CompliQuest

Course Overview

Online stores process personal data daily; from the moment a user visits the site to product delivery or return requests. This module helps participants identify risks, follow data protection rules, and avoid common mistakes in the digital sales environment.

The training is based on real, relatable examples rather than abstract theory. Through everyday situations, participants will learn how to handle customer data correctly, whether the user is browsing, placing an order, submitting a query, or requesting a return.

We’ll cover how to properly set up a cookie banner that provides users with a clear choice and complies with consent principles, along with common mistakes that can lead to unlawful cookie processing. The module also explains how to recognize a GDPR-related request, such as account deletion, data access, or consent withdrawal, and how to log, forward, and respond to it within the required legal timeframes.

Additionally, we’ll review common error scenarios, such as sending an order confirmation to the incorrect address, unauthorized access to the user database, or unclear terms of service. The goal is to help employees recognize risky situations and adopt compliant practices that protect users while supporting business operations.

Who is this course for?
This course is ideal for all employees involved in online store operation, regardless of their specific role within it:

1. Online sales and e-commerce staff – who receive and process orders, manage customer accounts, and handle customer data. 
2. Customer support and return handling teams – who communicate with customers daily and access their personal data. 
3. IT and web administrators – who configure the online store platform, manage databases, and handle external system integrations. 
4. Online store managers and digital channel leads– responsible for system functionality and data security oversight.
5. All employees processing customer data through the online store in any way – who process payment data, invoices, and customer banking information.

Modules

• GDPR and Your Online Store – In this module, participants will learn how to identify personal data processed through an online store and how to manage it lawfully, from the moment a user visits the site to the completion of a purchase, delivery, or return. The training explains the conditions for lawful collection, sharing, and storage of data, as well as the risks of improper processing. Special emphasis is placed on recognizing risky practices, such as vague consent requests or excessive data collection, and on the correct response in case of errors or security incidents.