CERTIDEV

Personal Data Protection Policy

Who are we?

The following information is communicated to you so that you can take note of the commitments regarding the protection of personal data of CERTIDEV, an association law 1901 registered under number 815 313 184, located at 22, rue d'Anjou 75008 Paris, France which acts as data controller, or subcontractor, for the processing of personal data mentioned in this document.

The processing of personal data carried out

Treatments

Purposes

Responsibilities

Treatment n°1

Processing relating to the conditions of authorisation of the Organisation by CERTIDEV (including the administration of the Certibloc platform)

CERTIDEV is the data controller.

The Organizations Act as a data processor.

Treatment n°2

Processing relating to the performance of training and/or evaluation with a view to issuing a CQP or a TFP (registration and follow-up of candidates, including the entry of data from the candidates' bodies into Certibloc)

The funding agencies are responsible for processing.

Training and assessment organizations are Tier 1 subcontractors.

CERTIDEV, as the supplier of the Certibloc technical solution, is a level 2 subcontractor.

Treatment n°3

Treatment relating to the follow-up of candidates in order to monitor the rate of integration into the profession once certification has been obtained

CERTIDEV is the data controller.

CERTIDEV's technical service provider, AKTO, is a subcontractor.

Training and assessment bodies, which collect

Some informations, are subcontractors.

France Skills east the recipient of the data.

The personal data we process

In the context of the processing of personal data, CERTIDEV collects and processes the following categories of data:

For the organization:

Identity of the organization

Address of the organization

Referrer Information

Navigation

Company name Commercial sign SIRET N°

Declaration of Activity Number (NON) Website Address

Address Postal Code City

Title Surname/First name Job title Telephone Email address

Connection Logs Statistics

For the candidate:

Identity of the candidate

Applicant's contact information

Application Information

Professional data

Data relating to the

formation

Title Last Name First name Date of birth

Municipality of birth

Email Telephone Address Postal Code City

Name of the certification Financing Scheme

Certifications Earned/Validated Blocks of Competency

Start and end date of the internship Company name

Type of contract

Location of the training Duration of the training

And data relating to the follow-up of the candidate:

  • General Information
  • Date of the decision to award the certification
  • Year of Certification
  • Holder's first and last name
  • Name of the organisation that provided the training (except independent candidates and recognition of prior learning)
  • Origin of the holders when they enter the certifying or certifying course
  • Original Qualification (Last Certification Obtained): Level of Qualification
  • Original Qualification (Last Certification Obtained): Title of Certification
  • Last job
  • Duration of experience in years
  • Company name if active occupied
  • Gross annual remuneration
  • Situation before the certifying course or with a certifying vocation
  • Access route (initial training outside of altenance, continuing education outside work-study programs, apprenticeship contracts, professionalization contracts, recognition of prior learning, independent candidates)
  • Employment within 6 months of the award of the professional certification or the professional certification project
  • Situation after certification (employed outside work-study programs, looking for work, in training including work-study programs, inactive)
  • Title of job held or self-employed
  • Type of contract or status
  • Company Name
  • Executive status (yes/no)
  • Gross annual remuneration
  • Survey date at 6 months
  • Medium- and long-term employment (optional)
  • Situation after certification (employed outside work-study programs, looking for work, in training including work-study programs, inactive)
  • Title of job held or self-employed
  • Type of contract or status
  • Company Name
  • Executive status (yes / no)
  • Gross annual remuneration
  • Number of years after certification
  • Date of Investigation

For the professional expert:

Identity of the Professional Expert

Coordinates from the professional expert

Information on work experience

Professional data

Data Valuation

Title Last Name First name Date of birth

Municipality of birth

Email Telephone Address Postal Code City

Status Diplomas Number of years of experience Training organisation

Siret

Registered office address

Postal Code City Telephone Email

Contact details of the person in charge

Number of candidates examined per year Assessment system
The purposes and legal bases of our data processing
The purposes of our processing

The processing we carry out is to ensure the following purposes:

Treatment n°1:

  • Account Creation Requests for Organizations
  • Management of access and operation of the service (Certibloc)
  • Management and follow-up of the relationship with the Organization
  • Monitoring the quality of the training provided
  • Administration of applications
  • Enforcement of decisions
  • Issuance of authorisations and certificates
  • Reporting and securing access to the platform (Certibloc)

Treatment n°2:

  • Training and evaluation of candidates for a CQP or TFP
  • Management and follow-up of training and evaluations
  • Follow-up of the candidate after the decision of the National Joint Certification Committee

Treatment n°3:

  • Follow-up of candidates after obtaining a certification
  • Statistical analysis of the integration rate after obtaining a certification
The legal basis for our processing

We only carry out data processing if at least one of the following conditions is met:

  • your consent to the processing operations has been obtained;
  • the existence of our legitimate interest, or that of a third party, which justifies us carrying out the processing of personal data concerned;
  • the performance of a contract between us and you requires us to carry out the processing of the personal data concerned;
  • We are bound by legal and regulatory obligations that require the implementation of the relevant processing of personal data.
Recipients of your data

The personal data that we collect, as well as that collected subsequently, is intended for us in our capacity as a data controller.

This data is mainly intended for:

  • services and authorised personnel of the data controller;
  • any subcontractors of CERTIDEV who may be required to intervene in the context of verified opinion operations;
  • to the CPNEFP, but in an anonymised format;
  • to France Compétences as part of the monitoring of professional certifications

These companies are authorized to use users' personal information only to provide these services to us. CERTIDEV will only share personal information with third parties in the ways described herein. CERTIDEV does not sell personal information to third parties.

Finally, some personal data may be sent to third parties or legally authorised authorities in order to comply with our legal, regulatory or contractual obligations.

We ensure that only authorised persons have access to this data. Our service providers may receive this data in order to perform the services we entrust to them.

How long we keep your data

The retention periods we apply to your personal data are proportionate to the purposes for which it was collected. As a result, we organize our data retention policy for the strict duration necessary for the processing, in accordance with our retention period policy.

In any case, the duration of the treatment corresponds to the duration of the training and/or assessment services.

As part of the follow-up of candidates and the transmission of data to France Compétences, the maximum follow-up is two years, the data are deleted at the end of this period.

Your rights
Your right to information

You acknowledge that this policy informs you of the purposes, legal basis, interests, recipients or categories of recipients with whom your personal data is shared.

You also have the possibility to directly manage the deletion and portability of your personal data through a module made available directly in your personal account.

In addition to this information and in order to ensure fair and transparent processing of your data, you declare that you have received additional information concerning:

  • how long we keep your personal data;
  • the existence of the rights that are recognized for your benefit and the modalities of their exercise.

If we decide to process data for purposes other than those indicated, you will be provided with all information relating to these new purposes.

Your right to access and rectify your data

You have the right to access and rectify your personal data, which you can exercise by contacting Certidev at the following address: 22 rue d'Anjou - 75008 Paris - Tel: 01 40 17 20 06 - e-mail: [email protected]

As such, you have confirmation as to whether or not your personal data is being processed and when it is processed, and have access to your data as well as information concerning:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • recipients or categories of recipients;
  • where possible, the envisaged period for which the personal data will be stored or, where this is not possible, the criteria used to determine that period;
  • the existence of the right to request the rectification or erasure of your personal data from the controller, the right to request a restriction of the processing of your personal data, the right to the portability of your data, the right to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • information about the source of the data when it is not collected directly from the data subjects;
  • the existence of automated decision-making, including profiling, and in the latter case, meaningful information about the underlying logic, as well as the significance and intended consequences of such processing for data subjects.

You can ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or outdated.

Your right to erasure of your data

You can ask us to erase your personal data where one of the following grounds applies:

  • the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  • withdraw the consent previously given;
  • you object to the processing of your personal data where there is no legal ground for such processing;
  • the processing of personal data does not comply with the provisions of applicable laws and regulations;
  • Your personal data has been collected in the context of offering information society services to children under the age of 16.

However, the exercise of this right will not be possible when the retention of your personal data is necessary with regard to the law or regulations and in particular, for example, for the establishment, exercise or defence of legal claims.

Your right to restrict data processing

You may request the restriction of the processing of your personal data in the cases provided for by law and regulation.

Your right to object to data processing

You have the right to object to the processing of personal data concerning you where the processing is based on the legitimate interest of the controller.

Your right to data portability

You will have the right to the portability of your personal data. The data on which this right may be exercised are:

  • only your personal data, which excludes anonymised personal data or data that does not concern you;
  • the declarative personal data as well as the personal operating data mentioned above;
  • personal data that does not infringe the rights and freedoms of third parties, such as those protected by trade secrets.

This right is limited to processing based on consent or contract as well as personal data that you have personally generated.

This right does not include derived data or inferred data, which is personal data created by CERTIDEV.

Your Right to Withdraw Your Consent

Where the data processing we carry out is based on your consent, you can withdraw it at any time. We will then cease to process your personal data without any further revocation of the previous operations for which you consented.

Your right to lodge a complaint

You have the right to lodge a complaint with the CNIL on French territory, without prejudice to any other administrative or judicial remedy.

Your right to set post-mortem guidelines

You have the option of defining guidelines relating to the retention, deletion and communication of your personal data after your death with a trusted, certified third party responsible for enforcing the wishes of the deceased in accordance with the requirements of the applicable legal framework.

How to exercise your rights

All the rights listed above can be exercised at the following address: Certidev – Service informatique – 22, rue d'Anjou – 75008 PARIS or by mail accompanied by a copy of an identity document by contacting Service informatique, at the following address [email protected].

However, with respect to the exercise of the right to information, we may not be obliged to comply with it if:

  • You already have this information.
  • the storage or disclosure of your personal data is expressly provided for by law;
  • the communication of information is not possible;
  • Providing information would require disproportionate effort.
Security

The security of personal data is important to CERTIDEV.

In accordance with legal obligations, CERTIDEV keeps this information under enhanced security conditions and for limited periods of time, proportionate to the purposes for which you have communicated it to us.

CERTIDEV follows generally accepted standards to protect the personal data submitted to it, both during transmission and once CERTIDEV receives it.

Updates to this Privacy Policy

This policy may be modified or adjusted at any time by CERTIDEV. You are invited to consult it regularly.

Last modified: 21/03/2023.