LMS Platform – Privacy policy (GDPR)

Identification

Ahead Technology protects the personal data of their users, and more generally that of anyone whose personal data they may process and any person who accesses the LMS platform.

The purpose of this Personal Data Protection Policy is to provide important information to the concerned individuals regarding how Ahead Technology processes their personal data, and the means by which they can exercise their rights.
It also aims to fulfil the requirements of the new regulation on the protection of personal data (Regulation 2016/679) which came into force on 25 May 2018.

The data controller who manages personal data is the Ahead Technology (503 616 567 RCS Angers) headquartered at 1, Impasse du Prieuré - Ambillou Château, 49700 Tuffalun. Tel: +33 (0) 185 500 210

1. The legal basis for processing

Ahead Technology processes personal data on the occasion of the creation of a personal account by the Trainee sent by the Training Center, Ahead Technology's principal, in order for him/her to have access to the Courses and the online training materials.
The access or not to the LMS platform being purely a choice of the trainee and not being imposed by the principal, the legal basis of the processing is the consent of the trainee.

2. What categories of personal data are processed?

Personal data is considered any information relating to person who is identified or can be identified, directly or indirectly.
Their data collection is necessary in order to provide trainees with access to online courses and training materials.
Ahead Technology processes personal data relating to the identification of the Trainee such as: Name, First Name, Email Address, User Name, Password, City (not required) and Country (not required).

3. Information on the use of cookies

The LMS platform uses cookies, i.e. "a small computer file, a tracer that makes it possible to analyze the behavior of users when they visit a website, read an email, install or use a software or a mobile application" (service-public.fr definition).

3.1 What types of cookies are issued on our website?
The LMS platform uses different types of cookies:

a) Statistic cookies
To optimize our platform, detect any technical problems you may encounter, measure the audience and analyze the use of the platform.
Sharing cookies: to allow users to share content to social networks.

b) Mandatory cookies
To record the session data allowing the passage from one page to another without loss of information and to record the consent to the use of cookies by the platform.
These cookies are essential for the proper functioning and display of the platform.

c) Third-party cookies
Some of the platform's features (video playback, statistical tracking) rely on services offered by third-party sites.
These features deposit cookies allowing these sites to track your browsing.
These cookies are deposited on your terminal only with your consent.

You can accept or refuse them:

• or for all services ;
• either service by service.

3.2 What is the purpose of the cookies issued on our platform?

The cookies we issue from our website are used for the following purposes:

• To follow the frequentation and the use of the various services of our platform;
• Adapting the platform’s content based on your previous browsing;
• Adapting the presentation of our platform to your terminal’s display preferences (language, display resolution, which operating system is used, etc.) during previous visits.

3.3 Statistic cookies

- [Owner name: Google] – _ga
Used by Google Analytics to assign a single cookie and define the notion of a user.
This cookie records a unique identifier used to generate statistical data on how a user uses the site.
Cookie data is stored for a 13-month period.

- [Owner name: Google] – _gid
Used by Google Analytics to store and update a unique value for each visited page.
This cookie makes it possible to generate statistical data on how a user uses the site.
Cookie data is stored for a 13-month period.

- [Owner name: Google] – _gat
Used by Google Analytics to drastically reduce user request rates.
Used by Google Analytics to reduce data collection.
Cookie data is kept for a 13-month period.

3.4 Mandatory cookies

[Owner name: Moodle] – MoodleSession
Cookie used to identify an ongoing user session and allow interaction with the platform.
This cookie is sent to identify a session upon each user request.
Data is kept on the user’s computer for as long as the session lasts.

[Owner name: Ahead Technology] – EU_COOKIE_LAW_CONSENT
Memorizes the consent given to the use of cookies on this platform.
This cookie is used to respect visitors’ wishes regarding the use of cookies.
It remains installed on the user’s computer for a period of 6 months.

3.5 Third-party cookies

[Owner name: CloudFlare] - __cfduid.
Cookie placed by CloudFlare.
This cookie is used to identify individual clients behind shared IP addresses and apply security settings on a per-client basis.
It does not correspond to a user ID in the web application, nor does it store any personally identifiable data.

During your first visit to https://www.mylearning-system.com, you are informed of the presence of “cookies” by a banner that invites you to select your choices.

Cookies are only placed if you have accepted them or if they are mandatory for the platform to function.

Ahead Technology undertakes to implement all technical and organizational measures necessary to ensure a security level appropriate to the risk.

4. To whom the personal data may be transmitted?

Collected data is transmitted only to the following recipients:

Members and staff of the company Ahead Technology:
Personal data are transmitted to them for the purposes mentioned above.

Training providers:
Personal data may be transmitted to them for the purposes mentioned above.

Technical and IT service providers for the company Ahead Technology:
Ahead Technology’s computer network, website and archives are managed and hosted by service providers, in particular IT service providers, and personal data can be processed and stored by such service providers.
In any event, Ahead Technology undertakes not to transfer personal data to third parties whose activity or purpose is to acquire new prospects with the objective of sending commercial prospecting.
Ahead Technology may, however, be required to transmit personal data in order to satisfy a legal obligation at the request of an administrative or legal authority, or to exercise their lawful interest such as defending their rights.

5. How long is the personal data kept?

Your personal data is stored for the amount of time required to achieve the purpose for which it was collected, and for the minimum storage period required by law.
Your personal data is kept and used for the duration of the training, plus two years.
If the account remains inactive during this two-year period, the data is deleted.
Personal data can be archived beyond the above-stated storage periods in order to satisfy a legal storage obligation, or to exercise a right in court.

6. Security

Ahead Technology takes all necessary measures to guarantee the safety of collected data and prevent it from being lost, destroyed, altered or disclosed to unauthorized third parties.
Ahead Technology takes great care to ensure the safety of your personal data and prevent it from being distorted, damaged or accessed by unauthorized third parties.
This is primarily ensured by the physical protection of the premises and the implementation of authentication procedures with personal and secure access by means of personal logins and confidential passwords.

7. What are your rights regarding the processing of your personal data?

You have several rights when it comes to the processing of your personal data and, should you believe your rights are not being respected, you can submit a claim to the CNIL.
For more information about your rights, we invite you to read the sections below and consult the cnil.fr website.

Depending on the type of processing, your rights are the following:

• Right to correct and delete,
• Right to withdraw your consent,
• Right to access your personal data,
• Right to restrict processing,
• Right to data portability.

On the forms, data marked by an asterisk is mandatorily and it should be provided as it is necessary for processing the request.
Failure to provide all mandatory information can prevent Ahead Technology from processing a request or cause delays.

8. How to exercise your rights regarding your personal data?

In general, to exercise your rights for an issue or difficulty relating to the processing of your personal data or rights, you can contact Ahead Technology:

By post: Ahead Technology, 1, Impasse du Prieuré - Ambillou Château, 49700 Tuffalun
By e-mail:

You can:

• Correct, erase or access your personal data processed by Ahead Technology,
• Restrict the processing of personal data stored by Ahead Technology,
• Withdraw your consent for data processing at any time,

by sending your request:
By post: Ahead Technology, 1, Impasse du Prieuré - Ambillou Château, 49700 Tuffalun
By e-mail:

Your request must include a copy of a signed identity card.