Yardstick is committed to conducting its business in accordance with all applicable Data Protection laws and regulations and in line with the highest standards of ethical conduct.
Yardstick is a “Processor” of data, and the site owner is the “Collector” of data, and collects “Personal Data” during the registration process when you sign up for services through a Yardstick site.
Personal Data is any information which relates to an identified or Identifiable Natural Person. Personal Data is subject to certain legal safeguards and other regulations, which impose restrictions on how controllers may collect and manage personal data, and how Processors use and process Personal Data. Yardstick is the controller of data for our platforms, and the site owner is the controller of your data. In some cases, Yardstick may own and operate a training or testing site on our platforms, in which case we act as the controller of data.
Yardstick’s leadership is fully committed to ensuring that we support your site owner and you, as a user, to ensure that the controls are in place to protect your data, and ensure you or your controller have the proper access to data stored on a Yardstick system, and are able to perform functions within your rights to update or remove your data and restrict and communicate the use of your data for purposes only related to the fulfillment of requirements for testing and training on our platforms.
You, as a “Data Subject”, have been forwarded certain rights over the control and use of your data. At any time, you should be able to exercise these rights with the help of your controller, and in many cases, directly through our platforms. These rights are:
Proper consent from you, to collect personal data
In all cases, on a Yardstick Platform, personal data that is entered into our platform requires consent from you, the user. If your personal data is added or imported into to our system from the site owner, then consent would have been required when the controller requested your information (ie, registration process)
The right to be informed
You, as an individual have the right to be given information about how your data is being processed and why. At Yardstick, we collect personal information through our platform to register you as a user, and tie you to an exam or training course, and your related training and testing history. This information is used by the controller to track and store your educational data.
The right of access
As a user, we make sure that you have access to your information. This is done in our platforms through your user login. All data collected by our systems is available in your profile information screen.
The right to rectification
Along with accessing your data, you will have the ability to update certain information on your user profile by logging into your account and visiting your profile page. If there is data in your profile that you cannot change, it is likely accessible and updateable by your controller / site owner. Please contact them for additional changes. If you cannot find their contact information, you can contact Yardstick directly at firstname.lastname@example.org, and we will be happy to forward their contact information to you.
The right to erasure
At any time, as a user, you have the right to have your information removed from our systems. This functionality may be enabled on your user profile where you can delete your profile. If this functionality is not available on your profile page, contact your site owner (controller) for this request, they will have the ability to remove your information. If you cannot find their contact information, you can contact Yardstick directly at email@example.com, and we will be happy to forward their contact information to you.
The right to restrict processing
At any time, you have the right to restrict how we, the processor, processes your data. Yardstick currently processes your data for the purposes of completing a payment, and for virtual proctoring (where applicable). Outside of these two scenarios, your data Is only kept on the Yardstick Platform for the data controllers use for tracking exam and training history. If you want to make a restriction request to your controller (site owner), your record can be make ‘inactive’ until your request that it be active.
The right to data portability
At any time, as a user, you have the right to receive your record of data in a user friendly format. All of the data stored in our platforms is easily accessible from your profile page, in unencrypted format (except for your password).
The right to object
Yardstick processes your information for the purposes of associating user data with training and exam records for our customer, the site owner. We do not send your data to third parties, or use it for any other purpose. At any time, if you feel that right to object to processing, and want your data removed, contact your site owner (controller) for this request, they will have the ability to remove your information.
Rights in relation to automated decision making and profiling
Yardstick is in the business of providing training and test delivery services for you, and for training companies and certifying bodies. It is important to understand that our services are strictly limited to the delivery of training content and tests, and our processing is strictly limited to the collection of your data on our registration forms, solely for the purpose of storing and reporting on training and test history and metrics. We do not use your data for anything other than this, including marketing or re-marketing to, or distributing your data to third parties for such.