Personnel certification of the TÜV SÜD Examination Institute
Personnel certification of the TÜV SÜD Examination Institute
If you have any questions about data protection, you can reach us by e-mail at [email protected].
The processing of your personal data for the purpose of the supervised online examination – as described in detail here – is undertaken on the basis of your explicit consent, which you grant to us upon registering for the online examination and which can be withdrawn at any time.
If you withhold or withdraw your consent, there is no legal basis for taking the online examination. This means, you cannot take the online examination. In this instance, please speak with your TÜV SÜD Academy contact partner or your training provider.
The processed data and records in the course of the supervised online exam will be stored and deleted as follows:
| Procedure/Process | Description |
Storage and deletion |
| Record & Review | The exam is recorded and reviewed by the certification body after the end of the exam. At the beginning of the session, the participant is identified, during which a picture of the ID card is taken and stored. This is followed by a recording of the monitoring of the webcam and screenshare. | After the session ends, both records continue to be stored. As soon as the participant has been identified, the ID photo will be deleted. By default, the review of the recording takes place within 21 working days after the end of the examination. Inconspicuous audit records are deleted immediately after the review in the monitoring software used. In the event of a negative result (e.g. in the case of detected cheating attempts), the recording will only be deleted after the process has been completed. The detailed procedure for negative results up to the deletion of the recording can be found here under "Review in the Record & Review Procedure". |
| Live Proctoring | The monitoring of the examination is carried out by observing an online exam proctor (live proctor). The instructions of the online examination proctoring must be followed. In addition, a recording of the examination will be carried out in accordance with the Rule for the Accreditation of Certification Bodies for Persons according to DIN EN ISO/IEC 17024:2012 of the German Accreditation Body DAkkS. At the beginning of the session, the participant is identified, during which a picture of the ID card is taken and stored. The image can be called up by the Proctor during the session. At the end of the live session, this image is automatically deleted. | The image of the identity document for the identification of the participant stored at the beginning of the examination monitoring will be deleted immediately after the end of the examination session. The recording of the examination will be stored for 5 years in accordance with the regulations of the German Accreditation Body DAkkS and will be automatically deleted after this period. |
Your right to object: If you wish to withdraw your consent, it is sufficient to send a short message at any time to [email protected].
Privacy Notice – Online Examinations and Remote Proctoring (GCC PDPL)
Effective Date: 24/04/2026
This Privacy Notice explains how TÜV SÜD Middle East processes your personal data in connection with online examinations, remote proctoring, identity verification, and certification services across the GCC region.
1. Common Provisions (Applicable to All GCC Countries)
1.1 Purpose of this Privacy Notice This Privacy Notice describes how we collect, use, store, transfer, and protect your personal data when you participate in online examinations and remote proctoring services, in compliance with applicable Personal Data Protection Laws in the GCC.
2. Data Controller The data controller is: TÜV SÜD Middle East – Academy Department Empire Heights Tower A, Business Bay, Al Asayel Street, Dubai, UAE.
Contact: [email protected]: TÜV SÜD Middle East, Empire Heights Tower A, Business Bay, Dubai, UAE.
3. Categories of Personal Data Processed
4. Purposes of Processing Personal data is processed only for:
5. Legal Basis for Processing We rely on one or more of the following lawful bases under GCC PDPLs:
Explicit consent is required for audio-visual monitoring and behavioral analysis.
6. Consent We obtain your explicit consent through clear affirmative action before processing sensitive data such as audio, video, and screen monitoring. You may withdraw your consent at any time; however, withdrawal may prevent you from completing or validating the examination.
7. Automated Decision-Making Automated tools may support proctoring. Final decisions affecting certification are subject to human review where required.
8. Data Retention Personal data is retained only as long as necessary and is securely deleted or anonymized thereafter.
9. Data Sharing and Third Parties Data may be shared with authorized proctoring vendors, accreditation bodies, and regulators. All third parties are bound by appropriate data protection agreements.
10. Cross-Border Data Transfers Any transfer outside the GCC is carried out with appropriate safeguards in accordance with PDPL requirements.
11. Data Subject Rights You have the right to access, correct, delete (where applicable), withdraw consent, and lodge a complaint with the relevant authority.
12. Information Security Measures We implement encryption, access controls, logging, and monitoring to protect your data.
13. Updates to this Privacy Notice This notice may be updated periodically. The latest version will be published on our website.
2. Country-Specific Provisions
🇸🇦 Saudi Arabia (PDPL – Regulated by SDAIA)
☐ I explicitly consent to the collection and processing of my personal data, including audio, video, screen monitoring, and identification data, for identity verification, online examination delivery, certification, and fraud prevention, in accordance with the Saudi Personal Data Protection Law (PDPL).
☐ I understand that my personal data may be processed by authorized service providers, including cross-border transfers where permitted, with appropriate safeguards.
☐ I acknowledge my rights under PDPL and understand that withdrawal of consent may prevent completion or validation of the examination.
☐ I confirm that I have read and understood the Privacy Notice and provide my explicit consent.
🇦🇪 United Arab Emirates (Federal Decree-Law No. 45 of 2021)
☐ I consent to the processing of my personal data, including identity data, exam responses, and audio-visual monitoring, for online examination administration and integrity assurance, in accordance with the UAE Personal Data Protection Law.
☐ I acknowledge that my data may be shared with approved service providers, including processing outside the UAE, subject to lawful safeguards.
☐ I understand my rights to access, correction, erasure, and objection, and that withdrawing consent may impact my ability to complete the examination.
☐ I confirm that I have reviewed the Privacy Notice and agree to the described processing.
🇶🇦 Qatar (Law No. 13 of 2016)
☐ I consent to the collection and use of my personal data, including identification, exam, and monitoring data, for conducting online examinations and ensuring integrity, in accordance with Qatar’s Personal Data Privacy Protection Law.
☐ I understand that my data may be disclosed to authorized third parties and processed inside or outside Qatar as permitted by law.
☐ I acknowledge my right to access, correct, and object to processing, and understand that withdrawal of consent may affect exam participation.
☐ I confirm that I have read the Privacy Notice and provide my consent.
🇰🇼 Kuwait (Law No. 125 of 2020)
☐ I explicitly consent to the processing of my personal data, including audio-visual recordings and screen monitoring, for identity verification, conducting online examinations, maintaining integrity, and issuing certifications, in accordance with Kuwait’s Law No. 125 of 2020 on the Protection of Personal Data.
☐ I understand that my data may be shared with authorized third-party service providers and transferred outside Kuwait subject to appropriate safeguards.
☐ I acknowledge my rights to access, rectification, erasure, and objection, and that withdrawal of consent may prevent me from completing the examination.
☐ I confirm that I have read and understood the Privacy Notice and provide my explicit consent.
🇧🇭 Bahrain (Law No. 30 of 2018)
☐ I consent to the collection and processing of my personal data, including identification data, examination materials, and audio-visual monitoring, for administering online examinations and ensuring integrity, in accordance with Bahrain’s Personal Data Protection Law No. 30 of 2018.
☐ I understand that my data may be processed by authorized vendors and transferred outside Bahrain with appropriate protections.
☐ I acknowledge my rights to access, correction, deletion (where applicable), and withdrawal of consent, and that withdrawing consent may affect my ability to sit for the examination.
☐ I confirm that I have read the Privacy Notice and agree to the processing described.
🇴🇲 Oman (Royal Decree 6/2022)
☐ I explicitly consent to the processing of my personal data, including audio, video, screen recording, and behavioral data, for identity verification, online examination delivery, integrity monitoring, and certification purposes, in accordance with Oman’s Royal Decree 6/2022 on Personal Data Protection.
☐ I understand that my data may be shared with service providers and transferred outside Oman subject to legal safeguards.
☐ I acknowledge my rights to access, correction, erasure, and withdrawal of consent, and that withdrawal of consent may result in inability to complete the examination.
☐ I confirm that I have read and understood the Privacy Notice and provide my explicit consent.
Site Selector
Global
Americas
Asia
Europe
Middle East and Africa
