Privacy Policy

Last Updated (Effective Date) 1 February 2025

 

Scope of Privacy Policy

This Privacy Policy applies to the personal information that we obtain when you use the Training Soultions Arabia website or when you otherwise interact with Training Solutions Arabia [“TS Arabia”].

The data controller in accordance with the applicable data protection law is Training Solutions Arabia. TS Arabia is responsible for ensuring that your personal data is processed in compliance with this policy and applicable data protection laws.

For data subjects located in the EU/EEA, you can contact one of our office locations directly.

Collection of Information

Information you provide to us

Training Solutions Arabia Account Information

We collect information about you or your company when you use our products and/or services, do business with us and when you interact with us: register for TS Arabia services [including but not limited to, when you download, view, or share content], require assistance regarding a service.

Information we Collect as a Processor Includes

 

·    Contact and user information, such as name, personal/business address, contact telephone number[s] and e-mail addresses

·    Billing information, such as billing address

·    Profile information, such as name and e-mail address

·    Preferences Information, such as notification and marketing preferences; you can opt out from receiving direct marketing by modifying your

     marketing preferences in the preferences center or by following the unsubscribe link available in the newsletters

·    Information related to accreditation processes, such as data records

 

You may provide this information directly when you enter it in the website contact page, service form, or website recruitment area.  You may also refuse to enter the information asked, but please note that by limiting the information you provide to us, we can only provide you limited services.

Other Submissions

We process other data that you submit to our website, or as you participate in any interactive features of the service form, participate in surveys, contests, promotions, activities or events, request client support, communicate with us via third party social media sites or otherwise communicate with us. For example, you can submit information regarding a problem you are experiencing with a TS Arabia service to us via website, email or via telephone.

This type of data may by collected also from individuals, who are not currently TS Arabia´s clients but interested, perhaps, in contracting services from us, or working with us, or interested in employment through our services.

Information we Collect from use of TS Arabia Services

Information collected using Cookies

We collect certain information through the use of cookies, which are small text files that are saved by your browser when you access our Services. We use both session cookies and persistent cookies to identify that you’ve logged in to the Services and to tell us how and when you interact with our Services. We also use cookies to monitor aggregate usage and web traffic routing on our Services and to customize and improve our Services. Unlike persistent cookies, session cookies are deleted when you log off from the Services and close your browser. Although most browsers automatically accept cookies, you can change your browser options to stop automatically accepting cookies or to prompt you before accepting cookies. Please note, however, that if you don’t accept cookies, you may not be able to access all portions or features of the Services. Note that this Privacy Policy covers only our use of cookies and does not include the use of cookies by third parties.

This type of data may by collected also from individuals, who are not currently TS Arabia´s clients but interested, perhaps, in contracting services from us, or working with us, or interested in employment through our services.

Purpose and Legal Basis for Processing Your Personal Data

Personal Information to the extent applicable) for a variety of purposes:

1. Service provision and managing your customer relationship

Provide, operate and maintain TS Arabia Services; Process and complete transactions, and send you related information, including purchase confirmations and invoices; Send transactional messages, including responding to your comments, questions, and requests; providing customer service and support; and sending you technical notices, updates, and support and administrative messages;

Our processing of personal data for these purposes is based on the contract between you/ the company you represent and us.

2. Service development and information security

Monitor and analyze trends, usage, and activities in connection with our Services;

Improve the quality of the Services and to develop new features in the Services. This means for example using analytics information (including log and configuration data) to understand how our products are being configured and used and how they can be improved for the benefit of all of our users;

Ensure the security of the Services; and

Investigate and prevent fraudulent transactions, unauthorized access to Training Arabia Services, and other illegal activities;

The legal basis for these purposes of processing is our legitimate interest to ensure that our Service has an adequate level of data security, that the Services are used according to the Terms and Conditions or any other Terms of Use that may apply to the Services and applicable laws, and that we have sufficient and relevant information at hand to develop our Service.

3. Marketing

Where we have the needed permissions, TS Arabia may send you promotional communications, such as information about services, features, surveys, newsletters, offers, promotions, contests, events and providing other news or information about us and our select partners. You always have the ability to opt out of receiving any of these communications by using the “unsubscribe link” within the e-mail or by amending your marketing preferences in the preferences center;

Personalized TS Arabia Services, including by providing content, features, or advertisements that match your interests and preferences;

Our processing of personal data for these purposes is based on our legitimate interest to provide you relevant information as part of the Services and to promote the Services to you.

When the legal basis for our processing of your personal data is legitimate interest, we have done a so-called balancing test as required by data protection legislation to ensure that it is all right to use this legal basis. If you would like find out more about this, please contact through the contact form.

What Information do we Share with Third Parties?

We will not share your personal data except as described below

Affiliates

TS Arabia has a number of authorized partners and subsidiaries (local offices) [collectively, “Affiliates”]. We share your personal data with these affiliates, when it is required to do so in order to provide the services to you, in which case we require our Affiliates to abide by the requirements of this Privacy Policy.

Mergers and Acquisitions

If another company acquires our company or our assets (for example in connection with a merger, acquisition or bankruptcy), that company may acquire also the personal data collected by us and in this case will assume the rights and obligations regarding your personal data as described in this Privacy Policy.

Information shared with third party service providers

TS Arabia may share your information with third party service providers to provide you the Services, to facilitate your use of our Services, to process any financial transactions you make through our Services, or to provide support. This means, for example, third party vendors who provide the necessary software, networking, storage and other similar technology that are required to provide the Services. Except as set forth in this Policy, these third-party service providers must only use your information to provide the services requested by TS Arabia.

Disclosing personal data to competent authorities or for safety reasons

We may share your personal data to comply with requests from competent authorities or related to legal proceedings when this is permitted or required by law, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Information we disclose with your consent or at your request

If you have expressly requested that we do so, we may share your personal data with (i) third-party sites or platforms, such as social networking sites; and/or (ii) third-party application developers.

Third-Party Sites, Applications and Services

Our Services may contain links to other websites and services, and some of our Services may be accessed through third-party applications or services. Any information that you provide on or to a third-party website, application, or service (“Third-Party Services”) is provided directly to the owner or operator of such Third-Party Services and is subject to that party’s privacy policy. Even if such Third-Party Services are accessible through our Services, our Privacy Policy does not apply to such Third-Party Services and we shall not be held responsible for the content, privacy, or security practices and policies of such Third-Party Services. To protect your information, we recommend that you carefully review the privacy policies of other Third-Party Service that you access or use.

Transferring your personal data outside the EU/EEA

Some of our Affiliates and third-party service providers process personal data outside the European Economic Area (EEA):

 

·    For example, some of the personal data is stored on cloud-based servers which can be geographically located outside the EEA, such as in the           United States

·    TS Arabia has employees in Australia, South Africa, the UK, who do not have access to the personal data of EU residents

·    Our partners are located all over the world; the partners mostly process personal data of their local contacts, but they may also in some                      situations have access to personal data of EU residents.

If personal data of EU residents is in any way transferred or processed outside the EEA, we take all necessary steps to ensure that such personal data continues to be adequately protected. Usually we use EU Commission’s Standard Contractual Clauses (as required by Article 46.2 of the EU General Data Protection Regulation), which means that we have a contract in place with our affiliates or service providers, requiring these parties to process personal data in a secure manner. If you would like find out more about this, please contact us through our contact form.

 

Retention of Personal Data

Your personal data will be retained only for as long as necessary to fulfil the purposes defined in this Privacy Policy.

Most of your personal data will be retained during the course of your customer relationship with AE. Some personal data might be retained after your customer relationship with us has ended, if required or allowed by applicable laws; for example, applicable tax and accounting legislation requires us to keep some information for six years and in some cases even longer. When your personal data is no longer required by law or rights or obligations by either party, we will delete your personal data.

Personal data which is not necessary for the customer relationship will be deleted or anonymized as soon as possible after the collection of such personal data and at latest within 12 months.

Your rights

You have a right to access personal data we process about you. You may access, correct, update, change or remove your personal data at any time. However, please note that certain information is strictly necessary in order to fulfil the purposes defined in this Policy and may also be required by law. Thus, you may not remove such personal data.

You have a right to object for certain processing. To the extent required by applicable data protection law, you have a right to restrict data processing.

You have a right to data portability, i.e. right to receive your personal data in a structured, commonly used machine-readable format and transmit your personal data to another data controller, to the extent required by applicable law.

You have a right to complain to a supervisory authority in accordance with Article 77 of the EU General Data Protection Regulation. You can contact the supervisory authority of your place of residence, place of work, or place of one of our entities located in the EU.

 

TS Arabia clients and users:

If you want us to delete or disable your personal data and your TS Arabia account, please contact our internal administration. If you don’t know your administrator, you can contact TS Arabia through the contact form with your request.

You may opt out of receiving promotional communications from TS Arabia by using the unsubscribe links or emailing us to have your contact information removed from our promotional email list or registration database.

Non-customers:

If you wish to access your personal data, wish to have your personal data removed or want to use any of the other rights mentioned above, please contact security@trainingarabia.com.

Security of your information

We take reasonable measures to protect the information that we collect from or about you (including your PII) from unauthorized access, use, or disclosure. Our Services have security measures in place to help protect against the loss, misuse, and alteration of the Data under our control. When our Services are accessed using a supported browser, Secure Socket Layer (SSL) technology protects information using both server authentication and data encryption to help ensure that data are safe, secure, and available only to you. TS Arabia also hosts the website in a server environment designed to be secure and that uses a firewall and other technology designed to prevent interference or access from outside intruders.

Sensitive Information

Our purposes of processing your personal data (as described above) do not necessitate collecting and processing of any sensitive information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership). We kindly ask you to not send any sensitive information on or through our Services or via any other means as this poses unnecessary risks to your privacy.

Changes to Privacy Policy

We may modify and revise this Privacy Policy from time to time if this is necessary for example due to changes in the Services. If we make any material changes to this Privacy Policy, we’ll notify you of such changes by email or other appropriate mode of communication.

Contacting Us

Please contact us through our contact form if you have any questions about our Privacy Policy.

Data Security and Business Continuity Policy

TS Arabia considers the security of the data of its customers and users to be a fundamental pillar to be a trusted partner in accreditation and certification services and attention to our clients. The entire organization works to guarantee the confidentiality, integrity and availability of the data it processes, in accordance with the Information Security Management System according to ISO/IEC 27001, with special attention to personal data in accordance with the Information Privacy Security Management System according to ISO/IEC 27701.

TS Arabia wants to be a benchmark in the sector, and to exceed the expectations of its customers and users. Therefore, it considers it essential to guarantee, in the event of any disruptive incident, its ability to adequately meet the services requested. The entire organization is prepared for the management and response to disruptions, through the Business Continuity Management system according to ISO 22301.

To achieve this, TS Arabia is committed to complying with all the information security and business continuity requirements that are applicable to it, continuously improving its Information Security and Privacy Management System and Business Continuity Management System.

 

April 2024