Your Rights Under GDPR

SkillNest SAS is the data controller responsible for your personal data. We determine the purposes and means of processing personal data. Our company is registered in France and complies with EU data protection laws.

We process your data based on: consent (for optional features), contract (to provide our services), legitimate interests (security and fraud prevention), legal obligations (tax and regulatory requirements). You can withdraw consent at any time without affecting the lawfulness of prior processing.

The GDPR provides you with specific rights regarding your personal data. These include access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making. Each right is detailed below.

You have the right to obtain confirmation of whether we process your personal data and, if so, access to that data and information about how it's processed. You can request a copy of your personal data free of charge.

You have the right to request immediate correction of inaccurate personal data and completion of incomplete data. You can update most information directly in your account settings or contact us for assistance.

Also known as the "right to be forgotten," you can request deletion of your personal data when: it's no longer necessary, you withdraw consent, you object to processing, data was unlawfully processed, or for legal compliance. Some data may be retained for legal obligations.

You can request restriction of processing when: you contest data accuracy, processing is unlawful but you oppose erasure, we no longer need the data but you need it for legal claims, or you've objected to processing pending verification.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can transmit this data to another controller or request direct transfer where technically feasible.

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

You have the right not to be subject to decisions based solely on automated processing that significantly affects you. Our AI-powered learning recommendations include human oversight. You can request human intervention or challenge automated decisions.

Our Data Protection Officer ensures GDPR compliance and serves as your point of contact for all data protection matters. You can reach our DPO for any privacy concerns or to exercise your rights.

To exercise any of your GDPR rights: email our DPO at [email protected], use the privacy dashboard in your account, or send a written request to our registered address. We will respond within 30 days and never charge fees for reasonable requests.

If you're unsatisfied with how we handle your data, you have the right to lodge a complaint with the supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés). We encourage you to contact us first to resolve any concerns.

When we transfer data outside the EEA, we ensure appropriate safeguards through: Standard Contractual Clauses approved by the European Commission, adequacy decisions, or your explicit consent. Your GDPR rights apply regardless of where your data is processed.