If you have any questions, comments or complaints about this Notice or wish to: (i) coordinate the exercise any of the rights described above; (ii) make any other type of request in relation to the processing of your Data; or (iii) report a concern or complaint related to the processing of your Data; you should contact: gdpr@questassessments.com.
‍
‍We hope that we will be able to address any of your requests. However, you have the right to make a complaint about the processing of your personal data to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Further information

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:

- Access to your personal data and to certain other supplementary information that this Privacy Notice is already designed to address
- Require Us to correct any mistakes in your information which We hold
- Require the erasure of personal data concerning you in certain situations
- Receive the personal data concerning you which you have provided to Us, in a structured, commonly used and machine-readable format
- Object at any time to processing of personal data concerning you for direct marketing
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Object in certain other situations to our continued processing of your personal data otherwise restrict our processing of your personal data in certain circumstances
- Claim compensation for damages caused by our breach of any data protection laws.

To exercise these rights, Data Subjects should contact the Data Controller (their School) in the first instance. Where We are the Data Processor, we can only assist the Data Controller with an enquiry made directly to them and not directly with the Data Subject.

Your rights

We ensure data inputted into the system is only retained for as long as is necessary. Quest Assessments retains data as long as the School is using the platform or deletes data after 6 years if no longer in use. The School can request a permanent deletion of any data at any time by emailing gdpr@questassessments.com.

How long we keep your personal data

We store your personal data in our own systems and on the cloud, within the European Economic Area (“EEA”).

We will not otherwise transfer your personal data outside of the EEA or to any 3rd party organisation (or subordinate bodies).

Where we store your personal data

We take appropriate measures to ensure that all personal data is kept secure, including security measures to prevent personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those who have a business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. 

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.

Unfortunately, the transmission of information via the Internet is not completely secure. Although We will do our best to protect your personal data, We cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.

Security

How we store your personal data

We use information held about you in the following ways:
‍
- On the basis that there is a contract between Us and you. We process your data in order to fulfil this contract.
- Pupil and teacher information will be used to create individual logins for each user, allowing them to access Our platform. 
- To communicate with you in response to enquiries.
- To provide you with further information on how to set up an account.

Purposes of processing

As the Data Processor it is generally not within Our remit to determine the lawful basis for processing the personal data you upload to the Quest Assessments platform. It is the Data Controller's (the School) responsibility to ensure that they have established a lawful basis before processing any data on the Quest Assessments platform.
‍
Where We are the Data Controller, We rely on Contract fulfilment (Article 6 1 (b)) in the first instance and, where that is not applicable, on legitimate interest as the lawful basis on which We collect and use your personal data.

Lawful basis for processing

Uses made of your information

We collect and process some or all of the following types of information from you:

- Information that you provide when you create a user account (pupil or teacher), including full name, email address, age and pronoun. Please note, that when you create an account, you confirm that you have established the legal basis for processing the data of the relevant data subjects.

- Information that you provide when you submit an enquiry. This includes information provided through our enquiry form, via email, via phone and/or by any other method. In particular, We process personal details such as name, email address, telephone number, postal address, role, the organisation you work for, and business requirements or any other details in the enquiry that you provide to Us. If you contact Us, We may keep a record of that correspondence.

- Details of all actions that you carry out through the use of the Services.

- Details of your visits to Quest Assessments website include but are not limited to, traffic data, location data, weblogs, and other communication data, the site that referred you to Quest Assessments’ Website, and the resources that you access.

Information we collect from you

Your personal information

The Website is offered from the United Kingdom by Quest Assessments (referred to in this Notice as “Our”, “Us”, “Quest Assessments ” and “We”), a brand name of Atom Learning Ltd which is a company registered in England and Wales.

We are committed to protecting and respecting your privacy. This Privacy Notice(together with any other documents referred to herein) sets out the basis on which the personal data collected from you, or that you provide to Us, will be processed by Us in connection with Our website and general enquiries processes.

Please read the following carefully to understand Our views and practices regarding your personal data and how We will treat it. For the purpose of the General Data Protection Regulation (“GDPR”) the Data Controller is the School; and the Data Processor is Quest Assessments.

Introduction

Privacy policy