WINDA
Wind Industry Database

Data Privacy Policy

Data Privacy Notice

At Global Wind Organisation (“GWO”, “we”, “us”, “our”) we care about the protection of your personal data. By law, we must also inform you about how we process and share personal data about you.

GDPR Statements

WO has designed its data privacy policy to be in compliance with the European Union General Data Protection Regulations (“GDPR”). For information on our policies in relation to this, please view our GDPR data protection procedures and architecture.

GWO is the data controller for all data that GWO administrates/registers on WINDA and on its website as described in this policy.

A guide to data protection in WINDA

WINDA is designed to enable employers and duty-holders to verify current and valid training records of Delegates/Technicians. All Delegate records belong the Delegate.

To enable this verification, the Delegate must communicate his/her WINDA ID to the GWO Certified Training Provider and allow upload of a training record upon completion of training. Further, he/she must communicate his/her WINDA ID to those persons (legal entities) he/she wishes to enable to verify training (e.g. an employer).

In searches to verify a Delegate’s training, the result will by default show only:

  • Delegate name and nationality
  • Delegate valid training and dates
  • GWO Certified Training provider delivering said training

No other Delegate personal data is shared in any way, unless you perform a search yourself (see below). Delegates are able to access a search history of all searches that includes their WINDA ID and may access name and email-address of users that have performed said searches. Delegates are able to block other users from searching their records by entering email addresses of any user they wish to block

In this privacy notice, we describe the processing, including the use and dis-closure of your personal data relating to your registration in the WINDA database (winda.globalwindsafety.org) as a Delegate user, an Organisation user or as a Training Provider user and on our website globalwindsafety.org.

We use cookies only to enhance the user experience of the site. Read more about our cookies below.

Our general policy for collected data is to store only necessary data, at as low a privacy level as possible, and share only what is necessary to ensure efficient operations of globalwindsafety.org and of WINDA on win-da.globalwindsafety.org.

Read more about what we collect and what we share for each of the user types below.

Delegate users’ personal data in WINDA

When registering as a Delegate user of WINDA, you agree to the WINDA Terms and Conditions, that allows certified Training Providers to upload training records to your profile, and allows all registered users to verify your training records by entering your WINDA ID provided to them by you.

By registering as a Delegate user of the WINDA database, you agree to our collection and processing of the following personal data:

  • Your private email-address or work email-address
  • Your full name as written in your passport
  • Your nationality
  • Your full GWO training history as uploaded by GWO certified Training Providers
  • Your WINDA ID, which is generated upon registration. All of the above data is associated with this WINDA ID. The WINDA ID is your unique identification number

GWO’s legal basis for processing the personal data as listed above is in order to perform the agreement (the agreed WINDA Terms and Conditions) with you, cf. GDPR Article 6(1)(b).

WINDA is designed to allow you to enable employers and duty-holders to verify your current and valid training records. To do so, they must also register as users in WINDA, and you must communicate your WINDA ID to them. When you attend a GWO certified training course, you must provide your WINDA ID after passing a Training Module if you wish your training to be accepted as GWO training by employers. When registering for the course you must also bring and show government issued ID such as your driver's license or your passport together with your WINDA ID. The information on your government issued ID is processed by the Training Provider to verify your identity only and is not shared with GWO. We do not register personal information such as your social security number, passport number, gender or birth date in the WINDA database.

Your GWO training may be verified through a search by anyone who you have communicated your WINDA ID to (e.g. an employer).

GWO will at all times maintain an audit trail to be able to document which users have performed a verification search against your WINDA ID. There are no restrictions on who may register as users. If in possession of your WINDA ID, a search result in WINDA will only provide these personal data:

  • Your full name as you have entered it (as stated in your passport)
  • All current and valid training records that have been uploaded to your WINDA ID, including completion dates of training (expiry dates of validity), name and site of training provider

GWO’s legal basis for processing the personal data as listed above is our legitimate interest in generating an audit trail to be able to document which users have performed a verification search against your WINDA ID, cf. GDPR Article 6(1)(f).

If you perform a search against another person’s WINDA ID, the Delegate whose training records you have searched will be able to see your name and the email address associated with your WINDA ID.

Likewise, you will be able to access a search history, that includes name and email-address of any WINDA user that have verified your training records through a search in WINDA. You have the ability to block individual users from verifying your records.  If you do not perform search against a WINDA ID, your associated email address is never shared with anyone outside of the GWO secretariat. Your email-address is used for purposes of notifying you of changes to your profile, changes to the Terms & Conditions, password retrieval or safety related information from GWO.

Your expired training history can only be viewed in WINDA by yourself and the GWO secretariat.

All your search results in WINDA are logged and may be retrieved by GWO Audit and Compliance committee or the Secretariat. All searches you have performed against a specific WINDA ID is visible to the Delegate user associated with this specific WINDA ID.  Subject to legal request, authorities may also gain access to the search log.

We do not share any other types of personal data.

Organisational users’ personal data in WINDA

When registering as an Organisation user of WINDA, you agree to the WIN-DA Terms and Conditions, that allows you to search the WINDA database for valid training records, if you have been provided with a WINDA ID by a trained Delegate. By registering as an Organisation user of the WINDA data-base, you agree to our collection and processing of:

  • Your job title
  • Your full name as written in your passport
  • Your work email-address
  • Your work phone number
  • The name of the organisation that employs you
  • The address of your employer

GWO’s legal basis for processing the personal data as listed above is in order to perform the agreement (the agreed WINDA Terms and Conditions) with you, cf. GDPR Article 6(1)(b).

Delegates are able to access a search history of all searches that includes their WINDA ID and may access name and email-address of users that have per-formed said searches. Delegates are able to block other users from searching their records by entering email addresses of any user they wish to block.

Except as described above, your email address is never shared with anyone outside of the GWO secretariat. Your email-address is used for purposes of notifying you of changes to your profile, changes to the Terms & Conditions, password retrieval or safety related information from GWO.

All your search results in WINDA are logged and may be retrieved by GWO Audit and Compliance committee or the Secretariat. All searches you have performed against a specific WINDA ID is visible to the Delegate user associated with this specific WINDA ID.  Subject to legal request, authorities may also gain access to the search log.

We do not share any other types of data.

Training Provider users’ personal data in WINDA

When registering as a Training Provider user in WINDA, you agree to the WINDA Terms & Conditions, that allow you to upload training records on trained Delegates and purchase credits as well as searching the WINDA data-base for valid training records, if you have been provided with a WINDA ID by a Delegate.

By registering as a Training Provider user in the WINDA database, you agree to our collection and processing of:

  • Your full name as written in your passport
  • Your work email-address
  • Name, telephone number and address of the Training Provider

GWO’s legal basis for processing the personal data as listed above is in order to perform the agreement (the agreed WINDA Terms and Conditions) with you, cf. GDPR Article 6(1)(a) and (b).

We may ask third parties, such as Certification Bodies, to verify the information you provide to us as part of the GWO registration and/or audit procedures.

Your work email-address is primarily used for purposes of notifying you of changes to, your profile, changes to the Terms & Conditions, password retrieval and safety related information from GWO. We may use your email address to request further information from you or provide you with HSE relevant information.

Your uploads of training records are saved for statistical purposes as well as ensuring an accurate credit balance and maintain an audit trail.

Delegates are able to access a search history of all searches that includes their WINDA ID and may access name and email-address of users that have per-formed said searches. Delegates are able to block other users from searching their records by entering email addresses of any user they wish to block.

All your search results in WINDA are logged and may be retrieved by GWO Audit and Compliance committee, the Secretariat or the person whose WIN-DA ID you have searched. All searches you have performed against a specific WINDA ID is visible to the Delegate user associated with this specific WIN-DA ID.  Subject to legal request, authorities may also gain access to the search log.

We also keep an audit trail of users that you have created and removed from the account as well as the access level that you have provided them.

The training records that you upload into WINDA are visible to anyone that have registered for a profile in WINDA and performs a search against the specific WINDA ID(S). The search results include the Delegate’s name, valid training records, Training completion dates and expiry and the location and company name of the Training Provider that uploaded the training.

Purpose of collecting data

GWO will collect and process your personal data for the following purposes:

  • For registration purposes in our WINDA database win-da.globalwindsafety.org
  • In WINDA, your email-address is registered for notification purposes concerning changes to your profile or the Terms and Conditions, password retrieval or safety related information from GWO
  • To allow Delegates information on who has viewed their training records and enable option to block specific users from viewing these records
  • If you sign up for a newsletter, we register your email address for this purpose. We will obtain you consent upon the sign up process in accordance with GDPR Article 6(1)(a).
  • Regarding Training Provider users’ and Organisation users’ registration, your email-address is also registered, so we can request further information from you
  • Audit purposes or defense of legal claims
  • In aggregate and anonymized form to produce statistics, analysis and in other ways related to achieve the goals of the GWO

We aggregate and pseudonymize (and anonymize to the extend possible) all personal data to the furthest extent possible.

Disclosure of personal data to third parties

GWO only share your name and valid training history with other registered WINDA users who are in possession of your WINDA ID. If you perform a search against another person’s WINDA ID, the Delegate whose training records you have searched will be able to see your name and the email address associated with your WINDA user profile.

Apart from the above, GWO does not share your personal data with any third party or with companies, organisations and individuals outside GWO, unless you consent to such disclosure or it is required by law, regulators, public authorities (in particular supervisory authorities), relevant accredited organisations or court orders or unless necessary as part of the establishment, exercise or defense of legal claims, e.g. towards legal representation.

Data processors

We use a number of data processors who are providing systems and services to us, including the following:

Microsoft Azure (legal entity residing in Ireland)

Netcompany (legal entity residing in Denmark)

Amazon SES (legal entity residing in Luxembourg)

Other relevant data processors and sub-data processors within the category of providing necessary support (IT, etc.) to GWO and WINDA in order to pro-vide you with a sufficient

Transfer of data to third countries outside the EU/EEA

When you share your WINDA ID with other users, they are able to search and verify your training records from anywhere in the world.

Subject to legal requirements, GWO does not actively transfer personal data to any third party, including third parties outside of EU/EEA.

However, if you share your WINDA ID with other users outside the EU/EEA, and/or if the other user access WINDA from a third country, GWO will theoretically share your training records with that third country in question via a so-called ‘view access’. The legal basis for GWO to be able to share your training record via this ‘view access’ is GDPR Article 49(1)(b).

Some of our sub-data processors have the possibility to use support from third countries outside the EU/EEA via a ‘view-access’. The legal basis for this ‘view-access’ is the European Commission’s Standard Contractual Clauses.  

Storage period and deletion of User accounts

GWO does not want to retain unnecessary data.

Delegate and organisational user accounts may be deactivated at any given time upon written request from the user to info@globalwindsafety.org. Deactivation means we will delete your WINDA ID. All records of training associated with the WINDA ID will remain in the system, however, the association between your name/email address and these records will be removed.

Training Provider users accounts may be deactivated at any given time upon written request from the user to info@globalwindsafety.org. Deactivation means we will discontinue your users’ rights to upload records. All uploaded records remain in the system, and the association between the Training Provider’s name, and the WINDA ID’s to which records were originally uploaded will remain in the system to ensure a complete audit trail.

The three types of user accounts will automatically be deactivated after a certain period depending on the specific type of user profile.

Delegates

Delegate user accounts and all data associated with the user type along with the WINDA ID will be deleted after 48 months of inactivity. Activity is de-fined as either a user login or a training record added to the user profile by a certified Training Provider. Users will automatically be notified in advance of expiry. To prevent the account from expiring log in to the account on a regular basis. GWO will not be able to reactivate expired accounts. Organisation user accounts will be deleted after 12 months of inactivity. Users will automatically be notified in advance of expiry. To prevent the account from expiring log in to the account on a regular basis. GWO will not be able to reactivate expired accounts.

Training Providers

Training Provider users will be deleted after 24 months of inactivity. Users will automatically be notified in advance of expiry. To prevent the account from expiring log in to the account on a regular basis. GWO will not be able to reactivate expired accounts. All users may be deleted (deactivated) by the GWO Secretariat for any reason.

Security of the data

All data is transmitted over the public internet and is encrypted via https.

The database is physically hosted on Microsoft Azure located in Nothern Eu-rope. No physical access to data centres is provided to customers.

Web servers are located within a virtual private cloud. A firewall protects the database by only allowing direct access using credentials from a whitelisted IP address. Application level access controls are in place to ensure data security.

Your rights

Under the applicable national / EU data protection law, you are entitled to:

  • request access to the personal data
  • request information about your personal data and the purposes and potential recipients of this data
  • have personal data rectified or deleted
  • object to the processing of your personal data as well as the right to data portability

You also have the right to lodge a complaint with your national data protection authority (the Danish Data Protection Agency) or other public authorities governing the protection of your personal data.

Furthermore, you have the right to withdraw your consent. However, our processing based on your consent up until your withdrawal will be legal.

The right to object

You have the right to object – on grounds relating to your particular situation – to processing of personal data where the legal basis for our processing is legitimate interests, as stated above. If you exercise your right to object, GWO may no longer process your personal data unless GWO demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

You also have the right at any time to object to the processing of your person-al data for marketing purposes, which includes the right to object to profiling in so far as it relates to direct marketing. If you object to GWO processing for the purpose of direct marketing, your personal data may no longer be processed for this purpose.

If you need further information in regard to the processing of personal data, and/or you wish to use any of your rights, please contact the GWO’s secretariat at info@globalwindsafety.org

This privacy notice is subject to a regular review and might be updated, if needed. We will publish any new version on winda.globalwindsafety.org and on globalwindsafety.org.

Cookie policy

Cookies

In the following sections, you can learn more about cookies and how they are used on the sites.

What is a cookie?

A cookie is a small data file that websites store on your computer in order to recognize it the next time you visit the website. A cookie is a passive file and cannot carry computer virus or other damaging programs.

Cookies on globalwindsafety.org and winda.globalwindsafety.org

On globalwindsafety.org and winda.globalwindsafety.org we only use cookies to collect and generate statistics about the visitors’ usage of the website. The data is exclusively used for web analysis to enhance the user experience. Confidentiality of all personal data is protected and information is under no circumstances redistributed to third party.

Rejection of cookies

You can reject cookies on your computer via the settings in your browser. Please be aware that by rejecting cookies you risk not being able to use all the features of globalwindsafety.org. Rejecting cookies will prevent you from accessing winda.globalwindsafety.org. As a cookie is located at the visitor’s computer, you are at any time able to see, change or delete a cookie.

If you do not wish to receive cookies from globalwindsafety.org and win-da.globalwindsafety.org, you can in most newer browsers, under the internet settings, choose the advanced cookie settings and add this domain to the list of websites from where you want to block the cookies. You will not be able to access winda.globalwindsafety.org if you block cookies.

For more information on rejection or deletion of cookies, please visit www.allaboutcookies.org.

Why do we notify about cookies?

We notify you about cookies because we, like all other Danish websites, are obligated to do so under “The Act on Processing of Personal Data

Please notice that the English version of the act is translated for Danish Data Protection Agency. The official version is published in "Lovtidende" (Official Journal) on 2 June 2000. Only the Danish version of the text has legal validity.

Questions or objections must be addressed to the Global Wind Organisation’s secretariat at info@globalwindsafety.org.

No items found.