This policy informs you about the categories of personal data we process, how we use them, the categories of recipients to whom we communicate them, as well as your rights.
Definition: “Personal data”
The CNIL (Commission Nationale de l’Informatique et des Libertés) informs you that “personal data” implies “any information directly or indirectly identifying a natural person (e. g. name, registration number, telephone number, photograph, date of birth, municipality of residence, fingerprints…)”.
Legal basis for data processing
As our processing is based on consent, you are entitled to withdraw it at any time, without however affecting the lawfulness of such processing carried out before such withdrawal.
The data controller
You can contact them at any time to exercise your rights with regard to your personal data; your request will be processed within 1 month of the date of the request.
Company name: SPEAK ENGLISH CENTER
Data controller: Mme Soad LOUISSI
Postal address: 1 Avenue du Vercors, 38600 Fontaine
E-mail address: firstname.lastname@example.org
If you wish to object to the collection, management and use of your data, you may contact us at any time to send your objection to the delegate named above.
What personal information does Speak English Center collect?
All data collected is used for the purposes for which you have provided us with your information:
We receive your information when you contact us via the contact form on our website: http://speakenglishcenter.com/. We retain and use your personal data only with your consent or if it is permitted by law without your consent.
We receive your information when you subscribe to the newsletter on our website: http://speakenglishcenter.com/. We store and use your personal data only with your consent.
When you have approved the receipt of our newsletter, we use your e-mail address to send you information about our formulas, operations, trips and events. We store and process this data for the purpose of sending the newsletter.
You can revoke your consent to send the newsletter at any time, for example, by unsubscribing from the newsletter on our website. The link to unsubscribe is at the end of each newsletter. Revocation leads to the deletion of the collected user data.
ERP (commercial management)
We store your personal data in our business management software when:
You request a quote from our training center: your personal data (surname, first name, telephone number, postal address, e-mail address) is collected from you via e-mail, telephone or by direct exchange at our premises and is recorded in our commercial management software with your consent.
The legal invoicing formalities are also carried out in these ERPs thanks to your personal data (surname, first name, postal address) and information relating to your training (type of training, dates of the training, etc.).
For what purposes does Speak English Center process my personal information?
Your personal data is used only for the following purposes:
- Provide you with information on the progress of your training through the training calendar and program.
- Respond to your requests or provide you with information about our services.
- Give you information about the TOEIC or BULATS exams.
- Send you our end-of-training evaluation questionnaire. (You have the possibility to anonymize your answers on this questionnaire, your contact details being optional.)
- Invite you to our events.
- Send you our newsletter (for any membership you have agreed to on our website).
- To meet our legal obligations.
- Resolve your complaints about the processing of your personal data.
- Conclude the training contract with you and your company or funding agency.
- Monitor the progress of your training: in order to monitor the execution of the training action, attendance sheets are signed by the trainees and the trainer(s) to justify the trainees’ attendance at the session.
- To update our electronic agenda (Google Calendar) to schedule your training sessions with trainers.
Your personal data is only used by Speak English Center for the purposes mentioned above. In the context of the creation of a training file requiring the transmission of your personal data, your consent will systematically be requested to transmit your information to OPCA (approved joint bodies), Pôle Emploi, and any other funding body (DIF/CIF etc.).
How is my personal information protected? (Security policy and measures)
We have defined technical and organizational measures to protect your data appropriately according to its nature, scope of processing and accessibility. This may include, for example, data encryption, access rights management, regular password changes, etc. All our employees and service providers must respect the security and protection of your data.
At any time, you may request access to your personal data, their rectification, their deletion (insofar as this does not prevent the proper performance of the contract or compliance with Speak English Center’s legal obligations) and the limitation of one or more specific processing operations of data concerning you, under the conditions provided for by the GDPR.
You also have the right to modify or withdraw, at any time, the consents you have given us for the processing of your personal data.
You also have the right to object to the processing of your personal data and the right to their portability, under the conditions set by the GDPR.
It is important that the information you provide us with is accurate and up to date and that you inform us immediately of any significant changes concerning you.
➢ The right to information
➢ The right of access
You have the right to request access to and verification of the content of the information we hold about you.
➢ The right of rectification
You may correct inaccurate or incomplete information about yourself.
➢ The right of deletion
You have the right to ask us to delete your personal data stored with us.
➢ The right of opposition
You can refuse certain uses of your data by our organization.
In your request, explain which data you want deleted and for what reasons.
You can exercise your right of opposition by various means and without providing any supporting documents: telephone or e-mail addressed to the controller at email@example.com, or by post to the following address: 1 Avenue du Vercors 38600 FONTAINE.
We recommend that you keep a copy of your procedures if you wish to file a complaint with the CNIL and file a complaint in the event of an unsatisfactory response or absence of a response
➢ The right to limitation of processing
You have the right to ask our organization to temporarily freeze the use of some of your data within the time limit for the exercise of other rights (rectification, opposition…). During this period, we will no longer be able to use the data but will have to store it.
➢ The right to data portability
You have the ability to retrieve some of your data in a readable format (xtlm) in order to store this portable data elsewhere or easily transmit it to another person.
How long do we keep your personal information?
Retention periods vary depending on our current contractual relationship (you are an active customer), whether we have had a contractual relationship with you in the past (you are an inactive customer) or whether we have never had a contractual relationship with you (you are a prospect). Your personal data transmitted via the contact form will be kept by our company for a period of 2 years if you do not answer any of our requests.
In the event that you purchase one of our services, the retention period of the training contract is 5 years according to article L110-4 of the French Commercial Code. The storage period for the other documents concerning you (certificate of completion of training, release sheet, schedule, satisfaction questionnaire, etc.) is 3 years from the date of payment of all invoices relating to your training; the storage period for the customer invoice is 10 years from the end of the accounting year in accordance with Article L. 123-22 paragraph 2 of the French Commercial Code.
Where is my personal information stored?
Our web platforms and services are hosted on OVH in its French data centers. The data you send us via the contact form is sent to Gmail (e-mail). Your information (telephone number, e-mail address, surname and first name) is stored on our ERP system.
To whom will my personal data be transferred?
Our web platforms and services are hosted by OVH in its French data centers.
Personal data may be transferred to our tools hosted by the following third parties: Google (USA). Our operation depends on the services provided by Google results in a transfer of data to the United States with an adequate level of protection recognized by the European Union.
To find out more: https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde.