Acquia Certification Test Taker Privacy Notice

Introduction¶

Acquia Certification Program (”Program”) validates skills and knowledge of professionals building solutions with Drupal and on the Acquia platform. The Program is a comprehensive series of examinations and credentials useful to individuals and organizations to demonstrate their expertise with Drupal and the Acquia platform. For information about Acquia Certification offerings, see Professional Services Product Guide.

During the certification process and for administering the Program, Acquia will process certain of your personally identifiable information (”Personal Information”). This privacy notice sets out what Personal Information Acquia may collect or receive from you, how and why we process such Personal Information, the choices and rights that you have in respect of such processing. Please note that the Personal Information that Acquia collects otherwise than in connection with the Program is governed by the Acquia’s privacy policy available at Privacy Policy | Acquia.

To the extent applicable to your processing of Personal Information, Acquia Inc. having its principal place of business at 53 State Street, Boston, MA 02109 (“Acquia” or “We”) is and will be a “controller” as defined in the GDPR/other privacy laws around the world. You can contact us by sending an email to privacy@acquia.com.

Personal information we collect¶

Acquia has engaged ProctorU, Inc. (www.proctoru.com) as an online proctoring services provider for the online tests (”ProctorU”). In order to schedule a test, you are required to open an account with ProctorU. While creating an account with ProctorU, you will be required to share your first and last name, username, password, time zone, phone number(s), address, time of examinations, and any other information that you choose to share with ProctorU, including requested accommodations.

The online test requires taking the exam from a location where no other people are present during the exam and also requires the disclosure of certain other personal information to ProctorU, including sensitive personal information or special categories of personal information or similar terms as defined in the data protection laws applicable to you (collectively, “Sensitive Personal Information”). More specifically, ProctorU will collect the following categories of information which may be Sensitive Personal Information, depending on the circumstance of disclosure and the data protection law to which you are subject:

1. Your photographs

2. Government-issued photo identifications, which may include driver’s license number, address, passport number, and country of citizenship

3. Google map coordinates of your IP address, which may reveal your precise geolocation at the time of taking the test

We use and disclose your Sensitive Personal Information as described in How Acquia uses Sensitive Personal Information.

In addition, you may be required to take pictures of you and your environment to demonstrate that you do not have materials at hand that could assist you in answering the questions. ProctorU will video record the entire exam session during which you will be required to grant access to your webcam, speaker/microphone and other reasonable access rights to your computer as may be necessary to conduct the test.

For the examination, you will be required to download the Guardian Secure Proctoring Browser (“Guardian Browser”). The information collected by the Guardian Browser includes information about your device, operating system, session timings and other online activities.

The Guardian Browser locally stores cache and cookie information needed for normal browser navigation and website usage. This information is cleared each time the browser is closed, irrespective of whether you are in a ProctorU session.

You may at your sole discretion choose to share additional Personal Information about you, including through interactions with us.

After the test, Acquia will collect your exam results and other metadata relating to your performance on the test.

You will appreciate that the Personal Information described above is necessary for the proper and fair conduct of the tests and administration of the Acquia Certification Program. If you choose not to provide this Personal Information, you will not be permitted to take the tests.

How ProctorU uses Sensitive Personal Information¶

During the test, ProctorU will match your photograph, facial image appearing on the screen, and government-issued photo identification. If in the unlikely event the verification is unsuccessful, the proctor assigned to you will give you an opportunity to explain the possible reasons for it. For example, when there is a difference arising due to significant age-gap between the photograph on the photo ID and your current facial image. While Acquia and ProctorU reserve the right not to permit you to proceed with the test, we will offer you an opportunity to reschedule the test if there are mutually-acceptable, alternative ways of verifying your identity.

We offer you a choice to receive additional communications of the nature listed below. You may unsubscribe at any time from any of these communications by following the opt-out or unsubscribe instructions provided in these communications:

• Marketing emails where they pertain to those who are certified. For example, developer-specific tools and new offerings of exams.

• Job offer emails from our partners who are looking to hire.

• Release notes and/or updates that apply to your certification. For example, expiry, updated exams offered in their area of expertise, registry updates, and rebranding of badges.

With whom we share your Personal Information¶

We will share your Personal Information with ProctorU. ProctorU acts as Acquia’s processor for the conduct of the tests. ProctorU may further engage third party processors to enable them to provide Acquia their proctoring services. ProctorU personnel and their sub-processors may be located in countries with data protection laws which are not as protective as the laws to which you are subject. Acquia will contractually bind ProctorU to suitable obligations that require them to adopt appropriate technical, administrative and physical measures to protect your Personal Information against unauthorized use or disclosure. Where GDPR applies and ProctorU’s processing involves transfer of your Personal Information to a country or location which is not deemed to be adequate under GDPR, Acquia will enter into standard contractual clauses with ProctorU in the form approved by the relevant supervisory authority under GDPR. Where applicable, you may obtain a copy of these standard contractual clauses by writing to us at the email address provided above. For more information about ProctorU’s compliance with data protection obligations, see compliance.

Further, upon successful completion of your tests, your profile information is stored by us with certain third parties. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval.

Retention of Personal Information¶

Information that is listed in the Acquia certification registry is retained until you choose to erase it by exercising your data-subject access rights mentioned below.

Records of the tests, such as the questions and your answers, are retained for a period of 3 years from the date of examination.

Your account information with ProctorU will be rendered anonymous after a period of 1 year. Video and audio recordings of the test including the information collected for identity verification is stored for a period of 1 year.

The government-issued identity document is deleted within 7 days of the test date.

You may choose to uninstall the Guardian browser after the examination. In that case, all data collected through it will be deleted.

Legal basis¶

Acquia primarily relies on performance of the contract between you and us as the legal basis for processing its Personal Information in connection with the conduct of the tests. Acquia relies on your explicit consent for processing any Sensitive Personal Information. In addition, Acquia relies on legitimate interests in making available your Personal Information on the Acquia Certification Registry.

Data subject rights¶

Depending on the applicable local data protection laws, you have certain rights relating to your Personal Data including, but not limited to:

• Access to your data

• Rectification

• Erasure (“right to be forgotten”)

• Restriction of Processing

• Object, opt-out, withdrawing your consent

• Transfer of your data

Acquia provides you with the ability to exert any such right through the self-service mode under the User Management field of your Acquia Academy account. However, we will retain any information in its original form to the extent it is necessary for us to comply with applicable laws or to exercise our legal rights, or perform our legal or contractual obligations.

Where GDPR applies, you have a right to lodge a complaint with the relevant supervisory authority.