Tuesday, May 15, 2018

Privacy update- 8 individual rights under GDPR and how is TrackTest addressing them

As you may have heard from your other web applications, new data protection laws are being launched all over the world (including GDPR in Europe). To keep pace with these new laws, TrackTest is updating its privacy policy effective May 25, 2018. Among the other things, the privacy policy specifies the differences if you use TrackTest as an individual user or if you take English tests through an organisation (typically your employer or school).

The data protection rights for individuals are defined by Europe's General Data Protection Regulation (GDPR). Below, you can find the simplified version how these eight rules are addressed by TrackTest for individual users, i.e. for users who access our products directly, not via other organisation (partner, employer, recruiter or school).
For more details, take a look at the revised Privacy Policy here.

1. The right to be informed
2. The right of access  

What does it mean: You should know what information is held about you and how it is processed.

TrackTest: We collect only information necessary for the purpose of providing the English assessment and English certificates. E-mail address is required for the situations when you forget your password and want to reset it. First and last name is needed for the certificate. We do not share this information without your consent.

3. The right of rectification 

What does it mean: You are entitled to have personal data rectified if it is inaccurate or incomplete.

TrackTest: You are asked to provide accurate and current information on all registration forms. You are allowed to correct the information via Edit profile or via our support. Corrections of typos are accepted automatically, we might require some proof or further verification for more significant changes (e.g. change of name in the certificate, etc.) 

4. The right to erasure- also known as 'the right to be forgotten'
5. The right to restrict processing

What does it mean: This refers to an individual's right to have their personal data deleted or removed without the need for a specific reason as to why they wish to discontinue.

TrackTest: You can delete your account in the Edit Profile page. After deletion, all your account information is deleted, test results and certificates are annulled. 

6. The right to data portability

What does it mean: This allows individuals to retain and reuse their personal data for their own purpose.

TrackTest: All your personal data is accessible and downloadable from your account also after the licence expiration. 

7. The right to object

What does it mean: In certain circumstances, individuals are entitled to object to their personal data being used. This includes if a company uses personal data for the purpose of direct marketing, scientific and historical research, or for the performance of a task in the public interest.

TrackTest does not use the personal data for the purposes listed above. We might send you an informative e-mail with the important product updates, usage tips and offers from TrackTest (max. 2-3 times per year) if you subscribed. You can unsubscribe anytime from your profile or from the e-mail.  

8. Rights of automated decision making and profiling

TrackTest: Not applicable, TrackTest do not do the profiling.

Note: All of above is applicable to the individual users of our application which are not attributed to any organisation, i.e. where TrackTest is a controller of data and you pay to TrackTect directly for the licence.

In the cases where TrackTest is processing the assessment on behalf of another organisation, you may need to contact your organisation with further inquiries about your rights mentioned above. They might differ because of your other arrangements with the organisation.
The access via organisation is clearly highlighted with their logo and name in the registration/login pages and also in the user account. If you have any further questions, you may contact us.