Privacy Policy

The data controller responsible for My Cybersteps is:

Cybersteps GmbH
Schloßstraße 50
12165 Berlin
Deutschland
Email: [email protected]

We collect and store the following personal data:

• Your name and email address, provided via your invitation.
• Your account credentials. Your password is stored as a secure hash and never in plain text.
• Your progress through course modules and sessions.
• Login timestamps and activity logs for security purposes.
• Information you voluntarily add to your student profile, such as your CV, professional experience, education, skills, certifications, LinkedIn profile, portfolio, and project information.
• Your consent preference regarding the sharing of your profile with selected employers and industry partners.

We process personal data as necessary to provide access to My Cybersteps and related educational services under Article 6(1)(b) GDPR, and to ensure the security, integrity, and operation of My Cybersteps under Article 6(1)(f) GDPR.

Where you choose to share your profile with selected employers and industry partners, we process and share this information based on your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

Your data is used exclusively to:

• Provide access to My Cybersteps and course content.
• Track your learning progress.
• Send you essential communications about your account or cohort.
• Ensure platform security and investigate unauthorized access.
• Create and maintain your student profile.
• Where you have provided consent, share your profile with selected employers and industry partners for internship, employment, networking, and other career opportunities.

Providing consent is voluntary. Choosing not to provide consent, or withdrawing it later, will not affect your participation in the Cybersteps program.

Personal data used to operate My Cybersteps is stored on servers located within the European Union. We use DigitalOcean as a data processor for hosting and database infrastructure under a data processing agreement, using the Frankfurt region.

Where you have provided consent, information included in your student profile may be shared with selected employers, internship providers, recruitment partners, and other Cybersteps industry partners.

These partners may process your information independently for recruitment and career-opportunity purposes.

We do not sell or share your personal data with third parties for unrelated marketing purposes. Where third-party tools are used, such as video conferencing for live sessions, only data strictly necessary for that service is shared.

We retain your personal data for as long as your account is active.

If you withdraw your consent to profile sharing, Cybersteps will stop sharing your profile in the future. Withdrawal does not automatically delete information that was already lawfully shared with a partner.

If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law.

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data, also known as the right to be forgotten.
• Object to or restrict processing of your data.
• Receive your data in a portable format.
• Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond without undue delay and within the time periods required by applicable data-protection law.

We use only essential cookies required for authentication and platform functionality. We do not use tracking, advertising, or analytics cookies.

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before material changes take effect.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with your local data-protection authority.