Data: Difference between revisions
Rachael Lowe (talk | contribs) (Created page with "Your data on Physioplus These notes have been provided in response to the European General Data Protection Regulation (GDPR) to explain to Physioplus site users how individual...") |
Rachael Lowe (talk | contribs) mNo edit summary |
||
| Line 1: | Line 1: | ||
Your data on | == Your data on Physiopedia == | ||
These notes have been provided in response to the European General Data Protection Regulation (GDPR) to explain to | These notes have been provided in response to the European General Data Protection Regulation (GDPR) to explain to Physiopedia site users how individual related data is gathered, stored, used and shared with third parties. Also how a Physiopedia user may ultimately choose to export and remove data from the site. Please note that all data on the Physiopedia platform is encrypted during transfer and is stored within a secure database hosted on world class cloud based infrastructure with regular backups taken to insure against data loss. | ||
Who we are | == Who we are == | ||
We are Physiopedia | We are Physiopedia, a charity registered in England and Wales. Our company registration number is 1173185 and our registered office is at 10 Queen Street Place, London, EC4R 1BE. | ||
Why we collect data | == Why we collect data == | ||
This data is collected to allow our users to securely participate in online professional development activities and be able to later evidence the successful completion of these activities. We also request and use data to allow us to alert users to new courses and features and also to improve our services. | This data is collected to allow our users to securely participate in online professional development activities and be able to later evidence the successful completion of these activities. We also request and use data to allow us to alert users to new courses and features and also to improve our services. | ||
How long is the data stored | == How long is the data stored == | ||
All data is stored indefinitely unless an individual requests its removal. The account cancellation facility allows a site user to request that all their data be deleted from the site and database. | All data is stored indefinitely unless an individual requests its removal. The account cancellation facility allows a site user to request that all their data be deleted from the site and database. | ||
Who has access to the data | == Who has access to the data == | ||
The | The Physiopedia site support team have secure access to your individual data in order to allow them to investigate and resolve any issues encountered when using the site. Individual data is not shared with third parties (e.g. physiotherapy member organisations) without the specific written permission of the individual user. | ||
General anonymised course participation data is collated into reports that are shared with partner physiotherapy associations. For free MOOCs (open courses) an annual report including general anonymous course participation data is shared publicly. | General anonymised course participation data is collated into reports that are shared with partner physiotherapy associations. For free MOOCs (open courses) an annual report including general anonymous course participation data is shared publicly. | ||
| Line 19: | Line 19: | ||
The data stored for an individual user can be viewed by them on their profile page and their activity log page. They can export the entire content of their activity log in several formats. | The data stored for an individual user can be viewed by them on their profile page and their activity log page. They can export the entire content of their activity log in several formats. | ||
How a user’s data can be deleted / removed from the site | == How a user’s data can be deleted / removed from the site == | ||
The account cancellation facility allows a site user to request that all their data be deleted from the site and database. This action will prevent this user downloading activity log data and course completion certificates following this deletion. | The account cancellation facility allows a site user to request that all their data be deleted from the site and database. This action will prevent this user downloading activity log data and course completion certificates following this deletion. | ||
Details of the data collected | == Details of the data collected == | ||
Account creation | |||
=== Account creation === | |||
On creation of a trial user account or a partner member organisation user account the following details are recorded in the site database: | On creation of a trial user account or a partner member organisation user account the following details are recorded in the site database: | ||
* Email address | |||
Email address | * First name | ||
First name | * Last name | ||
Last name | * IP address | ||
IP address | |||
Where an individual full user account is purchased the following additional details are also recorded: | Where an individual full user account is purchased the following additional details are also recorded: | ||
* Billing address | |||
In the processing of a payment all the above details are securely passed to our world class payment platform provider Stripe. At the point of purchase your bank / credit card details are encrypted and passed to this payment provider. Note that only partial card details are recorded on the Physiopedia database. | |||
At the time of registration users are offered the option to receive a Physiopedia email newsletter. Accepting this option will share that user’s email address with the MailChimp platform through which these newsletters are managed. | |||
=== Optional profile fields === | |||
The user can '''optionally''' provide: | |||
Professional licensing organisation | |||
License number | License number | ||
Course participation | |||
=== Course participation === | |||
In the process of competing an online course several types of data are recorded: | In the process of competing an online course several types of data are recorded: | ||
Records of learning activities completed | Records of learning activities completed | ||
Quiz scores | Quiz scores | ||
Courses completed | Courses completed | ||
The following platform facilities are delivered using external services and so involve a strictly limited data transfer to third parties. These service organisation have been specifically selected because they provide world class functionality and data protection: | The following platform facilities are delivered using external services and so involve a strictly limited data transfer to third parties. These service organisation have been specifically selected because they provide world class functionality and data protection: | ||
Course evaluations – Formstack | Course evaluations – Formstack | ||
Forum posts – Muut | Forum posts – Muut | ||
Embedded videos – Youtube | Embedded videos – Youtube | ||
Course accreditors | |||
== Course accreditors == | |||
This item only applies to residents of US states covered by ProCert and South Africa competing courses accredited in their states / country. The course accreditors (FSBPT and SASP) require that we transfer the details (name and email addresses) of all course participants under their jurisdiction for their records. | This item only applies to residents of US states covered by ProCert and South Africa competing courses accredited in their states / country. The course accreditors (FSBPT and SASP) require that we transfer the details (name and email addresses) of all course participants under their jurisdiction for their records. | ||
Contact forms | == Contact forms == | ||
The user may optionally choose to contact the | The user may optionally choose to contact the Physiopedia team using a site contact form. Submitted details are be stored in the contact logs: | ||
* Email address | |||
* Name | |||
* Message | |||
== Notification of data breaches == | |||
Notification of data breaches | |||
In the event of a data breach we will alert all affected site users within 72 hours. | In the event of a data breach we will alert all affected site users within 72 hours. | ||
Questions | == Questions == | ||
If you have any questions regarding the capture, storage and use of data by | If you have any questions regarding the capture, storage and use of data by Physiopedia please don’t hesitate to contact us. | ||
Revision as of 13:49, 22 April 2018
Your data on Physiopedia[edit | edit source]
These notes have been provided in response to the European General Data Protection Regulation (GDPR) to explain to Physiopedia site users how individual related data is gathered, stored, used and shared with third parties. Also how a Physiopedia user may ultimately choose to export and remove data from the site. Please note that all data on the Physiopedia platform is encrypted during transfer and is stored within a secure database hosted on world class cloud based infrastructure with regular backups taken to insure against data loss.
Who we are[edit | edit source]
We are Physiopedia, a charity registered in England and Wales. Our company registration number is 1173185 and our registered office is at 10 Queen Street Place, London, EC4R 1BE.
Why we collect data[edit | edit source]
This data is collected to allow our users to securely participate in online professional development activities and be able to later evidence the successful completion of these activities. We also request and use data to allow us to alert users to new courses and features and also to improve our services.
How long is the data stored[edit | edit source]
All data is stored indefinitely unless an individual requests its removal. The account cancellation facility allows a site user to request that all their data be deleted from the site and database.
Who has access to the data[edit | edit source]
The Physiopedia site support team have secure access to your individual data in order to allow them to investigate and resolve any issues encountered when using the site. Individual data is not shared with third parties (e.g. physiotherapy member organisations) without the specific written permission of the individual user.
General anonymised course participation data is collated into reports that are shared with partner physiotherapy associations. For free MOOCs (open courses) an annual report including general anonymous course participation data is shared publicly.
How can the user view and export their data The data stored for an individual user can be viewed by them on their profile page and their activity log page. They can export the entire content of their activity log in several formats.
How a user’s data can be deleted / removed from the site[edit | edit source]
The account cancellation facility allows a site user to request that all their data be deleted from the site and database. This action will prevent this user downloading activity log data and course completion certificates following this deletion.
Details of the data collected[edit | edit source]
Account creation[edit | edit source]
On creation of a trial user account or a partner member organisation user account the following details are recorded in the site database:
- Email address
- First name
- Last name
- IP address
Where an individual full user account is purchased the following additional details are also recorded:
- Billing address
In the processing of a payment all the above details are securely passed to our world class payment platform provider Stripe. At the point of purchase your bank / credit card details are encrypted and passed to this payment provider. Note that only partial card details are recorded on the Physiopedia database.
At the time of registration users are offered the option to receive a Physiopedia email newsletter. Accepting this option will share that user’s email address with the MailChimp platform through which these newsletters are managed.
Optional profile fields[edit | edit source]
The user can optionally provide:
Professional licensing organisation
License number
Course participation[edit | edit source]
In the process of competing an online course several types of data are recorded:
Records of learning activities completed
Quiz scores
Courses completed
The following platform facilities are delivered using external services and so involve a strictly limited data transfer to third parties. These service organisation have been specifically selected because they provide world class functionality and data protection:
Course evaluations – Formstack
Forum posts – Muut
Embedded videos – Youtube
Course accreditors[edit | edit source]
This item only applies to residents of US states covered by ProCert and South Africa competing courses accredited in their states / country. The course accreditors (FSBPT and SASP) require that we transfer the details (name and email addresses) of all course participants under their jurisdiction for their records.
Contact forms[edit | edit source]
The user may optionally choose to contact the Physiopedia team using a site contact form. Submitted details are be stored in the contact logs:
- Email address
- Name
- Message
Notification of data breaches[edit | edit source]
In the event of a data breach we will alert all affected site users within 72 hours.
Questions[edit | edit source]
If you have any questions regarding the capture, storage and use of data by Physiopedia please don’t hesitate to contact us.
