Arkhé pays particular attention to the protection of the personal data of its website visitors and professional contacts. This policy describes what data is collected, why, how long it is retained, who it is shared with and how to exercise your rights.
1. Data controller
The controller of the data collected on this website is:
- Company name: ARKHE INTERNATIONAL
- Registered office: 580 Cours de la Libération, 33400 Talence, France
- Email: contact@arkhe.com
- Phone: +33 5 56 37 29 38
- Contact for personal data matters: contact@arkhe.com
2. Data we collect
We only collect the data required for the purposes described below. No sensitive data within the meaning of the GDPR is requested. No automated profiling producing legal effects is carried out.
2.1 Feasibility form
This form allows you to describe your project and to obtain an initial feasibility assessment. The data submitted is:
- your identity and professional contact details: first name, last name, email address, phone number, organisation or company;
- the characteristics of your project: relevant segment, education or business, objective or level of the participants, number of participants, number of groups, planned number of hours, preferred schedule, need for support;
- the date and time your consent was collected;
- the calculated feasibility result and the nature of your request, demonstration or quotation.
Mandatory fields are indicated in the form. Until you validate the final step, your answers remain in your browser only and are not transmitted to Arkhé.
2.2 Contact form
The data submitted is: your name, your email address, your organisation, your role, your phone number, the subject of your request and the content of your message, as well as your browsing language.
In order to prevent automated submissions and abuse, we also record your IP address and the technical identifier of your browser when the form is sent.
2.3 Browsing data
Our hosting provider records in its technical logs the connection data required for the security and proper operation of the website, in particular the IP address, the date and time of the request and the pages viewed.
Data collected for audience measurement purposes is described in the cookie policy and is only collected after you have given your consent.
3. Purposes, legal bases and retention periods
Each processing operation relies on an identified legal basis and data is retained only for as long as necessary.
3.1 Responding to a request for a demonstration, a quotation or information
- Purpose: analysing your needs, sending you an answer, a demonstration or a commercial proposal.
- Legal basis: your consent, collected when the form is submitted, and the performance of pre contractual measures taken at your request.
- Retention period: three years from our last contact, in line with the recommendation of the French data protection authority regarding prospecting.
3.2 Managing the commercial relationship and following up on prospects
- Purpose: following up on exchanges, qualifying requests and, where applicable, sending you information about our educational solutions.
- Legal basis: the legitimate interest of Arkhé in developing its business with professionals, and your consent for electronic communications.
- Retention period: three years from our last contact. You may object to these communications at any time.
3.3 Contract management and accounting obligations
- Purpose: performing the services subscribed to, invoicing and complying with our legal obligations.
- Legal basis: performance of the contract and compliance with legal obligations.
- Retention period: the duration of the contractual relationship, then ten years for accounting records.
3.4 Website security and abuse prevention
- Purpose: detecting automated submissions, preventing intrusion attempts and ensuring the availability of the service.
- Legal basis: the legitimate interest of Arkhé in protecting its information system.
- Retention period: twelve months for technical logs and for IP addresses associated with a form submission.
3.5 Audience measurement and website improvement
- Purpose: understanding how the website is used in order to improve its content and usability.
- Legal basis: your consent, which you may withdraw at any time.
- Retention period: thirteen months for the trackers, twenty five months at most for aggregated statistics.
4. Recipients of the data
Your data is intended for the Arkhé teams in charge of client relations and commercial follow up. It is never sold or rented.
It may be shared with the following providers, acting as processors on our behalf and on our instructions:
- HubSpot, customer relationship management tool, recipient of the requests submitted through the feasibility form for commercial follow up purposes;
- o2switch, hosting of the website and of its database;
- Mailjet, delivery of notification and confirmation emails;
- Google, for the reCAPTCHA form protection service, for the delivery of the website fonts and, subject to your consent, for audience measurement.
Your data may also be disclosed to administrative or judicial authorities where we are legally required to do so.
5. Transfers outside the European Union
Some of our providers, in particular HubSpot and Google, may process data from the United States. These transfers are covered by the safeguards provided for by the GDPR, namely the standard contractual clauses of the European Commission and, where applicable, the certification of these providers under the EU, United States data protection framework.
You may obtain a copy of the safeguards in place by writing to the contact address given in section 1.
6. Data security
We implement appropriate technical and organisational measures to preserve the confidentiality and integrity of your data: encryption of exchanges through the HTTPS protocol, access control to the website administration, access logging, regular backups and restriction of permissions to those who need them.
In the event of a data breach likely to result in a high risk to your rights and freedoms, we will inform you under the conditions provided for by the GDPR.
7. Your rights
In accordance with the General Data Protection Regulation and the French Data Protection Act, you have the following rights over your data:
- right of access: obtain confirmation that your data is processed and receive a copy of it;
- right to rectification: have inaccurate or incomplete data corrected;
- right to erasure: request the deletion of your data where the conditions are met;
- right to restriction: request the temporary suspension of the use of your data;
- right to object: object to processing based on our legitimate interest, as well as to commercial prospecting, at any time and without justification;
- right to portability: receive the data you provided to us in a structured, machine readable format;
- right to withdraw your consent at any time, without affecting the lawfulness of processing already carried out;
- right to give instructions regarding the fate of your data after your death.
To exercise these rights, write to the contact address given in section 1, specifying your request. We may ask for proof of identity in the event of reasonable doubt as to the identity of the requester. We reply within one month of receiving the request, a period that may be extended by two months for complex requests.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr.
8. Cookies and trackers
Details of the cookies placed during your visit, their purpose, their retention period and how to change your choices are set out in the cookie policy.
9. Simulation platform
The platform on which the simulations run is a service separate from this website. The data you enter there, in particular facilitator and participant accounts, is governed by its own terms and privacy policy, available from that platform.
10. Data relating to minors
This website is aimed at professional contacts: programme managers, teachers, trainers and company representatives. We do not knowingly collect data relating to minors through the website forms. If you notice that such data has been sent to us, please let us know so that we can delete it.
11. Changes to this policy
This policy may be amended to reflect legal, technical or functional developments. The effective date of the applicable version is indicated at the bottom of this page. In the event of a substantial change, we will provide visible information on the website.
12. Contact us
For any question relating to this policy or to the processing of your data, write to contact@arkhe.com or send a letter to the registered office indicated in section 1.