This policy details how RAMPART collects and processes personal data to provide its security awareness service, strictly adhering to Algerian Law No. 18-07 and its implementing texts (including 25-11), enforced by the ANPDP.
- Legal Basis for Processing: Processing is based on Contractual Necessity (Article 10) to provide the service and fulfill the RNSI 2020 compliance obligations of the Client.
- Data Collected: Includes user identity and contact details, professional information, and auditable performance data (such as training scores and phishing results, necessary for the RNSI Register).
- Data Sovereignty: All personal data and performance indicators are stored and processed within an Algerian Data Center. This ensures full compliance with national non-transfer requirements (Article 28).
