个人信息出境告知书 Personal Information Export Notice

报名参加RSL等级认证及各项资格考试时,您需要在报名表上勾选“本人已阅读并同意个人信息出境告知书”。勾选后,RSL方可为您提供认证服务。

英国RSL资质奖励有限公司 (RSL Awards Limited,以下简称“RSL”、“我们”、“我方”)(注册公司编号02610574)致力于保护您的隐私。在任何时候,我们的目标都是尊重您与我们分享的或我们从他人那里收到的任何个人信息,并确保其安全。本隐私声明(“声明”)规定了我们的数据处理实践以及您在使用和收集个人信息方面的权利和选择(包括通过我们的网站rslawards.com)。

本通知包含有关您个人隐私权的重要信息。请仔细阅读,以了解我们如何使用您的个人信息。

向我们提供您的个人信息是自愿的。您有权在任何时候拒绝或辙回您的同意。但是,如果辙回同意,则将影响您使用我们的服务或与我们互动。例如,您将无法参加认证或获得资格证书。

RSL Awards Limited (hereinafter “RSL”, “we”, “us”) (registered company number 02610574) is committed to protecting your privacy. At all times we aim to respect any personal information you share with us, or that we receive from others, and keep it safe. This Privacy Notice (“Notice”) sets out our data processing practices and your rights and options regarding the ways in which your personal information is used and collected (including through our website rslawards.com).

This Notice contains important information about your personal rights to privacy. Please read it carefully to understand how we use your personal information.

The provision of your personal information to us is voluntary. However, without providing us with your personal information, your use of our services or your interaction with us may be impaired. For example, you will be unable to take an examination or receive a qualification.

为了提供必要的认证服务以及为用户提供更好的使用体验,我们的认证服务集成了中国大陆以外的互联网云服务。当您报名参加我们的认证项目时,您的个人信息会被传输至境外。为了确保您个人信息的安全,我们积极采取了如下措施:

根据中国大陆相关法律法规要求,我们(即中国大陆个人信息的境外接收方)进行数据安全能力调查评估,确保我们具有保障您个人信息安全的技术能力;

与中国大陆境内的个人信息处理者签署数据处理协议,确保其仅收集为了实现认证服务所必须的个人信息,并采取充分的技术和组织措施来保障您的个人信息安全;

根据中国法律法规要求,向国家网信部门进行安全评估申报、签署个人信息出境标准合同或进行相关个人信息保护认证。

以下列举了RSL目前使用的跨境服务。我们将根据实际使用情况不时做出更新。

In order to provide necessary qualification services and better user experiencse, our qualification services integrate internet cloud services outside the mainland of China. When you register to sit our exams, your personal information will be transmitted overseas. In order to ensure the security of your personal information, we have actively taken the following measures:

According to the requirements of relevant laws and regulations in the Mainland of China, we (i.e. the overseas recipient of personal information in China) conduct data security capability survey and assessment to ensure that we have the technical capability to protect the security of your personal information;

Sign data processing agreements with personal information processors in China to ensure that they only collect personal information necessary for the service of qualifications, and take adequate technical and organizational measures to ensure the security of your personal information;

According to Chinese laws and regulations, apply for security assessment to the national cybersecurity department, sign a personal information export standard contract, or conduct relevant personal information protection certification.

The following is a list of cross-border services currently used by RSL. We will make updates from time to time based on actual usage.

  1. 您的个人信息收集:RSL将严格遵守《中华人民共和国个人信息保护法》及其他适用的中国人民共和国法律法规来保护您的个人信息(含敏感个人信息)。

Your personal information collection: We will strictly adhere to the Personal Information Protection Law of the People’s Republic of China and other applicable laws and regulations of the People’s Republic of China to protect your personal information (including sensitive personal information).

  1. 收集的目的:我们仅出于以下目的收集、处理、共享和存储您的个人信息:
  • 将您注册为考生,并允许您参加RSL资格认证;
  • 用于认证的管理目的;
  • 进行认证和评估;
  • 颁发认证成绩和证书;
  • 进行任何调查或申诉;
  • 为您购买书籍和资料提供便利;
  • 以其他方式向您提供您要求的服务、产品或信息;
  • 在必要时与您的培训/学习提供方进行沟通;
  • 提供有关我们的工作、服务或活动的进一步信息(如有必要,仅当您同意接收此类信息时);
  • 回答您的问题/要求,并与您进行一般沟通;
  • 管理与我们的合作伙伴和服务提供商的关系;
  • 分析和改进我们的工作、服务、活动、产品或信息(包括我们的网站),或用于我们的内部记录;
  • 确保我们的设施安全;
  • 运行/管理RSL的活动,包括我们的网站,并确保以最有效的方式为您和您的设备呈现内容;
  • 审计和/或管理我们的账户;
  • 履行对我们有约束力的法律义务,例如与我们可能合作的监管、政府和/或执法机构有关的法律义务(例如与纳税或反洗钱有关的要求);
  • 防止欺诈或滥用服务;
  • 关于法律索赔的确立、辩护和/或强制执行;和/或其他法律要求。

Purposes of collection: We will collect, process, share and store your personal information for the following purposes only:

  • to register you as a candidate and allow you to sit examinations;
  • for examination administration purposes;
  • to conduct examinations and assessments;
  • to issue examination results and certificates;
  • to carry out any reviews or appeals;
  • to facilitate your purchase of books and materials;
  • to otherwise provide you with services, products or information you have requested;
  • to communicate as necessary with training/learning providers;
  • to provide further information about our work, services or activities (where necessary, only where you have provided your consent to receive such information);
  • to answer your questions/ requests and communicate with you in general;
  • to manage relationships with our partners and service providers;
  • to analyse and improve our work, services, activities, products or information (including our website), or for our internal records;
  • to keep our facilities safe and secure;
  • to run/administer the activities of RSL, including our website, and ensure that content is presented in the most effective manner for you and for your device;
  • to audit and/or administer our accounts;
  • to satisfy legal obligations which are binding on us, for example in relation to regulatory, government and/or law enforcement bodies with whom we may work (for example requirements relating to the payment of tax or anti-money laundering);
  • for the prevention of fraud or misuse of services;
  • for the establishment, defense and/ or enforcement of legal claims; and/or other law basis.
  1. 个人信息的类别:RSL向您收集以下个人信息,并保存在境外的RSL云端加密服务器上:
  • 姓名
  • 出生日期
  • 性别
  • 唯一的考生标识符/唯一的考生编号
  • 您所报名参加的认证项目详细信息,包括等级、专业、认证类型、认证方式、个人乐器偏好、特殊身体状况、是否有日期和时间要求
  • 考生提供的录制认证视频格式文件

Categories of personal information: We will collect the following personal information from you (personal information of below 14 years of age is defined as sensitive personal information), and store the information on encrypted RSL cloud server located outside of the People’s Republic of China:

  • Name
  • Birth date
  • Gender
  • Unique candidate identifiers / unique learner numbers
  • Detailed information of your qualification(s), including grade, portfolio, exam type, exam method, personal instrument preference, special needs, and specific date and timing requirement
  • Recorded video exam file(s) submitted by the candidate
  1. 敏感个人信息(如适用):

为了向您提供RSL认证服务,中国大陆境内的第三方个人信息处理者需要跨境传输敏感个人信息(例如不满十四周岁未成年人的个人信息)。RSL作为敏感个人信息的境外接收方,将按要求对上述信息采取保护措施, 严格遵守相关法律法规和监管要求。

我们将严格控制对您敏感个人信息的访问,采取数据最小化原则,并确保可能接触您敏感个人信息的工作人员有足够的授权。我们还将采取技术措施,记录和控制工作人员对敏感个人信息的处理,以防止您的敏感个人信息被非法复制和/或下载。

我们仅为在实现上述目的和/或根据您所在国家的合同条款和条件所必须的时间内存储您的敏感个人信息,除非中华人民共和国法律规定您的敏感个人信息的强制存储时间。在存储时间届满后,我们将根据法律要求删除您的敏感个人信息,或对其实行匿名处理。

根据法律规定,十四岁或以下考生提供的个人信息均为敏感个人信息,我们需要获得考生的父母或监护人的明确同意。

In order to provide you with RSL certification services, third-party personal information processors in the Mainland of China will transfer sensitive personal information across borders (such as personal information of minors under 14 years of age). As an overseas recipient of sensitive personal information, RSL will take protective measures for the above information as required, and strictly comply with relevant laws, regulations, and regulatory requirements.

We will strictly control access to your sensitive personal information, under the principle of data minimisation, and ensure that staff who may have access to your sensitive personal information have sufficient authorization. We will also take technical measures to record and control the processing of sensitive personal information by our staff to prevent your sensitive personal information from being illegally copied and/or downloaded.

We only store your sensitive personal information for the time necessary to achieve the above purposes and/or in accordance with the contract terms and conditions of your country, unless the laws of the People’s Republic of China stipulates a mandatory storage time for your sensitive personal information. After the storage period expires, we will delete your sensitive personal information or anonymize it according to legal requirements.

According to legal regulations, personal information provided by candidates aged 14 or below is sensitive personal information, and we need to obtain the explicit consent of the candidate’s parents or guardians.

  1. 获取个人信息的途径

1) 直接提供

例如,当您通过电子邮件、电话或信件与我们沟通时,您提供给我们的个人信息。

2) 间接获得

例如,您报名参加我们提供的认证后,第三方培训机构(即个人信息处理者)将与我们共享您的个人信息。如果您的住所在英国以外,您所在国家的RSL代理机构会将您的个人信息提交给我们,以便安排认证。

代理机构代替考生上传的考生录制认证视频。

3) 访问RSL的官方网站

当您访问RSL的国际官方网站rslawards.com时,我们会自动收集以下类型的个人信息:

(a) 技术信息,包括用于将设备连接到互联网的互联网协议(IP)地址、浏览器类型和版本、时区设置、浏览器插件类型和版本以及操作系统和平台。

(b) 有关您访问网站的信息,包括访问网站的统一资源定位器(URL)点击流(包括日期和时间)、您查看或搜索的服务、页面响应时间、下载错误、对某些页面的访问长度、推荐来源、,页面交互信息(如滚动和点击)以及用于离开页面进行浏览的方法。

我们通过在我们的网站上使用Cookie收集和使用您的个人信息-请参阅我们的Cookie通知https://www.rslawards.com/cookies-policy.

一般来说,为了本通知中规定的目的,我们可能会将您来自上述a-b中规定的不同来源的个人信息合并。

How we obtain personal information:

We collect personal information about you:

1) When you give it to us directly

For example, personal information that you give to us when you communicate with us by email, phone or letter.

2) When we obtain it indirectly

For example, your personal information will be shared with us by training/learning providers after you enrol for a course in relation to which we provide the relevant qualification or schedule an exam. If you are based outside of the UK, your personal information may also be submitted to us by RSL representatives in your country for the purposes of scheduling exams.

3) When it is available publicly

Your personal information may be available to us from external publicly available sources. For example, depending on your privacy settings for social media services, we may access information from those accounts or services.

When you visit our website

When you visit our website, we automatically collect the following types of personal information:

(a) Technical information, including the internet protocol (IP) address used to connect your device to the internet, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms.

(b) Information about your visit to the websites, including the uniform resource locator (URL) clickstream to, through and from the website (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, referral sources, page interaction information (such as scrolling and clicks) and methods used to browse away from the page.

We collect and use your personal information by using cookies on our website – please see our Cookie Notice https://www.rslawards.com/cookies-policy.

In general, we may combine your personal information from these different sources set out in a-b above, for the purposes set out in this Notice.

  1. 境外软件服务

以下列举了RSL目前使用的境外软件服务。我们将根据实际使用情况进行不时更新。

1) 微软 Microsoft Azure云存储

  • 国家:爱尔兰
  • 用途:上传和保存考生的个人信息、考生的视频录制认证文件、考官的点评视频及评估文件
  • 传输方式:主动录入
  • 保持期间:合作期间
  • 联系方式(电话):00801444242

2) Portico Consulting Limited

  • 国家:英国
  • 用途:保存考生资格证书数据
  • 传输方式:主动录入
  • 保持期间:合作期间
  • 联系方式:mail@porticoconsulting.co.uk

Cross-border Software Services

RSL’s current cross-border software services are listed below. We update from time to time based on the actual situations.

1) Microsoft Azure Cloud Services

  • Location: Republic of Ireland
  • Purpose: Upload and store candidates’ personal data, candidates’ recorded digital exam videos, examiner’s feedback videos and marksheets
  • Data transfer: User initiated entry
  • Duration: during the contract period
  • Contact (by phone): 00801444242

2) Portico Consulting Limited

  • Location: United Kingdom
  • Purpose: Maintain candidates’ certification data
  • Data transfer: User initiated entry
  • Duration: during the contract period
  • Contact: mail@porticoconsulting.co.uk
  1. 数据保存时限

考生的个人信息数据将保存5年。

Data maintenance duration

The candidates’ personal data will be maintained for 5 years.

请注意:如果您拒绝提供数据出境同意,我们将无法为您提供任何服务。

如您对本同意书有任何疑问,或您希望向上述境外接收方发送行使您个人信息权利的要求,请您发直接邮件给我们:info@rslawards.com.cn。我们将在7个工作日内进行回复。

Please be reminded that we are only able to provide service to you upon your consent of data export.

If you have any inquiries regarding this Consent Letter, or you want to execute your rights of personal data to the cross-border receivers, please email to us directly: info@rslawards.com.cn. We will reply within 7 working days.