Privacy Statement
This privacy statement applies only to TalentLens, the online Pearson talent assessment test and questionnaire system (the “Pearson Platform”). This statement contains information about how Pearson TalentLens UK (‘Pearson’) collects, uses and protects personal data from administrators and test administrators, and how processing of personal data generated through the Pearson Platform is carried out. Whether Pearson is a data controller with regard to your personal data (depending on whether the data is processed and used) depends on whether you are a Pearson customer and / or test administrator or a person who participates in a test or review that is managed by a test administrator.
I am a customer and / or a test manager
Pearson is the controller
Pearson Education Ltd is the controller with regard to your personal data. Company number 00872828. Head office is 80 Strand, London, WC2R 0RL. You can contact Pearson regarding this privacy statement or our handling of your personal information at the following address;
Data Privacy Office, Pearson PLC – dataprivacy@pearson.com
What information does Pearson collect from me?
1. Information about your account
We collect some or all of the following personal information from customers and / or test administrators directly when setting up your account; name, telephone number, mobile number, email address, “Pearson qualification level”, login ID and password. Our legal basis for collecting and processing this data is the provision to you of services that you or on your behalf have purchased on the Pearson platform. We need this information in order to provide the services under our agreement with you and if you do not provide this information we may not be able to provide you with our services.
2. Browser information
We also automatically collect information sent by your browser when you access the Pearson Platform and relevant products. This includes your IP address, the date and time of the request, the pages you have accessed, the access status / HTTP status code, the data volume sent at a given time, the website from which the request came, your browser, your operating system and interface, as well as the language and version of the browser software. The legal basis for collecting and processing this personal data is to operate the Pearson Platform and provide you with access to the products and services to which you have access.
3. Cookies
We use cookies (small text files transferred by the Pearson Platform to your browser) to identify patterns of data, personalize content and support security. The cookies we use are described in more detail in our cookie statement https://www.pearson.com/corporate/cookies.html. They do not provide information that can reveal the identity of a specific person, but they may be able to identify your computer, your browser and your internet settings. You can change the storage of cookies in your browser settings at any time by selecting the “Do not accept cookies” function. However, disabling essential cookies may result in you no longer being able to use the full functionality of the Pearson Platform.
4. Google Analytics
Google Analytics, a web analysis service provided by Google Inc. (“Google”), also places cookies on your computer so that Google can send us activity reports related to the Pearson Platform. Google only uses this data to provide us with information about how users use the Pearson Platform and does not associate your IP address with other data held by Google. The information generated by Google cookies about your use of the platform (including your IP address) is sent to and stored by Google on servers in the United States. You can refuse these cookies by selecting the appropriate settings in your browser or by downloading and installing the browser plug-in available
https://tools.google.com/dlpage/gaoptout?hl=en-GB
What does Pearson do with your personal data?
We use your account information to set up and manage your account so that you can purchase, access and use products and services available on the Pearson Platform, to verify your right to use products and services purchased by you or for your use and to provide you with support and customer service.
Pearson may also use your contact information for its own legitimate purposes to inform you of other Pearson services that may interest you. You can opt out of receiving further marketing information at any time by clicking the ‘unsubscribe’ link at the bottom of an email from Pearson or by emailing Pearson at the following address: info@talentlens.co.uk
How long does Pearson keep my personal data?
Pearson will retain personal data collected directly from a customer or test administrator for the period that the account is active and for that period as necessary to enable you to download data and perform activities necessary for us to close your account. We will then retain a limited amount of information related to your account as required for auditing purposes
How does Pearson protect my personal data?
Pearson and its affiliates host the personal information provided by you and the reports provided to the test administrator on secure servers operated by Pearson group companies or by third parties appointed to manage the Pearson platforms. Pearson takes appropriate operational and security measures to protect the information and requires similar operational and security measures from third parties engaged by Pearson. Further details are available on the TalentLens website
Does Pearson share my personal data with third parties?
Pearson will not sell or share your information with third parties unless it is necessary to operate the Pearson Platform and manage your account. This requires us to share your information with our affiliated companies and third parties involved in the operation and management of the Pearson Platform.
Does Pearson send my personal data outside of Europe?
Account information is managed by Performance Assessment Network, Inc. and is hosted on behalf of Microsoft in within the EEA in Ireland. Both Performance Assessment Network, Inc. and Microsoft Corp. are committed to complying with EU-US Privacy Shield principles .
What rights do I have with regard to my personal data?
You have the right to update and correct the personal information in your account. You also have the right to request that Pearson restrict any personal information we receive from you from the processing of that data and request that we delete it. Where permitted by applicable law, there may be an administrative cost of providing copies of data. You also have the right to object to our continued processing of your personal data. You may also be entitled to data portability. If you have a complaint about the way in which Pearson uses your personal information you have the right to complain to your relevant local Data / Information Regulator.
I participate in a test or assessment conducted by a test administrator
The test administrator is the controller
The controller (the person who decides how personal data is processed and used) is the person who performs the test or assessment on the Pearson Platform.
What information does Pearson get about me?
When you participate in a test or assessment on the Pearson Platform, we receive some or all of the following personal information from the test administrator;
- personal identification data such as name and email address
- Cognitive skills related data
- Personality related data
- Professional working styles and preferences
- Work-related history and experiences
- Educational experiences and certifications
How does Pearson receive my personal data?
Depending on the nature of the test or assessment, this information will be provided by you to the test administrator who enters it on the Pearson platform, or entered directly with the Pearson platform during the assessment, either by you or by the test administrator.
What does Pearson do with my personal data?
Pearson uses the information you provided during a test or assessment to evaluate the answers to questions asked during the test or assessment and retrieves raw scores and tests specific scaled or percentage scores within the Pearson platform. We then return this information to the test administrator in the form of reports and / or structured data containing scores, indexes, etc. produced by the Pearson Platform. We only process this data on behalf of our customer who has taken the test or assessment.
We may also occasionally aggregate the answers provided to us and other information collected during the test implementations into an aggregated form that does not identify any person. This aggregated data may be made available to researchers, test developers and our contractors for research, quality control, operations management, security and sales promotion purposes, as well as to improve our products and services.
How long does Pearson keep my personal data?
Pearson will retain the information you provide during the time the test administrator maintains an account on the Pearson platform. Pearson will remove any personally identifiable information at the request of the test administrator.
How does Pearson protect my personal data?
Pearson and its affiliates host the personal information provided by you and the derived scores and reports provided to the test administrator on secure servers operated by Pearson group companies or by third parties appointed to operate the Pearson platform. manage. Pearson takes appropriate operational and security measures to protect the information and requires similar operational and security measures from its contractors. Further details are available on the TalentLens websites.
Does Pearson share my personal data with third parties?
Pearson will not sell or share your information with third parties unless it is necessary to operate the Pearson Platform and manage your account. This requires us to share your information with our affiliated companies and third parties involved in the operation and management of the Pearson Platform.
Does Pearson send my personal data outside of Europe?
Account information is managed by Performance Assessment Network, Inc. and is hosted on behalf of Microsoft in within the EEA in Ireland. Both Performance Assessment Network, Inc. and Microsoft Corp. are committed to complying with EU-US Privacy Shield principles.
What rights do I have with regard to my personal data?
You have the right to update and correct the personal information in your account. You also have the right to request that Pearson restrict any personal information we receive from you from the processing of that data and request that we delete it. Where permitted by applicable law, there may be an administrative cost of providing copies of data. You also have the right to object to our continued processing of your personal data. You may also be entitled to data portability. If you have a complaint about the way Pearson uses your personal information, you have the right to file a complaint with the UK Data Protection Authority - https://www.gov.uk/data-protection
COOKIE INFORMATION
PANAP Cookies
PANAP = PAN AUTH3 or the authoring tool and test engine (completion and scoring of assessments)
| Cookie Name | Expires | Use |
| ASP.NET_SessionId | When the browsing session ends |
Identifies the users session on the server |
| Pan.Portal.Client | When the browsing session ends |
Tracks current client id or logged in user |
| PANAPDeliveryCookie | When the browsing session ends |
Tracks PIDS authentication information for delivery |
| PAN.AP.Delivery.Web.SessionId | When the browsing session ends |
Tracks the users session id for delivery |
| PANAPAuthoringCookie | When the browsing session ends |
Tracks PIDS authentication information for authoring. |
| PAN.AP.Authoring.Web.SessionId | When the browsing session ends |
Tracks the users session id for authoring. |
| ASPSESSIONID * | When the browsing session ends |
Identifies the users session on the server. |
| bhCookie | When the browsing session ends |
We use this information for troubleshooting issues visitors might encounter on the site. Used by the BrowserHawk component – this gives information about visitors’ computer setup - eg cookies accepted, flash support, etc. |
| bhCookieSaveSess | When the browsing session ends |
We use this information for troubleshooting issues visitors might encounter on the site. Used by the BrowserHawk component – this gives information about visitors’ computer setup - eg cookies accepted, flash support, etc. |
| bhPrevResults | When the browsing session ends |
We use this information for troubleshooting issues visitors might encounter on the site. Used by the BrowserHawk component – this gives information about visitors’ computer setup - eg cookies accepted, flash support, etc. |
PIDS Cookies
PIDS = separate database that captures and stores Usernames and Passwords. When you edit your info now and try to update your username or password, you’ll notice there is now a button to click instead of doing it directly in the application. This is redirecting the user to PIDS.
| Cookie Name | Expires At | Use |
| tccs | Session | Used to keep track of the current tenant for whitelabeling purposes. |
| rculture | Session | Used to keep track of the currently requested culture / cultures. |
| pidlcontext | Session | Encrypted cookie used to keep track of authentication context information (not identity information) |
| idsvr.session | Session | Single Sign Out Session Cookie – this is not currently used by PSI. |
| idsvr.clients | Session | Used to track what client applications the user is currently logged into for single sign off purposes (currently not used by PSI) |
| idsrv.xsrf | Session | Used to help prevent cross-site request forgery |
| idsrv | Session | Used by the identity provider to track current authentication status. |
| idsrv.partial | Session | Used by the identity provider to track current authentication status. |
| SIgnInMessage. {Unique nonce} | Session | Used by the identity provider to track current authentication request information. |
| Confirmation_ {guid} | 5 minutes | Used by the email confirmation process |
| CurrentReset | 30 minutes | Used to secure password reset process. |
PBE Cookies
PBE = PAN Business Edition. This is the platform / portal. Essentially everything else for a user and candidate (if they are using a Custom URL, OnSite testing, or Logging in to take an assessment)
| Cookie Name | Expires At | Use |
| .ASPXAUTH | Session | Identifies the users authentication with the server |
| .panAssetsAuth | Session | Identifies the users authentication with the server |
| ASP.NET_SessionId | Session | Identifies the users session on the server. |
| Pan.Portal.Client | Session | Tracks current client id or logged in user. |
| Pan.Portal.ClientUrlIdentifier | Session | Tracks current client url id or logged in user. |
| Pan.Portal.Language | 60 days | Tracks language selection or logged in user. |
| PBECookie | Session | Tracks PIDs Authentication information |
| _RequestVerificationToken_ * | Session | Used to prevent Cross-Site Request Forgery exploits |
| Pan.Portal.CustomUrlId | Session | Tracks the Launched Custom URL |
| Pan.Portal.ActivationAccount | Session | Identifies if the user is attempting to activate a new account |
| Pan.Workflow.Url | 1 day | Used to launch workflows after signing out current session. |
| dtCookie / rxsession | Session | |
| dtLatC / rxlaatcy | Session | |
| dtPC / rxpc | Session | |
| dtSa | Session | |
| rxVisitor | 2 years | |
| rxvt | Session | |
| dtBw | Session | |
| _ga | 2 years | |
| _gat_UA-38686896-1 | 1 minute | |
| _gid | 30 seconds |