Data Processing Agreement (DPA)
(For business clients subscribing to CISOLEAD services)
Last updated: 23 March 2026
1. Parties
This Data Processing Agreement is between:
- Controller”: The customer (organization or individual) using CISOLEAD services
- Processor”: Advanced Vision IT Ltd., operator of CISOLEAD
2. Purpose of Processing
Advanced Vision IT processes personal data on behalf of the Controller to:
- Provide access to CISOLEAD
- Manage accounts
- Deliver training, learning analytics, and certifications
- Provide support
- Ensure Platform security
3. Categories of Data Processed
- Identification: name, email
- Employment-relevant info: title, role
- Training data: progress, results, certifications
- System data: IP address, logs, device metadata
- No special-category data is intentionally processed.
4. Duration
Processing continues for the duration of the service subscription or as required by law.
5. Processor Obligations (Advanced Vision IT)
Advanced Vision IT agrees to:
- Process data only under the Controller’s documented instructions
- Implement technical and organizational security measures
- Ensure confidentiality of personnel
- Assist the Controller with GDPR rights requests
- Notify the Controller of data breaches without undue delay
- Cooperate with supervisory authorities
6. Sub‑processors
Advanced Vision IT may use:
- Cloud hosting providers
- Analytics services
- Email delivery systems
- Payment processors (if applicable)
A list of sub‑processors will be provided upon request.
Controller will be notified of material changes.
7. International Transfers
Transfers outside the EU/EEA will rely on:
- Standard Contractual Clauses (SCCs), or
- Adequacy decisions
8. Controller Obligations
The Controller agrees to:
- Ensure lawful basis for data collection
- Provide accurate information
- Communicate data subject requests
- Maintain compliance with applicable laws
9. Data Subject Rights
Advanced Vision IT will assist in responding to:
- Access requests
- Corrections
- Deletions
- Restrictions
- Portability
10. Return or Deletion of Data
Upon termination, data will be:
- Returned to the Controller upon request, and/or
- Securely deleted according to retention policies
11. Liability
Liability follows the main service agreement between the Controller and Advanced Vision IT.
12. Contact
📧 privacy@cisolead.com