1.1 We are committed to safeguarding the privacy of our clients and the candidates who complete our assessments.
1.2 This policy applies where we are acting as a data controller with respect to the personal data of candidates who complete our assessments, and other users of the Site; in other words, where we determine the purposes and means of the processing of that personal data.
1.4 In this policy, “we”, “us” and “our” refer to Behavioral Sciences Research Press, Inc. in the US.
2. How we use your personal data
2.1 In this Section 2 we have set out:
(a) the general categories of personal data that we may process;
(b) the purposes for which we may process personal data; and
(c) the legal bases of the processing.
2.2 We may process data about your use of our website and services (“usage data“). The usage data may include your IP address, geographical location, browser type and version, operating system, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our PsychScore 2.0 assessment system. This usage data may be processed for the purposes of troubleshooting system problems and analyzing your assessment-taking behavior in conjunction with your assessment scores. The legal basis for this processing is consent.
2.3 We may process your account data (“account data“). The account data may include your name and email address. The source of the account data is you or the organization who invited you to take the assessment. The account data may be processed for the purposes of providing our services and maintaining back-ups of our databases. The legal basis for this processing is consent.
2.4 We may process your information included in the demographic section of our assessment (“demographic data“). The demographic data may include your gender, ethnicity, educational details, employment details, and other information you voluntarily provide in the demographic section of the assessment. The demographic data is not shared with the organization who invited you to take the assessment. It is only shared with senior research staff at BSRP in Dallas, Texas, USA. The demographic data will be anonymized and aggregated with previously collected data and processed for the sole purpose of ongoing research. The legal basis for this processing is consent.
2.5 We will process your personal data that are provided in the course of the use of our services (“service data“). The service data includes your responses to assessment questions. The source of the service data is you. The service data will be processed for the purposes of generating an assessment profile. The legal basis for this processing is the legitimate interests of the organization who invited you to take the assessment, namely for generating profiling information to analyze or predict aspects concerning your behavior at work. Your service data is automatically processed immediately after you respond to the final question on the assessment. If you don’t want your data to be processed, close your browser before completing the assessment.
2.6 We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
2.7 We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
2.8 In addition to the specific purposes for which we may process your personal data set out in this Section 2, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
2.9 Please do not supply any other person’s personal data to us, unless we prompt you to do so.
3. Providing your personal data to others
3.1 We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.
3.2 We may disclose your personal data to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
3.3 We will disclose your name, assessment scale scores, and a small number of your responses (“critical items” or “surface checks”) to the assessment to the organization who invited you to take it, as well as our authorized licensee or sales rep that services the account of the sponsoring organization. We will not disclose your gender, ethnicity, or any other optional demographic information you voluntarily provide to any other organization or individual.
3.4 In addition to the specific disclosures of personal data set out in this Section 3, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
4. International transfers of your personal data
4.1 In this Section 4, we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).
4.2 Our office is located in the United States of America.
4.3 The hosting facilities for our website(s) and servers and their backups are situated in the United States of America.
4.4 Your personal data is transferred to us in the US periodically while you are answering the assessment questions.
5. Retaining and deleting personal data
5.1 This Section 5 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
5.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
5.3 We will retain your personal data as follows:
(a) Your name and assessment scores will be retained and made available to the organization who invited you to take the assessment and its authorized licensee or sales rep who services its account for a period of 5 years following the date of completion of the assessment unless you send us a request to delete it.
5.4 Notwithstanding the other provisions of this Section 5, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, for compliance with professional standards to which we are bound, or in order to protect your vital interests or the vital interests of another natural person.
6.1 We may update this policy from time to time by publishing a new version on our website.
6.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
7. Your rights
7.1 You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to:
(a) the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport, valid driver’s license or a copy of a utility bill showing your current address).
7.2 We may withhold personal information that you request to the extent permitted by law.
7.3 Personal Information obtained from assessment candidates from our PsychScore ROSE scoring application will not be used for marketing purposes.
7.4 To the extent that the legal basis for our processing of your personal data is consent you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others. If you would like a copy of your personal data, send an email to email@example.com and we will send you a short form to complete so that we can fulfill your request.
7.5 If you consider that our processing of your personal information infringes data protection laws, you have a legal right to submit a complaint with a supervisory authority responsible for data protection. The supervisory authority in the United States is the Federal Trade Commission. EU residents may submit a complaint to the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
7.6 To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
7.7 You may exercise any of your rights in relation to your personal data by written notice to us.
8. Our details
8.1 This website is owned and operated by Behavioral Sciences Research Press, Inc.
8.2 We are registered in the State of Texas and our registered office is at 12803 Demetra Drive, Dallas, Texas 75234 USA.
8.3 Our principal place of business is at 12803 Demetra Drive, Dallas, Texas 75234 USA.
8.4 You can contact us:
(a) by post, to the postal address given above;
(b) using our website contact form (www.salescallreluctance.com);
(c) by telephone, the contact number published on www.salescallreluctance.com, during normal business hours; or
(d) by email, using firstname.lastname@example.org.