What data do we process and who is it shared with? Personal data submitted on the CTI website, either when downloading a module taster or when registering to purchase a module/s is retained and used only to provide information requested or information that we feel is of interest to that individual.
How can the contact data we hold be viewed, amended or removed? A request for your contact data to be viewed, amended or removed can be made at any time by emailing firstname.lastname@example.org. Where a request to remove data is received, such data will usually be removed within three working days but will always be removed within one month of such written request being received.
What data do we retain and what data do we remove? Contact data and evidence of modules having been completed will be deleted five years from date of initial registration. As above, if a request is received for personal data to be deleted this will usually be removed within three working days but will always be removed within one month of such written request being received.
What process do we have to secure disposal of personal data? Once a request has been made to remove contact data, or once five years has passed since initial registration, removal of data will be carried out by the Training Manager in the timescales noted above. A written process outlining how data is deleted is available on request from email@example.com
It is the responsibility of both the Chief Executive and Training Manager to ensure GDPR compliance and in case of query, contact firstname.lastname@example.org in the first instance.
For the purposes of GDPR, our lawful basis for processing your data is that “the processing is necessary for your legitimate interests” as defined in clause 6(1)(f) of the legislation.