Information on data protection | TÜV SÜD Examination Institute

DE | EN

In accordance with the General Data Protection Regulation (GDPR), the controller responsible for processing your personal data is TÜV SÜD Akademie GmbH, Westendstraße 160, 80339 Munich, Germany.
If you have any questions about data protection, you can reach us by e-mail at [email protected]. You can contact our data protection officer by mail at TÜV SÜD Business Services GmbH, Westendstr. 199, 80686 Munich, Germany adding "AKD Datenschutz" at the top of the address.

The processing of your personal data for the purpose of the supervised online examination – as described in detail here – is undertaken on the basis of your voluntary consent, which you grant to us upon registering for the online examination and which can be withdrawn at any time.

If you withhold or withdraw your consent, there is no legal basis for taking the online examination. This means, you cannot take the online examination. In this instance, please speak with your TÜV SÜD Akademie contact partner or your training provider.

The processed data and records in the course of the supervised online exam will be stored and deleted as follows:

Procedure/ Process	Description	Storage and deletion
Record & Review	The exam is recorded and reviewed by the certification body after the end of the exam. At the beginning of the session, the participant is identified, during which a picture of the ID card is taken and stored. This is followed by a recording of the monitoring of the webcam and screenshare.	After the session ends, both records continue to be stored. As soon as the participant has been identified, the ID photo will be deleted. By default, the review of the recording takes place within 21 working days after the end of the examination. Inconspicuous audit records are deleted immediately after the review in the monitoring software used. In the event of a negative result (e.g. in the case of detected cheating attempts), the recording will only be deleted after the process has been completed. The detailed procedure for negative results up to the deletion of the recording can be found here under "Review in the Record & Review Procedure".
Live Proctoring	The monitoring of the examination is carried out by observing an online exam proctor (live proctor). The instructions of the online examination proctoring must be followed. In addition, a recording of the examination will be carried out in accordance with the Rule for the Accreditation of Certification Bodies for Persons according to DIN EN ISO/IEC 17024:2012 of the German Accreditation Body DAkkS. At the beginning of the session, the participant is identified, during which a picture of the ID card is taken and stored. The image can be called up by the Proctor during the session. At the end of the live session, this image is automatically deleted.	The image of the identity document for the identification of the participant stored at the beginning of the examination monitoring will be deleted immediately after the end of the examination session. The recording of the examination will be stored for 5 years in accordance with the regulations of the German Accreditation Body DAkkS and will be automatically deleted after this period.

In the course of the online examinations, we employ service providers in the European Union within the context of commissioned data processing as defined in Article 28 GDPR. No data is transferred by us to recipients in what are known as third countries, i.e. states outside the European Union (EU), nor to any international organizations. The processing we undertake of personal data relating to you is not connected with any automated decision-making process or profiling.

If you have any questions about our processing of your personal data, we will be happy to provide you with information about the data relating to you (Article 15 GDPR). In addition, where the legal requirements are met, under the GDPR you have the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), the right to object (Article 21 GDPR) and the right to data portability (Article 20 GDPR). Finally, you have the right to lodge a complaint with a responsible data protection supervisory authority (Article 77 GDPR, Section 19 BDSG [German Federal Data Protection Act]).

Your right to object: If you wish to withdraw your consent (data processing on the basis of Article 6(1a) GDPR), it is sufficient to send a short message at any time to our data protection officer by e-mail at [email protected] or by mail to TÜV SÜD Business Services GmbH, Westendstr. 199, 80686 Munich, Germany.

You can find further information on data protection at TÜV SÜD Akademie here.