Privacy Policy
Protection of personal data and respect for your privacy
Table of Contents
1. Introduction
SkillFlow SAS (hereinafter "we", "our" or "SkillFlow") is committed to protecting your privacy and your personal data. This privacy policy explains how we collect, use, store and protect your personal information when you use our SkillFlow DevOps online learning platform.
This policy complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Informatique et Libertés).
2. Data controller
The controller responsible for processing your personal data is:
3. Data collected
3.1 Identification data
- First and last name
- Email address
- Password (encrypted)
- Date of birth (optional)
- Profile picture (optional)
3.2 Usage data
- Progress within courses
- Time spent on the platform
- Results of exercises and assessments
- Learning preferences
- Browsing history
3.3 Technical data
- IP address
- Browser type and version
- Operating system
- Screen resolution
- Cookies and session identifiers
3.4 Payment data
- Billing information
- Transaction history
- Banking data (processed by our secure payment partners)
4. Purposes of processing
We use your personal data to:
4.1 Provision of the service
- Create and manage your user account
- Provide access to courses and content
- Track your learning progress
- Issue completion certificates
4.2 Improvement of the service
- Analyze the use of the platform
- Personalize your learning experience
- Develop new features
- Optimize technical performance
4.3 Communication
- Send important notifications
- Respond to your questions and support requests
- Send newsletters (with your consent)
- Inform you of news and updates
4.4 Legal obligations
- Comply with our accounting and tax obligations
- Respond to requests from the competent authorities
- Prevent fraud and abuse
5. Legal basis
The processing of your personal data is based on:
- Performance of the contract: for the provision of the learning service
- Legitimate interest: for improving the service and preventing fraud
- Consent: for newsletters and marketing communications
- Legal obligation: for accounting and tax obligations
6. Retention period
We retain your personal data for:
- Account data: for the duration of your active account + 3 years after closure
- Progress data: for the duration of your active account
- Billing data: 10 years in accordance with accounting obligations
- Browsing data: 13 months maximum
- Marketing consent: until consent is withdrawn
9. Advertising and partners
9.1 Google AdSense
We use Google AdSense to display advertisements on our site. Google may use cookies to personalize ads based on your previous visits to our site and other sites.
9.2 Advertising opt-out
You can disable Google's ad personalization via:
9.3 Third-party advertising
Third-party advertisers may also use cookies. We do not have access to or control over these cookies.
10. Your rights
In accordance with GDPR, you have the following rights:
10.1 Right of access
You can request access to the personal data we hold about you.
10.2 Right to rectification
You can request the correction of inaccurate or incomplete data.
10.3 Right to erasure
You can request the deletion of your data in certain circumstances.
10.4 Right to restriction
You can request the restriction of the processing of your data.
10.5 Right to portability
You can request the retrieval of your data in a structured format.
10.6 Right to object
You can object to the processing of your data on legitimate grounds.
10.7 Exercising your rights
To exercise your rights, contact us at dpo@skillflow.frwith proof of identity. We will respond within one month.
11. Data security
We implement appropriate technical and organizational measures:
- Encryption of data in transit and at rest (SSL/TLS, AES-256)
- Strong authentication and access management
- Monitoring and intrusion detection
- Regular backups and continuity plan
- Staff training in data security
- Regular security audits
Despite these measures, no data transmission over the Internet is 100% secure. We encourage you to protect your login credentials.
12. International transfers
Your data may be transferred to countries outside the EU for the purposes of the service. In this case, we ensure that appropriate safeguards are in place:
- Standard contractual clauses of the European Commission
- Adequacy decisions of the European Commission
- Approved certifications and codes of conduct
13. Minors
Our service is intended for people aged 16 and over. Minors aged 16 to 18 must obtain parental authorization.
We do not knowingly collect personal data from children under 16. If we discover that a child has provided us with personal data, we will delete it immediately.
14. Modifications
We may modify this privacy policy to reflect changes in our practices or for legal reasons.
Significant changes will be notified to you by email or through our platform at least 30 days before they take effect.
15. Contact
For any questions regarding this privacy policy or your personal data: