The Escal Institute of Advanced Technologies, Inc. / dba SANS Institute, GIAC, and SANS Technology Institute hereafter referred to collectively as “SANS” provides training and certifications related to cybersecurity and the safe use of technology within your organization. To provide this training, SANS captures and processes personal data and as such has been identified as a “controller” of your information.
The information provided to SANS for training and certification purposes may include name, email address, phone number(s), address, company, department, job function, industry, organizational memberships, and geographic region. SANS may also collect data about devices and software used to access the training and training systems; this data includes browser version, operating system version, IP addresses, access times, connection duration, and other browser analytics. As training is delivered, the SANS Institute processes and stores data associated with training assignments, completion, and scores on any learning activity that is delivered. SANS may also utilize third party processors to provide these services.
If your information is provided by your employer, this information is used as part of the initial or ongoing training cycle. The purpose for collecting this data is to allow SANS and your employer to assign, deliver, record and report on your cybersecurity training. Your information and training records will be shared only with you and your employer.
At any time you have the right to receive a copy of the personal data you have provided to us in an electronically readable format.
A data protection regime is in place to oversee the effective and secure transmission, processing, storage, and eventual disposal of your personal data, and data related to your training. SANS will retain your data until you request that it be removed, after which it will be securely disposed of. SANS will never sell your personally identifiable data and will only share your personally identifiable data with SANS cyber security solutions partners when you provide agreement to do so.
When you consent to us using your information for the purposes of sending you information on SANS products or services you are providing us with your consent to send you materials detailing our products and services that we consider will be of interest to you, based on your use of the educational material that we provide as resources. We profile you this way to make the materials more relevant to you. We will only send you information on products from within the SANS services portfolio.
If, at any point, you believe your personal information to be incorrect, you may request to see a copy of your data, ask to have the errant data corrected, or ask that it be securely disposed of. If your information is provided by your employer, SANS will work directly with your employer to promptly address the matter. If you wish to raise a complaint or concern, or have questions relating to GDPR, please contact the Data Protection Officer via gdprprivacy@sans.org.