CCC+ Standard

Terms and Conditions of Access to Restricted Information

1. Purpose and Objective
This document establishes the Terms and Conditions for Access to Restricted Information provided by CERTIS, aiming to ensure the confidentiality, integrity, and security of information, as well as compliance with applicable legislation, including the General Data Protection Regulation (GDPR).

2. User Registration
Access to restricted content is subject to the prior registration of the user on the CERTIS platform. Registration requires the provision of authentic and up-to-date personal data, for which the user is solely responsible. Access to restricted content is subject to prior approval by CERTIS, which reserves the right to refuse or revoke access without justification.

3. Access Credentials and Confidentiality Obligation
The user will receive personal and non-transferable access credentials. The user is solely responsible for the safekeeping, confidentiality, and protection of these credentials. Any misuse resulting from negligence in credential protection will be attributed to the user. The user agrees to immediately notify CERTIS in the event of unauthorized access or a security breach.

4. Restricted Nature of Information
All information provided within a restricted environment is considered confidential and intended exclusively for the authorized user. Reproduction, distribution, disclosure, or use of the information for purposes other than those authorized is strictly prohibited, except with prior express written consent from CERTIS.

5. Access Logging and Monitoring
CERTIS will log and monitor all activities related to access to restricted content, including date, time, IP address, username, and performed operations. These records will be processed for security, audit, and legal compliance purposes, in strict accordance with the GDPR.

6. Request for Access to Restricted Information
To request access, the user must complete an electronic form, providing the following mandatory information:
- First Name
- Last Name
- Email
- Acceptance of the Terms and Conditions
- Acceptance of the GDPR (General Data Protection Regulation)
- Other relevant information (optional)

7. Access Validation and Approval
Access requests will be evaluated by CERTIS based on internal eligibility and information security criteria. CERTIS reserves the right to refuse or revoke access at any time, without prior notification or justification.

8. User Account Creation and Management
Once the request is approved, a user account will be created on the CERTIS platform. The user will receive an email with instructions for account activation and temporary access credentials, which must be changed upon first login.

9. Personal Data Protection
The processing of personal data under these Terms and Conditions fully complies with the GDPR. The user has the right to access, rectify, delete, restrict, and object to the processing of their personal data by submitting a written request to CERTIS.

10. Final Provisions
By submitting the access request, the user declares that they have read, understood, and fully accepted these Terms and Conditions, as well as the applicable information security and data protection regulations.

Final Note:
CERTIS reserves the right to modify these Terms and Conditions at any time, with updated versions duly communicated to registered users.

CERTIS
[Terms Update Date: 05/02/2025]