With the G DATA Software, Inc. (hereinafter referred to as “G DATA”), G DATA provides training in an e-learning format that effectively increases employees’ awareness of IT risks. The following personal data is collected, stored, and processed as part of  providing the platform, rolling out the training content, and evaluating the courses:

General Data/Login Data

During your visit, certain data transmitted by your browser are automatically stored by our servers. The resulting log files contain data such as your IP address, the URL, the time, type and number of requests, the amount of data transmitted, the date, time, and duration of the individual access, your browser type, and other similar security data that are used to avert danger if our IT systems are attacked and to protect against license violations.

The collection and use of the information stored in the log files is only for the purposes of correctly delivering the contents of our websites and improving our services.

User-provided Data

We store and use the data actively provided by you or the employees of the licensee as part of the registration process (such as opening an account) and while using our services for the purpose of the contractual provision of our services that you would like to make use of. These data usually include:

• •    First name
• •    Last name
• •    Gender
• •    E-mail address
• •    One-time password
• •    Company/organization
• •    Which courses are assigned to which person
• •    Report on completed courses
• •    Assignment in user groups
• •    Language settings

Monitoring Learning Progress

To help you get the most out of your learning, our system collects data about your personal usage, such as your learning progress, viewed videos, and questions answered or similar activities. These can be viewed by the employer’s administrators, depending on the implementation.

Your learning progress will never be shared with unauthorized third parties.

Evaluation Data

• •    User receives an e-mail upon successful completion
• •    User receives a certificate by e-mail

Support Data

• •    Processing of support requests
•  

All data is transmitted encrypted (SSL encryption).

Your Rights as a Data Subject

Please note: You have the right to request information at any time from G DATA Software, Inc. regarding personal data relating to you that we have stored (Article 15 of the GDPR). You are also entitled to request information regarding the recipients or categories of recipients with whom this data is shared as well as the purpose and duration of storage.

Rectification, Erasure, Restriction of Processing

You also have the right to demand the rectification (as stipulated in Article 16 of the GDPR), erasure (as stipulated in Article 17 of the GDPR), or the restriction (as stipulated in Article 18 of the GDPR) of the processing of your personal data.

Data Portability

Furthermore, as stipulated in Article 20 of the GDPR, you can request the transmission of your personal data at any time.

Right to Object to Processing

In the event of the processing of personal data for the performance of a task carried out in the public interest (Article 6(1)(e) of the GDPR) or for the purposes of legitimate interests (Article 6(1)(f) of the GDPR), you can object to the processing of your personal data at any time with future effect. In the event of an objection, we must refrain from all further processing of your data for the aforementioned purposes, unless

•    there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
•    the processing is necessary for the establishment, exercise, or defense of legal claims.

As stipulated in Article 21(1) of the GDPR, data subjects have the right to object to data processing on grounds relating to their personal situation.

How Can I Exercise my Rights?

To exercise these rights, please write to G DATA Software, Inc., G DATA Campus, Königsallee 178 a, 44799 Bochum, Germany or send an e-mail to gdpr@remove-this.gdata.de

The right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. To do so, you can contact the data protection supervisory authority responsible for your place of residence or our company headquarters. The mailing address of the supervisory authority responsible for G DATA Software, Inc. is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestrasse 2–4, 40213 Düsseldorf, Germany

Contact

If you have additional questions (such as ones pertaining to personal data relating to you that we have stored), please do not hesitate to contact us.

G DATA Software, Inc., 1075 Peachtree Street NE, 36th Floor, Atlanta, GA 30309, USA. G DATA is the controller within the meaning of data protection regulations. You can submit contact requests to gdpr@remove-this.gdata.de.

Our data protection officer is Ali Tschakari, LL.M., Bitkom Servicegesellschaft mbH, Albrechtstrasse 10, 10117 Berlin. He can be reached directly at datenschutz@remove-this.bitkom-consult.de. You can submit additional questions regarding data protection to gdpr@remove-this.gdata.de.