To be able to offer you the services of Handa Training & Development Ltd, we naturally need some data about you. We take the protection of personal data very seriously and always process it in accordance with the applicable data protection regulations, in particular the UK’s Data Protection Act and the EU’s General Data Protection Regulation. With this privacy policy, we would like to inform you about the type, scope, and purpose of the personal data we process and your rights as a data subject.

Person Responsible And General Information

Your data will be processed by Handa Training & Development Ltd, 28a Spital Terrace, Gainsborough, England, DN21 2HQ, e-mail: enquiries@handatraining.org  

Collection And Processing Of Personal Data

As a rule, you can use online services for which no payment or registration is required without providing personal data. In certain cases, however, we process the personal data listed below. As a matter of principle, this is only done to the extent that it is necessary for the provision of a functioning website as well as our content and services. 

Furthermore, we process personal data in connection with the use of www.handatraining.org if you provide it of your own accord, e.g. as part of an enquiry or when booking a course, or because there is another legal basis for doing so. If you do not wish to provide data where necessary for the use of our services, you will unfortunately not be able to use our services or not to the full extent.

Categories of processed data

As soon as you use www.handatraining.org, our system automatically collects information from the computer system of the calling computer. The following data, among others, may be collected in the process:

• Information about the type of browser and the version used
• Operating system of the user
• Date and time of access
• Web analytics data / pseudonymous usage profiles (cookie ID, ad ID etc.)
• Websites from which the user accesses our website
• Websites that the user accesses via our website 

In addition, we process the following personal data if a contractual relationship exists between you and us or if you have otherwise transmitted the data to us:

• Personal master data (name, address)
• Communication data (telephone number, email address)
• Contractual master data (contractual relationship, product or contractual interest, order history)
• Personal data as far as they are necessary for the fulfilment of the contract.

Legal basis and purposes of processing

We process your data exclusively on the basis of one or more of the possible legal bases:

Personal data may be processed in particular on the basis of a contract or for the performance of pre-contractual measures, where consent has been given, on the basis of a legitimate interest or a law and for the protection of vital or public interests.

When booking a course or when obtaining other services requiring payment, we use your contract master data including contact data for the execution and performance of the contract, as is the case, for example, with processing operations necessary for a delivery of goods or the provision of another service or consideration, as well as the enforcement of legal claims or receivables. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of enquiries about our products or services. In the case of paid services, we process certain data because we are subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations.

We also use your e-mail address collected in the course of registration or in the performance of the contract to inform you by e-mail about our own similar goods or services as well as about existing bookings or about Handa Training & Development Ltd in general. In this case, the e-mail address is processed on the basis of our legitimate interest in advertising our goods and services.

In addition, we use your e-mail address to send you our newsletter if you have given us your prior express consent to receive a newsletter or advertising for this purpose. In this case, we process your e-mail address in order to be able to send you the newsletter as requested. You can object to the use of your e-mail address for such purposes at any time in writing or in text form to enquiries@handatraining.org , with effect for the future, without incurring any costs other than the transmission costs according to the basic rates.

On the Internet, every device needs a unique address, the so-called IP address, to transmit data. The at least temporary storage of the IP address is technically necessary to enable delivery of the website to the user’s computer. We shorten the IP addresses before any processing and only process them anonymously. The untruncated IP addresses are not stored or further processed. Our servers also store your IP address for 14 days for our own security purposes.

In the case of processing operations that are not covered by one or more of the aforementioned legal bases, processing is carried out if it is necessary for the protection of a legitimate interest and if, based on a comprehensive weighing of interests, your interests, fundamental rights, and freedoms are not overridden. A legitimate interest can be assumed if the data subject is a customer of the controller. If the processing of personal data is based on this, our legitimate interest is in particular the conduct of our business for the benefit of the well-being of all our employees and our shareholders.

Our legitimate interest in being able to offer you products that are geared to your needs, to inform you about new products as well as to continuously improve our services and thereby also increase our sales is the legal basis for the processing for usage-based online advertising and web analytics. You can object to processing on the basis of a legitimate interest at any time. Further processing is then only permitted, if the original purpose is compatible with the new purpose or is permitted on the basis of a separate legal basis. Recognised compatible purposes include the assertion, exercise or defence of civil claims, provided that there is no overriding interest of the data subject. In this case, we will inform you about the change of purpose. If the new purpose is not compatible with the purpose stated at the time of collection, a new collection will take place on the basis of a new legal basis. Here too, we will inform you of the change of purpose.

We process data of our contractual and business partners, e.g. customers and interested parties in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g. to answer enquiries.

We process this data to fulfil our contractual obligations, to secure our rights and for the purposes of the administrative tasks associated with this information as well as for business organisation. We only disclose the data of the contractual partners to third parties within the scope of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfilment of legal obligations or with the consent of the contractual partners (e.g. to participating telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). 

We inform the contractual partners which data is required for the aforementioned purposes before or in the course of data collection, e.g. in online forms, by means of special labelling (e.g. colours) or symbols (e.g. asterisks or similar), or in person.

Place Of Processing And Transfer Of Your Data To Third Parties

In individual cases, we transfer your data to third party processors, insofar as this is necessary for the fulfilment of the contract and of course permissible under applicable data protection law. 

We will only transfer your personal data to third parties if the transfer is necessary to fulfil our contractual obligations towards you and this is obviously done with or together with another provider, we are otherwise legally entitled or obliged to transfer the data, or you have given us your consent to do so.

In order to provide our service, selected personal data may be communicated to certain departments within our company. These include accounting, marketing, and IT. If you have decided to book accommodation, we forward your data within the company to the relevant department for hotel and flat accommodation.

In certain cases, we also use external service providers or affiliated companies that are commissioned by us to process data for us in accordance with instructions. Such service providers are contractually bound by us as processors in accordance with the strict requirements of the DPA and the GDPR and are not allowed to further use your data for any other purposes. Processors used by us provide the following services for us in particular: Registration services, hosting, newsletter dispatch, evaluation services, maintenance and support and web analysis.

The transfer of data to processors takes place on the basis of our legitimate interest in the economic and technical benefits associated with the use of specialised processors. If we are legally obliged to do so or if this is permitted under data protection law, we transmit personal data to authorities, for example the police or public prosecutor’s offices. The transfer of this data is based on our legitimate interest in combating abuse, prosecuting criminal offences, and securing, asserting and enforcing claims and that your rights and interests in the protection of your personal data are not overridden.

When you send a data subject access request 

The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation. The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process. You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.

Legal defence and enforcement of our rights

The legal basis for the processing of your personal data in the context of legal defence and enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defence and enforcement of our rights is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The processing of your personal data in the context of legal defence and enforcement is mandatory for legal defence and enforcement of our rights. Consequently, there is no possibility for you to object.

Web Analysis Services

In order to constantly improve our content and adapt it to the interests of our users as well as to display usage-based online advertising, we use some analysis services which collect data on our website and evaluate it for us. These service providers process pseudonymised user data on the basis of an order processing agreement. The data is not stored together with other personal data of the users. You can deactivate the individual analysis services at any time for the future.

Social networks

You can also find us in social networks of other companies. We have also integrated individual functions of these networks into our online services. However, you can only use both if you are registered and logged in to the respective social network. Please note that the use of the respective social network is subject to the terms of use and data protection conditions of that company, over which we have no influence. However, we will be happy to explain to you how such networks process your personal data in this context.

Payment Service Providers

In the event that you use a service that requires payment or purchase something via our website / app, we offer various payment methods. Should you decide to use one of these payment service providers, you will leave our site. All data will then be collected and processed by this payment service provider. We do not receive any personal data, in particular no bank or credit card data, but only the information that the payment was successfully made. 

Storage period

We store personal data only as long as we are entitled to do so, and the purpose of processing has not ceased to apply. The respective statutory retention period applies to the duration of the storage of personal data. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment or initiation of the contract.

Children Data

Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.

Accuracy

It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

Security measures

For security reasons and to protect the transmission of content, that you send to us, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Obligation to provide personal data

You are not obliged to provide us with personal data. However, depending on the individual case, the provision of certain personal data may be necessary for the provision of the above services. If you do not provide us with this personal data, we may not be able to provide the service.

Do Not Sell My Personal Information 

We do not sell information that directly identifies you, like your name, address, or phone records.