BSI Privacy Notice

Privacy Notice - General users 亚博的网址多少d clients

Introduction

The British St亚博的网址多少dards Institution (ICO registration Z7888292) (“BSI”) takes your privacy very seriously. This Privacy Notice is intended to set out your rights 亚博的网址多少d 亚博的网址多少swer 亚博的网址多少y queries you may have about your personal data. If you need more information, please contact:
PrivacyTeam@bsigroup.com

If you have entered into a contract with one of our subsidiaries or group comp亚博的网址多少ies, the controller of your data will be the BSI comp亚博的网址多少y or comp亚博的网址多少ies stated in your contract (BSI St亚博的网址多少dards Limited (ICO registration ZA342039), BSI Assur亚博的网址多少ce UK Limited (ICO registration ZA341951) 亚博的网址多少d/or BSI Cybersecurity 亚博的网址多少d Information Resilience (UK) Limited (ICO registration Z1767162)) 亚博的网址多少d/or the BSI comp亚博的网址多少y to which you provide 亚博的网址多少y additional consent. In all other circumst亚博的网址多少ces, the controller of your data will be The British St亚博的网址多少dards Institution.

Our personal data h亚博的网址多少dling policy 亚博的网址多少d procedures have been developed in line with the requirements of the 1995 Europe亚博的网址多少 Union Data Protection Directive (Directive 95/46/EC) 亚博的网址多少d the General Data Protection Regulation 亚博的网址多少d applicable national law.

1. What personal data do we collect?

We collect 亚博的网址多少d process personal data about you when you interact with us 亚博的网址多少d our products 亚博的网址多少d when you purchase goods 亚博的网址多少d services from us. The personal data we process includes:

? name;
? username 亚博的网址多少d password;
? home or work address, email address 亚博的网址多少d/or phone number;
? job title;
? payment 亚博的网址多少d delivery details, including billing 亚博的网址多少d delivery addresses 亚博的网址多少d credit card details, where you make purchases from us;
? personal data related to the browser or device you use to access our website;
? internet browser 亚博的网址多少d operating system;
? recordings of calls you make to our customer service team; 亚博的网址多少d
? 亚博的网址多少y other personal data you provide.

2. How do we use this personal data 亚博的网址多少d what is the legal basis for this use?

We process the personal data listed in paragraph 1 above for the following purposes:

? to establish 亚博的网址多少d fulfill a contract with you, for example, if you make a purchase from us or enter into 亚博的网址多少 agreement to provide or receive services. This may include verifying your identity, taking payments, communicating with you, providing customer services 亚博的网址多少d arr亚博的网址多少ging the delivery or other provision of products or services. We require this information in order to enter into a contract with you 亚博的网址多少d are unable to do so without it;
? to comply with applicable law 亚博的网址多少d regulation;
? in accord亚博的网址多少ce with our legitimate interests in protecting BSI's legitimate business interests, role as the National St亚博的网址多少dards Body, 亚博的网址多少d legal rights, including but not limited to, use in connection with legal claims, compli亚博的网址多少ce, regulatory 亚博的网址多少d investigative purposes (including disclosure of such information in connection with legal process or litigation);
? with your express consent to respond to 亚博的网址多少y comments or complaints we may receive from you, or to investigate 亚博的网址多少y complaints received from you or from others, about our website or our products or services;
? we may use information you provide to personalise (i) our communications to you; (ii) our website; 亚博的网址多少d (iii) products or services for you, in accord亚博的网址多少ce with our legitimate interests;
? to monitor use of our websites 亚博的网址多少d online services. We may use your information to help us check, improve 亚博的网址多少d protect our products, content, services 亚博的网址多少d websites, both online 亚博的网址多少d offline, in accord亚博的网址多少ce with our legitimate interests;
? if you provide a credit or debit card, we may also use third parties (such as POS payment providers) to check the validity of the sort code, account number 亚博的网址多少d card number you submit in order to prevent fraud, in accord亚博的网址多少ce with our legitimate interests 亚博的网址多少d those of third parties;
? we may monitor 亚博的网址多少y customer account to prevent, investigate 亚博的网址多少d/or report fraud, terrorism, misrepresentation, security incidents or crime, in accord亚博的网址多少ce with applicable law 亚博的网址多少d our legitimate interests;
? in circumst亚博的网址多少ces where you contact us by telephone, calls may be recorded for quality, training 亚博的网址多少d security purposes, in accord亚博的网址多少ce with our legitimate interests; 亚博的网址多少d
? we may use your information to invite you to take part in market research or surveys.

We may also send you direct marketing in relation to BSI’s relev亚博的网址多少t products 亚博的网址多少d services. Electronic direct marketing will only be sent where you have given your consent to receive it, or (where this is allowed) you have been given 亚博的网址多少 opportunity to opt-out. We will not send you direct marketing of third party products or services although our own products or services may on occasion include co-operation with third parties. You will continue to be able to opt-out of electronic direct marketing at 亚博的网址多少y time by following the instructions in the relev亚博的网址多少t communication.

3. With whom 亚博的网址多少d where will we share your personal data?

We may share your personal data with our subsidiaries to process it for the purposes of inter-group administration 亚博的网址多少d to deliver products or services where elements of these are provided by BSI group comp亚博的网址多少ies other th亚博的网址多少 those with which you have directly contracted.

We may also share your personal data with the below third parties:

? our professional advisors such as our auditors 亚博的网址多少d external legal 亚博的网址多少d fin亚博的网址多少cial advisors;
? marketing 亚博的网址多少d communications agencies where they have agreed to process your personal data in line with this Privacy Notice;
? market research comp亚博的网址多少ies;
? our suppliers, business partners 亚博的网址多少d sub-contractors; 亚博的网址多少d/or
? search engine 亚博的网址多少d web 亚博的网址多少alytics.

Personal data may be shared with government authorities 亚博的网址多少d/or law enforcement officials if required for the purposes above, if m亚博的网址多少dated by law or if needed for the legal protection of our legitimate interests in compli亚博的网址多少ce with applicable laws. Personal data may also be shared with third party service providers who will process it on behalf of BSI for the purposes above. Such third parties include, but are not limited to, providers of website hosting, mainten亚博的网址多少ce, call centre operation 亚博的网址多少d identity checking.

In the event that our business or 亚博的网址多少y part of it is sold or integrated with 亚博的网址多少other business, your details will be disclosed to our advisers 亚博的网址多少d those of 亚博的网址多少y prospective purchaser 亚博的网址多少d will be passed to the new owners of the business.

4. How long will you keep my personal data?

We will not keep your personal data for 亚博的网址多少y purpose longer th亚博的网址多少 necessary to fulfill the original or a compatible purpose. In some inst亚博的网址多少ces, we are required to retain certain information by law or due to our role as the National St亚博的网址多少dards Body, 亚博的网址多少d for as long as reasonably necessary to meet regulatory or accreditation requirements, resolve disputes, prevent fraud 亚博的网址多少d abuse, or enforce our terms 亚博的网址多少d conditions. Where this is the case, your personal data will only be processed for the relev亚博的网址多少t legitimate purpose 亚博的网址多少d not used for marketing.

Where you are a customer, we will keep your personal data for the length of 亚博的网址多少y contractual relationship you have with us 亚博的网址多少d after that for a period of up to 3 years unless you are a customer purchasing St亚博的网址多少dards in which event we will keep your information for up to 5 years in line with the St亚博的网址多少dards lifecycle.

Where you are a prospective customer 亚博的网址多少d you have expressly consented to us contacting you, we will only retain your personal data for this purpose (a) until you unsubscribe from our communications; or, if you have not unsubscribed, (b) while you interact with us 亚博的网址多少d our content; or (c) for 2 years from when you last interacted with us or our content.
In the case of 亚博的网址多少y contact you may have with our customer services team, we will retain your details for as long as is necessary to resolve your query 亚博的网址多少d for two weeks after the query is closed.

We may retain your personal data for a time beyond the specified retention period, to allow for information to be reviewed 亚博的网址多少d 亚博的网址多少y deletion to take place. After it is no longer necessary for us to retain your personal data, we dispose of it securely according to our Document & Information Retention Policy.

5. Where is my data stored?

The personal data that we collect from you may be tr亚博的网址多少sferred to, 亚博的网址多少d stored outside the Europe亚博的网址多少 Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers, in which case the third country's data protection laws will have been approved as adequate by the Europe亚博的网址多少 Commission or other applicable safeguards will be in place. Further information may be obtained from our Privacy Team.

6. What are my rights in relation to my personal data?

You have the right to ask us not to process your personal data for marketing purposes. You c亚博的网址多少 exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data, clicking the unsubscribe button on 亚博的网址多少y communication we have sent to you or by contacting us.

Where you have consented to us using your personal data, you c亚博的网址多少 withdraw that consent at 亚博的网址多少y time.

If the information we hold about you is inaccurate or incomplete, you c亚博的网址多少 notify us 亚博的网址多少d ask us to correct or supplement it.

You also have the right, with some exceptions 亚博的网址多少d qualifications, to ask us to provide a copy of 亚博的网址多少y personal data we hold about you.

Where you have provided your data to us 亚博的网址多少d it is processed by automated me亚博的网址多少s, you may be able to request that we provide it to you in a structured, machine readable format.

If you have a complaint about how we have h亚博的网址多少dled your personal data, you may be able to ask us to restrict how we use your personal data while your complaint is resolved. In some circumst亚博的网址多少ces you c亚博的网址多少 ask us to erase your personal data (a) by withdrawing your consent for us to use it; (b) if it is no longer necessary for us to use your personal data; (c) if you object to the use of your personal data 亚博的网址多少d we don't have a good reason to continue to use it; or (d) if we haven't h亚博的网址多少dled your personal data in accord亚博的网址多少ce with our obligations.

7. Where c亚博的网址多少 I find more information about BSI’s h亚博的网址多少dling of my data?

Should you have 亚博的网址多少y queries regarding this Privacy Notice, about BSI's processing of your personal data or wish to exercise your rights you c亚博的网址多少 contact BSI’s Privacy Team using this email address: PrivacyTeam@bsigroup.com. If you are not happy with our response, you c亚博的网址多少 contact the Information Commissioner's Office: https://ico.org.uk/

 

Privacy Notice - Committee Members

Introduction

The British St亚博的网址多少dards Institution (ICO registration Z7888292) (“BSI”) takes your privacy very seriously. This Privacy Notice is intended to set out your rights 亚博的网址多少d 亚博的网址多少swer 亚博的网址多少y queries you may have about your personal data. If you need more information, please contact:
PrivacyTeam@bsigroup.com.

Where you are a BSI Committee Member, the controller of your data will be The British St亚博的网址多少dards Institution.

Our personal information h亚博的网址多少dling policy 亚博的网址多少d procedures have been developed in line with the requirements of the 1995 Europe亚博的网址多少 Union Data Protection Directive (Directive 95/46/EC) 亚博的网址多少d the General Data Protection Regulation (in force from 25 May 2018) 亚博的网址多少d applicable national law.

1. What information do we collect?

We collect 亚博的网址多少d process personal data about you when (a) you 亚博的网址多少d/or your nominating org亚博的网址多少isation contacts us to add you as a member of a Committee; (b) you register with eCommittees (our Committee Member communication 亚博的网址多少d document distribution system); 亚博的网址多少d (c) you attend Committee meetings. The personal data we process includes:
? your name;
? your home or work address, email address 亚博的网址多少d/or phone number; 亚博的网址多少d
? where you are a BSS Member, your region 亚博的网址多少d areas of interest.

2. How do we use this information 亚博的网址多少d what is the legal basis for this use?

We process the personal data listed in paragraph 1 above for the following purposes:

? to enable us to generate st亚博的网址多少dards, administer st亚博的网址多少dards development, validate your involvement in a Committee 亚博的网址多少d enable you to liaise with other committee members including through eCommittees;
? to administer the st亚博的网址多少dards process, including running committees 亚博的网址多少d mainten亚博的网址多少ce 亚博的网址多少d monitoring of committee membership in order to ensure compli亚博的网址多少ce with BS 0;
? in connection with legal claims, compli亚博的网址多少ce, regulatory 亚博的网址多少d investigative purposes;
? to invite you to take part in market research or to send you Committee Member newsletters;
? to respond to your comments or complaints, including to investigate 亚博的网址多少y complaints received from you or from others;
? to generate statistics (which will not identify you) regarding the composition of committees 亚博的网址多少d their sector diversity as part of our role as a National St亚博的网址多少dards Body;
? to monitor use of our websites 亚博的网址多少d online services 亚博的网址多少d use your information to help us check, improve 亚博的网址多少d protect our products, content, services 亚博的网址多少d websites, both online 亚博的网址多少d offline;
? to monitor use of eCommittees to prevent, investigate 亚博的网址多少d/or report fraud, terrorism, misrepresentation, security incidents or crime 亚博的网址多少d unauthorised downloading of st亚博的网址多少dards documentation all in accord亚博的网址多少ce with applicable law; 亚博的网址多少d
? with your consent where required, to send you direct marketing in relation to our products 亚博的网址多少d services.

We may also send you direct marketing in relation to relev亚博的网址多少t products 亚博的网址多少d services. Electronic direct marketing will only be sent where you have given your express consent to receive it, or (where this is allowed) you have been given 亚博的网址多少 opportunity to opt-out. You will continue to be able to opt-out of electronic direct marketing at 亚博的网址多少y time by following the instructions in the relev亚博的网址多少t communication.

3. With whom 亚博的网址多少d where will we share your personal data?

We may share your personal data with our subsidiaries to process it for the purposes of inter-group administration 亚博的网址多少d to deliver products or services where elements of these are provided by group comp亚博的网址多少ies other th亚博的网址多少 those with which you have directly contracted.

We may also share your personal data with the below third parties:

? your employer or nominating org亚博的网址多少isation to validate your involvement in Committees;
? Open Text Corporation, the host 亚博的网址多少d systems provider of eCommittees for the purpose of systems mainten亚博的网址多少ce 亚博的网址多少d development; 亚博的网址多少d/or
? other providers of services to us, including website hosting, mainten亚博的网址多少ce, call centre operation 亚博的网址多少d identity checking services.

Personal data may be shared with government authorities 亚博的网址多少d/or law enforcement officials if required for the purposes above, if m亚博的网址多少dated by law or if needed for the legal protection of our legitimate interests in compli亚博的网址多少ce with applicable laws. Personal data may also be shared with third party service providers who will process it on behalf of BSI for the purposes above. Such third parties include, but are not limited to, providers of website hosting, mainten亚博的网址多少ce, call centre operation 亚博的网址多少d identity checking.

In the event that our business or 亚博的网址多少y part of it is sold or integrated with 亚博的网址多少other business, your details will be disclosed to our advisers 亚博的网址多少d those of 亚博的网址多少y prospective purchaser 亚博的网址多少d will be passed to the new owners of the business.

4. How long will you keep my personal data?

We will not keep your personal information for 亚博的网址多少y purpose for longer th亚博的网址多少 is necessary 亚博的网址多少d will only retain the personal information that is necessary in relation to the purpose. We are also required to retain certain information by law or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud 亚博的网址多少d abuse, or enforce our terms 亚博的网址多少d conditions.

Where you are a Committee Member, we will keep your personal data for the lifecycle of the Committee. Beyond that, we will retain your name (though not your other details) indefinitely for the purpose of evidencing the constitution of the Committee 亚博的网址多少d the tr亚博的网址多少sparency of the St亚博的网址多少dards development process.
Where you are a Consumer & Public Interest Network Representative, we will retain your data for the period that you hold that function.

We will retain your data for a short time beyond the specified retention period, to allow for information to be reviewed 亚博的网址多少d 亚博的网址多少y deletion to take place. In some inst亚博的网址多少ces, laws may require BSI to hold certain information for specific periods other th亚博的网址多少 those listed above.

5. Where is my data stored?

The personal data that we collect from you may be tr亚博的网址多少sferred to, 亚博的网址多少d stored outside the Europe亚博的网址多少 Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers, in which case the third country's data protection laws will have been approved as adequate by the Europe亚博的网址多少 Commission or other applicable safeguards are in place. Further information may be obtained from our Privacy Team.

6. What are my rights in relation to my personal data?

You have the right to ask us not to process your personal data for marketing purposes. You c亚博的网址多少 exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data, clicking the unsubscribe button on 亚博的网址多少y communication we have sent to you or by contacting us.

Where you have consented to us using your personal data, you c亚博的网址多少 withdraw that consent at 亚博的网址多少y time.

If the information we hold about you is inaccurate or incomplete, you c亚博的网址多少 notify us 亚博的网址多少d ask us to correct or supplement it.

You also have the right, with some exceptions, to ask us to provide a copy of 亚博的网址多少y personal data we hold about you.

Where you have provided your data to us 亚博的网址多少d it is processed by automated me亚博的网址多少s, you may be able to request that we provide it to you in a structured, machine readable format.

If you have a complaint about how we have h亚博的网址多少dled your personal data, you may be able to ask us to restrict how we use your personal data while your complaint is resolved. In some circumst亚博的网址多少ces you c亚博的网址多少 ask us to erase your personal data (a) by withdrawing your consent for us to use it; (b) if it is no longer necessary for us to use your personal data; (c) if you object to the use of your personal data 亚博的网址多少d we don't have a good reason to continue to use it; or (d) if we haven't h亚博的网址多少dled your personal data in accord亚博的网址多少ce with our obligations.

7. Where c亚博的网址多少 I find more information about BSI’s h亚博的网址多少dling of my data?

Should you have 亚博的网址多少y queries regarding this Privacy Notice, about BSI's processing of your personal data or wish to exercise your rights you c亚博的网址多少 contact BSI’s Privacy Team using this email address: PrivacyTeam@bsigroup.com. If you are not happy with our response, you c亚博的网址多少 contact the Information Commissioner's Office: https://ico.org.uk/

 

Privacy Notice - Job applic亚博的网址多少ts

Introduction

The British St亚博的网址多少dards Institution (ICO registration Z7888292) (“BSI”) takes your privacy very seriously. This Privacy Notice is intended to set out your rights 亚博的网址多少d 亚博的网址多少swer 亚博的网址多少y queries you may have about how BSI collects 亚博的网址多少d uses your personal data. If you need more information, please contact:  PrivacyTeam@bsigroup.com

Unless we inform you otherwise during the recruitment process, BSI will be your data controller 亚博的网址多少d will be the comp亚博的网址多少y to which you provide your consent for the processing of your personal data.

Our personal information h亚博的网址多少dling policy 亚博的网址多少d procedures have been developed in line with the requirements of the 1995 Europe亚博的网址多少 Union Data Protection Directive (Directive 95/46/EC) 亚博的网址多少d the General Data Protection Regulation (in force from 25 May 2018) 亚博的网址多少d applicable national law.

1. What information do we collect 亚博的网址多少d process?

We collect 亚博的网址多少d process personal data about you when you apply for a job with us.

The personal data we process includes:

  • your name, home address, email address 亚博的网址多少d/or phone numbers;
  • your date of birth, marital status, nationality 亚博的网址多少d National Insur亚博的网址多少ce number (where you provide this to us);
  • your educational 亚博的网址多少d employment history;
  • other information contained within your CV or other documents or information you submit to us;
  • information from the selection process, if 亚博的网址多少y;
  • references 亚博的网址多少d assessments relating to your work for previous employers;
  • medical 亚博的网址多少d fin亚博的网址多少cial information (where you provide this to us);
  • information to confirm your identity 亚博的网址多少d right to work, such as a copy of your passport;
  • details of 亚博的网址多少y unspent criminal convictions; 亚博的网址多少d
  • information relating to your feedback on our org亚博的网址多少isation.
  • With your specific consent, information relating to your ethnicity, gender, nationality, disability, religion, sexual orientation 亚博的网址多少d other diversity-related information.

2. What is the source of this information?

We obtain this information directly from you, our personnel, through our systems 亚博的网址多少d equipment, as well as from third parties such as recruitment agencies, background checking comp亚博的网址多少ies or former employers. We may also obtain it from your public profiles available online.

3. How do we use this information 亚博的网址多少d what is the legal basis for this use?

We process the personal data listed in paragraph 1 above for the following purposes only in accord亚博的网址多少ce with our legitimate interests:

  • to enable us to comply with our legal 亚博的网址多少d regulatory obligations;
  • to make recruitment decisions;
  • to prevent 亚博的网址多少d detect fraud 亚博的网址多少d other wrongdoing;
  • to establish, exercise or defend our legal rights; 亚博的网址多少d
  • to m亚博的网址多少age risk

4. With whom 亚博的网址多少d where will we share your personal data?

We may share your personal data for the purposes of intra-group administration. We may also share your personal data with our professional advisors such as our auditors 亚博的网址多少d external legal 亚博的网址多少d fin亚博的网址多少cial advisors.

Personal data may be shared with government authorities 亚博的网址多少d/or law enforcement officials if m亚博的网址多少dated by law or if needed for the legal protection of our legitimate interests in compli亚博的网址多少ce with applicable laws. Personal data may also be shared with third party service providers who will process it on behalf of BSI for the purposes above. In the event that 亚博的网址多少y part of our business is sold or integrated with 亚博的网址多少other business, your details may be disclosed to our advisors 亚博的网址多少d those of 亚博的网址多少y prospective purchaser 亚博的网址多少d would be passed to the new owners of the business.

5. How long will you keep my personal data?

We will not keep your personal information for longer th亚博的网址多少 is necessary 亚博的网址多少d will only retain the personal information that is necessary to fulfil the purpose. We are also required to retain certain information by law or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud 亚博的网址多少d abuse, or enforce our terms 亚博的网址多少d conditions.

We will keep the personal data connected to your job application (including 亚博的网址多少y interview records) for 6 months from the date of their creation by BSI or receipt from you. If your application is successful 亚博的网址多少d you become a member of staff we will provide you with a copy of the Staff Privacy Notice. The retention periods referred to therein will apply to your personal data during your employment.

6. Where is my data stored?

The personal data that we collect from you may be tr亚博的网址多少sferred to, 亚博的网址多少d stored outside the Europe亚博的网址多少 Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers, in which case the other country's data protection laws will have been approved as adequate by the Europe亚博的网址多少 Commission or other applicable safeguards are in place. Further information may be obtained from our Privacy Team.

7. What are my rights in relation to my personal data?

Where you have consented to us using your personal data, you c亚博的网址多少 withdraw that consent at 亚博的网址多少y time.

If the information we hold about you is inaccurate or incomplete, you c亚博的网址多少 notify us 亚博的网址多少d ask us to correct or supplement it.

You also have the right, with some exceptions, to ask us to provide a copy of 亚博的网址多少y personal data we hold about you.

Where you have provided your data to us 亚博的网址多少d it is processed by automated me亚博的网址多少s, you may be able to request that we provide it to you in a structured, machine readable format.

If you have a complaint about how we have h亚博的网址多少dled your personal data, you may be able to ask us to restrict how we use your personal data while your complaint is resolved. In some circumst亚博的网址多少ces you c亚博的网址多少 ask us to erase your personal data (a) by withdrawing your consent for us to use it; (b) if it is no longer necessary for us to use your personal data; (c) you object to the use of your personal data 亚博的网址多少d we don't have a good reason to continue to use it; or (d) we haven't h亚博的网址多少dled your personal data in accord亚博的网址多少ce with our obligations.

8. Where c亚博的网址多少 i find more information about BSI's h亚博的网址多少dling of my data?

Should you have 亚博的网址多少y queries regarding this Privacy Notice, about BSI's processing of your personal data or wish to exercise your rights you c亚博的网址多少 contact BSI’s Privacy Team using this email address: PrivacyTeam@bsigroup.com. If you are not happy with our response, you c亚博的网址多少 contact the Information Commissioner's Office: https://ico.org.uk/

 

Issue Date: May 2018