Privacy Policy

Consent as Legal Basis for Data Processing

​

Understanding Consent

Under the General Data Protection Regulation (GDPR), consent is one of the legal bases for the processing of personal data. By accepting our Terms and Conditions, you, as a tester, are providing us with your explicit consent, which serves as our legal basis for collecting and processing your personal data. This section outlines what this means for you.

Provision of Consent

Explicit Consent: By accepting our Terms and Conditions, you explicitly consent to the collection and processing of your personal data for the specific purposes related to our management due diligence services.

​

Informed Decision: We ensure that your consent is given in an informed manner. Before you accept our Terms and Conditions, we provide clear and comprehensive information about the data processing activities your consent pertains to.

Scope of Consent

Purpose of Data Processing: The consent you provide allows us to process your personal data solely for the purposes of conducting personality testing and management due diligence services.

How We Use Your Data

What data is collected?
Your personal data (name, any personal data provided via the registration page and special categories of personal data such as psychometric assessment test results) will be collected by our company for the provision of management due diligence services to our clients.

What happens to my personal data post-completion?
Data from the assessments carried out online are collected by our online assessment and software, which converts raw data into standardised scores and graphs. This data is stored on servers in the United Kingdom, with robust security measures in place.

Where will my data be sent post-completion?
Upon completion of the assessment, the scores will be analysed by our inhouse experts and a report including scores and insights will be sent to our client, including:

• Name

• Job Title

• Company

• Graph and scores of your test

• Written narrative of the personality profile

How long will my data be held for?
We store assessment results for the duration of their validity (two years). You can request the removal of these results before the two-year period by submitting a written request. Your identity will be confirmed before deleting the files.

Data Protection and Ethics Commitment

We are committed to ensuring that we have the highest standards of data protections and ethics in place to protect your personal data. This includes:

Ensuring Compliance: We are committed to processing your data in accordance with GDPR, respecting your rights and freedoms.

Security Measures: We implement appropriate technical and organisational measures to ensure the security of your personal data.

Ethics Policy: Our ethics policy, which details our commitment to ethical practices in all our operations, can be found on our website. This policy underlines our dedication to maintaining high standards of integrity and professionalism in handling personal data.

Rights of Access Under GDPR

Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR), you, as a data subject, have several rights concerning the processing of your personal data. We are committed to ensuring the protection and proper use of your personal data. The following outlines your rights of access:

Right to Access

Access to Personal Data: You have the right to request access to your personal data that we hold. This includes the right to be informed about the nature of the personal data, the purposes of processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed.

Copy of Personal Data: You can request a copy of the personal data we hold about you. We will provide the first copy free of charge. For any further copies requested, we may charge a reasonable fee based on administrative costs.

Right to Information

Information on Data Processing: We will provide you with information on our data processing activities, including the purpose for processing your personal data, the retention period, and the rights you have regarding your personal data.

Additional Rights

Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to have it rectified or completed.

Right to Erasure ('Right to be Forgotten'): In certain circumstances, you have the right to have your personal data erased. This is not an absolute right and applies in particular situations.

Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data under certain conditions.

Right to Data Portability: You have the right to receive the personal data that you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us.

Right to Object: You have the right to object to the processing of your personal data under certain circumstances, including processing for direct marketing.

​

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@persona-science.com. We will respond to your request in accordance with GDPR requirements.

​

Complaints

If you have any concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority competent for your country or region.