Fair processing notice: AAT Employer Scheme members
15 February 2022
The data we collect about you
- Your name, contact details, date of birth and gender
- Your organisation and job title
- Payment information, including your bank, card or direct debit details
- Your employer reference
- Any other relevant personal information contained in your application forms, supporting documents uploaded (such as your photo ID) with your application, or that you may provide to us with consent (eg responses to surveys and personal stories including details of ethnicity or health data for marketing materials).
In the course of your engagement with us you may also need to share certain personal data of AAT students who are employed by you. All personal data regarding students will be processed in accordance with the notice regarding students.
What we do with your data and on what grounds
We can only process your personal data if we have a basis to do so which is permitted by law. This may be that you have given your consent, or it may be one of the other lawful bases for data processing. These comprise situations where it is necessary:
- for our performance of a contract with you. We process your personal data where it’s necessary in order to fulfil a contract with you or to take steps, at your request, before entering into such a contract
- for our legitimate interests. We process your personal data as and when necessary to do so in order to conduct and manage our business to provide you with the best service and experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We don’t use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about our legitimate interests (including how we assess these against any potential impact on you in respect of specific activities) by contacting us
- to meet our legal obligations. We process your personal data where it’s necessary for compliance with legal or regulatory obligations.
| Purpose/activity | Lawful basis for processing including basis of legitimate interest |
|---|---|
| To make important communications relevant to your AAT Employer Scheme membership. |
|
| To have a bank of case studies available for contact in order to publish stories promoting AAT in magazines, online and in marketing material. | Your consent (if received) |
| Customer support in relation to your AAT Employer Scheme membership, including to address enquiries and resolve issues. |
|
| Archiving your collected data to support assessment queries, professional standards investigations and general customer queries. |
|
| To meet our legal obligations, including data management to assess and maintain the quality of data stored. This also includes dealing with returned mail, bounced emails and performing analysis on the completeness and correctness of data. | To meet our legal obligations |
| Managing payments, including to enable you to pay members’ fees and process invoices and payments. | Performance of a contract with you |
| To register apprentices who intend to undertake an End Point Assessment (EPA) through AAT, and to fulfil our obligations as an End Point Assessment Organisation (EPAO). | Performance of a contract with you |
For market research/analysis and quality control, including to:
| Necessary for our legitimate interests (improving our business offerings) |
| To administer internal systems including maintaining access rights, troubleshooting issues and maintaining databases and backups. | Performance of a contract with you |
Who we share your personal data with
- Our third-party service providers of payment, mailing, user testing and IT services
- External Chief Examiners
- The Education and Skills Fund Agency, if apprentices will be undertaking an End Point Assessment through us.
Where we get your data from
Other than directly from you, we may also receive personal data from publicly available sources, such as returned post and information available on websites.
How long we keep your data
We will retain your data for seven years from the termination of our relationship, as per the legal requirement.
Related content
