Privacy Statement
This Privacy Statement describes how and why BDO
LLP and its hosted learning management system named Acumen at www.bdo-acumen.co.uk (“we” or “us”) collects and
uses personal data (i.e. data relating to an identified or
identifiable individual) in the course of its business. It applies to
personal data provided directly by the individuals concerned and to personal
data provided by companies and other organisations.
We
are committed to the protection of personal data and to fair and transparent
processing.
Privacy Statement
Last updated 13 October 2022
Introduction
This Privacy Statement describes how and why BDO LLP and its hosted learning management system named Acumen at www.bdo-acumen.co.uk (“we” or “us”) collects and uses personal data (i.e. data relating to an identified or identifiable individual) in the course of its business. It applies to personal data provided directly by the individuals concerned and to personal data provided by companies and other organisations.
We are committed to the protection of personal data and to fair and transparent processing. If you have any questions about this Privacy Statement, you can contact our Data Protection Officer by email at dpo@bdo.co.uk.
To find out more about how and why we process personal data, please refer to the Privacy Statement below.
Data controller
BDO LLP, a limited liability partnership registered
in England with number OC305127 with a registered address of 55 Baker
Street, London W1U 7EU, is registered as a data controller under registration
number Z5799637.
Security of personal data
We have policies, procedures and training in place in respect of data protection, confidentiality and information security. We regularly review such measures with the objective of ensuring their continuing effectiveness. This Privacy Statement was last updated in October 2022.
International transfers of personal data
In the course of running our business and providing
services to clients we may transfer personal data to third parties located in
other countries that have less stringent data protection laws. Where we
transfer personal data to a country not determined by the relevant authority to
provide an adequate level of protection for personal data, we will take steps
to ensure that personal data will be adequately protected in accordance with
applicable law, such as using approved standard contractual clauses.
Provision of personal data to third parties
We will only share personal data with third parties where we are legally permitted to do so. We do not provide information to third parties for their own marketing purposes, and we do not undertake mailings for third parties. Where we transfer personal data to third parties, we will put in place appropriate contractual arrangements and seek to ensure that there are appropriate technical and organisational measures in place to protect personal data.
We may provide personal data to:
· Other BDO Member Firms – we may share personal data with other members of the BDO International Network where required for the provision of services to our clients and/or for administrative purposes.
· Third parties involved in the performance of services – we may also share personal data with third party organisations who assist us in providing services to clients or are otherwise involved in the services we provide to clients.
· Third parties who provide IT services, data processing or functionality – like many professional service providers, we use third party providers to support our business and the provision of services to our clients, such as cloud-based software providers, web hosting/management providers, data analysis providers, and data back-up and security/storage providers. We may transfer personal data to such third parties.
· Auditors and advisers – we may transfer personal data to our auditors and advisers as required by law or as reasonably required in the management of our business.
·
Third
parties where required by applicable law and regulation – we may be requested
or compelled to disclose personal data to third parties such as regulators and
law enforcement agencies. We will only provide personal data to such parties
where there is a legal requirement or permission to do so.
Your Rights
You have rights in relation to any of your personal data held by us as a data controller. Should you wish to exercise your rights, please contact our Data Protection Officer by email at dpo@bdo.co.uk. We will endeavour to respond to any request promptly and within any legally required time limit.
You also have a right to update your personal data that we hold. To do so, please either update the personal data via the learning management system settings available to you, contact your organisation’s e-learning administrator or contact the Acumen help desk by email at elearning.helpdesk@bdo.co.uk. Where we process your personal data based on your consent, you have a right to withdraw consent at any time. Should you wish to do so, please contact the Acumen help desk by email at elearning.helpdesk@bdo.co.uk.
Finally, in addition to the rights above, you may
also have other rights in relation to personal data, including a right to
erasure/deletion, the right to data portability and the right to restrict
and/or object to our processing of personal data.
Complaints
Should you wish to complain about our use of your personal data, please contact our Data Protection Officer by email at dpo@bdo.co.uk. We will investigate all complaints received and will endeavour to respond to complaints promptly.
You may also complain about our use of personal
data to the Information Commissioner’s Office. For further information on your
rights and the complaints process, please visit the Information Commissioner’s
Office website: https://ico.org.uk/for-the-public/raising-concerns/
Data Retention
We will only keep personal data for as long as necessary for the purposes for which it was collected, or as required by applicable law or regulation.
Unless there are any overriding legal, regulatory or contractual requirements, we will retain records of services provided (which may include personal data) in accordance with our document retention policy.
Acumen cloud-based hosted Learning Management System
What personal data do you collect when I visit www.bdo-acumen.co.uk?
When you participate in any of the activities or services offered by BDO’s learning management system, Acumen, hosted at www.bdo-acumen.co.uk, we will collect the personal data that we need in order to provide you with those services, such as your name, job title, email address, employer's name, and telephone number. We may also collect technical information such as your IP (Internet Protocol) address, details of the pages you visit on www.bdo-acumen.co.uk, other pages you visit on the Web, and which browser you used to view bdo-acumen.co.uk
This website collects standard internet log and technical data to measure and improve the effectiveness of this website, to help diagnose problems with our server, to administer this website, to see where website traffic is coming from and to identify our users. We may also collect other information via www.bdo-acumen.co.uk, such as website usage activity and preferences, also known as demographic or profile data. In this connection we may use "cookies" to collect this information. For more information see our Cookie Policy.
We do not seek to collect any sensitive personal
information from you on www.bdo-acumen.co.uk, such as information in
respect of your race or ethnic origin, political opinions, religious or other
similar beliefs, physical or mental health, sexual orientation or criminal
record.
What do you use personal data collected through the www.bdo-acumen.co.uk website for?
We aim to collect the minimum amount of information necessary for the stated purpose of providing a hosted virtual learning environment with a library of courses for users to access as detailed by your organisation, and to support the ongoing administration and management of users and courses. When we collect personal information from you in the following circumstances, we will use it for the stated purpose for example when you:
· create an individual or corporate user account;
· allocate training to users;
· request support;
· register for or participate in an online class, exam, certification, training, webcast or other event;
· request information or materials;
· participate in surveys or evaluations;
· make a purchase through our shop;
· submit questions or comments; or
· submit content or posts on our forums or other interactive webpages.
Unless you ask us not to, we may also use your data to contact you with information about our business, services and events, and other information which may be of interest to you. You will always be able to opt out of these communications at any time.