PRIVACY POLICY 

Schülke & Mayr UK Limited (We) are committed to protecting and respecting the privacy of your personal data. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.  

This Privacy Policy explains how we handle your data on our E-learning Website (www.schuelke-learning.com) in accordance with Art. 13 of UK GDPR.  

Who are we? 

This Privacy Policy applies to this E-learning Website (www.schuelke-learning.com).  The controller of your personal data collected according to Art. 4 (7) UK GDPR is Schulke & Mayr UK Limited (CRN: 2987168) whose registered office is at Cygnet House, 1 Jenkin Road, Meadowhall, Sheffield, S9 1AT. For further contact information, please also see our imprint < https://www.schuelke.com/gb-en/imprint.php>. 

Usage Data 

When you visit our E-learning Website, our web server temporarily evaluates usage data for statistical purposes in order to improve the quality of our E-learning Website. This data consists of the following data categories: 

• ● the name and web address of the requested content 
• ● the date and time of the query 
• ● of the transferred data volume 
• ● the access status (content transferred, content not found) 
• ● the description of the used web browser and operating system 
• ● the referral link, which indicates from which page you reached ours 
• ● the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established. 

The above-mentioned log data will only be evaluated anonymously. 

Storage of IP Address for Security Purposes 

We store the complete IP address transmitted by your web browser for a period of seven days in the interest of detecting, limiting and eliminating attacks on our web pages. After this period, we delete or anonymize the IP address.  The legal basis for this processing is Art. 6(1)(f) of the UK GDPR.    
 

Data Security 

We take technical and organisational measures to protect your data as comprehensively as possible from unwanted access. These measures include encryption procedures on our E-learning Website. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https:// .

Registration for an e-learning user account  

In order to participate in our e-learning courses, it is necessary to create a user account on this E-learning Website. A new registration requires the mandatory collection of the following personal and non-personal data:  

• ● First name
• ● Last name
• ● Position
• ● E-mail address
• ● Telephone number
• ● Company name
• ● Company address details. 

The legal basis for the data processing is our legitimate interest to be able to provide you with e-learning in an access-protected area according to Art. 6 (1) (f) UK GDPR. 

Further information is voluntary and will only be processed on the basis of your consent pursuant to Art. 6 (1) p. 1 lit a UK GDPR (for information on the right of withdrawal, see "Your rights as a data subject"). Passwords are stored in encrypted form using a cryptographic hash function and are therefore impossible to reconstruct, or at least very difficult to reconstruct with a very high computing effort. 

In order to ensure your proper registration, after your registration you will receive a confirmation via the E-mail you provided. After successful registration we permanently store the data you have provided in our system in accordance with the specifications described under "Storage period".  

Amending your user account 

In the “My Profile” area of your user account, you can change and add to your master data, activate and deactivate communication permission and change your password. 

Processing of user account data 

As part of the contractual use of the user account, the following data is generally processed: 

• ● Time and date of login access 
• ● Submitted feedback 
• ● Courses accessed 
• ● IP location 

When a user participates in a course, the following information is regularly collected and stored: 

• ● Time and date of access 
• ● Course progress 
• ● Course module test results 
• ● Number of course module test attempts 

This participation data is used to ensure that the user has viewed or edited all course content (e.g. slides, texts, module tests) before the participation status is set to "completed" and a participation certificate is generated. The certificate of attendance includes the name of the user, the name of the course, the completion date of the course, the user’s company name, the user’s job title, summary of learning content, and the aims and objectives of the course. If the user has added their professional registration number then this will appear on the certificate of attendance. 

The certificate of attendance will be made available to the user in the "User Certificates” area, where it can be downloaded for no longer than 1 year. Certificates are available to download for 1 year in respect of the obligation for some users to provide CPD evidence to organisational bodies and regulators. Please note that it is the user's responsibility to keep an accurate and complete record of any CPD and training that the user has carried out.

Data associated with a user account will be retained for the time the account is maintained. In the case of a longer inactivity of the user account exceeding 2 years, we will notify you by E-mail that your account is due for removal. In the case of no contact and no login to the account within 4 weeks, the account will be deleted. 

Cookies 

Our E-learning Website uses cookies to distinguish you from other users of our E-learning Website. This helps us to provide you with a good experience when you browse our E-learning Website and also allows us to improve our Website. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

Embedded Videos 

On this website (schuelke-learning.com), we embed videos that are not hosted on our servers. In order to ensure that accessing our websites containing embedded videos does not automatically lead to the download of third-party content, we only show locally hosted preview images of the videos as a first step. As a result, the third-party provider does not receive any information. 

Only after you click on the preview image, is content from the third-party provider downloaded. This provides the third party with information that you have accessed our site and with the usage data technically required for this purpose. Furthermore, the third party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to download content from the third-party provider. 

The embedding is based on your consent in accordance with Art. 6 (1) (1a) UK GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the UK, EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49(1)(a) UK GDPR. 

Recipients/ Data Processors 

We transfer your data to service providers who support us in the operation of our websites and related processes. These service providers are usually data processors within the meaning of Art. 28 UK GDPR. Our service providers are strictly bound by contracts and our instructions. Any processors who may not have been previously disclosed are listed below.  

Data Transfers  

Some of the companies we share your Personal Data with as described above are located outside of the UK. In order to grant sufficient protection of your Personal Data in this context, all data transfers above are covered under an appropriate legal transfer mechanism such as UK Adequacy Decisions or other such measures according to Art. 46 UK GDPR. 

Please note that the use of third-party content and functions may result in your data being processed outside the UK. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. 

Any sharing of your Personal Data with other entities within the Schulke & Mayr group or service providers will be made in accordance with applicable data protection laws and will be limited to the extent necessary. We have carefully selected these companies and continuously monitor their compliance with our instructions. These companies are contractually prohibited from using your Personal Data for any other purposes than those described in this Privacy Policy. The legal basis for our sharing of your Personal Data with such companies is according to Art. 28(1) UK GDPR, Art 26(1) UK GDPR or alternatively our legitimate interests in commissioning those companies with the services described above (Art. 6(1)(f) UK GDPR).  

We may also be required to disclose your Personal Data to government or law enforcement officials in response to a lawful request by a public authority or if we have to do so to comply with a legal obligation, including to meet national security or law enforcement requirements according to Art. 6(1)(c) UK GDPR. We can also disclose your information in order to pursue our legitimate interest in applying or enforcing our terms and conditions or in responding to any claims, in protecting our rights or the rights of a third party, in protecting the safety of any person or in preventing any illegal activity (including for the purposes of fraud protection and credit risk reduction) according to Art. 6(1)(f) UK GDPR.  

If required under applicable data protection laws, we will collect your prior consent before sharing your Personal Data with other companies. In such cases, the legal basis is Art. 6(1)(a) UK GDPR.  

Your rights as a data subject 

You have the following rights:  

• ● Right of access (Art. 15 UK GDPR): You have the right to request confirmation as to whether we process your Personal Data and where that is the case, to request access to the Personal Data we hold about you.  
• ● Right to rectification (Art. 16 UK GDPR): You have the right to request the correction of inaccurate Personal Data.  
• ● Right to erasure (Art. 17 UK GDPR): You have the right to request erasure of Personal Data without undue delay under certain circumstances, e.g., if your Personal Data is no longer necessary for the purposes for which it was collected or if you withdraw consent on which our processing is based according to Art. 6(1)(a) UK GDPR and where there is no other legal ground for processing.  
• ● Right to restriction of processing (Art. 18 UK GDPR): You have the right to request us to restrict the processing of your Personal Data under certain circumstances, e.g., if you think that the Personal Data we process about you is incorrect or unlawful.  
• ● Right to data portability (Art. 20 UK GDPR): Under certain circumstances, you have the right to receive your Personal Data you have provided us with, in a structured, commonly used and machine-readable format and you have the right to transmit that information to another controller without hindrance or ask us to do so.  
• ● Right to object (Art. 21 UK GDPR):  

You have the right to object to the processing of your Personal Data under certain circumstances, in particular if we process your Personal Data on the legal basis of legitimate interests (Art. 6(1)(f) UK GDPR) or if we use your Personal Data for marketing purposes. 

You can assert your abovementioned rights by contacting us at the contact details stated above in ‘Who are we’. 

Right To Lodge Complaint before the Data Protection authority  

You have the right to lodge a complaint with the Information Commissioner if you believe that the processing of your personal data infringes applicable data protection laws. 

Automated individual decision making   

We do not use your Personal Data to make decisions with legal or similar effects for you based on the automated processing of your Personal Data only.  

 
Contact details of our data protection officer 

Our external data protection officer is available to provide further information on data protection.  

FIRST PRIVACY GmbH 
Konsul-Smidt-Straße 88 
28217 Bremen 
Web: www.first-privacy.com 
E-Mail: office@first-privacy.com 

When contacting our data protection officer, please specify the name of the company, stated in our Company Imprint.