Privacy notice
How your data is handled
This notice covers hwct.pro and the PMO Maturity Assessment. Last updated 12 November 2026.
Who is responsible
Hossam Wazzan, trading as Hossam Wazzan Consulting & Training (HWCT), Hilversumer Str. 8, 28259 Bremen, Germany. Email: Hossam.Wazzan@gmail.com. Write to this address for any question about your data.
What the assessment collects
| Data | Why | Legal basis |
|---|---|---|
| Name, work email, role, organisation | To identify the assessment and to be able to send or discuss your results | Your consent, Art. 6(1)(a) GDPR |
| Your 32 ratings, the scores and target level calculated from them, and the time of submission | To keep a record of the assessment and to prepare a useful conversation about it | Your consent, Art. 6(1)(a) GDPR |
| Your choice on the optional tick box | To contact you about consulting or training only if you said yes | Your consent, Art. 6(1)(a) GDPR |
Giving these details is voluntary. Without them you cannot open the results, but nothing else on the site is affected. I do not use the data for automated decisions or profiling. Scores are calculated in your browser.
Where it is stored
- In your browser. While you use the assessment, your answers and details are saved in your browser's local storage so you can return to them. Nothing is set as a cookie. You can clear it with the Reset button or in your browser settings.
- In a spreadsheet. When you register and when you view your results, your details and ratings are sent to a private Google spreadsheet that I control, using Google Apps Script. Google acts as my processor. Google may process data outside the EU, including in the United States, under the safeguards Google offers, such as standard contractual clauses or the EU–US Data Privacy Framework.
Other things that happen when you visit
- Hosting. The site is hosted on Cloudflare. Cloudflare processes technical data such as your IP address to deliver the pages and protect the site.
- Fonts. The pages load fonts from Google Fonts, so your IP address is sent to Google when a page loads.
- No tracking. I do not use analytics or advertising cookies on these pages.
How long I keep it
Assessment records are deleted after 24 months, or sooner if you ask. If you agreed to be contacted and we start working together, relevant details may be kept longer for the engagement and for legal retention duties.
Your rights
You can ask me for access to your data, correction, deletion, restriction of processing, or a copy in a portable format. You can withdraw your consent at any time, with effect for the future, by emailing me. You can also complain to a data protection authority. For Bremen this is the Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen.
Changes
If this notice changes, the date at the top changes too.