PRIVACY POLICY

Last updated: October 30, 2026

1. Introduction

GlobalCert ("GlobalCert", "we", "us", or "our") is committed to protecting the privacy and personal data of candidates using its Browser-Based Online Examination Proctoring Extension ("the Extension").

This Privacy Policy explains how the Extension collects, processes, stores, and protects personal information during online examinations.

The Extension is designed to support secure online examinations by providing browser-based examination supervision, candidate monitoring, and examination integrity controls.

The Extension operates in conjunction with the GlobalCert examination platform and its associated examination infrastructure.

All information processed through the Extension is intended to be used exclusively for examination administration, supervision, security, and integrity purposes.

GlobalCert processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Information We Collect

Depending on the examination configuration and the features enabled, the Extension may collect and process the following categories of information.

2.1 Candidate and Examination Information

Candidate identification number or examination session identifier.
Examination session details.
Examination status and relevant timestamps.
Information necessary to associate proctoring events with a specific candidate and examination.

2.2 Camera and Video Recordings

With the candidate's knowledge and browser permission, the Extension accesses the candidate's camera during an authorized examination session.

Video recordings are collected and transmitted to the GlobalCert examination server for examination supervision and review.

Video recordings may be used for:

Candidate identity verification.
Visual examination supervision.
Detection of potential examination irregularities.
Verification of compliance with examination regulations.
Post-examination investigation and review.

Camera access is intended to remain active only during the authorized examination session and in accordance with the examination configuration.

2.3 Microphone and Audio Recordings

With the candidate's knowledge and browser permission, the Extension accesses the candidate's microphone during an authorized examination session.

Audio recordings are collected and transmitted to the GlobalCert examination server for examination supervision and review.

Audio recordings may be used for:

Detection of potential unauthorized communication.
Identification of possible external assistance.
Monitoring of examination-related audio activity.
Investigation of potential examination irregularities.
Verification of compliance with examination regulations.

Microphone access is intended to remain active only during the authorized examination session and in accordance with the examination configuration.

2.4 Browser Activity and Examination Events

The Extension may process limited browser-related information necessary to maintain examination security, including:

Changes to the active examination tab.
Attempts to navigate away from the examination page.
Opening or switching between browser tabs.
Relevant browser navigation events.
Other browser activities identified as prohibited by the applicable examination rules.

This information is used to identify potential examination rule violations and generate relevant proctoring events.

The Extension is not intended to monitor general browsing activity outside an authorized examination session.

2.5 Display Configuration Information

Where required by the examination rules, the Extension may access information about the candidate's connected display configuration, including the number of connected displays.

This information may be used to identify the use of additional monitors where such use is prohibited.

The display configuration permission does not, by itself, provide access to the contents of the candidate's screen.

3. Purpose of Data Processing

Information collected through the Extension is processed for the following purposes:

Maintaining the integrity and security of online examinations.
Supporting candidate identity verification.
Monitoring compliance with examination regulations.
Detecting potential unauthorized assistance or suspicious examination activity.
Recording relevant examination security events.
Providing authorized examination administrators with information necessary for examination supervision and review.
Investigating reported examination irregularities.
Supporting certification and examination quality assurance procedures.

GlobalCert does not use information collected through the Extension for advertising, behavioral advertising, or unrelated commercial profiling.

4. Camera and Microphone Permissions

Camera and microphone access is required for examinations where video and audio proctoring are enabled.

Candidates are informed of these requirements as part of the examination process. Access is subject to the candidate granting the relevant permissions through the browser.

Video and audio recordings are transmitted to the GlobalCert examination server and retained for examination supervision, security, and review.

Candidates may decline the requested permissions. However, where camera and microphone monitoring is mandatory under the applicable examination regulations, declining these permissions may prevent the candidate from commencing or completing the examination.

Browser permission is a technical authorization and does not, by itself, constitute GDPR consent or establish the legal basis for processing.

5. Browser Permissions and Their Purpose

The Extension may request the following browser permissions:

Scripting: Enables the Extension to execute the necessary proctoring functionality within authorized examination pages.

Storage: Enables the Extension to maintain examination session information, settings, and its operational state.

Tabs: Enables identification and monitoring of the examination tab and relevant tab-switching events.

Web Navigation: Enables detection of relevant navigation events during an examination.

System Display: Enables access to information about the candidate's connected display configuration where required.

Video Capture: Supports camera-based examination supervision and video recording.

Audio Capture: Supports microphone-based examination supervision and audio recording.

Host Permissions: Enable communication with the authorized examination platform and associated GlobalCert proctoring services.

These permissions are requested to provide the Extension's examination security functionality. They are not intended for unrelated monitoring or collection of personal information.

6. Data Transmission and Storage

Information collected through the Extension is transmitted to and stored within the GlobalCert examination server infrastructure.

This includes, where applicable:

Candidate and examination session information.
Video recordings captured through the camera.
Audio recordings captured through the microphone.
Browser-related examination events.
Proctoring logs and relevant security information.

The Extension may also use browser storage to temporarily maintain examination session settings and operational information.

Appropriate technical and organizational measures are implemented to protect information during transmission and storage.

7. Data Retention

GlobalCert retains video recordings, audio recordings, and associated examination proctoring information for a period of one (1) year from the date of the examination.

This retention period supports:

Examination integrity verification.
Review of reported examination irregularities.
Investigation of candidate complaints or appeals.
Certification-related quality assurance.
Examination administration and security requirements.

Following the expiration of the retention period, personal data is securely deleted or anonymized, unless further retention is required or permitted under applicable law.

Where a specific examination is subject to an ongoing investigation, complaint, appeal, or legal obligation, relevant information may be retained for the additional period necessary to address that matter.

8. Data Sharing and Disclosure

Access to examination information is restricted to authorized personnel and organizations with legitimate examination-related responsibilities.

Information may be made available to:

Authorized GlobalCert examination administrators.
Examination supervisors and proctors.
Authorized certification and examination personnel.
Designated technical service providers responsible for hosting, maintaining, or supporting the examination infrastructure, where necessary.

Information may also be disclosed where required by applicable law or a valid request from a competent public authority.

GlobalCert does not sell personal data or share it with third parties for advertising purposes.

Where third-party service providers process personal data on behalf of GlobalCert, appropriate contractual and data protection safeguards are implemented.

9. Legal Basis for Processing

Where the GDPR applies, personal data is processed on an appropriate legal basis under Article 6 of the GDPR.

Depending on the examination arrangement and the applicable contractual and regulatory framework, the legal basis may include:

Performance of a contract or pre-contractual measures.
Compliance with a legal obligation.
Legitimate interests pursued by GlobalCert or the responsible examination organization, where applicable.
Consent, where consent is the appropriate legal basis.

The applicable legal basis depends on the specific examination and the relationship between GlobalCert, the examination organization, and the candidate.

Candidates are informed of the applicable legal basis through the relevant examination privacy notice.

10. Data Security

GlobalCert implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include:

Secure communication between the Extension and the examination server.
Access controls and authentication mechanisms.
Restricted access to video and audio recordings.
Secure server infrastructure.
Appropriate backup and retention procedures.
Monitoring and management of unauthorized access.
Internal procedures governing access to examination information.

Access to recordings and other examination information is limited to authorized personnel with legitimate examination-related responsibilities.

11. Data Protection Rights

Subject to applicable data protection legislation, candidates may exercise the following rights:

Right of access to their personal data.
Right to rectification of inaccurate personal data.
Right to erasure, where legally applicable.
Right to restriction of processing.
Right to object to certain processing activities.
Right to data portability, where applicable.
Right to withdraw consent where processing is based on consent.

Candidates may exercise their rights by contacting GlobalCert through the contact details provided below.

Candidates also have the right to lodge a complaint with the competent data protection supervisory authority.

In Greece, the competent authority is the Hellenic Data Protection Authority (HDPA).

Website: https://www.dpa.gr/

12. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), GlobalCert ensures that such transfers comply with applicable GDPR requirements.

Appropriate safeguards may include European Commission adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

13. Children's Privacy

The Extension may be used in authorized examination environments involving candidates under the age of 18.

Where examinations involve minors, GlobalCert and the responsible examination organization apply appropriate safeguards and comply with applicable data protection requirements concerning children.

14. Changes to This Privacy Policy

GlobalCert may update this Privacy Policy to reflect changes in the Extension's functionality, technical infrastructure, examination requirements, or applicable legislation.

The latest version will be published on the official GlobalCert website.

The date of the latest revision will be indicated at the beginning of this document.