- WINDA

Was updated for test 2024-11-18 - Magnus Hvidsteen - MH

GDPR Statements GWO has designed its data privacy policy to be in compliance with the European Union General Data Protection Regulations (GDPR). For information on our policies in relation to this, please view our GDPR data protection procedures and architecture.

A guide to data protection in WINDA WINDA is designed to enable employers and duty-holders to verify current and valid training records of Delegates/Technicians. All Delegate records belong the Delegate.

To enable this verification, the Delegate must communicate his/her WINDA ID to the GWO Certified Training Provider and allow upload of a training record upon completion of training. Further, he/she must communicate his/her WINDA ID to those persons (legal entities) he/she wishes to enable to verify training (e.g. an employer).

In searches to verify a Delegate's training, the result will by default show only:

Delegate name and nationality

Delegate valid training and dates

GWO Certified Training provider delivering said training

No other Delegate personal data is shared in any way, unless you perform a search yourself (see below). Delegates are able to access a search history of all searches that includes their WINDA ID, and may access name and email-address of users that have performed said searches. Delegates are able to block other users from searching their records by entering email addresses of any user they wish to block

In this privacy notice, we describe the processing, including the use and disclosure of your personal data relating to your registration in the WINDA database (winda.globalwindsafety.org) as a Delegate user, an Organisation user or as a Training Provider user and on our website globalwindsafety.org.

We use cookies only to enhance the user experience of the site. Read more about our cookies in our Privacy Policy.

Our general policy for collected data is to store only necessary data, at as low a privacy level as possible, and share only what is necessary to ensure efficient operations of globalwindsafety.org and of WINDA on winda.globalwindsafety.org.

Read more about what we collect and what we share for each of the user types below.

____________________________________________________________________

Delegate users' personal data in WINDA When registering as a Delegate user of WINDA, you agree to the WINDA Terms and Conditions, that allows certified Training Providers to upload training records to your profile, and allows all registered users to verify your training records by entering your WINDA ID provided to them by you.

By registering as a Delegate user of the WINDA database, you agree to our collection and processing of the following personal data:

Your private email-address or work email-address
Your full name as written in your passport
Your nationality
Your full GWO training history as uploaded by GWO certified Training Providers
Your WINDA ID, which is generated upon registration. All of the above data is associated with this WINDA ID. The WINDA ID is your unique identification number

WINDA is designed to allow you to enable employers and duty-holders to verify your current and valid training records. To do so, they must also register as users in WINDA, and you must communicate your WINDA ID to them. When you attend a GWO certified training course, you must provide your WINDA ID after passing a Training Module if you wish your training to be accepted as GWO training by employers. When registering for the course you must also bring and show government issued ID such as your driver's license or your passport together with your WINDA ID. The information on your government issued ID is processed by the Training Provider to verify your identity only and is not shared with GWO. We do not register personal information such as your social security number, passport number, gender or birth date in the WINDA database.

Your GWO training may be verified through a search by anyone who you have communicated your WINDA ID to (e.g. an employer).

GWO will at all times maintain an audit trail to be able to document which users have performed a verification search against your WINDA ID. There are no restrictions on who may register as users. If in possession of your WINDA ID, a search result in WINDA will only provide these personal data:

Your full name as you have entered it (as stated in your passport)
All current and valid training records that have been uploaded to your WINDA ID, including completion dates of training (expiry dates of validity), name and site of training provider

If you perform a search against another person's WINDA ID, the Delegate whose training records you have searched will be able to see your name and the email address associated with your WINDA ID.

Likewise, you will be able to access a search history, that includes name and email-address of any WINDA user that have verified your training records through a search in WINDA. You have the ability to block individual users from verifying your records. If you do not perform search against a WINDA ID, your associated email address is never shared with anyone outside of the GWO secretariat. Your email-address is used for purposes of notifying you of changes to your profile, changes to the Terms & Conditions, password retrieval or safety related information from GWO.

Your expired training history can only be viewed in WINDA by yourself and the GWO secretariat.

All your search results in WINDA are logged and may be retrieved by GWO Audit and Compliance committee or the Secretariat. All searches you have performed against a specific WINDA ID is visible to the Delegate user associated with this specific WINDA ID. Subject to legal request, authorities may also gain access to the search log.

We do not share any other types of personal data.

Organisational users' personal data in WINDA

When registering as an Organisation user of WINDA, you agree to the WINDA Terms and Conditions, that allows you to search the WINDA database for valid training records, if you have been provided with a WINDA ID by a trained Delegate. By registering as an Organisation user of the WINDA database, you agree to our collection and processing of:

Your job title
Your full name as written in your passport
Your work email-address
Your work phone number
The name of the organisation that employs you
The address of your employer

Delegates are able to access a search history of all searches that includes their WINDA ID, and may access name and email-address of users that have performed said searches. Delegates are able to block other users from searching their records by entering email addresses of any user they wish to block.

Except as described above, your email address is never shared with anyone outside of the GWO secretariat. Your email-address is used for purposes of notifying you of changes to your profile, changes to the Terms & Conditions, password retrieval or safety related information from GWO.

We do not share any other types of data.

Training Provider users' personal data in WINDA

When registering as a Training Provider user in WINDA, you agree to the WINDA Terms & Conditions, that allow you to upload training records on trained Delegates and purchase credits as well as searching the WINDA database for valid training records, if you have been provided with a WINDA ID by a Delegate.

By registering as a Training Provider user in the WINDA database, you agree to our collection and processing of:

Your full name as written in your passport
Your work email-address
Name, telephone number and address of the Training Provider

We may ask third parties, such as Certification Bodies, to verify the information you provide to us as part of the GWO registration and/or audit procedures.

Your work email-address is primarily used for purposes of notifying you of changes to, your profile, changes to the Terms & Conditions, password retrieval and safety related information from GWO. We may use your email address to request further information from you or provide you with HSE relevant information.

Your uploads of training records are saved for statistical purposes as well as ensuring an accurate credit balance and maintain an audit trail.

All your search results in WINDA are logged and may be retrieved by GWO Audit and Compliance committee, the Secretariat or the person whose WINDA ID you have searched. All searches you have performed against a specific WINDA ID is visible to the Delegate user associated with this specific WINDA ID. Subject to legal request, authorities may also gain access to the search log.

We also keep an audit trail of users that you have created and removed from the account as well as the access level that you have provided them.

The training records that you upload into WINDA are visible to anyone that have registered for a profile in WINDA and performs a search against the specific WINDA ID(S). The search results include the Delegate's name, valid training records, Training completion dates and expiry and the location and company name of the Training Provider that uploaded the training.

Purpose of collecting data

GWO will collect and process your personal data for the following purposes:

For registration purposes in our WINDA database winda.globalwindsafety.org
In WINDA, your email-address is registered for notification purposes concerning changes to your profile or the Terms and Conditions, password retrieval or safety related information from GWO
To allow Delegates information on who has viewed their training records and enable option to block specific users from viewing these records
If you sign up for a newsletter, we register your email address for this purpose
Regarding Training Provider users' and Organisation users' registration, your email-address is also registered, so we can request further information from you.
Audit purposes or defense of legal claims.
In aggregate and anonymized form to produce statistics, analysis and in other ways related to achieve the goals of the GWO.

Your legitimate interests are reasonably protected as we aggregate and anonymize all personal data to the furthest extent possible.

GWO as data controller or data processor

GWO is the data controller for all the master data that GWO administrates/registers on WINDA and on its website. GWO is the data controller in regard to:

Your private email-address or work email-address
Your telephone number (if Organisation users)
Your full name as written in your passport
Your nationality
Your WINDA ID (if Delegate user)
The name of the organisation that employs you (if Organisation user or Training Provider user)

However, the Training Provider is the data controller for any data, which the Training Provider registers on WINDA in his capacity as responsible for the courses. Instead, GWO will be the data processor in regard to the data registered by the Training Provider.

Disclosure of personal data to third parties

GWO only share your name and valid training history with other registered WINDA users who are in possession of your WINDA ID. If you perform a search against another person's WINDA ID, the Delegate whose training records you have searched will be able to see your name and the email address associated with your WINDA user profile.

Apart from the above, GWO does not share your personal data with any third party or with companies, organisations and individuals outside GWO, unless you consent to such disclosure or it is required by law, regulators, public authorities (in particular supervisory authorities), relevant accredited organisations or court orders or unless necessary as part of the establishment, exercise or defense of legal claims, e.g. towards legal representation.

Security of the data

All data is transmitted over the public internet and is encrypted via https.

The database is physically hosted on Amazon Web Services (AWS) located in Frankfurt. No physical access to data centres is provided to customers.

Web servers are located within a virtual private cloud. Firewall protects web servers and only allows access from load balancers and white listed IP addresses (SSH management). Application level access controls are in place to ensure data security.

Refer to https://d0.awsstatic.com/whitepapers/Security/Intro_Security_Practices.pdf for details More information available from https://aws.amazon.com/security/

Transfer of data to third countries outside the EU/EEA

When you share your WINDA ID with other users, they are able to search and verify your training records from anywhere in the world.

Subject to legal requirements, GWO does not actively transfer personal data to any third party, including third parties outside of EU/EEA.

Data processors

We use a number of data processors who are providing systems and services to us, including but not limited to the following:

Amazon Web Services (legal entity residing in Germany)

WSP-Digital (legal entity residing in United Kingdom)

____________________________________________________________________

Deletion of User accounts

GWO does not want to retain unnecessary data.

Delegate and organisational user accounts may be deactivated at any given time upon written request from the user to info@globalwindsafety.org. Deactivation means we will delete your WINDA ID. All records of training associated with the WINDA ID will remain in the system, however, the association between your name/email address and these records will be removed.

Training Provider users accounts may be deactivated at any given time upon written request from the user to info@globalwindsafety.org. Deactivation means we will discontinue your users' rights to upload records. All uploaded records remain in the system, and the association between the Training Provider name, and the WINDA ID's to which records were originally uploaded will remain in the system to ensure a complete audit trail.

The three types of user accounts will automatically be deactivated after a certain period depending on the specific type of user profile.

Delegates

Delegate user accounts and all data associated with the user type along with the WINDA ID will be deleted after 48 months of inactivity. Activity is defined as either a user login or a training record added to the user profile by a certified Training Provider. Users will automatically be notified in advance of expiry. To prevent the account from expiring log in to the account on a regular basis. GWO will not be able to reactivate expired accounts. Organisations Organisation user accounts will be deleted after 12 months of inactivity. Users will automatically be notified in advance of expiry. To prevent the account from expiring log in to the account on a regular basis. GWO will not be able to reactivate expired accounts.

Training Providers

Training Provider users will be deleted after 24 months of inactivity. Users will automatically be notified in advance of expiry. To prevent the account from expiring log in to the account on a regular basis. GWO will not be able to reactivate expired accounts. All users may be deleted (deactivated) by the GWO Secretariat for any reason.

Your rights

As a data subject under the applicable national / EU data protection law, you are entitled to:

request access to the personal data
request information about your personal data and the purposes and potential recipients of this data
have personal data rectified or deleted.
object to the processing of your personal data as well as the right to data portability

You also have the right to lodge a complaint with your national data protection authority (the Danish Data Protection Agency) or other public authorities governing the protection of your personal data.

Furthermore, you have the right to withdraw your consent. However, our processing based on your consent up until your withdrawal will be legal. ____________________________________________________________________

Amendments to this privacy notice

This privacy notice is subject to a regular review and might be updated, if needed. We will publish any new version on winda.globalwindsafety.org and on globalwindsafety.org.

This privacy notice and contact information

This privacy notice represents a general information and does not provide exhaustive details of all aspects of GWO's collection and use of personal data.

If you need further information in regard to the processing of personal data, please contact the GWO's secretariat at info@globalwindsafety.org

Cookie policy

Cookies

In the following sections, you can learn more about cookies and how they are used on the sites.

What is a cookie? A cookie is a small data file that websites store on your computer in order to recognize it the next time you visit the website. A cookie is a passive file and cannot carry computer virus or other damaging programs.

Cookies on globalwindsafety.org and winda.globalwindsafety.org

On globalwindsafety.org and winda.globalwindsafety.org we only use cookies to collect and generate statistics about the visitors' usage of the website. The data is exclusively used for web analysis to enhance the user experience. Confidentiality of all personal data is protected and information is under no circumstances redistributed to third party.

Rejection of cookies

You can reject cookies on your computer via the settings in your browser. Please be aware that by rejecting cookies you risk not being able to use all the features of globalwindsafety.org. Rejecting cookies will prevent you from accessing winda.globalwindsafety.org. As a cookie is located at the visitor's computer, you are at any time able to see, change or delete a cookie.

If you do not wish to receive cookies from globalwindsafety.org and winda.globalwindsafety.org, you can in most newer browsers, under the internet settings, choose the advanced cookie settings and add this domain to the list of websites from where you want to block the cookies. You will not be able to access winda.globalwindsafety.org if you block cookies.

For more information on rejection or deletion of cookies, please visit www.allaboutcookies.org.

Why do we notify about cookies?

We notify you about cookies because we, like all other Danish websites, are obligated to do so under "The Act on Processing of Personal Data"

Please notice that the English version of the act is translated for Danish Data Protection Agency. The official version is published in "Lovtidende" (Official Journal) on 2 June 2000. Only the Danish version of the text has legal validity.

Questions or objections must be addressed to the Global Wind Organisation's secretariat at info@globalwindsafety.org.