Data Privacy within the WBL-Q Self-Assessment and Stress Test Tool
These data regulations are specifically covering the GDPR compliant data collection and protection of the WBL-Q Self-Assessment and Stress Test Tool.
We tried to be concise to enhance readability. If you have any further questions, please do not hesitate to contact info@wbl-quality.eu and we will be at your service.
Please also see our FAQ section as well as our main website to gain more insight about the background, aims and theory behind the WBL-Q services.
There is also a separate, additional privacy policy for the whole website, which you can view here: www.wbl-goes-virtual.eu/privacypolicy
Data Regulations of the WBL-Q Services
The WBL-Q Self-Assessment and Stress Test Tool is a free web-application that can be accessed online by any internet ready device. Upon registration, you are asked to confirm their agreement with the data collection and protection measures, which are described below.
The WBL-Q services are free to use for anyone. No installation of the WBL-Q services is necessary as the tool can be used completely online as web-app.
The WBL-Q services include:
- User registration based on user name, email address, password plus descriptive elements (see more details below) incl. automatic email authentication
- Quality self-assessment questionnaire structured in 6 building blocks of work-based learning quality that can be repeated multiple times
- Calculation of scores based on the given answers
- Comparison of user’s current score against their first score and peer group scores (see more details about benchmarking below)
- Stress Test evaluation of the user’s work-based learning system against 5 mega trends based on the answers provided in the self-assessment questionnaire
- Optional possibility to produce a PDF result report that can be downloaded and customised
- Optional possibility to produce a PDF certificate that can be downloaded and customised
- Customisation options for PDF result report and certificate include the company name, company logo, name of responsible person who implemented the assessment
To use the WBL-Q services, it is necessary to register as a user. For this, the indication of a user name, an email-address and a unique password are mandatory. Users are approved through automatic email authentication.
Furthermore, the user is asked to indicate their country as well as other descriptive information about their work-based learning offers. These data are used for benchmarking the results of users in order to offer comparison of work-based learning systems within professional peer groups in the same country and size of a company. Nonetheless, all data is complexly anonymised, which means that there is no possibility to link the answers to specific users. At no point will user names or email addresses be visible to other users or third parties. This benchmarking happens only in the visualisation of the scores in the user dashboard and is calculated using the average scores of users in the same peer (allocated through the descriptive information provided in the registration/user profile).
User profiles can be changed and deleted at any given time. Deleting the user will automatically remove all user related data in the data storage.
Upon completing the self-assessment, users are able to download an automatically generated result report and even a certificate. The result report and certificate can be customised by indicating the company name, company logo, and name of the person who did the assessment. Providing this information is optional and the data will not be stored or saved by the WBL-Q services.
In summary, the following user related data is stored and visible to the WBL-Q admins, but not to other users or any third parties:
- User name
- Email address
- Country
- Number of employees
- Average number of WBL learners per year
- Number of persons responsible for WBL processes
- Number of years the company has been offering WBL
- Current saved answers in the self-assessment questionnaire
The data collection solely serves the purpose of providing the WBL-Q services and the data inserted by users will not be utilised for any other purposes.
Data Storage
As mentioned above, user data and answers to the questionnaires are stored by the WBL-Q project in order to allow smooth usage of the online tool. Saving the data serves the purpose of saving the progress of users and allowing users to compare their own current results with their own first scores as well as against benchmarks of peer level organisations.
The WBL-Q services and website are hosted on servers provided by https://all-inkl.com and we are using SSL encryption to assure data security. If you have any question about the storage and processing of your data, please contact the data protection controller first as they have the full insight and knowledge about the technical mechanisms of the WBL-Q services.
User data is stored as long as the user account exists and is not deleted by the user. Upon deleting the account, all related data will be deleted automatically and immediately.
Contact Data and legal notes
Concerning the WBL-Q services, please contact the data protection controller at info@wbl-quality.eu
The WBL-Q services are result of a transnational project co-funded by the Erasmus+ Programme of the European Commission.
Agreement Number: 2020-1-AT01-KA226-VET-092549
The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.
The coordinator and legal responsible of this project is “Verein Auxilium”.
Verein Auxilium
Auxilium pro Regionibus Europae in Rebus Culturalibus/ Verein zur Förderung von Bildung und Kultur in einem Europa der Regionen
Geidorfplatz 2
8010 Graz
Austria
Tel.: 0043-(0)316-328044
Fax.: 0043-(0)316-328027
Sipgate: 0043-0720 503412
Email: office@auxilium.co.at
Web: www.auxilium.co.at
ZVR-Nr. 060788846
UID-Nr. ATU-61576057
Auxilium pro Regionibus Europae in Rebus Culturalibus is a registered non-profit association; it is subject to the Law on Associations and the Tax Law of the Republic of Austria. Its content, operational, organisational and financial business practices are regularly reviewed and confirmed for legality by internal and external representation and control bodies.
Definitions & Rights
For detailed definitions, the text of the GDPR can be found here: https://gdpr-info.eu
In addition to the information above, here are certain key principles that are to applied when working with your data. All data shall be:
- processed lawfully, fair and transparent;
- collected for specified, explicit and legitimate purposes;
- adequate, relevant and limited to what is necessary;
- accurate and up to date;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
- processed in a manner that ensures appropriate security of personal data.
The data protection controller is responsible to ensure compliance with these principles.
Right of Access and Information
You may request confirmation from the data protection controller regarding whether or not your personal data have been processed by us.
Right to Rectification
You have the right to rectification and/or completion by the data protection controller if the personal data concerning you that have been processed are incorrect or incomplete.
Right to Erasure
By deleting your account, your data is immediately erased from our data bank. If you have concerns or questions, you may contact the data protection controller to immediately erase the data concerning you, and the data controller shall be obliged to erase these data without delay.
Right to Revoke the Data Protection Declaration of Consent
You have the right, at any time, to revoke your data protection declaration of consent. The legality of the processing undertaken on the basis of the consent provided up until the time of revocation shall be unaffected by the revocation of consent. Upon revoking your consent, your user account and connected data will be erased immediately.