Data Controller

The data controller is:

ASD Arts and Education Ltd
CN. 11249692

1. Why we collect and use your personal data

• To enable you to access the resources on this site and to complete courses.
• To allow specified organisations or individuals to access your training records. To monitor usage and improve the provision of services.
• To ensure access to particular resources is restricted to those entitled to use them.
• To contact you with further information on our services if you have signed up for marketing emails.

2. The categories of data we collect (including cookies)

When you use this site, information in the following categories is collected:

• Required Personal Data
• Optional Personal Data
• Technical Data Usage Data
• Cookies

Two cookies are used by this site: The MOODLESESSION cookie is essential. It enables your browser to provide continuity and to maintain your login from page to page. When you log out or close the browser this cookie is destroyed from your browser and on the server. The MOODLEID cookie is optional. It remembers your username within the browser so that when you return to this site the username field on the login page will be already filled out for you. No other cookies are used by this site.

3. Details of the data collected and the lawful basis for using your information

Category of Data	Type of Data	Lawful basis for processing
Personal Data	Your name Your email address Your moodle username	Consent
Course Participation Data	Your progress and time taken to go through any of the courses on the site is recorded along with answers to quizzes and longer reflections.	Legitimate Interest
Optional Personal Data	• You may opt to add information to your profile. Special category data is optional and is not required for you to use the resources. By entering this optional information, you are providing consent for it to be stored. You can delete it at any time.	Consent
Technical Data	• Browser type and version • Time zone setting & location • Operating systems of the devices used to access this site • IP address used to access this service Necessary for our legitimate interests (provision of administration and IT services, network security and to prevent fraud.)	Legitimate Interest
Usage Data	• Pages visited on this site • Interaction with resources on this site Necessary for our legitimate interests to analyse usage, troubleshooting and site optimisation)	Legitimate Interest

Aggregated Usage Data

Data about the use of the various courses is aggregated. This is not personal because it does not reveal your identity. It is used to inform the development of the site and help optimise the use of the site.

We use Google Analytics to provide an overview of usage data for reporting and monitoring purposes.

Legitimate Interest Assessment

We have a specific purpose with a defined benefit. To properly support our Statutory obligation to provide data subjects with access to online learning resources and record their participation. The processing is necessary to achieve the defined benefit. Technical and Usage Data needs to be collected to provide this service. Details of access to the site are stored for security, for troubleshooting and to improve the site. The purpose is balanced against, and does override the interests, rights and freedoms of data subjects. Since the processing of data is kept to a minimum and is only for the purpose of providing the data subjects with courses that they wish to use, the purpose, and our Legitimate Interest does override the interests, rights and freedoms of data subjects.

4. Who we collect from or share your information with

We collect basic personal information about you from the information you give us and from your participation in courses. We do not collect personal information about you from any other source.

This site provides access and links to different resource providers. We do not provide these sites with any information about you. Each of these will have their own privacy policy and you should read their privacy policies before providing them with your information.

5. Marketing

Information you provide when signing up to this service is not used for marketing purposes.

6. How long do we keep your information?

Course participation data is retained for a maximum period of 36 months after the date of completion.

Your profile information and training record remain on the site until you decide that you want to remove them.

7. Your rights

You have the following rights regarding your personal data:

• The right to be informed about any data we hold about you;
• The right to request a copy of your personal data which we hold about you;
• The right to request that we correct any personal data if it is found to be inaccurate or out of date;
• The right to request your personal data is erased where it is no longer necessary for us to retain such data;
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• The right to object to the processing of your personal data
• The right to obtain and reuse your personal data to move, copy or transfer it from one IT system to another
• To exercise these rights, please contact the Data Protection Team using the contact information provided below.

8. Queries, complaints or concerns

If you have any queries regarding this processing activity, please contact, in the first instance:

admin@asd-arts.co.uk

If you have any concerns or queries about how ASD Arts and Education Ltd handle your personal data, please contact the Data Protection Officer at:

simon@asd-arts.co.uk

You have the right to make a complaint at any time to the Information Commissioner at https://ico.org.uk/concerns/ or Information Commissioner's Office, Wycliffe House, Water Lane Wilmslow Cheshire SK9 5AF, Tel: 0303 123 1113 (local rate).