Your rights
You may request access to your record, correction of anything inaccurate, deletion of data that is no longer needed, restriction of processing, a portable copy of the data you supplied, and withdrawal of any consent you gave. You may also object to processing and complain to the data protection authority in your country.
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to withdraw consent
- Right to object
- Right to complain to a supervisory authority
Lawful basis by activity
Account and programme administration relies on the steps you take to enter into a learning arrangement with us. Optional communications rely on consent. Recording a campaign source relies on legitimate interest in answering your request through the right channel. Security logging relies on legitimate interest in protecting learners and partner data.
- Learning contract: performance of your application and account
- Communications: consent
- Campaign attribution: legitimate interest
- Security: legitimate interest
International transfers
Where an institutional deployment processes records outside your country, the deployment request states the processing preference and asks for explicit permission before cross-border processing is configured.
What cannot be erased
Evidence of an award or completion that was issued cannot be deleted without destroying its own proof value; such a record is restricted rather than erased, and it is not used for anything else. Legally required records are retained for the required period.
Breach response
Where a personal-data breach is likely to result in a high risk to individuals, affected parties and the relevant authority are informed without undue delay, and the incident, its effect and the remedy are recorded.
Automated decision-making
AIOT does not make decisions about your access to a programme on the basis of automated processing alone. Applications are reviewed by a person; where a system assists review, the reason and the human owner are stated.
How to exercise a right
Send the request from the email address on your account through the help library or your learner dashboard. Identity is confirmed before any record is released, and requests are answered within one calendar month.