Privacy Policy

Our Range of Products

MySkillsProfile offers behavioral-style self-assessments and 360-degree feedback surveys.

MySkillsProfile Users

MySkillsProfile has three categories of user:

• Individual Users are visitors who complete an assessment independently and purchase their own report. They have limited direct access to their results and no login access.
• Corporate Account Administrators are HR professionals or consultants who manage assessments and surveys for groups of test takers.
• Corporate Users are test takers invited by an Administrator to complete assessments.

The Administrator is normally a member of an organization's HR department or a self-employed consultant. Creating an account requires the client to identify the Administrator who will manage its assessments. Although the Administrator is a single person, the Administrator's email address may be accessible to more than one person in the customer organization.

The Administrator can invite test takers individually or create a generic login for a group. MySkillsProfile also provides a White Label service that enables customers to add their organization name and logo to assessment screens and feedback reports.

Information We Collect

• Core Personal Data: name and email address.
• Additional Personal Data: the test taker's current management level for certain assessments; for a 360-degree survey, each assessor's relationship to the person being assessed, such as manager, direct report or peer.
• Assessment Item Data: the test taker's responses to assessment items.
• Results Data: test-taker scores generated through automated analytical processes.

Purpose of Collecting Personal Data

Personal data is collected for the following purposes:

• The Administrator's email address enables test takers to communicate with the Administrator about matters such as the assessment, technical issues or requests for feedback reports.
• A test taker's email address enables us to send a unique assessment-access link and the feedback report. It is also used to help the test taker complete an assessment and obtain results where support is needed.
• The test taker's name is collected to generate a personalized feedback report and address the test taker in communications.

We design our processes to minimize risks to the confidentiality, integrity and availability of data in line with FERMA's principles.

Data Life Cycle and Retention

MySkillsProfile delivers assessments and provides results dynamically. We automatically anonymize minimal personal identifiers, consisting of name and email address, after 120 days.

After delivery or access through the platform, clients and Administrators are responsible for storing and managing assessment data, including personal data, assessment data and results data. Clients must define and enforce their own retention, deletion and access policies in accordance with applicable data-protection laws.

MySkillsProfile may retain anonymized aggregate data for research and development, including norm updates and validation studies.

Data Access and Controls

During the 120-day period before anonymization:

• Individual Users: only MySkillsProfile staff have access to data supplied by the test taker. The feedback report is accessible only by the test taker and, upon request, MySkillsProfile staff.
• Corporate Users: Administrators control access to results and decide whether, when and how reports are distributed. MySkillsProfile staff may provide technical support but do not control the client's storage or retention.

Clients are responsible for suitable safeguards, secure storage and access controls for reports or datasets they download, store or circulate internally.

Regulations and Individual Rights

The use of assessment and profiling in recruitment and development is governed by local or regional regulations and informed by professional guidance and good practice. In the European Union, the GDPR places obligations on how organizations handle and store personal data.

Under the GDPR, individuals in the EU have rights that include the right to be informed, to access their data and to have their data erased.

Responsibilities of Clients

Clients and Administrators are the data controllers of assessment results held within their organization. Clients are responsible for:

• Ensuring their Administrators comply with applicable data-protection laws.
• Defining and enforcing retention, deletion and access policies for assessment data.
• Responding to individual-rights requests, including access, amendment and erasure, relating to assessment results stored in their systems.

MySkillsProfile is not responsible for how clients store, manage or process data after it has been accessed, downloaded or distributed through the platform.

Data Subject Rights Request Form

Complete the Data Subject Rights Request form if you want to know whether MySkillsProfile holds information about you or wish to exercise an applicable data right. Requests concerning data stored by an employer or commissioning organization should normally be directed to that organization as data controller.