Privacy Policy — Normec Praxis Certificate Portal

Version 1.0 · Last updated: 8 July 2026

1. Who we are

Praxis Training — Normec Praxis is Normec’s training centre for professional safety and technical courses.

Legal entity: Praxis Training — Normec Praxis
Address: Kruisstraat 16, 8870 Izegem, Belgium
Company number (VAT): BE 0647.773.621
Email: info-praxis@normecgroup.com
Phone: +32 491 180 180
Website: normecpraxis.com

Normec Praxis is the data controller for personal data processed in the context of training and the certificate portal.

2. Purpose of the app

The CertProof app is a personal certificate portal that allows training participants to view and download their certificates and proofs of attendance.

3. What data do we process?

We process the following personal data:

Identification data — last name, first name, date of birth
Professional data — company or organisation, if applicable
Certificate data — certificate number, training type, issue date, validity date, status, issuer

This data is created and maintained in the context of your participation in a Normec Praxis training course.

4. Legal basis (GDPR)

We process your data based on:

Performance of contract — providing training and certificates (Art. 6(1)(b) GDPR)
Explicit consent — for publishing your certificate data online for third-party verification (Art. 6(1)(a) GDPR)
Legitimate interest — managing our training administration (Art. 6(1)(f) GDPR)

5. Online publication of certificate data

During or after your training, you explicitly consent that your certificate data (name, certificate number, validity dates and training type) will be publicly visible on mypraxis.training for verification by employers, clients or other third parties.

This consent is recorded upon enrolment for the training course.

The app provides you with private access to your own certificates. The public verification service is a separate web service operated by Normec Praxis.

6. Use of data in the app

In the app, your data is used exclusively to:

verify your identity (last name and date of birth)
retrieve and display your certificates
download official PDF certificates

Local storage: after successful verification, a session is stored locally on your device (iOS Keychain or Android Keystore). This session is deleted when you log out.

No tracking: the app does not use analytics, advertising, profiling or tracking of any kind.

7. Sharing with third parties

We do not share your data with third parties, except:

Public certificate registry — as described in section 5, with your consent
Technical service providers — hosting of mypraxis.training, solely for technical execution and under our responsibility
Legal obligation — when required by law

We never sell your data to third parties.

8. Retention period

Data	Retention period
Certificate data	As long as the certificate is valid or for the duration determined by legal provisions, and thereafter in accordance with legal and archiving obligations
Public registry	As long as your consent applies and the certificate is relevant for verification
App session	Until you log out or delete the app

9. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

Access — your personal data
Rectification — of incorrect data
Erasure — of your data, where legally permitted
Restriction — of processing
Withdraw consent — for publication — note: withdrawal may mean your certificate is no longer publicly verifiable
Data portability — where applicable
Lodge a complaint — with the Data Protection Authority (DPA): www.gegevensbeschermingsautoriteit.be

10. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted session storage in the app and secure connections (HTTPS) for all communication.

11. Changes

We may update this privacy policy. The most recent version is always available at certproof.be/en/privacy/. For substantial changes, we will inform you via our website or by email.