Privacy policy

Who we are

NGPT (Next Generation Placement Tests) is operated by Amber IT Solutions d.o.o., Poljička cesta 26A, 21000 Split, Croatia, VAT ID: HR60960247160 (“we”). You can reach us about anything in this policy at finances@amber-it.co.

Two situations, two roles

If you are a candidate taking a test that a school sent you: the school decided to test you and is responsible for your data (in the words of the GDPR, it is the controller). We run the test on the school’s behalf, as its processor. For questions about your result or to have your data removed, please contact the school.

If you visit this website, write to us, or manage a school’s account: we are the controller of the data described below.

What we collect, and why

When you ask for a trial or send a message

Your name, e-mail address, the name and country of your school, what you tell us about it, and, if you came from an advertisement or a link with campaign tags, which one. We use this to answer you and to set up your trial. The legal basis is taking steps at your request before a contract, and our legitimate interest in answering enquiries. We keep enquiries for up to two years after our last contact.

When your school has an account

The school’s name, address and billing details, the name and e-mail address of the person who signs in, a record of purchases and of tests sent. We need these to provide the service and to issue invoices (legal basis: the contract, and our legal obligations as a business). Accounting records are kept for as long as the law requires.

Candidates

For each candidate a school adds: name and e-mail address, and phone number and date of birth if the school chooses to enter them; the answers given in the test and the result. We use them only to deliver the test and show the result to that school. We also use answers, without names, to measure how difficult each question is and to keep the test accurate. A school can delete a candidate at any time, which removes the name, e-mail address, phone number and date of birth.

Payments

Card payments are handled by Stripe. Card numbers go from your browser straight to Stripe; we receive only confirmation of the payment and the last digits and type of the card.

Statistics and advertising on this website

Only if you agree in the cookie notice. Statistics tell us which pages are read and where visitors come from; marketing tags tell us whether an advertisement led to a trial request. Without your agreement none of these tools is loaded. The details, and how to change your choice, are on the cookies page.

Server logs

Like every website, ours records technical data about requests (time, address requested, IP address, browser) for a short period, to keep the service running and secure.

Service providers

We use carefully chosen service providers for hosting, for sending e-mails, for card payments and, only with your consent, for statistics and the measurement of advertising on this website. They process data only on our instructions. Schools and data protection authorities can ask us for the current list.

Where a provider processes data outside the European Economic Area, the transfer rests on the European Commission’s adequacy decision for the EU–US Data Privacy Framework or on standard contractual clauses.

We do not sell personal data, and we do not use candidates’ data for advertising.

Your rights

You may ask us for a copy of your data, to correct it, to delete it, to restrict its use or to hand it over in a portable form, and you may object to processing based on our legitimate interest. Where processing rests on consent, you can withdraw it at any time (for cookies: with “Cookie settings” at the foot of every page). Write to finances@amber-it.co; we answer within one month.

If you think we have handled your data wrongly, you can complain to the Croatian Personal Data Protection Agency (AZOP, azop.hr) or to the authority of the country where you live.

Changes

When this policy changes we publish the new version here with its date.