At GL Education Group Limited (“we”, “us”) we value the privacy of all our customers. We recognise that when you choose to provide us with information, you trust us to act in a responsible manner. We believe this information should only be used to help us provide you with a better service. We will only collect and use Personal Data in ways that are described in this privacy notice (“Notice”), and always in compliance with our obligations and your rights under the law.
This Notice applies to your use of our website and the services available at https://reports.testwise.net (TRS) Our website may provide links to third-party sites. Since we do not control those third-party sites and have no control over how your data is collected, stored and used by them, we advise you to review the privacy notices of such sites before providing your data to them.
GL Education Group Limited is a Limited Company registered in England and Wales under company number 02603456.
Registered address: 1st Floor, Vantage London, Great West Road, Brentford, TW8 9AG
Telephone number: +44 (0)20 8996 3369
Data Protection officer: Karl Oertel
Email address: email@example.com
In this Notice, reference to Data Protection Legislation means the Data Protection Act 2018, the General Data Protection Regulation (“the GDPR”), and the Privacy and Electronic Communications Regulations 2003.
We operate this website and its services for the benefit of schools, Local Education Authorities (LEAs) or similar organisations (“Other party”).
We have broken down the Notice below to cover the following different types of individuals whose Personal Data we collect and process under TRS.
Administrative User (“you”, “your”) - someone who uses TRS for or on behalf of a school or Other Party e.g. a member of staff of the school.
Student – a student who takes a paper-based test, the results of which can be accessed by Administrative Users on TRS.
What is Personal Data?
‘Personal Data’ is defined by the GDPR as: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
In simpler terms, Personal Data is any information about you that enables you to be identified. For example, this could be your name or contact details.
Data Controller/Data Processor
We use Personal Data relating to Administrative Users as detailed below. For the purpose of Data Protection Legislation, the data controller is GL Education Group Limited in relation to the Personal Data of Administrative Users.
We process Personal Data relating to Students as detailed below and we do this on behalf of the school or Other Party. For the purpose of Data Protection Legislation, the school or Other Party is the data controller and GL Education Group Limited is the data processor in relation to the Personal Data of the Student.
What is our lawful basis for using your Personal Data?
What Personal Data do we collect and how?
You may give us information when registering for or logging into TRS, using the services available via TRS, or by corresponding with us by phone, e-mail or otherwise in relation to your use of TRS and your account. Such information includes (but is not limited to) your name, address, e-mail address and phone number.
The following information may also be collected automatically when you visit TRS:
How do we use this Personal Data?
We use information held about Administrative Users in the following ways:
The Personal Data of a Student is information entered into the TRS by an Administrative User or as otherwise provided to us by the school or an Administrative User. We may receive Personal Data of a Student in a completed paper assessment which we receive from a school. Personal Data relating to a Student includes (but is not limited to), name, date of birth, age, unique pupil number, assessment results, gender, ethnicity, socio-economic information (for example, whether or not qualifying for free school meals) school and year group.
How do we use this Personal Data?
The Personal Data of Students is processed by us on behalf of the school or Other party and always as directed by them in order to:
Personal Data we receive from other sources
We may receive your Personal Data via other websites or services operated by us or the GL Education Group Limited. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site.
The cookies currently used by the TRS site are listed below:
Used by the website to ensure your login is retained whilst connected to the site.
Do we share Personal Data?
We may share User Personal Data with any member of our group, which means our subsidiaries, our ultimate holding company (GL Education Group) and its subsidiaries, only where necessary (pursuant to a contract, for the legitimate interest of our business such as providing a better service to our customers, or for legal reason) or where authorised by you.
We may share Administrative User Personal Data with selected third parties including IT support professionals. We ensure that they can only access the data that is necessary for them to provide the support service required by us.
We may share results of assessment with the LEA, or other similar organisation on whose behalf or under whose direction Users access and use TRS, where we are authorised to do so. We will always obtain the necessary consent before sharing Personal Data in this way.
If we sell, transfer, or merge parts of our business or assets, Personal Data may be transferred to a third party. Any new owner of our business may continue to use this Personal Data in the same way that we have used it, as specified in this Notice.
We may use information relating to Students and schools in anonymised format to produce reports that we produce and share with third parties. These reports would, for example, be comparable reports about the type of organisation (for example, type of school, % of students with different languages) and their performance. No Student or school would be identifiable in such reports.
Where do we store User Personal Data?
Personal Data that we collect from Users will not be stored at a destination outside the United Kingdom or the European Economic Area.
How to help us keep Personal Data secure
Where we have given you (or where you have chosen) a password which enables access to certain parts of TRS, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
How long do we keep Personal Data?
We keep Personal Data for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep Personal Data to comply with our legal and regulatory requirements.
What are your rights?
Under the Data Protection Legislation, you have the following rights:
Changes to this Notice
We may change this Notice from time to time. This may be necessary, for example, if the law changes or if we change our business practices in a way that affects how we collect or use your Personal Data.
Any changes will be made available on our website.
Questions, comments and requests regarding this Notice are welcomed and should be addressed to firstname.lastname@example.org.