Privacy Policy

Version dated 20/08/2024

Preamble
The General Data Protection Regulation (GDPR) came into force on 25 May 2018 and supplements existing legislation on the protection of personal data. Personal data means any information relating to an identified natural person or a person who can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to that person (surname, first name, address, email address, telephone number, contract number, bank card number, etc.). Processing of personal data means any operation carried out on such data (collection, storage, transmission, deletion, etc.), whether on paper or electronically. The data controller is the person who determines the purposes of each processing operation and the means used to achieve those purposes.

At Arkeale, protecting your data is a priority. Therefore, in the interests of transparency, this Privacy Policy is intended, in particular, to explain why your personal data is collected and processed by Arkeale, in its capacity as data controller, how it is processed, what rights you have in relation to your data and how you can exercise those rights. Arkeale reserves the right to amend this Privacy Policy at any time. Any amendment will take effect immediately.

1. Why does Arkeale need to collect your data?

The data collected by Arkeale is hosted in France using secure protocols. The legal basis for such processing is your contractual relationship with Arkeale and/or Arkeale’s legal or regulatory obligations, or your consent in the case of direct marketing activities. You may withdraw your consent at any time by emailing us at: info@arkeale.fr.

As a general rule, Arkeale does not process any of your data for purposes incompatible with those for which it was collected, unless you have given your prior consent.

Data Controller

SAS Arkeale
4 rue Boussingault – 67000 Strasbourg
Tel. +33 3 92 25 04 89
Email: info@arkeale.fr

The legal representative is Mr Clément Carrato, President of Arkeale.

2. What data does Arkeale collect?

Arkeale, in its capacity as data controller within the meaning of the GDPR, limits the collection of personal data to data that is adequate, relevant and strictly necessary for the performance of its training activities.

With regard to individuals outside Arkeale, the data collected consists of the personal data required for direct marketing activities relating to Arkeale’s training offering, namely:

– surnames and first names
– personal contact details
– job titles
– email addresses
– telephone numbers

of any person who has expressed an interest in and consented to receiving informational content from Arkeale.

Data sharing

Your personal data is only shared with our partners for the purpose of ensuring the proper performance of Arkeale’s activities, in particular:

– with staff and teachers in order to ensure the proper delivery of training courses and performance of the contract;
– with service providers involved in our digital or event-related communications, under subcontracting agreements and therefore subject to their own commitments to comply with personal data protection regulations;
– with organisations, legal professionals and ministerial officers acting as part of debt collection procedures.

How long is your data retained?

Your data is retained by Arkeale for the period necessary to fulfil the purposes referred to in Section 1 above, plus the applicable statutory limitation periods.

With regard to data necessary for the performance of contractual relations with Arkeale or compliance with a legal obligation, such data is retained for the duration of the contractual relationship. Following performance of the contract, Arkeale may be required to archive certain data in order to comply with accounting or tax obligations or for evidentiary purposes in the event of a dispute or claim, within the limits of the applicable statutory limitation period.

Data collected on the basis of your consent

Data used for direct marketing purposes may also be retained until the data subject withdraws their consent or, failing this, for a period of three years from the last contact between the Client/prospect and the company. For example, if you are a customer, this period begins from the date of registration; if you are a prospect, it begins from the date on which you click a hyperlink contained in an email, request documentation, etc.

At the end of this three-year period, Arkeale will contact you to determine whether you wish to continue receiving marketing communications.

Data collected on the basis of Arkeale’s legitimate interests, namely:

– Managing requests received through this website: the data collected will be retained for the time required to process the request.
– Preparing financial and turnover statistics concerning our suppliers, partners and service providers.
– Maintaining documentation concerning our suppliers, partners and service providers.

For further information regarding data retention periods, you may contact Arkeale’s DPO at: info@arkeale.fr.

What are your rights and how can you exercise them?

– You have the right to request access to your personal data and the rectification of inaccurate data.
– You may request the deletion of your data and restriction of its processing, in accordance with applicable legislation.
– You have the right to the portability of personal data that you have provided to Arkeale, subject to the conditions laid down by applicable legislation. This right only applies to data that you have actively and knowingly provided to Arkeale (for example, data entered in an online form) or data generated through the use of a service or device in connection with the conclusion or management of your contract, and which is processed by automated means on the basis of consent or performance of a contract.
– You may object to your data being used by Arkeale for a specific purpose.
– In such cases, you must provide reasons relating to your particular situation, except in the case of direct marketing, to which you may object at any time and without giving any reason. Where the processing of your personal data is based on your consent (for example, the sending of electronic marketing communications), you may withdraw your consent at any time. Similarly, you may withdraw your consent to cookies in accordance with the procedures set out in the Cookies Policy.
– Right to provide post-mortem instructions: you may define instructions concerning the retention, deletion and disclosure of your data after your death.

Exercising your rights

To exercise any of these rights, you may send your request by email to: info@arkeale.fr.

Any request must specify its purpose (exercise of the right of access, right to object, etc.). In addition, where there is doubt as to the identity of the person making the request, you may be asked to provide proof of identity.

3. How does Arkeale secure the processing of your data?

Arkeale implements all appropriate technical, physical and organisational measures to ensure the security and confidentiality of your data during its collection, processing and transfer.

Arkeale’s infrastructure is protected against malicious software (viruses, spyware, etc.); however, the security of your own device remains your responsibility.

Where we use service providers to process part of your data, we undertake to verify that they provide sufficient guarantees to protect the personal data entrusted to them and to require them to sign the necessary confidentiality clauses.

Social Media

Arkeale is present on social media through Instagram and Facebook accounts. Access to these social networks requires you to first accept their contractual terms and conditions, including their commitments regarding GDPR compliance for the processing operations they carry out, independently of our page on the relevant social network.