Privacy Notice

Digital Training Institute, based in Ireland, is the data controller for the information described below. Questions or requests can be sent to joanne@digitaltraining.ie.

• Assessment answers — the answers you give in the questionnaire (risk-tier screening and readiness questions).
• Optional organisation details — organisation name, sector, and your role, if you enter them.
• Contact details — your name and work email, submitted at the end to unlock the full report.
• Marketing consent flag — a yes/no record of whether you opted in to occasional updates.
• Timestamp — when you submitted the form.

We do not use third-party analytics, advertising cookies, or tracking pixels. The site uses a small amount of browser localStorageto remember that you have unlocked your report on this device — this is essential to how the page works and is not shared with anyone.

• Delivering your report — legal basis: legitimate interest(Art. 6(1)(f)), because you asked us to generate and show it to you.
• Responding to enquiries you send us — legal basis: legitimate interest.
• Sending you occasional EU AI Act updates and training news — only if you tick the opt-in box. Legal basis: consent (Art. 6(1)(a)). You can withdraw consent at any time by emailing us or using the unsubscribe link in any message.

We do not sell your data or share it with advertisers. We use these processors to run the service:

• Lovable Cloud / Supabase — application hosting and database (EU region).
• Cloudflare — content delivery and DDoS protection.
• Calendly — if you choose to book a consultation, Calendly processes your booking details under its own terms.

All processors are bound by data processing agreements. Personal data is stored within the EU/EEA.

We keep your submission for up to 24 months from the date of your last contact with us, after which it is deleted. If you opt in to marketing, we keep the consent record for as long as you remain subscribed, plus 12 months after you unsubscribe (to demonstrate that consent was valid).

Under the GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased ("right to be forgotten").
• Restrict or object to our processing.
• Receive your data in a portable format.
• Withdraw consent to marketing at any time.

To exercise any of these, email joanne@digitaltraining.ie. We aim to respond within 30 days.

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have mishandled your data.

Data is stored in an EU-hosted database with row-level security so that submissions can only be read by us as controller — never by other visitors. Traffic to the site is encrypted in transit (HTTPS). In the unlikely event of a personal-data breach that poses a risk to you, we will notify the Data Protection Commission within 72 hours as required by GDPR, and contact affected individuals where required.

If we make material changes we will update the "Last updated" date at the top of this page. For anything more significant we will notify subscribers by email.

Digital Training Institute · joanne@digitaltraining.ie