Abaad

GDPR

This website is GDPR compliant. By continuing to use the website, you understand and agree to the following.

Use of Requested Individual Data

During the registration process, users are asked to provide some basic demographic data. ABAAD follows the principle of data minimisation, and only collects data necessary for course-taking, certificate issuance, as well as internal statistical data. Requested data is used for the following reasons:

Your full name: For the sole purpose of issuing the Certificate of Completion.
Your email: Used by you to access your account, for the system to issue notifications and course-related details, and where relevant, for a staff member to respond to you when you use the contact/evaluation forms. We will only add your email to ABAAD’s mailing list if you opt in. Your email will not be used for any other reasons.
Your country, age, gender, and professional/educational information: These are used by ABAAD to understand user trends, but the information is anonymised and is never attributed to any single individual during analysis and reporting processes.

User Data Storage, Access, and Protection

All user data collected on this website is stored and retained in a private, secure database which is not accessible to the public.
Users have the right to access, rectify, and erase their personal data. Access, modification, and requests for deletion can be done through the user dashboard. Please note, however, that the name provided during registration cannot be modified, as it is the name in which the certificate will be issued.
ABAAD does not share or transfer your information to any third parties.
Communication between the web app and the database is done on a secure channel and cannot be intercepted.
General administrator accounts do not have access to user data. The super administrator account that can access user data is logged and all its activity is recorded.
Administrators are professionals employed by ABAAD who have all signed strict non-disclosure agreements.
ABAAD’s Data Protection Officer is responsible for conducting regular security audits to identify and address potential vulnerabilities. In case of any breaches, ABAAD has procedures in place for investigation and response. In such events, ABAAD will take containment steps to minimise risks, and users will be notified of breaches.

Cookies

This website uses only two cookies, and both are strictly necessary for it to work. No analytics, advertising, or tracking cookies are used, and no third party is able to set a cookie through this website.
Session cookie: Keeps you signed in as you move from page to page, and remembers the state of a form while you are filling it in. It expires when you close your browser, or sooner after a period of inactivity.
Security cookie: Protects the forms on this website against cross-site request forgery, an attack in which another website tries to submit a form on your behalf without your knowledge.
Neither cookie identifies you personally, follows you across other websites, or is shared with anyone.
Because both cookies are essential to providing the service you asked for, they do not require your consent, and there are no optional cookies for you to accept or reject.
Fonts and all other files used by this website are served from our own servers. Loading a page does not disclose your visit to any third party.
You can delete these cookies at any time in your browser settings. Note that you will not be able to sign in while they are blocked.

Disposal of Your Data

The dashboard of the website provides all users with the option to delete their account. This permanently deletes all their data from the website and its related databases.
If a user has completed the course, even if they request account deletion, a copy of their certificate will be retained in the database for validation purposes. This image file is only accessible to persons with its unique link.
ABAAD retains basic demographic and professional information for statistical reports. This data is appropriately anonymised before being stored with the Monitoring and Evaluation team, and is kept separately from the user’s personal data. As such, no personally identifying information is kept about the user, and issued analytics reports can in no way be personally attributed to any user as an entity.

Certificate Data