Privacy

Data controller

Cryptaguard BV, at the address above, is the controller of the processing carried out by the site. Any question on the subject goes to contact@continuity-resilience.com.

Data processed and purposes

The data collected is what is needed to create an account, track learning progress, issue certificates and invoice: email address, name, job title, organisation, country, progress, exam results, billing address and, where applicable, VAT number. Processing rests on the performance of the contract and, for accounting records, on a legal obligation. The data is neither sold, transferred, nor used for advertising.

Account data is kept for as long as the account exists; invoices, for the legal retention period of accounting records.

Service providers

The site relies on OVH (hosting), Convex (database, Ireland region), Stripe (payment and invoicing) and Resend (email delivery). Where any of them processes data outside the European Union, it does so under the safeguards provided by the GDPR: standard contractual clauses or the EU–US Data Privacy Framework.

Your rights

Under Regulation (EU) 2016/679 you have rights of access, rectification, erasure, restriction, objection and portability over your data. Deleting an account deletes the associated progress data; issued certificates remain verifiable by their code, with no personal data beyond the holder’s name.

You may lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

Cookies and local storage

The site uses local storage to remember the chosen theme and the authentication session. No third-party analytics or advertising cookies are used.

Academy dataAddition under review

Without an account, progress in a course is recorded only in the browser’s local storage; it never leaves the device and is erased with the site’s data. When you sign in, you can choose to carry it over to your account.

With an account, the following are recorded: lessons read (time opened and time finished), assessment attempts (questions drawn, answers, score, dates) and, if you request one, the certificate (declared name, code, result, date). This data is used to track your progress, issue the certificate and allow it to be verified.

Certificate verificationAddition under review

Public verification of a certificate requires its code and the holder’s name, and never returns the name: no list of participants can be consulted. To limit abusive attempts, each verification is logged — code checked, date, outcome — without IP address or the name entered; this log is erased after thirty days.

Audience measurement and outbound linksAddition under review

No third-party audience measurement tool is enabled. Should one be enabled, it would only be after obtaining your consent. Links to ResiPlan carry generic campaign parameters (source, medium, course) and never any personal data, name, address or result.