ITC First is committed to the fair and transparent processing of personal data and data security. This privacy policy sets out how we will manage the personal data, which you provide to us in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
This policy contains important information about who we are, how and why we collect, store, use and share personal data and your rights in relation to your personal data.
ITC First is the trading name of ITC First Aid Ltd (company number - 05750596). Our address is Tranquility House, 3rd Floor, Harbour Walk, Hartlepool, TS240UX.
For the purposes of the GDPR, ITC First is the ‘controller’ of the personal data you provide to us.
If you have any queries about this Policy, the way in which ITC First processes personal data, or about exercising any of your rights, please send an email to mail@itcfirst.org.ukor write to CEO, ITC First, Tranquility House, 3rd Floor, Harbour Walk, Hartlepool, TS240UX.
ITC First owns and operates www.itcfirst.org.uk. This Policy, together with our Website terms of use and any other documents referred to in them, sets out the basis on which ITC First processes personal data.
Personal data we collect
We may collect and process the following personal data:
Information provided to us, When you:
We may collect your name, e-mail address, postal address and telephone number.
Information we collect about you
If you visit our Website, www.itcfirst.org.uk, we may automatically collect the following information:
Information we receive from other sources.
If you are a tutor, assessor, or learner, we may also receive information about you from your centre, training provider, or employer when they register to receive products and/or services from us.
Information about other individuals
If you provide information to us about any person other than yourself, such as employees or your suppliers, you must ensure that they have given their permission for you to disclose it to us, they understand how their information will be used, and for you to allow us to use it.
Sensitive personal data
In certain limited cases, we may collect certain sensitive personal data from you (e.g. Information about your racial or ethnic origin and physical or mental health). We will only do this on the basis of your consent.
How ITC First uses your personal data
Legitimate interests
Where this is necessary for purposes, which are in our, or our Centres legitimate interests. These interests are:
NOTE: All individuals have the right to object to the processing of your personal data on the basis of legitimate interests as set out below, under the heading 'Your rights'.
Contract performance (contractual obligations)
We may use your personal data to fulfil a contract, or take steps linked to a contract:
Consent
Where you have given your express consent to receive marketing communications, we may use your personal data to send you newsletters, surveys, information about our awards and events related to products and services offered by ITC First which may be of interest to you,
Where required by law: We may also process your personal data if required to by law, including responding to requests by government or law enforcement authorities, or for the prevention of crime or fraud.
Who do we share your personal data with?
We take all practical steps to ensure that ITC First staff protects your personal data and that they are aware of their information security obligations. Access to your personal data is limited to those who have a genuine operational need to know it.
We may also share your personal data with legitimate professionals outwith ITC First including:
How long does ITC First keep your personal data?
Where there is an agreement between us, we will retain your personal data for the duration of the agreement, and for a period of five years following its termination or expiry, to ensure we are able to comply with any legal, audit and other regulatory requirements, or any orders from courts or competent authorities.
Where you given consent to marketing communications, you can change your preferences or unsubscribe at any time by clicking the unsubscribe link in an email from us.
Where we store your personal data and how we protect it.
We take appropriate steps to protect your personal data from loss or destruction. We also have a procedure in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Where you have a username or password (or other identification information), which enables you to access ITC First services or parts of our Website and/or Web Office, you are responsible for keeping this password confidential. Please do not to share a password with anyone, including ITC First.
Unfortunately, the transmission of information via the Internet is not completely secure. However we will always strive to protect your personal data. We cannot guarantee the security of your personal data transmitted to our Website; any transmission is at the your own risk. Once we have received your personal data, we will use strict procedures and security features to prevent unauthorised access.
Your rights
Under the GDPR, you have rights with respect to our use of your personal data:
The Right to: |
|
Access
| You have the right to request a copy of the personal data that we hold about you by contacting us at the email or postal address given below. All requests must be accompanied by information, which allows us to verify your identity (ID). We will respond to your request within one calendar month. Please note that there are exceptions to this right. We may be unable to make all information available to you if, for example, making the information available to you would reveal personal data about another person, if we are legally prevented from disclosing information, or if your request is excessive. |
Rectification
| We strive to keep your personal data accurate and complete. Please contact us using the contact details provided to let us know if any of your personal data is not accurate or changes, so that we can keep your personal data up-to-date. |
Erasure
| You have the right to request the deletion of your personal data. Instances of erasure may include, personal data no longer necessary for the purposes for which they were collected, where your consent to processing is withdrawn, where there is no legitimate interest for us to continue to process your personal data, or your personal data has been processed unlawfully. |
Object
| In certain circumstances, you have the right to object to the processing of your personal data where, for example, your personal data is being processed on the basis of legitimate interests and there is no overriding legitimate interest for us to continue to process your personal data. If you would like to object to the processing of your personal data, please contact us using the contact details provided below. |
Restrict processing
| In certain circumstances, you have the right to request that we restrict the processing of your personal data. This right arises where, for example, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests, or the processing is unlawful and you elect that processing is restricted rather than deleted. |
Data portability
| In certain circumstances, you have the right to request that some of your personal data is provided to you, or to another data controller, in a commonly used, machine-readable (electronic) format. |
For any request associated with the rights described above, please contact ITC using the details below.
NOTE: GDPR sets out exceptions to these rights. If we are unable to comply with your request due to an exception we will explain this to you in our response.
Contact us
If you have any queries about this Policy, the way in which ITC First processes personal data, or about exercising any of your rights, please send an email to mail@itcfirst.org.uk or write to CEO, ITC First, Tranquility House, 3rd Floor, Harbour Walk, Hartlepool, TS240UX.
Complaints
If you believe that your data protection rights may have been breached, please first contact ITC First using the details above, however if we have been unable to resolve your concern, you may submit a complaint to the Information Commissioners Office. Please visit https://ico.org.uk/concerns/ for more information.
Associated Documents
Changes to Policy
Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, any individuals concerned will be notified by e-mail.
