Your Personal Data:

What we collect

ACO Technologies plc will be what’s known as the ‘Controller’ of the personal data you provide to us. This means they are responsible for the security of your data. We only collect basic personal data about you which does not include any special types of information but can include location based information – this will normally be your place of work and is only entered by you. Information will always include your name and email. Any other personal data stored by us will be provided by you and will only be with your consent.

Why we process personal information

Recital 47 of the GDPR allows for the processing of personal information for our legitimate business interests in terms of direct marketing. “Legitimate Interests” means the interests of our company in conducting and managing our business to enable us to offer you the best services and applicable products, and the most appropriate and secure experience.

For example, we have an interest in making sure our marketing is relevant for you and your organisation, so we may process your information to send you marketing that is tailored to your interests in your business. We believe this processing is in your interests as well.

When we process your personal information based on legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate business interests do not automatically override your interests. We will not use your Personal Data for activities where our interests are overridden by the impact on you.

Processing of this data for ‘unsolicited’ marketing communications is also regulated by Privacy and Electronic Communications Regulations (PECR) consequently we are careful to ensure our processes conform to those requirements.

Where information has been directly requested by you, PECR is not relevant although in our communications we will always say who we are, display our telephone number and provide contact address whenever appropriate.

For corporate subscribers it may be that in the first instance what is known as a ‘soft opt-in’ will have been triggered by you through an active expression of interest in Colab-cpd.co.uk. We will always seek to offer clear and unambiguous options thereafter to ensure you receive only relevant information to your interest.

What are your rights?

We only use data for marketing where you have provided appropriate consent, however you are entitled to withdraw that consent at any time.

PECR rules on consent, the soft opt-in and the right to opt-out, do not apply to electronic marketing messages sent by us to ‘corporate subscribers’. While you may receive a legitimate interest email from us based on a ‘soft opt-in’, we will always offer an easy and quick method to ‘opt out’.

If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted within one calendar month. If you wish to raise a complaint on how we have handled your personal data, you can request for us to investigate the matter.

Data Protection is taken very seriously by ACO Technologies PLC and should you have any enquiries in the first instance your first point of contact should be via email to mypersonaldata@colab-cpd.co.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).

How we use your information

We would like to use your name and email address to provide you with information specific to your areas of interest, this would include things like CPD presentation updates, training, sector/role specific articles and new product updates. Ongoing use of your data for these communications will depend on your opt in preferences.

Any information about you that we do hold is not shared with third parties and you can unsubscribe at any time via email: mypersonaldata@colab-cpd.co.uk

Storage of data

All the personal data we process is processed by our staff in the UK however for the purposes of IT hosting and maintenance this information is located on servers within the European Union and in the USA. No third parties have access to your personal data unless the law allows them to do so.

We have Data Protection processes in place to oversee the effective and secure processing of your personal data.

Data held in the USA is done so in partnership with a Processor that has successfully certified its adherence to the EU-US and/or Swiss-US Privacy Shield Framework, as administered by the U.S Privacy Shield Framework, as administered by the U.S. Department of Commerce and detailed at https://www.privacyshield.gov.

More information is available on request.

How long we keep your data

Personal data is stored for varying lengths depending on nature and purpose for which it was collected. We store personal data in line with any applicable statutory minimum periods, and then review it periodically (usually annually from the point of registration) to ensure it is still necessary to be retained for the purpose for which it was collected. In exceptional circumstances where there is a statutory maximum for which data can be retained, such as County Court Judgements we will delete accordingly on expiration.