Privacy policy

Lantra Privacy Notice

Introduction

Lantra gathers and processes your personal information in accordance with this privacy notice and in compliance with the relevant General Data Protection Regulation (GDPR) and laws. This notice provides you with information about your rights and our obligations, and explains how, why and when we process your personal data.

Who we are

Lantra is a registered charity and is committed to its charitable objectives, which are…

…to advance the education of the public and carry out educational research…

This will be achieved through delivery of high quality training, assessment and qualifications (by the Awarding Organisation), and by undertaking other work that meets the charitable objectives, where funding is available. Lantra aims to improve lives and businesses by promoting and enabling skills development.

Lantra’s registered office is at Lantra House, Stoneleigh Park, Coventry, Warwickshire CV8 2LG and we are a company registered in England and Wales under company number 2823181.  

Our charity registration number in Scotland is SC039039.

We are registered on the Information Commissioner's Office Register as Z5878437. Sandie Absalom is Lantra’s Data Controller, and she can be contacted on 02476 696996.

Personal Data

Information we collect

As part of our funded project work in Scotland, we may need to collect additional information about you. This will be specific to each project but we will always make you aware of what we need to collect and why, and will ask you for your permission to do so. Find out more in our full privacy policy.

How we use your personal data

Lantra takes your privacy very seriously and will only share your information with third parties where there is a legitimate business interest.

If you engage with Lantra as a user of our website, your data will not be shared with any third party.

If you are a learner on a Lantra course with a Training Provider, a Lantra Training Provider, Instructor, External Quality Assurer (EQA) or Assessor then we may need to share your data with Training Providers, EQA’s, Technical Verifiers (TV’s), and bulk mailing organisations.

If you participate in a project funded by a third party then we may share your data with the funder and bulk mailing organisations. The mailing organisation will be asked to delete your data once the mailing has taken place.

We will never disclose, share or sell your data without your consent, unless required to do so by law. We only retain your data for as long as is necessary and for the purposes specified in this notice and other guidance provided by Lantra. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time.  To withdraw consent please contact Sandie Absalom, Data Controller, on 02476 696996.

The purposes and reasons for processing your personal data are detailed below: - 

  • We collect your personal data in the performance of a contract or to provide a service and to ensure that orders are completed and can be sent out to your preferred address
  • We will process your personal data as part of verifying your identity for particular certification processes or skills cards
  • As part of our contractual terms and conditions, approved training providers, EQA’s and TV’s will receive regular updates about Lantra products and services and items of interest relating to our industry. Such information will be non-intrusive.

Lantra in Scotland does not process information relating to Lantra Awards training, assessment and qualifications. However, in delivering the Scotland workplan and farm advisory service activities, we may collect information about you as detailed in the previous section.

How long we will keep your data

Lantra only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. Our policy is to keep your personal data for a maximum of 6 years after which time it will be destroyed. However, should you have been issued a Lantra certificate or card, Lantra’s policy is to keep your information indefinitely.  If you receive your certificate then ask us to destroy your data, we will not be able to provide confirmation of achievement or re-issue lost certificates after that point.

Sharing and disclosing your personal information

We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. Lantra uses dotmailer.com and mailchimp to provide the services below. However, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

Bulk e-mail delivery services

Lantra uses Dotmailer and Mailchimp for bulk e-mail delivery services, including newsletter distribution. They act as a processor on our behalf. The only information we provide them with is your first name, last name and e-mail address.

For Dotmailer’s privacy notice see www.dotmailer.com/terms/privacy-policy/ and for information on Mailchimp and GDPR, see https://kb.mailchimp.com/binaries/content/assets/mailchimpkb/us/en/pdfs/mailchimp_gdpr_sept2017.pdf

Will I be contacted for marketing purposes?

Lantra maintains a training provider membership scheme, an instructor membership scheme and a learner membership scheme and we provide regular emails to let you know about relevant information.

If you are in Scotland, Lantra may communicate with you about the work we do for Scotland’s rural industries on behalf of the Scottish Government.

We will only send you marketing emails if you have given your consent to receive them. Where you have consented to us using your details for direct marketing, we will keep your data until you notify us otherwise or withdraw your consent.

Privacy and your activity

Your rights
  • You have the right to be informed of any information Lantra processes and the reasons for us processing this information
  • You have the right to access any personal information that Lantra holds about you
  • You have the right to rectification. If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct it. We will do so within 20 working days, unless there is a valid reason for not doing so. If there is, we will tell you. Lantra will also ask any third parties holding your data to make these changes too.
  • You have the right to have data erased, but in doing so Lantra may not be able to continue to provide the expected delivery of service. At your request, data will be erased within 20 working days
  • You have the right to restrict processing of your personal data when:
    • the accuracy of the data is contested (for a period of time to enable the controller to verify the accuracy)
    • the processing is unlawful and you object to the erasure of the data and request restrictions of its use instead
    • You object to processing based on the grounds of legitimate business interests
    • Where Lantra as the controller no longer requires the data but you do to exercise or defend a legal claim

  • If you exercise this right it may mean that Lantra will not be able to continue to provide the expected service delivery

  • You have the right to data portability allowing you to obtain and reuse your personal data for your own purpose across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without an effect on usability.
  • You have the right to object to: 
    • direct Marketing. You do not need to demonstrate grounds for your objection, as there are no exceptions which will allow processing to continue.
    • processing based on legitimate interests or performance of a task in the public interest or exercise of official authority.
    • processing for research or statistical purposes.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request. This is to ensure that your data is protected and kept secure.

Please note Lantra does not take part in automated decision making or profiling.

Lantra will always advise:

  • why we require your data
  • with whom your personal data may be shared
  • how long we intend to hold your data for and means of storage and disposal
  • information about the source, if we did not collect the data directly from you
Safeguarding measures

Lantra takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including:

  • SSL/TLS for email encryption and SSL for website encryption
  • Full live network protection through our firewall
  • Network level protection between the secured and unsecured networks with centralised user authentication on our wireless network.
  • Full antivirus scanning across all systems
Transfers outside of the EU (if applicable)

Personal data in the European Union is protected by the General Data Protection Regulation (GDPR) but some other countries may have different standards.

Lantra transfers the following personal data outside of the EU: -

Email addresses of providers or organisations Lantra contracts with for legitimate business objectives to further our charitable objectives


Where we transfer personal information for these reasons, we use our safeguarding measures and mechanisms to ensure that your personal data is always safe and secure.

Further information

Making a complaint

Lantra only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however, you wish to raise a complaint about the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to make a complaint with the supervisory authority.

Make your complaint in the first instance to:

Sandie Absalom, Lantra Data Controller, Lantra House, Stoneleigh Park, Coventry. CV8 2LG

Sandie.absalom@lantra.co.uk  02476 696996   www.lantra.co.uk

Report a concern to:

Information Commissioners Office (ICO), Supervisory Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SKP 5AF

0303 123 1113  www.ico.org.uk

 

Cookie Notice

A ‘cookie’ is a piece of data sent from a website and stored on your computer by your web browser while you are browsing. The first time you visit a site that uses cookies, it puts a cookie onto your computer to log certain types of information. So the next time you visit, your device will remember things like what you have in your shopping cart, the web pages you visited or your logon options.

Cookies are widely used, and our site relies on them to optimise your user experience and for allow some features and services to work properly.

Most web browsers have setting that allow you to restrict or block cookies, but if you disable cookies you may find this affects your ability to use certain parts of our website or services. Find out more at https://www.aboutcookies.org.

Changes to Lantra's privacy policy

This Privacy Notice will be updated from time to time and so you might want to look at it each time you are providing us with information.