Learner
Privacy Notice
LEARNER PRIVACY NOTICE
AA DRIVING SCHOOL AND BSM
This Privacy Notice lets you know what happens to personal data we use and hold when you have driving lessons or take other services from us. For our driving instructor privacy notice please click here. For the overall AA privacy notice, please click here.
If you provide us with personal information on behalf of another person, you must ensure that it is accurate, up to date and that you have their authorisation to do so. You should make sure that you provide them with a copy of this Privacy Notice or let them know how to access it. Where this privacy policy refers to "you" this also includes data about anyone else named on the policy or whose data you provide us with.
1 THE AA AND OUR DATA PROTECTION OFFICER (DPO)
1.1 We are the AA. Our main address is Fanum House, Basing View, Basingstoke, Hampshire, RG21 4EA. The data controller of our driving lessons products is the Automobile Association Automobile Association Developments Limited (trading as AA Driving School and BSM Driving School). We have a Data Protection Officer who you can contact by using the contact details below.2 PERSONAL DATA WE HOLD AND USE
2.1 We use several different types of information about you, policyholders and beneficiaries. Below we have set out the types of information we collect, hold and use. If you hold another AA product or service (such as Breakdown), you should also read the privacy notice for those products or services to understand what other data we might hold:(a) personal and contact details, your date of birth, gender and/or age;
(b) product beneficiaries, users and policy holders;
(c) records of your contacts with us and your payment details;
(d) details of products and services you hold or have held as well as your use of them and any claims or breakdowns, and any expressions of interest in the AA or its business partners, including details of other AA products or services such as AA Insurance Services, AA Breakdown Services, AA Cars, AA Financial Services;
(e) pricing and risk data about you. This is data used, for example, to assess or make a decision about policy risk, decide or set pricing or risk levels, and decide whether we can offer or continue to offer you a product or service.
(f) marketing information, including records of marketing communications, details of what you may be interested in, analysis and profiles we build up about you and your interests, and whether you open or read communications or links;
(g) vehicle information, including make, model, age, usage, breakdowns, repairs, and faults;
(h) driving licence information, including any endorsements or convictions;
(i) telematics and connected car information about your vehicle, driving style, location and routes taken, if you have one of our telematics or connected car products);
(j) information which we obtain from Fraud Prevention Agencies (see below);
(k) fraud, debt and theft information related to any of the products you hold with the AA;
(l) information about your health or if you are a vulnerable customer - for example, details of assistance required – if these are needed to provide your policy to you;
(m) criminal records information, including alleged offences if this necessary for your policy;
(n) your marital status, family, lifestyle or social circumstances;
(o) information from third parties, including demographic information, vehicle details, details of outstanding finance, claims details, geographic and demographic details, marketing data, publicly available information, and information to help improve the relevance of our products and services or to help us manage our products and services, pricing or risk;
(p) details of your usage of any of our websites or apps, details of your phone and its software (e.g. browser and set up information), browsing history, and other details obtained via cookies or similar technologies (see our cookie statement for more details); and
(q) third party transactions such as where a person other than the account holder pays for or uses the service.
2.2 We may be unable to provide you with our products or services if you do not provide certain information to us. In cases where providing some personal information is optional, we’ll make this clear.
3 SOURCES OF YOUR PERSONAL DATA
3.1 The information that we hold about you comes from different sources. These are:(a) the driving instructor who provides you with lessons, including potential instructors, including AA Driving School and BSM Driving School;
(b) you directly, and any information from family members, (for example, if they are authorised to act for you, make a payment for you or book lessons for you);
(c) AA Group and AA branded companies, if you already have a product with them, have applied for one or have held one previously. These include Automobile Association Insurance Services Limited, Automobile Association Financial Services Limited and AA Underwriting Insurance Company Limited;
(d) information generated about you when you use our products and services;
(e) intermediaries (such as comparison sites) we work with to provide products, services or quotes to you;
(f) anyone who operates any of your accounts, products or services on your behalf (e.g. Power of Attorney, solicitors, intermediaries, etc);
(g) sources such as Fraud Prevention Agencies, Credit Reference Agencies, HMRC, DVLA, Motor Insurers’ Bureau, publicly available directories and information (e.g. telephone directory, social media, internet, news articles), debt recovery and/or tracing agents, other organisations to assist in prevention and detection of crime, police and law enforcement agencies; and
(h) information we source about you or customers generally from commercial third parties, including demographic information, vehicle details, claims data, fraud information, marketing data, publicly available information, property and other information to help improve our products and services or our business.
4 REASONS FOR HOLDING AND USING YOUR PERSONAL DATA
4.1 Your information may be used by us for the reasons below. We have arranged them according to the legal reason we are allowed to use the data.4.2 To provide you with our products or services or decide whether to do so:
(a) providing you with lessons and liaising with driving instructors;
(b) providing you with your policy, member benefits and any other products or services held with the AA;
(c) communicating with you and holding records about our dealings and interactions with you;
(d) making decisions about what we can offer you;
(e) to manage the operation of our business and business partners that help support your policy;
(f) to carry out checks at Fraud Prevention Agencies if needed;
(g) for analysing and profiling aspects of your vehicle or driving (including assessing and predicting faults or issues), driving style (including recommending improvements and assessing risk associated with your driving style), location and routes taken as part of providing, quoting for, and managing your lessons;
(h) updating your records, tracing your whereabouts, and recovering debt;
(i) to enable other AA group and branded companies to provide you with your products and services, quote for products and services, or manage products and services you hold;
(j) to share information as needed with business partners and payment providers as required for managing your policy, our products and services, administering or developing our products and services or our business; and
(k) to make automated decisions, including profiling, on whether to offer you a product or service, or the price, payment method, risk or terms of it.
(a) providing you with lessons and liaising with driving instructors;
(b) providing you with your policy, member benefits and any other products or services held with the AA;
(c) communicating with you and holding records about our dealings and interactions with you;
(d) making decisions about what we can offer you;
(e) to manage the operation of our business and business partners that help support your policy;
(f) to carry out checks at Fraud Prevention Agencies if needed;
(g) for analysing and profiling aspects of your vehicle or driving (including assessing and predicting faults or issues), driving style (including recommending improvements and assessing risk associated with your driving style), location and routes taken as part of providing, quoting for, and managing your lessons;
(h) updating your records, tracing your whereabouts, and recovering debt;
(i) to enable other AA group and branded companies to provide you with your products and services, quote for products and services, or manage products and services you hold;
(j) to share information as needed with business partners and payment providers as required for managing your policy, our products and services, administering or developing our products and services or our business; and
(k) to make automated decisions, including profiling, on whether to offer you a product or service, or the price, payment method, risk or terms of it.
4.3 For our legitimate interests:
(a) to develop our roadside, insurance and any other products or service using the information we hold;
(b) to continually develop, improve and manage our risk assessment and pricing models;
(c) to provide personalised content and services to you, such as tailoring our products and services, our digital customer experience and offerings, and deciding which offers or promotions to show you on our digital channels;
(d) to link together your AA products and services including to enable you to view these in a single account or profile, linking together your accounts on our systems and using this combined view for the purposes listed in this section;
(e) to test and improve the performance of our products, services, processes and systems;
(f) to improve the operation of our business - and that of our business partners – for example, by improving customer service and operational performance and efficiency;
(g) to develop new products and services, and to review and improve current products and services;
(h) for management and auditing of our business operations - including accounting;
(i) to monitor and to keep records of our communications with you and our staff (see below);
(j) for marketing analysis and related profiling to help us to offer you relevant products and service, including deciding whether or not to offer you certain products and service;
(k) to understand our customers, their use of our products, their preferences and develop models, including developing profiles, algorithms and statistical models;
(l) to send marketing by SMS, email, phone, post, social media and digital channels (e.g. using Facebook Custom Audiences and Google Custom Match). Offers may relate to any of our products and services such as cars, money and financial services, insurance, travel, member offers as well as to any other offers and advice we think may be of interest;
(m) to provide insight and analysis of our customers both for ourselves and business partners based on your policy and products, your use of it, your other policies and the use of your policy by others;
(n) for market research, profiling, and analysis and developing statistics;
(o) to facilitate the sale of one or more parts of our business;
(p) to share information with business partners as necessary for the purposes listed in this notice; and
(q) to share information with other AA group and branded companies to enable them to perform any of the above purposes, in particular AA Underwriting Insurance Company Limited and AA Financial Services Limited.
(a) to develop our roadside, insurance and any other products or service using the information we hold;
(b) to continually develop, improve and manage our risk assessment and pricing models;
(c) to provide personalised content and services to you, such as tailoring our products and services, our digital customer experience and offerings, and deciding which offers or promotions to show you on our digital channels;
(d) to link together your AA products and services including to enable you to view these in a single account or profile, linking together your accounts on our systems and using this combined view for the purposes listed in this section;
(e) to test and improve the performance of our products, services, processes and systems;
(f) to improve the operation of our business - and that of our business partners – for example, by improving customer service and operational performance and efficiency;
(g) to develop new products and services, and to review and improve current products and services;
(h) for management and auditing of our business operations - including accounting;
(i) to monitor and to keep records of our communications with you and our staff (see below);
(j) for marketing analysis and related profiling to help us to offer you relevant products and service, including deciding whether or not to offer you certain products and service;
(k) to understand our customers, their use of our products, their preferences and develop models, including developing profiles, algorithms and statistical models;
(l) to send marketing by SMS, email, phone, post, social media and digital channels (e.g. using Facebook Custom Audiences and Google Custom Match). Offers may relate to any of our products and services such as cars, money and financial services, insurance, travel, member offers as well as to any other offers and advice we think may be of interest;
(m) to provide insight and analysis of our customers both for ourselves and business partners based on your policy and products, your use of it, your other policies and the use of your policy by others;
(n) for market research, profiling, and analysis and developing statistics;
(o) to facilitate the sale of one or more parts of our business;
(p) to share information with business partners as necessary for the purposes listed in this notice; and
(q) to share information with other AA group and branded companies to enable them to perform any of the above purposes, in particular AA Underwriting Insurance Company Limited and AA Financial Services Limited.
4.4 To comply with our legal obligations such as our financial services or regulatory obligations such as our financial services or regulatory obligations, including Financial Conduct Authority, Prudential Conduct Authority and Financial Ombudsman Service rules, regulations and guidance.
4.5 With your consent:
(a) for some direct marketing communications which are not based on our legitimate interests;
(b) for some of our profiling and other automated decision making which is not required for contractual or legal purposes; and
(c) for some of our processing of special categories of personal data such as about your health, if you are a vulnerable customer or some criminal records information, if another legal basis does not apply.
(a) for some direct marketing communications which are not based on our legitimate interests;
(b) for some of our profiling and other automated decision making which is not required for contractual or legal purposes; and
(c) for some of our processing of special categories of personal data such as about your health, if you are a vulnerable customer or some criminal records information, if another legal basis does not apply.
4.6 Necessary for a public interest, such as:
(a) using special categories of personal data such as about your health, criminal records information (including alleged offences) if this is needed to quote for or administer a policy, including assessing the risk of providing you with the Roadside policy or product; and
(b) using special categories of personal data about your health or needs (if you are a vulnerable customer) including assessing the risk of providing you with a policy or product.
(a) using special categories of personal data such as about your health, criminal records information (including alleged offences) if this is needed to quote for or administer a policy, including assessing the risk of providing you with the Roadside policy or product; and
(b) using special categories of personal data about your health or needs (if you are a vulnerable customer) including assessing the risk of providing you with a policy or product.
5 SHARING AND DISCLOSURES OF YOUR PERSONAL DATA
5.1 The categories of third parties we use are listed below. We will use these third parties for all the reasons we have described in this notice and they may process the types of personal information we also hold or use:(a) with instructors and potential instructors as part of administering lessons and driver training;
(b) with AA Group and branded companies, including but not limited to Automobile Association Developments Limited (including AA Breakdown Services), Automobile Association Insurance Services Limited, Automobile Association Underwriting Insurance Company Limited and Automobile Association Financial Services Limited;
(c) with people you allow to us to speak to on your behalf (e.g. parents or guardians if they book lessons for you);
(d) with service providers who help us provide products and services to you or operate our business;
(e) police and law enforcement agencies if we are required or need to support a criminal investigation;
(f) governmental and regulatory bodies such as HMRC, DVSA, DVLA, the Financial Conduct Authority, the Prudential Regulation Authority, the Financial Ombudsman’s Service, and the Information Commissioner’s Office;
(g) organisations and businesses who provide services to us under our authority such as service providers, debt recovery agencies, IT companies, and suppliers of business support services;
(h) Fraud Prevention Agencies (see below); and
(i) market research organisations who help us to develop and improve our products and services.
6 WITHDRAWING YOUR CONSENT
6.1 Where we rely on your consent, you can withdraw it at any time by using the contact details in the Contact Us section below.7 TRANSFERS OUTSIDE OF THE UK AND EUROPE
7.1 Your personal information may be transferred outside the European Economic Area, for example to service providers. If we do so, we’ll make sure that suitable safeguards are in place where required, for example by using approved contractual agreements or other legal arrangements unless certain exceptions apply.8 SHARING WITH FRAUD PREVENTION AGENCIES
8.1 We may use FPAs such as Experian and commercially available fraud prevention services and claims services to prevent, detect and investigation potential fraud. We will share information with FPAs about your application and policies in order to help us do this. This information may be given to other organisations. More information can be found on our website at www.theaa.com/privacy-notice.9 CHANGES TO YOUR DATA
9.1 You should tell us when there are any changes to Your personal data so that we can update our records. We’ll then update your records if we can.10 MONITORING COMMUNICATIONS
10.1 We may monitor communications with you, where permitted by law. We do this for quality control and staff training purposes, to comply with regulatory rules, to prevent or detect crime, to protect the security of our communications, data, and systems, and to enforce compliance with our internal policies.11 USE OF AUTOMATED DECISIONS
11.1 We sometimes make decisions about you using only technology, where none of our employees or any other individuals have been involved. We do this to decide whether to offer you a product or service, to determine the risk of doing so, the price we will offer, whether to offer you credit, what terms and condition to offer you, assess lending, insurance and business risks, or to assess what payment methods we can offer you. We may do this using data from other parts of the AA (AA group and AA branded companies) and policy underwriters, including product or services details (including usage of claims made) and telematics data captured including on your vehicle, driving behaviour and location information.11.2 To understand the logic involved in this and why we do this, you may wish to consider the following examples:
(a) to assess our ability to offer our products and services and manage those accounts – for example, if we have concerns about potential use of a service, this may result in a higher risk being assigned to you, meaning you may be quoted a higher price or a policy being declined or cancelled;
(b) to assess the risk of fraud - if we believe there is a significant risk of fraud, we may decline your application, quote a higher price or decline or cancel your lessons.
(a) to assess our ability to offer our products and services and manage those accounts – for example, if we have concerns about potential use of a service, this may result in a higher risk being assigned to you, meaning you may be quoted a higher price or a policy being declined or cancelled;
(b) to assess the risk of fraud - if we believe there is a significant risk of fraud, we may decline your application, quote a higher price or decline or cancel your lessons.
We do this because it is necessary for entering into or performing the relevant agreement with you. We may do so if it is authorised by law or is based on your explicit consent.
12 RETENTION OF YOUR PERSONAL DATA
12.1 Unless we explain otherwise to you, we’ll hold your personal information based on the following criteria:(a) for as long as we provide products or services to you and then for as long as someone could bring a claim against us;
(b) to comply with legal and regulatory requirements or guidance; or
(c) for as long as we have reasonable business needs.
13 YOUR DATA PROTECTION RIGHTS
13.1 Below is a list of the rights that all individuals have under UK data protection laws. They don’t apply in all circumstances so your request may not always be granted. If you wish to use any of them, we’ll explain at that time if they apply or not, and if we will comply or not with you request, including the reasons why:(a) the right to be informed about your processing of your personal information;
(b) the right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;
(c) the right to object to processing of your personal information;
(d) the right to restrict processing of your personal information;
(e) the right to have your personal information erased;
(f) the right to request access to your personal information and how we process it;
(g) the right to move, copy or transfer your personal information; and
(h) rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.
13.2 You have the right to complain to the Information Commissioner’s Office which enforces data protection laws - https://ico.org.uk/. You can contact our DPO for more details on all the above.