Privacy Policy

Skilleo is the trusted player that gives everyone the keys to a responsible digital world. Through this reason, Skilleo is committed to making the protection and responsible use of your personal data (hereinafter referred to as personal data) a priority in compliance with regulations.

The present policy for the protection of your personal data (hereinafter the “Policy”) informs you about the way in which Skilleo, its subcontractors and its partners process your personal data.

This Policy applies to customers and users of Skilleo’s offers and services and to visitors to the website. It may be supplemented by specific information brought directly and explicitly to your attention, concerning an offer, a component of your offer or a particular service.

Skilleo acts as data controller within the meaning of Article 4 of the RGPD (Article 3 of Law No. 78-17 of January 6 relating to data processing, files and freedoms) :
Skilleo determines the means and purposes of data processing necessary for the implementation of Skilleo’s solutions. The operations carried out on data by Skilleo are necessary for its own activity. The criteria mentioned in the subcontractor’s guide issued in September 2017 by the CNIL confirm Skilleo’s status as data controller.

1. What data is processed?

Skilleo processes personal data about you as part of its relationship with you and your use of its offers and services. Skilleo only processes data that is relevant and necessary for the purpose for which it is intended. 

  • The personal data collected by Skilleo is grouped into the following two categories: 
  • Les données collectées indirectement auprès de tiers
Identification data Identity (surname, first name, nickname)
Biometric data

Some of the data processed by Skilleo is collected indirectly:

  • Through cookies and trackers deposited or read on your terminal
  • Through sources coming from partners on the basis of our legitimate interest or legal obligations: data suppliers, fraud prevention organizations, organizations managing unpaid bills, etc.
  • Through sources provided by partners on the basis of your consent
  • Through open access sources

2. Why does Skilleo process your data?

Your data is processed by Skilleo for specific, explicit and legitimate purposes. 

You will find below, for each legal basis, the purposes for which Skilleo processes your data:

2.1. Consent

Skilleo collects your consent to process certain personal data. You may withdraw your consent at any time.

Purpose of processing Description Applicable legal basis
Improving service quality

Improve the quality of our services

Improve customer satisfaction

Optimize service quality

Send a skills report to recruiters
Customer service production
Analyze voice and sessions to produce a soft skills report
Customer service production
Surveys and statistical processing of site visitors
Optimizing site quality

2.2. Legal obligation

Purpose of processing Description Applicable legal basis
Respond to requests from third parties authorized by regulations
Legal obligations
Responding to official requests and court orders
Legal obligations
Manage requests to exercise the rights of data subjects
Receipt of complaints, claims and/or requests to exercise rights
Legal obligations

3. How long is your data stored?

Your Personal Data is kept for the following periods:

  • Data is kept for analysis purposes for 48 hours.
  • Data is kept in an active database for up to 2 years: This is the period required to achieve the objective (purpose of processing) that justified the collection/recording of the data. For example, in a company, the data of an unsuccessful candidate will be kept for a maximum of 2 years (unless he/she requests deletion) by the human resources department. In practice, the data will then be easily accessible in the immediate working environment for the operational departments in charge of this processing (e.g. the human resources department for recruitment operations).
  • Data is stored in an intermediate archive for up to 10 years: Personal data is no longer used to achieve its intended purpose (“closed files”), but is still of administrative interest to the organization (e.g. management of any litigation, etc.), or must be retained to meet a legal obligation (e.g. invoicing data must be kept for ten years under the French Commercial Code, even if the data subject is no longer a customer). In such cases, data may be consulted on an ad hoc basis by specifically authorized persons;

4. Who is affected by this data processing?

The persons concerned by the processing carried out by Skilleo within the framework of this Policy are :

  • Candidates for their Skilleo soft skills assessment
  • Website visitors
  • Our customers

5. Who will receive your data?

The data processed is intended for Skilleo’s internal departments: only authorized employees who require access to your data in the course of their duties may do so.

Processed data may be transmitted to the competent authorities, at their request, in the context of legal proceedings, judicial investigations, requests for information from the authorities or in order to comply with other legal obligations. It may also be transmitted to third parties authorized by a court decision.

6. Is your data processed outside the EU?

It is not. 

7. How secure is your data? ?

Skilleo attaches particular importance to the security of your personal data.

Skilleo has implemented appropriate and stringent security measures to prevent your data from being accidentally lost, used or accessed without authorization, modified or disclosed. In addition, Skilleo limits access to your data to those employees who need access in order to perform their duties. They are subject to an obligation of confidentiality.

Skilleo requires its co-contractors to respect the security of its customers’ Personal Data and to process it in accordance with applicable data protection laws.

Skilleo has implemented appropriate technical and organizational measures to prevent the loss, misuse, alteration and deletion of your personal data. These measures are adapted according to the level of sensitivity of the data processed and the level of risk.

Skilleo has implemented procedures to detect, analyze and address any suspected breach of your personal data, and notifies you and any relevant supervisory authority of a breach when Skilleo is legally or contractually obliged to do so.

8. What are your rights?

You have various rights related to the processing of your personal data :

8.1. Access rights

You have the right to obtain the personal data that Skilleo holds about you, and to be informed of the processing of your personal data by Skilleo.

8.2. Rectification rights

if your personal data is incomplete, inaccurate or out of date, you have the right to rectify it.

8.3. Opposition rights

This right applies where the processing is based on Skilleo’s legitimate interests and where your rights and freedoms take precedence over the latter. When your personal data is processed for marketing purposes, you may object at any time to your personal data being processed in this way.

8.4. Deletion rights

You may ask Skilleo to delete your personal data. However, you may only exercise this right if your personal data is necessary for the provision of your services, or if it is necessary for Skilleo to comply with its legal obligations or exercise its rights.

8.5. Right to limit one or more processing operations

This right enables you, in the event of doubt as to the legality of any of our processing operations or in order to establish, exercise or defend your rights before the courts, to ask Skilleo to temporarily stop processing all or part of your personal data without deleting it.

9. How to exercise your rights

You can exercise your rights at any time, and contact us at:

Any request to exercise your rights must be accompanied by proof of your identity. Identification may be requested if there is reasonable doubt as to your identity. You will receive an acknowledgement of receipt once your request has been sent.

A reply will be sent to you within one month of receipt of your request. If your request is complex, this period may be extended. In this case, you will be notified.

Possibility of referring the matter to the CNIL

If you are not satisfied with your dealings with Skilleo, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority responsible for ensuring compliance with personal data protection obligations in France.