Introduction
The GDPR is designed to protect the personal data and privacy of individuals within the European Union (EU) and applies to any orgnaisation processing personal data of EU residents. As a website operating in the health care niche, Gap Training (the “Website”) must comply with the following GDPR provisions.
Lawfulness, Fairness, and Transparency
Gap Training shall ensure that all personal data processing activities on the Website are conducted lawfully, fairly, and transparently. This includes obtaining valid consent from individuals before collecting and processing their personal data.
Purpose Limitation
Personal data collected by Gap Training shall only be used for specific, explicit, and legitimate purposes related to health care courses. Any further processing of personal data shall be compatible with the original purposes, and individuals will be informed of any such additional processing.
Data minimisation
Gap Training shall collect and process only the personal data necessary to fulfill the purposes defined. The data collected shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
Accuracy
Gap Training shall take reasonable steps to ensure the accuracy of personal data collected. Inaccurate or incomplete data shall be rectified or erased without delay.
Storage Limitation
Personal data collected by Gap Training shall be kept in a form that permits identification of individuals for no longer than necessary for the purposes for which the data is processed. Once the purpose has been fulfilled, the data shall be securely deleted or anonymised.
Security
Gap Training shall implement appropriate technical and orgnaisational measures to ensure the security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage.
Individual Rights
Gap Training shall respect the rights of individuals as outlined in the GDPR. This includes the right to access, rectification, erasure, restriction of processing, data portability, and objection. Gap Training shall provide individuals with mechanisms to exercise these rights.
Data Transfer
If Gap Training transfers personal data to countries outside the EU or the European Economic Area (EEA), it shall ensure that appropriate safeguards are in place to protect the data, such as the use of standard contractual clauses or ensuring the recipient is covered by an adequacy decision.
Data Breach Notification
In the event of a personal data breach, Gap Training shall promptly notify the relevant supervisory authority and affected individuals as required by the GDPR. The notification shall include all relevant details of the breach and its potential impact.
Data Protection Officer (DPO)
Gap Training shall appoint a Data Protection Officer responsible for overseeing GDPR compliance, ensuring proper data protection practices, and acting as the point of contact for individuals and supervisory authorities.
Cookies and Tracking Technologies
Gap Training shall inform visitors about the use of cookies and tracking technologies on the Website, seeking their consent where required. Gap Training shall provide clear information about the purposes of such technologies and any third-party involvement.
Privacy Policy
Gap Training shall maintain a comprehensive Privacy Policy that clearly communicates how personal data is collected, processed, and protected. The Privacy Policy shall be easily accessible on the Website.
Data Processing Agreements
If Gap Training engages third-party processors to handle personal data on its behalf, appropriate data processing agreements shall be in place to ensure compliance with the GDPR.
Periodic Review
Gap Training shall regularly review and update its GDPR compliance measures to ensure ongoing effectiveness and adherence to applicable data protection laws and regulations.
This GDPR policy for Gap Training’s Health Care Course Website is intended to provide a broad overview of key requirements. It is recommended to seek legal advice to tailor the policy to the specific circumstances of the Website and the applicable data protection laws.
