GAIn is a MIcompany brand, fully owned by MIcompany B.V., registered in the Netherlands. In this privacy policy, we explain what personal data we collect, why we collect it and what we do with it when you take a GAIn exam through ProctorExam. At MIcompany, we care about your privacy and we keep your personal data as safe as possible. In the process of collecting and processing your data, we always abide by the General Data Protection Regulation (GDPR) of the European Union.

By the use of ProctorExam, we are able to supervise exams. Following this approach, we can make sure that the GAIn certificate does not lose its value and can be obtained reliably through virtual sessions.

1. What data do we collect?

MIcompany collects the following data.

• When you take a GAIn exam via ProctorExam, we collect video footage of you taking the exam, video footage of your screen activity, a photo of your face and footage of your identification card to identify you.
• Your full name, email-address, the exam you followed and the start and end date/time you followed the exam.
• Your web visit details, including (part of) your IP-address, the type and language of your browser, details on your operating system as far as required for the system check, the time of your visit, the web address from which you reached our website, the pages you have viewed, the links you clicked and the other actions you undertake.

Note that the application used for the exam does not have access to files on your computer or your browser history.

2. How do we collect your data?

You directly provide MIcompany with the data we collect. We collect and process data when you

• Register or use an account on our platforms.
• Complete the System Check in advance.
• Complete an exam on the ProctorExam platform.

3. Your choice on cookies and other tracking technologies

Before you enter our website, you can make a choice whether to accept or decline the cookies that our website places. If you want to choose another option after accepting or declining, you can do this by clicking on the link ‘your settings’ and indicating your choice.

If you choose to refuse cookies, only functional and statistical cookies will be placed. These cookies are purely operational and ensure that our website functions correctly, that we can measure the use of our website and identify problems quickly.

If you choose to accept cookies, we may place tracking cookies, social media cookies and advertising cookies in addition to the functional and statistical cookies mentioned earlier.

Tracking cookies are implemented via Google Analytics and aim to gain insight into for example visitor flows and page views. More information on the processing of your data via Google Analytics can be found in Google’s own privacy policy. If you wish to disable these cookies for all websites you visit, you can easily visit the Google Analytics opt-out page and install their add-on. Social media cookies are intended to share the content of our website via social media. This does not mean that we get any access to your social media account. We do not store the cookies related to social media, this is done by the related social media provider. We only have operational knowledge of and no control over these cookies. Consequently, we accept no responsibility or liability for these social medial cookies or for how the relevant social media providers use the collected information.

4. Who has access to your data?

Within MIcompany, your personal data is only available for employees who need to have access to it, given their function. Our employees have a duty of confidentiality.

Furthermore, the staff of ProctorExam has access to the platform concerning the exam. ProctorExam is contractually bound to only process the data for the purposes MIcompany requires.

5. How will we use your data?

Operational purposes: In the first place we collect and use your data to provide you with services and to communicate with you. The purpose of monitoring the exam via ProctorExam is comparable to the normal process of surveillance during an examination at a physical location. We want to make sure that the examinations take place according to our set of rules and that there are no violations. In that way, we can guarantee that the certification contains its value.

6. How long do we keep your data?

MIcompany does not store your data longer than is permitted by law and is necessary for the purposes for which your data is processed. How long certain data is stored depends on the nature of the data and the purposes for which it is processed. The storage period can, therefore, differ per goal.

The video footage that is collected during a ProctorExam is deleted within 1 week after completing the exam.

1
7. What do we do with your data after the retention period has expired?

The video footage that is collected during a ProctorExam is deleted within 1 week.

After the retention period has expired, any personal data will be deleted or anonymized. Anonymization means that your personal data is stripped of all possible identifying characteristics. What remains is statistical data that can no longer be linked to your person in any way. These statistical data are important to us because we can gain insight into the use of our products and services. Video footage collected is always deleted and never anonymized.

8. Distribution of data to our partners

In order to provide its services and protect data used in these services, GAIn uses the support of service providers. Where deemed necessary, your data may be stored with these third parties. GAIn takes precautions of contractual, organizational and technical nature in order to ensure that your data does not leave our framework. Our service providers are not allowed to disclose or use your personal data apart from providing services that comply with the law.

9. Distribution of data to other countries

We may share your data with our offices or partners in other countries. This shall only be done to a country outside of the European Economic Area without an adequate level of protection if such transfer is allowed under applicable law and involved parties guarantee the same level of protection as required by the GDPR. By using our website and by providing us with your information, you consent to this trans-border distribution of your data.

10. Other cases in which we may distribute your data

There are special circumstances in which we may distribute your data to other third parties than our partners. We may disclose your information if there is a reasonable belief that disclosing this information is necessary to identify, contact, or bring legal action against someone, to detect fraud, or to protect our rights or property or the safety and security of our website, our business or the general public.

11. Children

The services MIcompany provides are not designed for minors under the age of 16. MIcompany does not intentionally collect or maintain information about anyone under this age. If we discover that someone under 16 has provided us with personal information through our website, we delete this data from our servers. If you are a parent or guardian and are aware that your child has provided us with personal information, please contact us so we can delete this information. An exception to this rule is when consent of a parent or guardian has been given. With this consent, children below the age of 16 are allowed to provide us with their personal information.

12. What are your data protection rights?

As an individual using our services, you have the following rights regarding the data that is collected about you:

• Right to access
  You have the rights to request MIcompany for copies of your personal data. We may charge a small fee for this service.
• Right to rectification
  You have the right to request that MIcompany corrects any information you believe is inaccurate. You also have the right to request MIcompany to complete information you believe is incomplete.
• Right to erasure
  You have the right to request that MIcompany erases your personal data, under certain conditions.
• Right to restrict processing
  You have the right to request that MIcompany restricts the processing of your personal data, under certain conditions.
• Right to object to processing
  You have the right to object to MIcompany’s processing of your personal data, under certain conditions.
• Right to data portability

You have the right to request that MIcompany transfer the data that we have collected to another organization, or directly to you, under certain conditions.

You can submit a request to exercise any of the above rights by sending an email to info@globalartificialintelligence.org with:

• your name;
• your address;
• your fixed and/or mobile phone number;
• a copy of your valid proof of identity.

We provide you with a reply to your request without undue delay and at the latest within one month.

12. Request previous version of the Privacy Policy

You can request previous versions of our privacy policy.

13. The Privacy Policy is subject to change

MIcompany keeps its privacy policy under regular review and places any updates on this web page https://micompany.nl/privacy-policy. Changes to the privacy policy are effective immediately. We therefore advise you to visit this web page frequently. The current version was last updated on April 28^th, 2020.

14. Contact information

If you have any questions regarding this privacy policy, please contact us.

MIcompany B.V., Vijzelstraat 72 – Floor 7A, 1017 HL Amsterdam, Postbus 158481001 NH Amsterdam, Email: exam@micompany.nl.