Privacy Policy : PetroSkills

1. Introduction

The Competency Alliance LLC, PetroSkills LLC, PetroSkills Foreign Holdings, OGCI Inc., OGCI Training Inc., roSkills Foreign Holdings and The Competency Alliance Holdings Inc. provides a complete spectrum of solutions, courses, and learning tools (the “Services”) to develop competent petroleum professionals. In order to provide these Services PetroSkills collects personal information through online and offline transactions. Your privacy is important to us. This notice outlines PetroSkills’ general privacy and security practices with respect to personal information. While this policy sets forth our general privacy and security practices, the detailed obligations and commitment of PetroSkills is set forth in the contractual arrangements with our customers. In the event of a conflict between this policy and a contract with the customer, the contract prevails.

2. The Information We Collect

This notice applies to all information collected by or submitted to PetroSkills. The types of personal information collected are:

Name
Address
Company & Job Title
Email Address
Phone Number
Country of Citizenship
Credit / Debit Card Information

3. The Way We Use Information

We use the information you provide about yourself or someone else to ensure we provide you with the products and services that you purchase from us. If you do not supply this information we may not be able to provide you with the requested products or services. The information may be used to perform a variety of purposes, including to:

Provide and deliver the services and features you request, process and complete transactions, and send you related information, including purchase confirmations and invoices
Respond to your comments, questions, and requests and provide customer service and support
Communicate with you about services, features, surveys, newsletters, offers, promotions and events, and provide other news or information about PetroSkills
Monitor and analyze trends, usage, and activities in connection with the PetroSkills Services and for marketing or advertising purposes
Investigate and prevent fraudulent transactions, unauthorized access to the PetroSkills Services, and other illegal activities
Personalize and improve the PetroSkills Services, and provide content, features, catalogs and/or advertisements that match your interests and preferences or otherwise customize your experience using PetroSkills Services
For other purposes about which we notify you
To improve our services and marketing effectiveness. For example, we use non-identifying and aggregate information to note that that X number of individuals took a certain course, or that Y number of individuals from a certain region used our services.

4. Legal Basis for processing EU personal information

Personal information of EU data subjects must be processed fairly and lawfully. In order to do so, the processing must be based on one or more specific legal grounds. The most relevant legal grounds, for processing personal data, include:

The data subject having unambiguously given his or her consent.
The processing is necessary for the performance of a contract to which the data subject is a party (e.g., a service agreement) or in order to take steps at the request of the data subject prior to entering into a contract.
The processing is necessary for PetroSkills to comply with an EU/Member State legal obligation applicable to PetroSkills.
The processing is necessary for the purposes of the legitimate interests pursued by PetroSkills unless such interests are overridden by the rights of the data Subject. In making such a determination, PetroSkills will conduct a legitimate interest assessment.

Where consent is the ground being relied on this must be a freely given, specific, informed and unambiguous indication of the data subject's wishes. The data subject must provide an active indication that he or she agrees to the processing of his or her personal data. The consent shall be in writing or other legally permissible means. The data subject has the right to withdraw consent at any time by contacting PetroSkills at privacy@petroskills.com.

5. Data Privacy Framework

For the sake of this policy, all of the following organizations are considered part of PetroSkills: PetroSkills Foreign Holdings, OGCI Inc., OGCI Training Inc., The Competency Alliance Holdings Inc., PetroSkills, LLC, and The Competency Alliance, LLC.

PetroSkills complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. PetroSkills has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. PetroSkills has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

PetroSkills is responsible for the processing of personal data it receives, under each Data Privacy Framework, and subsequently transfers to a third party acting as an agent on its behalf. PetroSkills complies with the Data Privacy Framework Principles for all onward transfers of personal data from the EU, UK and Switzerland, including the onward transfer liability provisions.

With respect to personal data received or transferred pursuant to the Data Privacy Frameworks, PetroSkills is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, PetroSkills may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

We will investigate and attempt to resolve any complaints or disputes regarding the use of your Personal Data within a reasonable period of time of receiving your complaint. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, refer to the Complaint, Enforcement, and Dispute Resolution section below for further details.

Under certain conditions, more fully described on the Data Privacy Framework website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted (see Section Complaint, Enforcement, and Dispute Resolution below)

6. International Data Transfers

PetroSkills transfers personal data to the United States and other jurisdictions across the globe. As noted above, for transfers to the United States and any onward transfers of that data, PetroSkills relies on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. For transfers of personal data from the EU to other jurisdictions, PetroSkills relies on one of the following:

An Article 45 determination of adequacy
One of the Article 46 safeguards including standard contractual clauses
One of the Article 49 derogations including explicit consent of the data subject

7. Data Integrity and Purpose Limitation

We do not process personal information in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by the individual. With respect to visitors to our web sites, we only collect information that we believe to be relevant to our business. With respect to data that we process on behalf of our customers, we only process personal information to the extent that such processing is necessary for us to provide our Services, and in accordance with our agreements with our customers. In all instances of data collection or receipt, we take reasonable steps to ensure that personal data we collect or receive from our customers is reliable for its intended use.

8. Sharing and Disclosure of Information

We will not share personal information about you or any Content with any third parties except as described in this Privacy Notice or in connection with PetroSkills Services. For example, we may share personal information about you including as follows:

Vendors, Consultants and Other Service Providers:
We may share your information with third-party vendors, consultants and other service providers who are working on our behalf and require access to your information to carry out that work, such as to process billing, provide customer support, etc. These service providers are authorized to use your personal information only as necessary to provide services to PetroSkills and/or PetroSkills Services.
Employer:
If requested we may share your contact information, information about the products or services that you purchased, critiques and or evaluations that you submitted.
Compliance with Laws:
We may disclose your information to a third party if (a) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, (b) to enforce our agreements, policies and Terms of Service, (c) to protect the security or integrity of the PetroSkills Services, (d) to protect PetroSkills, our customers or the public from harm or illegal activities.
Business Transfers:
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Aggregated or Anonymized Data:
We may also share aggregated or anonymized information with third parties that does not directly identify you.
Risk Management:
PetroSkills maintains a third-party risk management program to ensure that third-parties have acceptable security and privacy controls in place before accessing or handling any data on behalf of PetroSkills.
Choices for limiting the use and disclosure of your personal information.
If we intend to use your personal information for a purpose that is materially different from the purposes listed in this Policy or if we intend to disclose it to a third party acting as a controller not previously identified, we will offer you the opportunity to opt-out of such uses and/or disclosures where it involves non-sensitive information or opt-in where sensitive information is involved.

9. Our Commitment To Data Security and Retention

PetroSkills takes reasonable precautions to protect Customer Data from loss, misuse, or unauthorized access, disclosure, alteration or destruction. Customer Data is maintained on secure electronic computer systems, and access to these files is limited to personnel for whom access is necessary to properly provide the Services. PetroSkills personnel who are authorized to access the data for the stated purposes are trained annually on this Privacy Policy, with emphasis on the need to keep Customer Data private and secure and the potential disciplinary consequences for the failure to do so.

No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. Customers of PetroSkills are responsible for maintaining the security and confidentiality of their usernames and passwords. If you have any questions about the security of your personal information, you can contact us at the contact information below.

Your personal information is stored by PetroSkills. PetroSkills retains data for the duration of the relationship with you. PetroSkills only retains the data for as long necessary based on the defined business purpose, and/or legal and compliance obligations. For more information on where and how long your personal data is stored, please contact

Privacy@PetroSkills.com.

10. Customer Data – Hosted Software Services

PetroSkills SaaS systems collect information under the direction of its customers and has no direct relationship with the individuals whose personal data it processes. If you are an individual of one of our SaaS customers and would no longer like to be contacted by one of our customers that use our service, please contact the customer that you interact with directly. We may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our customers. The use of information collected through our SaaS solution shall be limited to the purpose of providing the service for which the customer has engaged PetroSkills.

11. Your Choices

Account Information & Retention. You may update or correct information about you at any time by emailing us via the information in the “How To Contact Us” section of this privacy policy. To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.

We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Notice. If you wish to remove your data, please email us via the information in the “How To Contact Us” section of this privacy policy but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time. We will respond to your access request within 30 days.

We will retain your information as needed to provide you products and services. We will retain and use your information to comply with our legal obligations, resolve disputes and enforce our agreements.

Promotional and Newsletter Communications
You may opt out of receiving promotional and newsletter emails from PetroSkills by following the opt-out instructions provided in those emails. You may also opt-out of receiving promotional emails and other promotional communications from us via the information in the “How To Contact Us” section of this privacy policy with your specific request. If you opt out, we may still send you non-promotional communications about our ongoing business relations.

Cookies
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies or to prompt you before accepting such a cookie. Please note that, if you choose to remove or reject browser cookies, this could affect the functionality of the PetroSkills Services. Cookies or similar technologies may be used for the following purposes:

To analyze trends, statistics and patterns
To help provide better customer service
To better serve you when you re-visit a webpage
To monitor the regions from which visitors navigate our web sites
To provide you with advertising based upon your browsing activities and interest

12. Your Data Subject Rights When We Act as a Data Controller

Where required by contract with our customers, or where applicable law applies, PetroSkills will provide you with information about whether we hold any of your personal information upon request. You have the right correct (rectify) the record of your personal information maintained by PetroSkills if it is inaccurate. You have the right to request the erasure of your personal information, subject to certain exceptions. You may also have the right to request that PetroSkills ceases to use your personal data for the purpose of direct marketing. Where technically feasible, PetroSkills will, at your request, provide your personal data to you or transmit it directly to another controller.

We will respond to your request within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information or may need to retain your personal information in order to continue providing a service. If you have concerns about the way PetroSkills is processing your personal data, in some jurisdictions you have the right to lodge a complaint with the appropriate data protection authority.

13. Your Data Subject to Rights When We Act as a Data Processor

Where required by contract with our customers, or where applicable law applies, PetroSkills acknowledges that you have the right to access your personal information. PetroSkills has no direct relationship with the individuals whose personal data it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to PetroSkills’ Client (the data controller). If requested to remove data, we will respond within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information or may need to retain your personal information in order to continue providing a service.

14. Complaint, Enforcement, and Dispute Resolution

Where required by contract with our customers, or where applicable law applies, customers have the right to file a complaint concerning our processing of their personal data. All queries and complaints shall be handled in a timely manner by PetroSkills in accordance with internal procedures. Complaints can be submitted by contacting us via the information in the “How To Contact Us” section of this privacy policy.

In the unlikely event that customers have suffered harm due to a breach of their rights under the data protection policy and PetroSkills has not handled the complaint in a sufficient manner, customers may lodge a complaint with the supervisory authority.

PetroSkills has further committed to refer unresolved privacy complaints under the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles to an independent dispute resolution mechanism, The International Centre for Dispute Resolution (ICDR), international division of the American Arbitration Association (AAA). If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://go.adr.org/dpf_irm.html .

PetroSkills is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. There is the possibility, under certain circumstances, for EU and Swiss individuals to invoke additional binding arbitration.

PetroSkills retains sole and absolute discretion in resolving all questions relating to the administration, interpretation and application of this policy. This authority includes construing the terms of this policy, including any disputed or doubtful terms.

15. Children

Our services are not intended for or to attract children. Accordingly, we do not solicit nor knowingly collect any personal information from children under the age of thirteen (13). If we learn that personal information is, has been submitted by, or collected from a child under the age of thirteen (13), we will immediately delete such information.

16. Compliance Monitoring

PetroSkills performs ongoing monitoring of privacy and security controls to validate compliance with applicable laws and regulations.

17. Amendments to Privacy Policy

PetroSkills reserves the right to change this Privacy Policy. If we make any material changes we will notify you by email (sent to the email address specified in your account) or by means of a notice on this Site (/) prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. You can check the “Effective Date” posted at the top to see when the Privacy Policy was last updated. By accessing or using our Services after we have placed such a notice, you consent to the new practice(s) identified in the update.

18. Who Will Contact You

You may receive email from the following addresses at PetroSkills:

19. How To Contact Us

Any questions about this Privacy Notice should be addressed to Privacy@PetroSkills.com, or to Attn: Privacy Manager PetroSkills, 10026-A S. Mingo Road, PMB 333, Tulsa, OK 74133.

EU Representative under Article 27 GDPR

In accordance with Article 27 of the EU General Data Protection Regulation (GDPR), PetroSkills has appointed the following representative in the European Union:

Birgitte Poulsen, General Counsel at RelyOn

Kalvebod Brygge 45 3. th,

1560 København V

Denmark

Email: BP@relyon.com

Telephone: +45 30 50 18 46

The EU Representative acts as the point of contact for supervisory authorities and individuals in the EU regarding all issues related to data processing.

Privacy Policy