Privacy Notice

Digiryte Training Platform

This notice describes how Digiryte processes your personal data for training and compliance purposes, in accordance with GDPR and applicable data protection laws.

1. Introduction & Purpose

The Digiryte Training Platform is an internal system designed to deliver mandatory security and compliance training to all employees. The processing of your data is necessary for:

Ensuring compliance with client contractual obligations and ISO standards.
Mitigating risks of data breaches through education.
Maintaining auditable records of training completion.

2. Data We Collect

We collect and process the following categories of personal data:

Identity Data

Name, email address, employee ID, and role (via Google Workspace SSO).

Training Data

Course progress, quiz scores, attempts, completion timestamps, and certificates issued.

Technical Data

3. Legal Basis for Processing

We process your data under the following lawful bases (GDPR Art. 6):

Legitimate Interests: To ensure information security and meet client compliance requirements.
Legal Obligation: To comply with data protection laws (e.g., demonstrating staff training on GDPR).
Consent: Captured upon your first login to the platform.

4. Data Retention

Training records and certificates are retained for a minimum of 10 years or as required by client contracts to demonstrate historical compliance. Audit logs of system access are retained for security monitoring purposes.

5. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

Access your training records (available via your Dashboard).
Correct inaccurate personal data.
Request deletion of data (subject to legal retention requirements).
Lodge a complaint with a supervisory authority.

Contact DPO

For any privacy-related inquiries or to exercise your rights, please contact the Data Protection Officer at dpo@digiryte.com.

Version 1.0 • Last Updated: November 10, 2025