A.1. The purpose of the data processor’s processing of personal data on behalf of the data controller is:

Personal data will be processed on behalf of the Data Controller to deliver successful awareness training via an E-learning platform.

A.2. The data processor’s processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing):

Collection, storage, and management of personal data for user account creation. Tracking and logging user interactions with the training modules. Generating and storing certificates of completion.

A.3. The processing includes the following types of personal data about data subjects:

Name, Email address, IP address, Login Credentials e.g. User ID, Course enrollment details, Training progress and completion status, Feedback or survey responses.

A.4. Processing includes the following categories of data subject:

Users enrolled on The Platform by the Data Controller’s organisation, which would typically be personnel. 

A.5. The data processor’s processing of personal data on behalf of the data controller may be performed when the Clauses commence. Processing has the following duration:

Personal data will be processed for the duration of the Data Controller’s active subscription to The Platform, and will be deleted no later than 4 (four) months after the expiration of the Term.