This policy explains how ERCA processes personal data of candidates, certificate holders, trainers and website users, in accordance with Regulation (EU) 2016/679 (GDPR).
ERCA, which operates the certification programmes and the public register published at erca.eu, is the controller of the personal data described below. ERCA is operated from Poland, which is why the Polish supervisory authority is identified in section 5. Contact: office@erca-academy.com.
| Purpose | Data | Legal basis |
|---|---|---|
| Certification of persons (application, examination, certificate, register entry) | Name, contact details, education, work and audit experience, training records, examination results | Performance of a contract; legitimate interest in operating an impartial register (Art. 6(1)(b),(f)) |
| Public certificate verification | Name, certificate number, scope, validity | Legitimate interest / consent at certification (Art. 6(1)(f),(a)) |
| Enquiries & correspondence | Name, e-mail, message | Legitimate interest (Art. 6(1)(f)) |
| Legal and governance obligations | Certification records, complaints, appeals | Legal obligation or legitimate interest (Art. 6(1)(c),(f)) |
Certification records are kept for the validity of the certificate plus the period required by the certification scheme and applicable law. Enquiry data is kept only as long as needed to handle the request.
Data may be shared with examination and registry providers acting on our behalf, and with accreditation or supervisory bodies where required. We do not sell personal data.
This website uses only essential cookies needed for the site to function. We do not run advertising trackers.