Data Privacy Notice


Controller

Aon Assessment (Ireland) Limited
1-2 Bride Street
Loughrea, Co.Galway
H62 K279
Ireland
+353-91-842-203
gdpr.assessment@aon.com


Data Protection Officer

Dr. Thomas Balzer
Großer Burstah18-32
20457 Hamburg
Germany
+49-40-3250 389-900
gdpr.assessment@aon.com


1. Overview

At Aon (“we,” “our”, or “us”), we are committed to protecting the confidentiality, integrity and accuracy of personal data you provide to us.

We only collect personal data that is relevant for our described purposes. The aim of this Data Privacy Notice is to inform you of the nature of our processing and important rights you have in relation to this. This information is provided pursuant to Regulation EU 2016/679 (GDPR).


2. Purpose

The purpose of our processing of your personal data is to conduct assessments through our Online Assessment System (OAS), to facilitate your payment for this and to satisfy our business relationships. Specifically:

2.1 Assessment

Our OAS collects specific personal data related to you as an individual (name and email address, for example) as well as personal data stemming from your input in the assessments, including your personality traits and individual capabilities. This data is used to facilitate the assessments, to optimise our system through statistical analysis (your personal data is generally anonymised for this) and to produce an end result.

Our legal basis for this processing is Article 6(1)(b) of the GDPR, as we are offering you a service. The provision of your personal data is not required by law or by contract, however, it is not possible to achieve this purpose without it.

2.2 Payment

We will process your personal data for the purpose of facilitating the payment. Your personal data is not processed by Aon internally to conclude the payment. This is done by a third-party service provider. Your personal data is transferred to this provider in order for them to finalise the payment so that you can complete the assessment.

Our legal basis for this processing is Article 6(1)(b) of the GDPR. The provision of your personal data is not required by law or by contract, however, it is not possible to achieve this purpose without it.

2.3 Sharing with Ryanair

Aon has a business relationship with Ryanair. Your personal data will be processed in order for Ryanair to access details about your assessment. This is pursuant to our contractual agreement with Ryanair.

Our legal basis for this processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this processing is the realisation and facilitation of our business interests.


3. Storage

Aon does store your personal data excessively, namely, not for a duration beyond our purposes. Your personal data is only kept for an extended period of time where it is anonymised (and you can therefore no longer be identified), or for a period of time required of us by law or for other legal purposes where reasonable.


4. Recipients

Aon does not share your personal data where is not necessary to complete the purposes stated above. Recipients who will receive your personal data are:

4.1 Aon: Aon GmbH and affiliated companies, including Aon plc, to whom Aon Assessment GmbH belongs, may receive your personal data in order to facilitate the assessment or statistical analysis purpose.

4.2 Ryanair: your personal data will be shared with Ryanair. This will involve the sharing of your assessment input and/or results, which Ryanair will access.

4.3 Third-party service providers: your personal data will be shared with third-party service providers where it is so necessary in order to fulfil an above purpose. This includes IT Service-Providers and processing for payment, which is conducted by Stripe. For detailed information as to how Stripe processes your personal data, you can contact them directly at https://stripe.com/contact.


5. International Transfers

Aon will process your personal data within the EU/EEA. It may be, however, that your personal is processed for statistical or further analysis outside of the EU/EEA, including in a country where EU data protection standards do not apply. This may also be the case for our service providers. In order to safeguard your personal data against such transfer, Aon will ensure that your personal data is protected to an adequate standard, including through the conclusion of standard contractual clauses with the relevant party. Where such a transfer has occurred, you can receive a copy of these (or additional information) by contacting gdpr.assessment@aon.com.


6. Cookies

When visiting this website, a cookie is stored on your system that contains information about layout, your preferred language setting and your public IP. You can prevent the storage of such a cookie through the settings of your web browser, or by managing your settings so that cookies are deleted once you close your browser. Please note that a complete disabling of cookies may impact on your ability to use this service, or upon its quality.


7. Automated decision making and/or Profiling

Our OAS does use automated processes. However, this system is not used to discriminate, decide or otherwise have a negative or significant affect on you as an individual. Our automated processes are used only to take your input in the assessment and make conclusions based on statistical and comparative analysis. Your results will ultimately be accessed by Ryanair, who will be solely responsible for making decisions based on the information we have provided them. You can get in contact with us about automated processes by contacting gdpr.assessment@aon.com.


8. Your Rights

You have rights available to you in relation to our processing of your personal data. If you wish to exercise these individual rights, please get in contact with us using the contact information provided at the beginning of this Data Privacy Notice, or alternatively by contacting us at gdpr.assessment@aon.com.

Please specify when making your request in which form you wish to receive the relevant information. Where you do not specify this, we will use the same medium by which you have made the request.

Your rights are:

8.1 Access to your data – Article 15 GDPR: You have the right to request information as to whether we process personal data concerning you and subsequent access to this personal data.

8.2 Rectification of your data – Article 16 GDPR: You have the right to the rectification of your personal data that is inaccurate or incomplete. This includes by means of a supplementary statement.

8.3 Erasure of your data - Article 17 GDPR: You have the right under some circumstances to ask us for the erasure of your personal data.

8.4 Restriction of our processing of your data – Article 18 GDPR: You have the right to request a restriction on the processing of your personal data in particular circumstances.

8.5 Data Portability – Article 20 GDPR: In some circumstances, you may be entitled to request that your personal data be provided to you in a machine-readable format. This right to data portability includes the right to have your personal data transferred directly to another controller.


9. Objection to our processing of your data - Article 21 GDPR:

Where your personal data is processed for the purpose of legitimate interests of the controller (Article 6(1)(f)), you are able, based on the grounds relating to your particular situation, to object to the processing of your personal data.


10. Complaints

You maintain the right to submit a complaint to a supervisory authority relating to our processing of your personal data.


11. Comments

If you have any further comments, wish to exercise rights relating to your personal data, or have any other general questions or queries relating to this survey, you can contact Aon at gdpr.assessment@aon.com.