List of active policies

Full policy

1. Who we are 

Unipart Group Limited (“We”,”Us”,”The Company”) is a company incorporated in England and Wales, registered at Companies House (00576777), whose registered address is at Unipart House, Garsington Rd, Cowley, Oxford OX4 2PG. 

For the purpose of this Privacy Notice, Unipart Group Limited is acting in its capacity as a Data Controller within the meaning of the DPA 2018 and UK GDPR. Further information regarding the legal entities that form part of ‘Unipart Group Limited’ can be found at Unipart’s Terms & Conditions/Legal Notice. 

2. What data we collect

When you use our online e-learning platform, we may collect and process the following categories of personal data:

• Identification Data: This may include your name, employee ID, and contact details such as email address.

• Employment Information: Information related to your employment such as job role, grade, department, line manager, site, division and location.

• Usage Data: Information about your interaction with the e-learning platform, including log-in details, courses taken, progress, and performance.

3. How your data is collected

When we collect your data, we will do so via the following methods:

• Directly from You: When you sign in to the e-learning platform manually or via google sign-on, you provide us with personal data such as your name, email address, etc. 

• Automatically: When you use the e-learning platform, certain information may be collected automatically, including log-in details, IP address, device information, and usage data.

• From Unipart Systems: We may receive personal data from other systems or databases maintained by Unipart, such as employee records, for the purpose of user authentication and access management.

4. Why and how we process your data

When we process your data, we will do so in line with the following reasons: 

• Providing Access and Support: To provide you with access to the e-learning platform and to offer technical support as needed.

• Monitoring and Improving: To monitor the usage of the platform and make improvements to enhance your learning experience.

• Compliance and Reporting: To comply with legal obligations and internal policies

5. Our Lawful Basis for collecting your data

When processing your personal data, the following lawful bases apply: 

• Performance of Contract: Processing is necessary for the performance of the contract between you and Unipart for access to the e-learning platform.

• Legitimate Interest: Processing is necessary for our legitimate interests in monitoring and improving the e-learning platform and ensuring compliance with legal requirements.

6. How we keep your data secure

Unipart is committed to protecting the confidentiality and security of your information. We have appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have legitimate grounds to do so.  They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We also ensure that we assess the security measures of these third-party providers, such as Titus Learning to ensure they meet our security standards.

7. Where your data is stored

Your personal data is stored securely within the United Kingdom and on servers provided by Amazon Web Services (AWS), a cloud computing service provider. We have taken appropriate measures to ensure that your data is adequately protected in this instance and that the appropriate technical and organisational security measures are in place.

8. Who we may share your data with

We may disclose your personal data to the following recipients:

• Third-Party Providers: We may share your personal data with the third-party provider, Moodle and Titus Learning, who operates the e-learning platform on our behalf.

• Internal Parties: Your personal data may be accessed by employees of Unipart who require it for the management of their duties.

9. How long we keep your data 

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice, or as required by law. The specific retention period may vary depending on the nature of the data and legal requirements.

10. Your Data Protection rights 

In certain circumstances, you have the following rights under data protection legislation to your personal information:

• The right to know what information we hold about you ('right to be informed') 

You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal data protection policies and through our external website notice. These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.

• The right to request access to or a copy of the information we hold about you ('right of access')

You have the right to ask us for copies of your personal information. This right always applies however we may need to verify your identity before providing you information and to clarify your request. We may be unable to process your request until we have all required information.

• The right to have your data corrected if it is inaccurate ('right to rectification')

If any of the personal information we hold about you is inaccurate, incomplete or out of date, you may ask us to correct it. 

• The right to have your data erased where we do not have an overriding legal obligation or reason to retain it ('right to erasure')

You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.

• The right to prevent your data being used (‘right to restriction of processing’)

Individuals may have the right to request the restriction or suppression of personal data. This right will only apply in certain circumstances.

• The right to object to its use, including opting out of receiving marketing such as our newsletter (‘right to object’) 

In certain circumstances, individuals have the right to object to the processing of personal data. Any such objection must be based on your particular situation. We will review each request we receive.

• The right to request that we pass data about yourself that you provided us to another organisation on your behalf (‘right to data portability’)

The right to portability gives you the right to receive personal data you have provided to a controller in a structured, commonly used and machine readable format. It also gives you the right to request that a controller transmits this data directly to another controller.

11.  Contact us

The Unipart Group Data Protection Officer carries out  internal supervision of our responsibilities under this Privacy Notice. Our Data Protection Officer can be contacted via the following: 

• by post: Unipart Group Limited for the attention of Data Protection Officer, Unipart House, Garsington Road, Oxford OX4 2PG

• by email: to group.dataprotection@unipart.com

• By telephone: to 01865 778966

You also have the right to lodge a complaint with the supervising authority, the Information Commissioner’s Office (ICO) at any time. For further information, please refer to the ICO website, www.ico.org.uk