Privacy Policy of Skillsbeam

This privacy policy explains how we collect, use and process personal data. It also indicates the measures we take to ensure the protection of this data and specifies how the users can contact us in relation to their rights with regard to their data collected.

1.  The Controller

The controller of your data for Skillsbeam is Ataya & Partners.

Ataya & Partners is a management consulting firm in the fields of IT and digital governance, cybersecurity and data protection, and is located at Avenue Louise 500, 1050 Brussels, registered with Banque Carrefour des Entreprises under the number 0719.976.659.

We are responsible for the processing of your data on the platform Skillsbeam in the context of our activity, namely:

1° Deliver a digital skills assessment service.

2° Create analytical reports based of the anonymous assessments results.

For any question related to the processing of your personal data, we invite you to contact our data protection officer:

• By e-mail to the address dpo@atayapartners.com.
• By post to the attention of the data protection officer of Ataya & Partners.

2.  What personal data do we process?

As part of this pilot project, we do not collect any of your personal data and the results of your assessments remain completely anonymous.

Collection and processing of your data

We are committed to comply with all applicable legislation on the protection of personal data and we will ensure that the data is collected and processed in accordance with the provisions of European law on the protection of personal data and any other applicable local legislation, if any.

2.  Lawfulness, fairness and transparency

Any processing of data that we operate is carried out in a lawful manner according the GDPR.

We also bring to your attention a policy related to the protection of your data, including the following information: who is the Controller, what are the purposes of the processing, who are the recipients of your data, what are your rights and how you can exercise them, except when it is impossible or requires disproportionate efforts.

3.  Legitimacy of the processing, limitation of the purpose and minimization of the collection of data

The data is collected for specific, explicit and legitimate purposes, and cannot be further processed in a manner incompatible with these purposes.

For this pilot project, Ataya & Partners does not process any personal data for the digital skills assessment service and the creation of statistical reports is based on the results of these anonymized assessments.

4.  Recipients of personal data and guarantee in the event of transfer to third countries

The anonymized results of the assessments in our possession are mainly processed by our company, who is subject to strict compliance with the rules of confidentiality, laws and regulations related to the protection of individuals with regard to the processing of their personal data.

Ataya & Partners ensures that its subcontractors guarantee the same level of protection as itself and requires a contractual guarantee that these subcontractors will process your data exclusively for the authorized purpose, with the required discretion and security.

Ataya & Partners does not transfer data to a country that is not a member of the European Economic Area, unless the recipient established outside this area provides appropriate guarantees to protect your data according to standards equivalent to those imposed by European law.

5.  Retention period of collected data

The GDPR requires that the data we collect must be destroyed after a fixed period. However, Ataya & Partners does not collect personal data, only the anonymous results of the assessments for statistical purposes in order to improve the Skillsbeam platform.

6.   Data security

We put in place the appropriate technical and organizational measures to protect the Data against any accidental or unlawful modification or loss or against any unauthorized use, disclosure or access, in accordance with the Group Policy on information security and systems.

These measures include, among other things:

• Raising staff awareness of compliance with their contractual confidentiality commitment;
• The servers are regularly updated.
• Firewalls, based on a multi-level model, blocking unauthorized traffic ;
• Access management ;
• Securing data transport: all data traffic via the Internet is encrypted according to the current standards available on the market.
• Security against viruses;
• Continuity of service is ensured via redundant backup resources.

Nevertheless, Ataya & Partners cannot be held responsible for the misuse of this data by a third party despite the security measures taken.

7.  COOKIES

Our website, https://skillsbeam.io/, uses cookies and equivalent technologies to distinguish your usage preferences from those of other users of our website. This allows us to offer you a better browsing experience during your visit and to optimize our website.

However, cookies and equivalent technologies do not allow us to systematically collect data that could identify users of our website. They help us improve processing, better respond to the interests of our users and measure the effectiveness of the content.

We are legally required to ask your permission for the use and storage of cookies and equivalent technologies on your computers or mobile devices. This section on cookies gives you complete information about the cookies we use and their purposes.

For more information about this Cookies Policy, you can contact us by email at dpo@atayapartners.com.

What is a COOKIE?

The notion of ‘COOKIE’

A cookie is a small text file in alphanumeric format that we save on the server or the hard drive of your computer. In this way, we can remember your preferences when using our website.

Unless you have adjusted your server settings to refuse cookies, our system will place cookies whenever you visit our Website.

TYPES DE COOKIES

Cookies can be distinguished according to their origin, their function and their lifespan.

There can be cookies placed by the owner of the website visited.

Third-party cookies are cookies that are placed by an organization other than the owner of the website you are visiting. We think of cookies that are created by a company specialized in the analysis of websites, which provide the owner of the website with data on the frequency of visitors to its site.

Functional cookies are cookies that ensure the proper functioning of the website (e.g. cookies for login or registration, language preferences). Functional cookies are, logically, cookies placed by the owner of the website visited.

Non-functional cookies are cookies that are placed for statistical, social, targeting and commercial purposes. They have nothing to do with the purely technical support of the website. Cookies for statistical purposes make it possible to control which pages of the Website you visit, where your computer is located, etc. Cookies for social purposes allow the user to directly share the content of the visited Website with others through social media. Cookies for targeting purposes make it possible to create a profile based on your browsing habits, so that the advertisements displayed correspond to your interests. Cookies for marketing purposes remember which advertisements have been shown to a user and how many times. Non-functional cookies can come from third-parties or the owner of the website.

Permanent cookies: These cookies remain on the user's device for the duration determined in the cookie and therefore after you have closed the server. They are activated each time the user visits the website that placed this cookie (e.g. cookies placed by social media such as Twitter, Facebook, Google Analytics etc.). Most non-functional cookies are permanent cookies.

Session cookies: These cookies allow us to simplify a user's actions and tie them together during a browsing session. A browser session starts when a user opens the browser window and ends when they close the browser screen. Session cookies are placed temporarily. As soon as you close the browser, all session cookies will be deleted. Most functional cookies are session cookies.

What cookies do we use on our website? 

Ataya & Partners, manager of this website, uses 3 types of cookies:

• Essential cookies
• Functional cookies
• Analytical cookies

List of analytical cookies

These cookies are necessary for you to be able to use our platform. You can always decline the cookies with the banner displayed on the main page of Skillsbeam, but this action will result in you not being able to take the assessments.

8.  Rights of individuals

Ataya & Partners is committed to facilitate the exercise of the rights of individuals in accordance with the applicable regulations.

Here is the list of individuals’ rights:

1. The right of access: allows anyone to ask Ataya & Partners if they have data about them.
2. The right of rectification : allows someone to ask Ataya & Partners to rectify any error in their data.
3. The right of erasure: the right to be forgotten allows personal data to be erased when:
   1. The personal data is no longer necessary for the purposes for which it was collected ;
   2. The person decides to withdraw their consent;
   3. The person objects to the processing of their personal data;
   4. Their personal data has been unlawfully processed;
   5. Their personal data must be erased to comply with a legal obligation;
   6. Their erasure is mandatory to ensure compliance with applicable legislation.
4. The right to restrict processing: people may request the restriction of processing when:
   1. They dispute the accuracy of their data;
   2. Ataya & Partners no longer needs their personal data for the purposes of the processing;
   3. They have objected to the processing for legitimate reasons.
5. The right to data portability: If applicable, people may request the portability of their personal data communicated to Ataya & Partners in a structured and commonly used format, and have the right to transfer this personal data to another controller without Ataya & Partners obstructing, when :
   1. The processing of their personal data is based on their consent or on an existing contractual relationship ; and
   2. The processing is carried out using automated methods;
   3. They also have the right to have their personal data transmitted directly to a third party of their choice (when it is technically possible).
6. The right to object : a person has the right to object (right of “opting-out”) to the processing of their personal data (including profiling or commercial communications). When we process your personal data on the basis of their consent, the person can withdraw their consent at any time.
7. Right in relation to automated decision making and profiling : a person has the right not to be the subject of a decision based exclusively on automated processing, including profiling, producing legal effects concerning them or significantly affecting them in a similar way.
8. The right to lodge a complaint : In the event that our response does not give you satisfaction and/or that you consider that we are breaching one of our legal and/or contractual obligations, you have the right to lodge a complaint with the Data Protection Authority (DPA) by e-mail to contact@apd-gba.be or by post to rue de la Presse 35, 1000 Brussels.

9.  Modification

We may occasionally update this policy if our activities or our legal obligations change in a substantial way. If we make any changes to this policy, we will post a notice on our website when those changes come into effect and, if necessary, we will contact you directly about these changes through our usual means of communication.
 

10.  How to contact us

If you have any questions regarding the use of your personal data covered by this policy, you can contact us by post addressed to the data protection officer of Ataya & Partners or by e-mail to the address dpo@atayapartners.com .