GDPR Information Notice
This notice explains how Nexus Finance handles personal-data-like elements in a training context. The tone is formal because compliance documentation has traditions, and traditions are powerful.
1. Controller Details
Controller: Nexus Finance Training Operations. Contact details are scenario-dependent and should be provided by the facilitator for each deployment.
2. Categories of Data
Processed elements may include login event metadata, simulated account interactions, local preference records, and synthetic transaction associations generated for educational realism.
3. Purposes
Purposes include authentication continuity, training-path orchestration, account-flow simulation, and debrief evidence generation for cyber-awareness outcomes.
4. Lawful Bases
Primary lawful basis is legitimate interest in security education and organizational resilience training. Additional bases may apply where local legal frameworks require explicit handling for specific exercise models.
5. Data Minimization
Design intent is to minimize real-world personal data and maximize synthetic substitutes. If a participant enters real data, that is discouraged and should be removed promptly.
6. Retention
Local browser storage retention is user-controlled unless platform policies specify reset intervals. Session access may expire automatically to reduce repeated credential prompts while limiting persistent authentication windows.
7. International Transfers
No international transfer is inherent in the static local model. If hosting architecture changes, transfer safeguards and adequacy assessments should be revisited.
8. Data Subject Rights
Rights include access, rectification, erasure, restriction, portability, and objection subject to legal conditions. In simulation mode, practical exercise of many rights may be achieved by clearing local storage and rerunning with fresh data.
9. Supervisory Complaints
Participants may raise concerns with the relevant supervisory authority. They may also raise concerns with the facilitator, who has likely already seen the same issue three times this week.