Privacy policy

Learn how we protect your data

1. General Information

  1. This policy applies to the website operating at the URL: alternative.scot. 
  2. The website operator and personal data administrator is: ALTERNATYVA LTD 99 Giles Street, EH6 6BZ, Edinburgh, UK.
  3. Operator's contact email address: training@alternative.scot. 
  4. The Operator is the Administrator of your personal data regarding any voluntarily provided data within the Service.
  5. The Service utilizes personal data for the following purposes:
    1. Handling inquiries submitted via the contact form.
  6. The Service collects information about users and their behavior in the following ways:
    1. Through voluntarily entered data in forms, which are stored in the Operator’s systems.
    2. Through cookies saved on end-user devices.

2. Selected Data Protection Methods Used by the Operator

  1. Login and data entry areas are secured at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the site are encrypted on the user's computer and can only be read on the destination server.
  2. User passwords are stored in a hashed form. The hashing function is one-way and cannot be reversed, which is the current standard for storing user passwords.
  3. To protect data, the Operator regularly creates backup copies.
  4. An essential element of data protection is the regular update of all software used by the Operator for processing personal data, including the regular updates of software components.

3. Hosting

  1. The Service is hosted (technically maintained) on servers operated by an external company. 
  2. The hosting company, to ensure technical reliability, maintains logs at the server level, which may include:
    • Resources identified by URL (requested pages, files, etc.).
    • The time of the request.
    • The time the response was sent.
    • The client station name – identified via the HTTP protocol.
    • Information about errors encountered in HTTP transactions.
    • The URL of the previously visited page (referer link), in case the transition to the Service occurred via a hyperlink.
    • Information about the user’s browser.
    • Information about the IP address.
    • Diagnostic information related to the self-ordering of services via the site’s recorders.
    • Information related to email communications directed to and sent by the Operator.

4. Your Rights and Additional Information on Data Usage 

  1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if necessary to fulfill the contract concluded with you or to fulfill the legal obligations of the Administrator. This applies to the following groups of recipients:
    • Authorized employees and associates who use the data to fulfill the website's objectives.
  2. Your personal data is processed by the Administrator for no longer than necessary to perform activities related to it as specified by separate regulations (e.g., accounting regulations). For marketing data, the data will not be processed for more than three years.
  3. You have the right to request:
    • Access to your personal data.
    • Rectification of your data.
    • Deletion of your data.
    • Restriction of data processing.
    • Data portability.
  4. You have the right to object to the processing of personal data for legitimate interests pursued by the Administrator, including profiling. However, the right to object cannot be exercised if there are legally justified grounds for processing that override your interests, rights, and freedoms, particularly for establishing, pursuing, or defending claims.
  5. You have the right to lodge a complaint with the President of the Office for Personal Data Protection, located at Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary but necessary for the operation of the Service.
  7. Automated decision-making, including profiling, may be applied to you to provide services under the concluded contract and for direct marketing conducted by the Administrator.
  8. Personal data is transferred to third countries under data protection regulations, meaning they are sent outside the European Union.

5. Information in Forms

The Service collects information provided voluntarily by the user, including personal data if provided. The Service may store information about connection parameters (timestamp, IP address). In some cases, the Service may store information facilitating the linkage of form data with the user's email address. In such cases, the user’s email address appears inside the URL of the page containing the form. Data provided in the form is processed for the purpose resulting from the function of a given form, e.g., handling a service request or business contact, service registration, etc. Each time, the form context and description clearly indicate its purpose.

6. Administrator Logs

User activity within the Service may be subject to logging. These data are used to administer the Service.

7. Important Marketing Techniques

The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc., USA). The Operator does not transfer personal data to the service provider, only anonymized information. The service is based on the use of cookies on the user’s device. Regarding Google’s advertising network, users can review and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/

8. Cookies