This Policy applies as between you, the User of this Web Site and DataGalaxy the owner and provider of this Web Site. This Policy applies to our use of any and all Data collected by us in relation to your use of the Web Site and any Services or Systems therein.
In this Policy the following terms shall have the following meanings:
- "Account": means collectively the personal information, Payment Information and credentials used by Users to access Material and / or any communications System on the Web Site;
- "Content": means any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of this Web Site;
- "Cookie": means a small text file placed on your computer by DataGalaxy when you visit certain parts of this Web Site. This allows us to identify recurring visitors and to analyze their browsing habits within the Web Site.
- "Data": means collectively all information that you submit to the Web Site. This includes, but is not limited to, Account details and information submitted using any of our Services or Systems;
- "DataGalaxy": means DataGalaxy, a simplified joint stock company (SAS under French law), with its head office located in 129 rue Servient 69003 Lyon, France;
- "Service": means collectively any online facilities, tools, services or information that DataGalaxy makes available through the Web Site either now or in the future;
- "System": means any online communications infrastructure that DataGalaxy makes available through the Web Site either now or in the future. This includes, but is not limited to, web-based email, message boards, live chat facilities and email links;
- "User" / "Users": means any third party that accesses the Web Site and is not employed by DataGalaxy and acting in the course of their employment; and
- "Website": means the website that you are currently using (academy.datagalaxy.com) and any sub-domains of this site (e.g. subdomain.yourschool.com) unless expressly excluded by their own terms and conditions.
Without limitation, any of the following Data may be collected:
- Name;
- Surname;
- Job title;
- Professional email address;
- Telephone number;
- IP address (automatically collected);
- Web browser type and version (automatically collected); and
- Cookie information (see our Cookie Policy).
Any personal Data you submit will be retained by DataGalaxy for as long as you use the Services and Systems provided on the Web Site. Data that you may submit through any communications System that we may provide may be retained for a longer period of up to one year.
Unless we are obliged or permitted by law to do so, and subject to Clause 4, your Data will not be disclosed to third parties. This includes our affiliates and / or other companies within our group.*
All personal Data is stored securely in accordance with the principles of the European General Regulation on the Protection of Personal Data of April 27, 2016.
Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:
- Transmission by email of DataGalaxy Academy logins;
- Internal record keeping;
- Improvement of our products / services.
DataGalaxy may, from time to time, employ the services of other parties for dealing with matters. The providers of such services do not have access to certain personal Data provided by Users of this Web Site. Any Data used by such parties is used only to the extent required by them to perform the services that DataGalaxy requests. Any use for other purposes is strictly prohibited. Furthermore, any Data that is processed by third parties must be processed within the terms of this Policy and in accordance with the European General Regulation on the Protection of Personal Data of April 27, 2016.
DataGalaxy may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Data provided by Users will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied by you.
In the event that any Data submitted by Users will be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your Data deleted or withheld from the new owner or controller
Wherever you are required to submit Data, you will be given options to restrict our use of that Data. This may include the following:
- Use of Data for direct marketing purposes; and
- Sharing Data with third parties.
In order to ensure the security of the Data you send us, we have put in place a number of appropriate technical and organizational measures. In particular, the security of your Data is ensured by:
- The implementation of access control and management of authorisations for business software.
- Pseudonymisation and encryption of Data, where possible.
- Contracts for the outsourcing of Data in accordance with Article 28 of the GDPR.
- The means to ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.
- The means of restoring the availability of and access to Data within an appropriate timeframe in the event of a physical or technical incident.
- A procedure to regularly test, analyze and evaluate the effectiveness of technical and organizational measures to ensure the security of processing.
In accordance with the GDPR, you have the following rights:
- Right to data portability : in accordance with Article 20 of the GDPR, the right to request a copy of your Data from us in a structured, commonly used and machine-readable format in order to provide them to another controller.
- Right of rectification : in accordance with Article 16 of the GDPR, the right to ask us to modify, complete or update your Data which has been found to be inaccurate, incomplete, equivocal or out of date.
- Right to erasure : in accordance with Article 17 of the GDPR, the right to ask us to permanently delete your Data, as soon as possible, in particular when you consider that it is no longer necessary for the purposes for which it was collected or that we are no longer legitimate to process it.
- Right to limit processing : the right to ask us to restrict the processing of all or part of your Data only in the cases listed in Article 18 of the GDPR, namely:
– Check the accuracy of the Data you are disputing; – Serve you for the establishment, exercise or defense of your legal rights, even if DataGalaxy no longer has any use for them;
– To verify whether the legitimate reasons pursued by DataGalaxy prevail over yours in case you object to the processing based on DataGalaxy legitimate interest;
– Fulfill your request to restrict the use of your Data, rather than erase them, if the processing of those Data is unlawful.
- Right of opposition : in accordance with Article 21 of the GDPR, the right to object at any time, on grounds relating to your situation, to the processing of Data for the purpose of commercial prospecting or, having as its legal basis the pursuit of a legitimate interest. Unless we demonstrate a compelling legitimate interest justifying such processing, we will only process Data not affected by your request.
- Post-mortem right : in accordance with article 85 of the French law 78-17 of January 6, 1978 on data processing, data files and individual liberties, the right to define particular directives concerning the conservation, deletion and communication of your post-mortem Data. These particular directives will only concern the processing carried out by DataGalaxy and will be limited to this perimeter.
To exercise your rights, we invite you to send us your request directly :
- By e-mail to dpo@datagalaxy.com, or
- By mail to DataGalaxy, Data Protection Officer, 47 rue Vivienne, 75002 Paris, France.
In accordance with the applicable legislation, we will ask you to prove your identity. Therefore, we thank you in advance for specifying when sending your request :
- Your name, first name, e-mail address
- The purpose of your request, the nature of the right you wish to exercise and the reasons for it.
DataGalaxy will have a maximum of one (1) month to respond to your request, which may be extended up to 2 (two) months depending on the complexity of the request. If we do not respond to your request, we will inform you of the reasons and of the possibility to lodge a complaint with a supervisory authority and to seek legal redress.
