corruption.
We’ll also hold information about you so that we can respect your preferences for being contacted by us.
2. When we process your personal information for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Therefore, the MYDASETC’s needs do not automatically override your personal data rights (unless we have your consent or are otherwise required or permitted to by law).
