Privacy notice

Who is responsible?

Almin Bajrami, trading as ABSafety, is the controller for this training platform. You can ask about your data by email or by writing to Schlehenring 20B, 85551 Kirchheim, Germany. almin.bajrami@absafety.de · Full operator details

When you visit or practise

You can open the public introduction, glossary and practice material without an account. To deliver pages and protect the service, our hosting providers process connection details such as IP address, request time, requested page and browser information. Our legitimate interests are reliable delivery and protection against misuse under Article 6(1)(f) GDPR.

Public foundation and case exercises use local browser storage to resume your place. On a shared device, the next user of the same browser profile may see this practice history. You can clear it in your browser’s site-data settings.

When you take an assigned course

Your trainer issues an access code for a particular course. Redeeming it requires a learner name, which also appears on your certificate. You may add a company name. Your trainer may also supply a company or customer name when setting up the package. A private session credential in your browser tab lets you return to the course. A transfer code lets you resume on another device.

We store your enrolment, assigned content, sections read, activity responses, entry and final test answers and scores. If you use learning notes, bookmarks or saved practice, that information also forms part of your learning record. The trainer dashboard shows participant progress, scores and topics that need further practice. The platform scores tests against stored answers and checks the course completion rules before issuing a numbered PDF certificate.

We use these records to deliver your training and document completion. Article 6(1)(b) GDPR applies when we deliver a course under a contract with you. For employer-arranged training, our legitimate interests under Article 6(1)(f) GDPR are to deliver the assigned course, help the trainer support participants and document completion. Contact ABSafety if your result needs review.

Trainer sign-in and browser storage

Trainer access uses a code check followed by an external account sign-in. A successful code check sets a protected cookie for two hours. To limit repeated attempts, the application counts attempts over five-minute intervals using a pseudonymous network identifier. The sign-in service supplies an account identifier and email address, and may also supply a name, so ABSafety can restrict administration to its authorized account.

We use cookies, tab storage and local storage to provide the access and saved practice features you request. The legal basis for necessary device storage is section 25(2)(2) TDDDG. Our legitimate interest in protecting learner and trainer access is the basis for the associated security processing under Article 6(1)(f) GDPR.

When you contact a trainer

An email link opens your mail application. When you send a message, the named recipient receives your email address, message and any details you include. ABSafety uses enquiries to respond and, where requested, prepare a training or project engagement. For steps you request before a contract, Article 6(1)(b) GDPR applies. For other business correspondence, our legitimate interest in answering the enquiry is the basis under Article 6(1)(f) GDPR.

Messages you send directly to Aldin Bajrami go to SMS Engineering. Its own privacy information applies to its handling of your enquiry. SMS Engineering website

Service providers and international transfers

ABSafety uses OpenAI for managed hosting and the external trainer sign-in, and Cloudflare infrastructure to deliver pages, run the application, store course records and keep recovery copies. Authorized trainers can access records for the training they administer. The identity provider’s own notice applies when you use its external sign-in.

Provider operations may involve processing outside the European Economic Area, including in the United States. The providers describe the countries and safeguards applicable to their services, including adequacy decisions and standard contractual clauses. Contact ABSafety for information about the safeguards for your data or a copy. Identity provider’s privacy notice · Cloudflare privacy notice

How long records are kept

Course access lasts until its configured expiry or revocation. Course history and certificates are retained beyond access where needed to document training, resolve questions or meet legal obligations. Retention depends on the training agreement, the purpose of the record, statutory retention duties and applicable limitation periods. The recovery service rotates older copies after 30 newer verified snapshots. Your own downloads and browser data remain under your control.

We retain business correspondence while handling an enquiry and for any subsequent contract, statutory recordkeeping or legal claims. Write to ABSafety to request deletion or ask about the period for a particular record.

Your rights

Under the GDPR, you can request access, correction, erasure and restriction of processing. You can request portability where the conditions apply. You may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you can withdraw it at any time with future effect. Send your request to almin.bajrami@absafety.de.

You can complain to a data protection authority, including the authority where you live or work. The Bavarian State Office for Data Protection Supervision handles complaints concerning private businesses in Bavaria. Submit a complaint to BayLDA