Who we are

This Privacy Notice explains how we process your personal data when you use our services. The learning platform is used for professional development. Personal data is processed to manage and implement course programs and to issue certificates upon successful completion.

Controller: Nagarro Germany GmbH, Baierbrunner Straße, 81379 Munich, Germany

Data Protection Office: dpo@nagarro.com

Data we process

We process data from registered users of our platform as well as data from unregistered visitors. Access to personal data is restricted to what is necessary for the specified purposes. Data will not be processed or disclosed for other purposes.

Visitor data

Visitor data originates from server logs and technical interactions with our platform.
For all visitors we process:

  • Technical usage data (e.g., device information, IP addresses)
  • User behavior (e.g., pages visited, access times)
  • Legal basis: legitimate interests (Art. 6(1)(f) GDPR) to ensure the reliable operation and security of our systems.
  • Retention: log data is deleted after 90 days.

User data (registered users)

Providing basic account data is necessary to register and participate in courses. Without this data, you cannot access course content or certificates.

For registered users we process:

  • Contact and master data (e.g., names, addresses, email, phone)
  • Content data (e.g., text you enter, images you upload)
  • Performance results (e.g., test results, lesson progress)

Purpose and legal basis: necessary for the performance of a contract (Art. 6(1)(b) GDPR).

Retention:

  • Nagarro employees: profile data is stored until the user profile is deleted. The user profile is deleted two years after the employee leaves the company. Course participation data (profile + course results) is stored until the course is deleted.
  • Customers: the customer profile is stored until the user profile is deleted. The user profile is deleted after the end of the course as defined in the contract. Course participation data (profile + course results) is stored until the course is deleted.

Direct contact

If you contact us (contact form, email, telephone, social media or similar), your data is processed to handle the request (Art. 6(1)(b) GDPR). Data is stored in a customer management system until it is no longer required to process the inquiry. We regularly review the necessity of storage. If statutory retention duties apply, data is deleted after those periods expire.

Cookies and similar technologies

Our learning platform uses cookies and similar technologies (e.g., local storage) to provide essential platform functions and to ensure the secure and stable operation of the system. This includes in particular session management, security functions and user‑related interface settings.

The cookies and local storage elements used are technically necessary for the operation of the learning platform. They are not used for user tracking and not used for analytical, statistical or marketing purposes.

Personal data is processed via these technologies only to the extent necessary for the provision of the platform. In accordance with applicable legal requirements, no consent is required for the use of technically necessary cookies and similar technologies.

If external content or additional extensions are integrated that use their own cookies or similar technologies, separate information will be provided where required.

Your rights

You have rights under the GDPR (Arts. 15–23) regarding the processing of your personal data:

  • Access: When you log in, you can see and change your personal data. You can view your activities (reports, certificates, last login) and download your personal data using the integrated privacy function.
  • Rectification: If data is incorrect, you can adjust it yourself (for profile data you provided) or request rectification.
  • Erasure: You may request deletion of data that is not necessary for the specified purposes or for which no appropriate legal basis exists. Legal retention duties or legitimate interests (e.g., training records, quality assurance evidence, copyright usage rights) may preclude deletion. No erasure right exists for information you posted that is related to other users (e.g., forum posts).
  • Restriction: If processing is restricted, access to data is limited to persons who need it for the specified purposes.
  • Portability: You can download personal data you provided (e.g., profile data) using the integrated privacy function. Direct transfer to other controllers will occur only where technically feasible.
  • Objection: If you do not agree to the processing of technically necessary usage data, you must refrain from visiting our website, as this processing cannot be avoided for secure operation.
  • No profiling or automated decision‑making takes place.
  • Complaint: You may lodge a complaint with any supervisory authority in the EU/EEA if you believe that the processing of your data is unlawful. Please contact our Data Protection Officer first (dpo@nagarro.com); in most cases we can clarify and resolve your concerns.

Sharing and processors

Data is transferred to other companies (processors) only under contract. The platform is operated with the support of contractually bound sister companies within the Nagarro Group. The platform is hosted by Microsoft Azure in Belgium (EU). We do not transfer personal data to third countries outside the EU/EEA unless explicitly stated and safeguarded by appropriate measures (e.g., standard contractual clauses).

Security

We use modern encryption methods (e.g., SSL/TLS) via HTTPS to protect the security of your data during transmission.

Changes to this Privacy Notice

We may update this Privacy Notice to comply with current legal requirements or to reflect changes to our services that affect personal data processing.

The version valid at the time of your visit applies.

Contact

For privacy questions or requests, contact our Data Protection Office:

Nagarro Germany GmbH, Baierbrunner Straße, 81379 Munich, Germany

Email: dpo@nagarro.com

 

Modifié le: mercredi 30 septembre 2026, 15:40