A.1. The purpose of the data processor’s processing of personal data on behalf of the data controller is:
Personal data will be processed on behalf of the Data Controller to deliver successful awareness training via an E-learning platform.
A.2. The data processor’s processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing):
Collection, storage, and management of personal data for user account creation. Tracking and logging user interactions with the training modules. Sending invitations, reminders and notifications by email. Generating certificates of completion and reports for the Data Controller.
A.3. The processing includes the following types of personal data about data subjects:
Name, Email address, IP address, Login Credentials e.g. User ID, Team and location, Course enrollment details, Training progress and completion status, Quiz answers.
A.4. Processing includes the following categories of data subject:
Users enrolled on The Platform by the Data Controller’s organisation, including its administrators and people invited to it, which would typically be personnel.
A.5. The data processor’s processing of personal data on behalf of the data controller may be performed when the Clauses commence. Processing has the following duration:
Personal data will be processed for as long as the Data Controller uses The Platform, and will be deleted no later than 6 (six) months after the Data Controller’s workspace is closed. Some personal data is deleted earlier, in line with set retention periods.