Ensuring Test Taker Data Privacy
Your educational institution holds the authority to determine the data we can process and its specific usage at ExamOnline. We guarantee that data will never be processed beyond the agreed terms with your institution. Please note that the information provided here is general, and your institution may impose further restrictions, such as excluding your name and email address from the data we receive.
From the inception of ExamOnline, we have adopted a privacy by design approach in product development, prioritizing the de-identification of personal data. We strongly recommend this practice to every customer. By employing ExamOnline configurations for anonymous learners, we guarantee that personal data cannot be linked to identifiable individuals without additional information not stored on the ExamOnline platform.
The personal data that ExamOnline may collect from you or your institution includes:
- Name of the examinee
- Email address of the examinee
- Student or employee ID number or pseudonymized identifiers like Candidate ID
- Screen recording of the examinee’s PC during the exam
- Webcam recording of the examinee’s environment, including their face
- Smartphone camera recording of the examinee’s environment (if applicable)
- Associated exam institute of the examinee
ExamOnline utilizes this data for specific purposes, such as:
- User Identification: To accurately identify you as a user during the exam process.
- Exam Integrity: To monitor your environment during the exam to maintain the integrity and fairness of the examination.
- Data Security: Ensuring that access to exam data is restricted only to authorized individuals with legitimate reasons and proper permissions.
The protection of your privacy and data security is a top priority for ExamOnline. All data processing adheres to the terms agreed upon with your educational institution and complies with relevant data protection regulations.
At ExamOnline, we may process and store the following data:
- Information on the browser and operating system used by the user.
- IP address of the user.
We utilize this data for the following purposes:
- Ensuring Service Functionality: The data is used to enable the proper functioning of our services on your device.
- Troubleshooting: It aids in identifying and resolving any technical issues that may arise.
- User Behavior Analysis: We may analyze user behavior relevant to the correctness of the exam to ensure the integrity and fairness of the assessment process.
- Workflow Support and Control: User-related events on the system are logged to support and monitor the overall workflow. For example, events such as staff members viewing or modifying exam sets are recorded for auditing purposes.
Rest assured, the handling of this data aligns with the agreements made with your educational institution and is done in compliance with relevant data protection regulations. Your privacy and data security are of utmost importance to us at ExamOnline.
Staff authorized by your institution may see parts of your data, as well as ExamOnline staff tasked by your institution.
ExamOnline also uses other companies to deliver our service. ExamOnline is responsible for how third parties process data.
If your institution has consented, we may also use third-party solutions to process selected data.
One of ExamOnline’s highest priorities is our customers’ needs for data privacy and security. As a standard part of our business, we have technical solutions and routines in place to ensure that data is kept secure and inaccessible to those who do not have the right to access.
Our privacy design principles include:
Minimisation: we only collect the data needed to provide the service to our users and customers. We never keep or sell personal information for any other purpose.
Anonymisation: we anonymize data before making secondary use of them in statistics.
