Privacy Policy Last Modified: October 30, 2023 This Privacy Policy (“Policy”) addresses how American Software Testing Qualifications Board, Inc. (“ASTQB”) collects, uses, and discloses information on www.astqb.org (the “Website”). References in this Policy to “you” or “your” are intended to mean you, the individual visitor or user of our Website. When we refer to “we,” “our,” or “us,” we are referencing ASTQB. The Information ASTQB Collects If you choose to contact us using the Contact form on our Website, we will collect your name, email address, the subject of your message, a numerical value provided to you on the site for fraud prevention, the contents of any message you chose to provide us with, and we will request you to indicate your acknowledgement and agreement to the terms and conditions in this Policy. Our Website includes a variety of resources, including White Papers, Webinars, Podcasts, and past issues of our newsletter. When you choose to download a White Paper from our Website, we will collect your first name, last name, email address, your selection from the drop-down box concerning your role, your title, company name, your affirmative acknowledgement and agreement to the terms and conditions in this Policy, and we will have you provide a verification code to prevent spam and fraud. In order to gain access to a Webinar, we will collect your first name, last name, email address, your selection from the drop-down box concerning your role, title, company name, your affirmative acknowledgement and agreement to the terms and conditions in this Policy, and we will have you provide a verification code to prevent spam and fraud. If you choose to listen to a podcast on our Website, we will collect your first name, last name, email address, whether you want us to share your contact information with the podcast speaker so that you may receive communication from them on the podcast topics and other related topics, your affirmative acknowledgement and agreement to the terms and conditions in this Policy, and we will have you provide a verification code to prevent spam and fraud. Past issues of our newsletter are available without providing us any contact information. Our Website also utilizes internet cookies, which are small files that are transmitted to your computing device and used to collect information from you. For more information about internet cookies, please consult the Cookie Policy portion of this Website When you successfully obtain ASTQB certification, we receive information from AT*SQA including information about your examination score, your first name, last name, country, address, job title, city, company name, state or province, telephone number, postal code, email address, and whether you wish to be listed on the Official U.S. List of Certified Testers. To the extent that you take an online exam through AT*SQA and cameras are required to be used during the test taking process and any appeal is taken from a decision to void, disqualify, suspend, or otherwise terminate your testing result or certification for your conduct during that exam, ASTQB will receive and process video and audio captured by your cameras during the exam process. The information collected from this audio and video will include images and audio of the room where you are taking the exam, including any information, items, sounds, and anything else viewable through the lens of the applicable camera. If you choose to register to take an online exam that requires the use of one or more cameras during the examination process, you consent to the recording and processing of that audio and video, by contract, in accordance with our Terms of Use. ASTQB’s Use of the Information it Collects The information you provide to us when you complete the Contact form on our Website is utilized to respond to your inquiry of us. To the extent your question concerns registration for an examination, certification, or testing, which is administered by AT*SQA, your information is provided to AT*SQA so that they may answer the question, as the global certification body for the International Software Testing Qualifications Board (“ISTQB”) and ASTQB. To the extent a particular question concerns ASTQB matters, we will use the information we collect to respond to your inquiry. In the event that you become ASTQB certified and have opted-in to have your information displayed on the ASTQB Website, we will use your information to make it available on the Official U.S. List of Certified Testers, in accordance with your preferences. If you download a White Paper, view a Webinar, or listen to our Podcast, the information you provide to us prior to obtaining access to any of the aforementioned is collected and stored in our customer relationship database and provided to AT*SQA as the global certification body for the ISTQB and ASTQB. With respect to a Podcast, where you have indicated a desire for us to share your contact information with the speaker of the Podcast, we complete your request. If you take an online exam through AT*SQA and cameras are required to be used while you take your test and a decision is made to void, disqualify, suspend or otherwise terminate your testing result or certification for your conduct during that exam, ASTQB will receive the video and audio captured by your cameras for purposes of evaluating the merits of your appeal. Cookie Policy The ASTQB Website utilizes internet cookies. Internet cookies are small amounts of data that are transmitted from a web server to a user’s computing device. Our Website deploys third party cookies, which are cookies deployed by third party service providers. We use Google Analytics and Advertising Features via the Google Analytics tracking code, which uses automated means to collect information about your internet browser type, computing device, network, operating system type, internet protocol address (“IP address”), the name of your internet service provider, and domains used by such provider, location information, device identifiers, device settings, web pages visited on the ASTQB Website, web history, content and advertisements you have accessed, viewed, or clicked on. The following internet cookies are used on our Website: Cookie Name Description _ga This is a third party Google Analytics cookie, which is used to distinguish between users and expires after two years, unless you choose to delete it sooner. _gat This is a third party Google Analytics cookie that is used to throttle request rate on our Website. This cookie expires after one minute. _gid This is a third party Google Analytics cookie that is used to collect your unique online identifier for purposes of tracking the user’s usage of the website. This cookie expires after 24 hours, unless you delete it sooner. test_cookie This is a third party cookie set by DoubleClick (Google) for advertising purposes. The cookie expires after 15 minutes. Astqb-interstitial This is a first party cookie deployed by us when you download our Syllabi, sample examinations, or glossary terms on the Website and if you choose to provide us with your email address and agreement to our Privacy Policy, it collects this information or it makes a record that the specific user choose to download the materials without providing such information. This cookie expires after a year, unless you delete it sooner. You may opt-out of the Google Analytics Advertising Features we use by accessing the Google Ads Settings, Ad Settings for mobile apps, or any other available means (for example, the NAI’s consumer opt-out). Google Analytics also offers a plug-in for opting out web browsers, https://tools.google.com/dlpage/gaoptout. Most internet web browsers have settings that enable a user to reject or block cookies. For more information about rejecting or blocking internet cookies, consult your internet browser’s help file. Please note that blocking or rejecting cookies will cause some functionality on the Website to become inoperable. ASTQB Disclosures of Information In addition to the disclosures noted above (e.g. Podcasts, internet cookies), we only disclose your information as provided below: Third Party Service Providers In connection with offering our Website to you, we utilize a number of third party service providers, including data and web hosting, email, logistics and email distribution service providers, who provide services directly to us. We will disclose your information, including personal information such as your name, email address, telephone number, and any other information that you have provided us, to the extent relevant, to permit such third party service provider to render their services to us. Compliance with Laws; Law Enforcement We will disclose your information, including your personal information, to the extent necessary, as determined in our sole discretion, to comply with a legal requirements imposed upon us. We will comply with legal demands served on us, including a warrant, subpoena, or other legal demand issued by court or governmental authority in compliance with applicable law. We reserve the right to cooperate with law enforcement and will disclose your information, when necessary, to protect our legal rights, health and safety, and property. Sale of the Business In the event that ASTQB, or substantially all of ASTQB assets are sold to another business or organization, your personal information, will be included as an asset in such a sale. Except as provided herein, we do not otherwise provide your information to third parties. Do Not Track Signals and Requests Some of the most common internet web browsers include functionality that enables you to provide “Do Not Track” signals or requests to websites. Our Website does not honor or otherwise recognize “Do Not Track” signals or requests because there is no defined standard for doing so. Children’s Privacy We do not knowingly solicit or otherwise market to children under the age of 13. Except as otherwise prohibited by applicable law, in order to use our Website, you must be at least 16 years of age. If you are the parent or legal guardian of a child under 16 years of age that has provided us with personal information, please contact us using the contact details in this Policy so that we can immediately remove and destroy such information. Third Party Websites Our Website includes hyperlinks to third party websites, which are websites that are not owned or operated by ASTQB. We encourage you to review the privacy policies, terms of service and any other applicable documentation governing those websites prior to providing them with any information. Under no circumstances will ASTQB be liable for any content, information, privacy, business, or hiring practices of any third party website that is linked from our Website. Your Choices Regarding Information We Maintain About You To the extent you have opted-in or affirmatively consented to receive a particular communication from us, you can always unsubscribe from future communications by following the instructions provided at the bottom of each such email message you receive from us. If you would like to update, correct, suppress, or request deletion of the information we maintain about you, please contact us using the email address provided below. Be sure to include your name, email address, and sufficient details about your request so that we can carry it out or contact you for additional information. Notice to Persons Located in the EU On May 25, 2018, the European Union’s General Data Protection Regulation (“GDPR”) went into effect and affords data subjects located within the EU certain data rights as set forth herein. References to terms such as “controller,” “personal data,” “processor,” and “supervisory authority” are intended to have the same meanings as set forth in Regulation (EU) 2016/679 of the European Parliament and of Council of 27 April 2016. The controller of the personal data collected hereunder is ASTQB, 701 South Howard Ave, Suite 106361, Tampa Florida 33606 USA. The personal data that is collected is processed for the purposes detailed in this Privacy Policy. The legal basis for our processing of your personal data, which is provided in connection with your inquiry of us, is your affirmative consent and our legitimate basis in responding to our customer inquiries. The legal basis for processing your personal information in connection with your desire to register for an exam is by both your affirmative consent, by contract, pursuant to the terms and conditions for registration, and our legitimate interests in providing the services to our customers. We provide personal data to third parties as set forth in this Privacy Policy. We provide personal data in connection with testing and certification to AT*SQA as the global certification body the ISTQB and ASTQB, who administers and maintains information in connection with testing and certification for both organizations. We provide personal data to third party service providers, including data and web hosting, logistics, and email distribution service providers as set forth in this Privacy Policy. ASTQB is located within the United States. Personal data provided to ASTQB is transferred to the United States. We do not intend to transfer any personal data to any third country or international organization. If by chance, a transfer of personal data is required, we will conduct such transfer in accordance with applicable privacy laws, including use of the Standard Contractual Clauses as approved by the EU Commission. We will maintain and store your personal data only so long as is required to satisfy the purposes of collection. For example, if you make an inquiry about testing or certification, we will provide your information to AT*SQA for purposes of permitting AT*SQA to respond to your inquiry, but we will not otherwise maintain your personal data. Where collecting certain personal data from you is a requirement in order to provide you with access to a requested Resource or in connection with your submission of a web form, that information is necessary for us to process your request. If you do not provide us with the required information, the web form will not permit you to submit your request and you will not gain access to the desired resource or function. As an EU data subject, you have the following rights concerning your personal data: Right of Access You have a right to access to your personal information under the GDPR from the data controller. You have the right to request confirmation from ASTQB, pursuant to Article 15 of the GDPR, as to whether or not personal data concerning you is being processed and to have access to that personal data. In addition, you have a right to the following information: The purposes of processing; The categories of personal data concerned; The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular, recipients in third countries or international organizations; Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; The right to lodge a complaint with a supervisory authority; Where the personal data are not collected from the data subject, any information as to their source; The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance of the envisaged consequences of such processing for the data subject. You may contact ASTQB at the address provided in this Privacy Policy, to exercise your data rights. Right to Rectification You have the right to have ASTQB, as the data controller, rectify inaccurate personal data about yourself that you have provided to us and you have the right to have incomplete personal data, completed, including by means of providing a supplementary statement as provided in Article 16 of the GDPR. Right to Erasure or Right to be Forgotten You have a right to have ASTQB erase your personal data if one of the following applies to the personal data: (a) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (b) you withdraw your consent and there is no other legal basis for the processing; (c) you object to the processing in accordance with your rights; (d) the personal data has been unlawfully processed; (e) the personal data has to be erased for compliance with an obligation under EU or member state law that the ASTQB is subject to; or (f) the personal data has been collected in relation to an offer of information society services in accordance with Article 8(1) of the GDPR. Other exceptions may apply as set forth in Article 17 of the GDPR. Right to Restriction You have the right to obtain a restriction of processing from ASTQB where one of the following applies: (a) you contest the accuracy of the personal data, for a period enabling ASTQB to verify the accuracy of your personal data; (b) the processing is unlawful and you oppose to the erasure of your personal data and requests a restriction on its use instead; (c) ASTQB no longer needs the personal data for the purposes of process, but is required by you for the establishment, exercise or defense of legal claims or (d) You have objected to the processing, pending the verification of whether there are legitimate grounds of ASTQB that override yours. Right to Data Portability You have the right to receive personal data concerning yourself, which you have provided to ASTQB, as the data controller, in a structured, commonly used and machine readable format and you have the right to transmit that data to another controller without hindrance from ASTQB where the processing is based on your consent or pursuant to contract and the processing is carried out by automated means. You may also have ASTQB transmit the data directly to another controller, where technically feasible. Right to Object You have the right to object, on grounds relating to your personal situation, at any time, to the processing of your personal data in accordance with Article 21 of the GDPR. You may object to processing at any time by ASTQB for direct marketing purposes, which includes profiling related to direct marketing. Your objection requires that ASTQB stop processing your personal data for the direct marketing purpose. Right to Withdraw Consent You have the right to withdraw the consent you have provided ASTQB, at any time, by contacting ASTQB headquarters at the address and/or email address provided in this Privacy Statement. Updates to Privacy Policy Updates to this ASTQB privacy policy will be necessary from time to time. Notice that we have made changes to our privacy policy will be communicated on the main page of our website. This notice of change will remain on our website for a period of 30 days. Contact Us If you have any questions about this Privacy Policy or would like to exercise your data rights, please contact us: Via mail: 701 South Howard Ave, Suite 106361, Tampa Florida 33606 USA Online: https://astqb.org/about/contact-us/