Privacy Policy

Hexagone is a SAS company under French law, with its registered office located at 4 rue de la Gare, 14000 Caen FRANCE ("Inject", "Schoolab", or "we").

When you use our services, you trust us with the processing of your information.

We are aware that it is a heavy responsibility, which is why we strive to protect them, while allowing you to keep control.

The following privacy rules are intended to indicate which information we collect and why, as well as how to update, manage, export and delete it.

Through our websites, digital platforms, various documents and our exchanges by email, mail or telephone, "Schoolab" may collect personal data.

"Schoolab" builds its software and service offer in compliance with the GDPR regulations on data protection. Your personal information allows us to process your requests, provide our support, training and consulting services, and improve the quality of our services. They also serve to better know you in order to offer you personalized content and services tailored to your needs.

Your personal data is only intended for processing your request by "Schoolab" and is not disclosed to external companies.

In accordance with the modified Data Protection Act of January 6, 1978, and European Regulation n°2016/679/EU of April 27, 2016, the user has a right of access, rectification, opposition, limitation and deletion of data. These rights can be exercised upon simple request, accompanied by proof of identity, addressed by mail to: dpo@theschoolab.com.

‍

How "Schoolab" collects your personal data

The Schoolab websites or digital platforms facilitate the management of innovation programs. We regularly receive personal data as part of our services. Among the personal data we collect and process may be:

Personal data that you communicate to us, including:

• Registration. We collect the mandatory information necessary to create your user account and to register you for the services we provide on our websites, namely your title, first name, last name, email address and password. Non-mandatory fields are not marked with an asterisk (*) in our interfaces.

• Profile. Various information is included in your profile, some of which are optional, such as the option to include or not include your photo, the country where you reside, information about your education, and your professional skills. You are not required to provide other information in your profile; however, the information contained therein allows you to better take advantage of our services, for example, to be identified by our teams so that you can participate in a program. If applicable, your profile will also display your membership in one or more team(s).

• Messages, publications and downloads. We collect personal data from you when you communicate, publish or download them on our website, including when you register to participate in a program, when you download resources (such as documents, deliverables) submitted as part of your participation in a program or collected on the public areas of our websites.

• Technical information. Dates and times of connection to our services. We also keep a record of any correspondence exchanged between you and us, including the information you send us when you report a problem with our websites or services.

• Any other information about you that you may communicate to us.

The complete list of personal data collected and processed by our websites and services is available in our technical documentation (in French).

‍

Information we automatically collect from a third-party source, including:

Authentication information via your company's calendar. If you register on our website using SSO authentication (SAML 2.0, Azure AD Provisioning, OpenID...), we will access certain personal data (such as your first name, last name or email address) from your profile in your company's calendar, in accordance with the general terms and conditions of use of these platforms.

Authentication information via social networks. If you register on our website using authentication via social networks (such as LinkedIn, Google, etc.), we will access certain personal data (such as your first name, last name or email address) from your social network profile, in accordance with the general terms and conditions of use of these platforms.

Technical information. When you visit our website, we collect information about the devices you use and the networks you are connected to. Among this technical information is your IP address, your login information, the bandwidth you are using, the time of your visit, the type and version of your browser, the types and versions of your browser add-ons, your operating system, information about your visit, including the click stream showing URLs, download/loading errors, pages you visited, interactions between pages, as well as other connection data contained in our logs. This information collected is anonymized and processed with third-party technologies Inspectlet and Google Analytics provided you validate the collection via our consent management system Axeptio.

‍

Duration for which Schoolab retains your personal data.

We keep your personal data as long as you have an active account with us for 36 months. If you close your account, your personal data will be immediately deleted.

Information you have communicated to other people (for example, through messages, discussions or on walls/in discussion forums) will remain visible after you have closed your account, but will be anonymized. Your profile may continue to be displayed as part of other people's services (for example, search engine results) until the user refreshes their cache memory.

If your account is suspended or blocked, we will keep your data for a period of between 2 and 5 years to prevent you from violating the general terms and conditions of use of our website.

We may also keep your personal data for an additional period of time if necessary to enforce legal rights or to defend ourselves against legal claims.

‍

Use of your personal data.

We use your personal data to provide, support, and develop our services. We use your personal data to:

• inform you better about our offers and services;

• allow you to participate in innovation programs on our website;

• enable you to customize your profile/user account;

• send you information related to our services (for example, a confirmation of your registration for a program) by email and/or any other means of communication;

• enable you to communicate and interact with other members of the community, such as team members, mentors, jury members and/or program organizers (for example, messages exchanged with team members or invitations to join a team);

• publish an announcement that you are a finalist or winner of a program;

• give you access to our support services so that you can communicate with us;

• send you, in accordance with applicable laws and, where appropriate, with your consent, marketing materials and suggestions of our services (for example, upcoming programs) that may interest you;

• inform you of changes to our services;

• manage our websites, including for troubleshooting, access, data analysis, testing, research, and analytics purposes;

• improve our websites to ensure that content is presented in the most effective way possible;

• preserve the security of our website; and

• comply with our legal obligations, including orders and other legal or regulatory requirements.

‍

Disclosure of your personal data.

We may disclose your personal data to the sponsoring companies of the innovation programs in which you participate, for the purposes set out in this Privacy Policy.

Profile. When you use our services, your profile is fully visible to all members of our community, such as program participants, experts, jury members, and the sponsoring company or organization of a program. Some information about your profile (such as your name, photo, etc.) may also be visible to other people on our website or outside (for example, by visitors to our website or by third-party search engine users).

Posts on a discussion thread, messages and deliverables. When you post on a discussion thread, that post may be seen by all members of the community. You can send messages to team members, individual participants, jurors, experts, or program managers.

Deliverables related to a particular program may be viewed by other members of your team (if applicable), jury members, team experts, or program managers.

Public programs. Some of our programs are public, which allows the public to vote to determine the winning deliverables. In such situations, the public can see the posts on program-related walls, team and individual profiles, and deliverables related to the program in question (presentations, audio/video files, etc.). Before participating in a public program, you will be asked to agree to such information being made public. Please do not participate in a public program if you do not wish to make this information public.

Furthermore, we work with third parties who are recipients of your personal data, such as:

• the company that sponsored a program, its administrators, experts, and jury members, or other individuals to whom it has granted access to your personal data solely for the purpose of managing the program. We have concluded data communication agreements with the companies with whom we co-organize a program to ensure compliance with data protection laws;

• social media platforms that may provide you with connection services so that you can use our website;

• our subcontractors, who are technical service providers (such as cloud platforms, data and content management and transmission systems, search engine providers, etc.) or analytics providers; and

• social media platforms that may advertise our services on their websites.

We disclose your personal data to third parties only in the following situations:

• when necessary for the provision of our services (for example, by communicating your personal data to a partner company with whom we co-organize a program);

• to enable us to improve and optimize our website using analytics and search engines;

• when you have explicitly requested it from us (for example, when you register through social media authentication);

• when we do so in the light of your consent;

• when the law requires us to do so, or when we believe in good faith that such communication is reasonably necessary to respond to claims made against us, to comply with a judicial proceeding, in the context of an investigation, or to protect the rights, property, or personal safety of "Schoolab" or its members;

• if we sell or buy any business or asset, we may disclose your personal data to the potential seller or buyer; and

• if all or part of our assets are acquired by a third party, your personal data may be included in the transferred assets.

If you decide to communicate your personal data to us using social media authentication, the privacy policies of these platforms apply to you. We do not control the collection or processing of your information by these platforms.

‍

The legal basis on which Schoolab processes data.

We collect, use, and disclose data as described below:

• when necessary for the provision of services on our website and the performance of the General Terms and Conditions of Use;

• in the light of your consent, collected when you register;

• when necessary for us to comply with our legal obligations;

• when necessary to serve our legitimate interests, including our interests in providing innovative, personalized, and effective services to our users and partners, unless your interests or your fundamental rights and freedoms requiring the protection of personal data override those interests.

‍

Direct marketing emails

In accordance with applicable laws and, where applicable, with your consent, we may use the information you provide us on our website for electronic direct marketing (for example, to receive our newsletters, invitations to upcoming programs or events, or other communications that we believe may be of interest to you). You can withdraw your consent at any time by clicking on the unsubscribe link included in each email sent by Schoolab, or by contacting us at the contact details provided below.

‍

Transfer of your personal data.

We keep your personal data in the European Economic Area. If you use our website, your personal data may be shared between affiliated companies of "Schoolab" (both within and outside the European Economic Area). Our policy requires all affiliated companies to ensure a level of data protection at least equal to that imposed by the European Economic Area.

We may also transfer your personal data to third parties, including those located outside the European Economic Area, for example (but not limited to) subcontractors and service providers. When we transfer your personal data, we will do so in accordance with applicable data protection laws, and take appropriate security measures to ensure their integrity and protection.

‍

Securing your personal data.

We will take appropriate technical and organizational measures to prevent unauthorized or unlawful processing of your personal data, or any accidental loss, destruction or damage to them, using our internal security procedures, which cover the retention and destruction of your personal data, as well as access to them.

‍

Your rights regarding your personal data.

In addition to the rights conferred on you by applicable data protection law, and where permitted or required by applicable law or regulation, we will provide you, upon request, with a copy of your personal data and correct any errors you have identified. You also have the right to receive and/or have us transfer to another data controller a subset of your personal data. You have the right to object to our processing of your personal data and to restrict such processing, as well as the right to lodge a complaint with the relevant supervisory authority regarding the processing of your personal data.

You should submit all such requests, or any questions or comments about this policy or our processing of your personal data to dpo@theschoolab.com. You can find here a letter template developed by the National Commission for Data Protection and Liberties ("CNIL") https://www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-incompletes.

‍

Links.

Our Website contains links to other websites, including those of partner companies. These websites have their own privacy practices, for which we are not responsible. Please review those policies before submitting any personal data.

‍

Updates.

This Privacy Policy was last updated in December 2018. We reserve the right to modify this Privacy Policy at any time to reflect changes in legal requirements or our processing practices. Each such modification will be posted on our website and will take effect upon posting.

‍

Cookie policies

A cookie is a file that records information about your browsing on our website (date and time of page loading; browser used and language; pages viewed; frequency and duration of visits to the site; number of visits; sources of visits; location) and can facilitate your visits to the site.

By continuing to use our site, you accept this cookie policy and the use of cookies on your computer.

Please note that if you uninstall a cookie or refuse the installation of cookies, it is possible that you will not be able to use some of our services on our website.

Types of cookies

We use the following types of cookies:

1. Session cookies for site management. When you access the site, a "token" cookie with a unique encrypted session identification code is transmitted to your computer. This token then controls your access to the site for that session, and is deleted as soon as you close your browser or log out of the site. These cookies also allow us to identify your device and preferences when you return to our website, including customized features, language, and regional preferences. These cookies are an essential component of the site delivery system, and you will not be able to fully use our site if these cookies are not enabled. The information collected by these cookies is anonymous and is used solely to improve your experience on our website.

1. Persistent cookies for site management. If you register on the site and select the "Remember me" option, a persistent cookie is transmitted to your computer. This cookie is not deleted when you leave the site or close your browser, but is saved on your computer. This cookie contains an encrypted user identification code that identifies your computer for your future visits and automatically logs you in to the site. This is a functional cookie designed to remember your preferences to enhance your experience on our site. It does not contain personal information that can be used to identify you.

1. Analysis cookies. We use Google Analytics and Inspectlet to monitor traffic on our site. When you visit our site, these programs install certain cookies that record statistical information about your visits to the site. We measure the number of visits, the number of pages displayed, visitor activity on the site, and how often they return. This allows us to improve our website and its operation, for example, by providing users with intuitive navigation. These cookies do not record personal information that can be used to identify you.

1. What cookies are installed?

• Cookies installed by Schoolab:
  • PHPSESSID, context: Contains information about the browsing session and allows the user to access the site (expiration: end of browsing session)
  • __zlcstore: Necessary for the operation of the site's messaging function (expiration: end of browsing session).
  • cookies_policy_accepted: Records a user's cookie choice (expiration: 13 months)

• Third-party cookies:

• Amazon Web Services
  • AWSALBCORS: Records which group of servers serves the visitor. This is used in the context of load balancing to optimize the user experience. (Expiration: 6 days)

• Google Recaptcha, opt-out option: Google Recaptcha
  • rc::a: Used to distinguish humans from robots. This is beneficial for the website to create valid reports on site usage. (expiration: 13 months)
  • rc::c: Used to distinguish humans from robots. (expiration: end of browsing session).

• Intercom - User Support
  • intercom-session-* Stores the user session to allow continuous login and avoid frequent reconnections. (Expiration: 7 days)
  • intercom-id-* Uniquely identifies a visitor for tracking interactions and messages in Intercom. (Expiration: 9 months)
  • intercom-device-id-* Identifies the device used by the visitor to ensure a consistent experience across multiple sessions. (Expiration: 9 months)

• Optional - Axeptio, Consent Manager
  • axeptio_authorized_vendors This cookie is used to store the visitor's consent preferences for the various types of cookies used on the website. (Expiration: 1 year)
  • axeptio_all_vendors This cookie is used to store users' consent preferences regarding the use of cookies on the website. (Expiration: 1 year)

• Optional - Google Analytics, opt-out option: Google Analytics
  • _gid: Used to distinguish users. (expiration: 24 hours)
  • _gat: Used to limit request rate. (expiration: 1 minute)
  • _ga: Used to distinguish users. (expiration: 13 months)

• Optional - Inspectlet, opt-out option: Inspectlet
  • __insp_sid, __insp_ref, __insp_scpt, __insp_nv, __insp_wid, __insp_identity: Used to distinguish users and whether a user is included in the sample used to generate statistics (expiration: end of browsing session).
  • __insp_uid: Used to recognize a returning user to the site (expiration: 13 months)

‍

How to delete cookies, be notified of their installation or configure your browser?

All web browsers allow you to set your cookie preferences before browsing the Internet.

At any time, you can delete cookies, refuse the installation of new cookies or be notified before the installation of a new cookie by configuring your browser or relying on our Consent Management Platform Axeptio.

For any questions about our cookie policy, please send us an email at dpo@theschoolab.com.

‍

Effective date

This Privacy Policy was effective on December 12, 2018.