Section 1 Introduction
1.1 Scope of the policy
This policy applies to all individuals who may have personal data stored with DNA Skills. Please read this Policy carefully, as it contains important information about what information DNA Skills collect, how and why it does so, how it processes and protects this data after collection, your rights in relation to your personal data and how to contact DNA Skills and/or the appropriate external authorities in the event that you wish to report a concern about the way in which the data has been processed.
Please note that the term 'apprentice' used in this policy refers to registered apprentices with DNA Skills who attend end-point assessment events.
This policy should be read alongside our organisational policies and procedures including:
1.2 Purpose of the policy
1.3 A shared responsibility
All staff and those who are involved in the processing of personal data will be made aware of this policy, its contents, and requirements.
1.4 Reviewing the policy
This policy will be reviewed annually or:
Section 2 What information do DNA Skills collect?
Under the terms of the GDPR DNA Skills is considered the ‘controller’ of data that individuals or companies provide us.
Information that DNA Skills may collect is listed below:
2.1 Personal Data
This includes information that apprentices will provide their training provider when they undertake an apprenticeship, for example:
2.2 Information from your relationship with DNA Skills or other organisations
When you become involved with DNA Skills this will result in some personal data being created, such as details of apprenticeships/training that have been undertaken. Personal data is also sometimes received about individuals from other organisations, such as, partner training providers/employers (for example, if you have completed a functional skills qualification with a different partner, and DNA Skills need that additional information as evidence of completion).
From time to time, DNA Skills may also use other organisations to help conduct research and analysis on personal data, in turn, resulting in new personal data being created.
2.3 Sensitive Personal Data
Information classified as ‘Sensitive Personal Data’ may be collected by DNA Skills, such as ethnicity or additional learning needs. This will only be carried out where DNA Skills have been asked to do so by official Government agencies, or where the information is needed for the assessment of additional educational support needs, or reasonable assessment adjustment.
2.4 Accidents or incidents
If an accident or incident occurs in one of the assessment locations or office, and/or involving one of DNA Skills employees, then formal records are required to kept (which may include sensitive personal data.
Section 3 How do DNA Skills collect personal information?
It is very important for individuals that are undertaking an EPA with DNA Skills to know that certain elements of their personal data will typically need to be shared with DNA Skills via their training provider or employer, to deliver the relevant service.
Wherever personal information is shared with DNA Skills by anyone other than the person whose information DNA Skills are collecting (the ‘data subject’), it is the responsibility of the third party to ensure that the data subject is fully aware that their information will be shared with DNA Skills and has obtained their consent for this to happen prior to their information being shared. In this context, DNA Skills is the ‘data processor’, rather than the controller. For example, a training provider/employer ensuring that an apprentice has consented to their personal information being shared with DNA Skills during their sign-up registration.
Section 4 What do DNA Skills use your personal information for?
DNA Skills only ever use personal data with your consent, or where it is necessary to:
By doing so it means that DNA Skills are keeping you safe from harm or for (or a third party’s) lawful interests, provided your rights do not override these. DNA Skills will only use your information for the purpose or purposes it was collected for.
4.1 End-Point Assessment Data
Personal information will be used to:
4.2 Administration Data
DNA Skills uses personal data for administrative purposes, and this includes:
4.3 Analysis and Research Data
DNA Skills may carry out research and analysis on the data that is held in the Creatiogreen platform, to determine success rates of end-point assessments, understand behaviours and identify patterns and trends.
To help ensure that communications are relevant and timely to customers DNA Skills profile them in terms of their interaction with the website and resources that are downloaded. This allows DNA Skills to keep information on preferences and send material that you are most likely to be interest in.
4.4 Marketing Data
DNA Skills uses personal data to communicate with people and to promote the organisation. This includes keeping you up to date with DNA Skills news and offerings.
Section 5 Who will DNA Skills share your personal data with?
DNA Skills will take all reasonable steps to ensure your personal data is protected and that you are made aware of the information and security obligations. DNA Skills limit access to your personal data to those who have a genuine business need to know it.
DNA Skills will never sell your personal information however, in some instances, data may be disclosed with:
Sometimes DNA Skills use third parties to process information on their behalf. If this is carried out, DNA Skills willrequire these third parties to comply strictly with all privacy guidelines.
When/if DNA Skills transfer your data, the following will apply:
Where personal data needs to be transferred to countries outside of the European Economic Area (‘EEA’), DNA Skillswill take appropriate steps to ensure your personal information is afforded the same level of protection as described in this Policy.
Section 6 How do DNA Skills protect and store your personal data?
DNA Skills uses a variety of physical and technical measures to keep your data safe and to prevent unauthorised access or sharing of your personal information.
Electronic data and databases are stored on secure computer systems, and DNA Skills control who has access to information using both physical and electronic means. Employees receive data protection training, and a set of detailed data protection procedures are required to be followed when handling personal data (see DNA Skills Data Protection & GDPR Policy).
DNA Skills ‘operations are based in the UK and data is stored within the European Economic Area (EEA). Personal data information will never be processed or stored outside of the EEA.
Section 7 What are your rights?
The GDPR outlines various rights that a data subject has with regard to their personal data. Please see a summary below:
If you wish to exercise any of these rights, or raise a data protection issue with DNA Skills, please find the appropriate contact details below.
Section 8 How long do DA Skills keep your data for?
DNA Skills retain data for as long as is required to fulfil ongoing regulatory, quality assurance and/or legal obligations. For example, apprentice achievement data will be retained beyond the end of a contract between DNA Skills and the apprentice’s employer and/or partner, in case it should be required during regulatory audits, complaint handling, appeals and/or legal proceedings. For these reasons DNA Skills will hold personal data that is essential, as described here, for a period of seven years.
Where you have opted into marketing communications, please note that you can update your preferences or unsubscribe at any time by emailing email@example.com.
How long DNA Skills keep information for depends on the information and what it is used for. For example, if you request not to be sent marketing emails, DNA Skills will stop storing your emails for marketing purposes (though a record of your preference will be stored, not to be emailed). DNA Skills continually review what information is held and will delete what is no longer required. DNA Skills never store payment card information.
Section 9 Data gathering permissions for apprentice under 18
As an End Point Assessment Organisation, DNA Skills regularly process the personal data relating to young people (under the age of 18) who undertake end-point assessments as per apprenticeship.
9.1 Information for Parents/guardians
If an apprentice is under 18 then DNA Skills will seek permission to record any audio-visual communications. DNA Skills take great care to ensure that individual’s rights are protected and respected in relation to their personal data, especially in the case of young people.
Section 10 Complaints
If you believe that your data protection rights may have been breached you can raise your concerns directly to firstname.lastname@example.org, with accompanying relevant evidence. If you are a user of the Creatiogreen platform, complaints can be raised directly through here using a Complaints Form’. However, if DNA Skills have been unable to resolve the situation to your satisfaction, you may lodge a complaint with the Information Commissioner’s Office.
Please visit https://ico.org.uk/concerns/ for more information on how to report a concern to the ICO.
Section 11 Contacts
Your contact for this policy
If you have any queries about the contents of the policy, please contact our DNA Skills EPA Team:
Telephone: 01344 944675
DNA Skills EPA Team
7 Lakeside Business Park
Title & Key Responsibilities
General Manager - Accountable for the strategic objectives of DNA Skills and its regulatory compliance. Ensures all policies are effectively implemented
Head of Quality & Compliance - Responsible Office and point of contact for regulatory bodies. Oversees the version control of policies
Head of Product & Assessment Development - Acting Deputy for Responsible Officer. Manages the development and life cycle of our products
Quality & Performance Manager - Responsible for the delivery of assessments and quality assurance processes
© 2021 All Rights Reserved