Acquia Certification Test Taker Privacy Notice¶

Introduction¶

Acquia Certification Program (“Program”) validates skills and knowledge of professionals building solutions with Drupal and on the Acquia platform. The Program is a comprehensive series of examinations and credentials useful to individuals and organizations to demonstrate their expertise with Drupal and the Acquia platform. For information about Acquia Certification offerings, see Professional Services Product Guide.

During the certification process and for administering the Program, Acquia will process certain of your personally identifiable information (“Personal Information”). This privacy notice sets out what Personal Information Acquia may collect or receive from you, how and why we process such Personal Information, the choices and rights that you have in respect of such processing. Please note that the Personal Information that Acquia collects otherwise than in connection with the Program is governed by the Acquia’s privacy policy available at Privacy Policy | Acquia.

To the extent applicable to your processing of Personal Information, Acquia Inc. having its principal place of business at 53 State Street, Boston, MA 02109 (“Acquia”) is and will be a “controller” as defined in the GDPR/other privacy laws around the world. You can contact us by sending an email to privacy@acquia.com.

What information do we collect¶

Acquia has engaged ProctorU, Inc. (www.proctoru.com) as an online proctoring services provider for the online tests (“ProctorU”). In order to schedule a test, you are required to open an account with ProctorU. While creating an account with ProctorU, you will be required to share your first and last name, username, password, timezone, mobile, home or work phone numbers, address, time of examinations, and any other information that you choose to share with ProctorU.

Before the exam, you will be required to download a browser plugin made available by ProctorU. The plugin collects IP address, operating system and browser information.

Further, the online test requires taking the exam in a location where no other people are present during the exam and also requires the disclosure of certain other personal information to ProctorU. ProctorU will collect your photographs and government-issued photo identifications, which may include driver’s license number, address or passport including passport number, country of citizenship, google map coordinates of your IP address. In addition, you may be required to take pictures of you and your environment to demonstrate that you do not have materials at hand that could assist you in answering the questions. ProctorU will video record the entire exam session during which you will be required to grant access to your webcam, speaker/ microphone and other reasonable access rights to your computer as may be necessary to conduct the test.

After the tests, Acquia will collect your exam results and other metadata relating to your performance at the test.

You will appreciate that the Personal Information described above is necessary for the proper and fair conduct of the tests and administration of the Acquia Certification Program. If you choose not to provide this Personal Information, you will not be permitted to take the tests.

How do we use your Personal Information¶

We will use your Personal Information to:

• Conduct the test and communicate with you before, during and after the test
• Maintain records of examination
• List you in the publicly-available Acquia certification registry and/ or Drupal experts registry, currently made available at Acquia Certification Registry | Acquia Certification, which is necessary for the purposes of enabling any interested person to verify whether or not you hold the relevant Acquia certification
• Meet our legal and regulatory obligations
• Comply with our obligations and exercise our rights under the agreement between you and us

During the test, ProctorU will match your photograph and the government-issued photo identification. If in the unlikely event the verification is unsuccessful, you will be given an opportunity by the proctor assigned to you to explain the possible reasons for it. For example, when there is difference arising due to significant age-gap between the photograph on the photo ID and your current facial image. While Acquia and ProctorU reserves the right not to permit you to proceed with the test, we will offer you an opportunity to reschedule the test if there are mutually-acceptable alternative ways of verifying your identity.

We offer you a choice to receive additional communications of the nature listed below. You may unsubscribe at any time from any of these communications by following the opt-out or unsubscribe instructions provided in these communications:

• Marketing emails where they pertain to those who are certified. For example, developer-specific tools and new offerings of exams.
• Job offer emails from our partners who are looking to hire.
• Release notes and/or updates that apply to your certification. For example, expiry, updated exams offered in their area of expertise, registry updates, and rebranding of badges.

With whom do we share your Personal Information¶

As mentioned above, we will share your Personal Information with ProctorU. ProctorU acts as Acquia’s processor for the conduct of the tests. ProctorU may further engage third party processors to enable them to provide Acquia their proctoring services. ProctorU personnel and their sub-processors may be located in countries with data protection laws which are not as protective as the laws to which you are subject. Acquia will contractually bind ProctorU to suitable obligations that require them to adopt appropriate technical, administrative and physical measures to protect your Personal Information against unauthorized use or disclosure. Where GDPR applies and ProctorU’s processing involves transfer of your Personal Information to a country or location which is not deemed to be adequate under GDPR, Acquia will enter into standard contractual clauses with ProctorU in the form approved by the relevant supervisory authority under GDPR. Where applicable, you may obtain a copy of these standard contractual clauses by writing to us at the email address provided above. For more information about ProctorU’s compliance with data protection obligations, see compliance.

Further, upon successful completion of your tests, your profile information is stored by us with certain third parties. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval.

How long do we retain your Personal Information¶

Information that is listed in the Acquia certification registry is retained until you choose to erase it by exercising your data-subject access rights mentioned below.

Records of the tests, such as the questions and your answers, are retained for a period of 3 years from the date of examination.

Your account information with ProctorU will be rendered anonymous after a period of 1 year. Video-recordings of the test including the information collected for identity verification is stored for a period of 1 year.

Legal Basis¶

Acquia primarily relies on performance of the contract between you and us as the legal basis for processing its Personal Information in connection with the conduct of the tests. Where required for specific processing activities, Acquia has sought or will seek your consent for the processing. In addition, Acquia relies on legitimate interests in making available your Personal Information on the Acquia Certification Registry.

Data Subject Rights¶

Depending on the applicable local data protection laws, you have certain rights relating to your Personal Data including, but not limited to:

• Access to your data
• Rectification
• Erasure (“right to be forgotten”)
• Restriction of Processing
• Object, opt-out, withdrawing your consent
• Transfer of your data

Acquia provides you with the ability to exert any such right through the self-service mode under the User Management field of your Acquia Academy account. However, we will retain any information in its original form to the extent it is necessary for us to comply with applicable laws or to exercise our legal rights.

Where GDPR applies, you have a right to lodge a complaint with the relevant supervisory authority.