As part of the implementation of the RGPD (General Data Protection Regulation)
1- Administrative part
Our Data Protection Officer is Cécile Laforgue, President of the association.
We manage the 3 registers required by law
- Data processing register
- Register of subcontractors
- Incident register
These registers take into account the formatting recommended by the CNIL.
This also means that our customer contracts (in the format proposed by the CNIL), the platform's conditions of use, the confidentiality policy and the legal notices must be brought into line.
2 - Safety section
We have implemented procedures on our safety rules:
Our digital document storage and backup servers are hosted in Europe, more specifically in France by OVH, with 24/7 administration.
Daily back-ups of our servers are carried out on servers remote from our infrastructure.
Notifications of security breaches, alerts to affected customers and implementation of corrective measures are carried out within a maximum of 48 hours.
3 - Confidentiality section
- respect for the information you entrust to us
- we do not collect sensitive information about you as part of our training programmes, and no data of this type can be transmitted by e-mail
- automatic data purging, the duration of which is agreed with the customer and must comply with RGPD directives.
All our staff have signed a confidentiality clause in their contract of employment. Only employees authorised by their position have access to customer data.
Your data will not be sold.
Your data is securely hosted on our servers.
Your data will be deleted in full if your contract is terminated.