Privacy policy
Last updated : August 16th, 2023
ExAssess
SAS with capital of 94.800,00 €
893186429 RCS Paris
115, rue Cardinet – 75 017 PARIS - FR
Web site hosting
-
Wix Online Platform Limited
-
Adresse: 1 Grant’s Row, Dublin 2 D02HX96, Ireland.
ExAssess app for professional hosting
-
Vercel Inc. 440 N Barranca Ave #4133 Covina, CA 91723 - USA
-
Neon, Inc. San Francisco CA USA
ExAssess aims to respect the confidentiality standards relating to the European data protection law entitled General Data Protection Regulation (GDPR).
ExAssess understands the importance of providing its users with an environment where they feel safe. ExAssess policies on user data protection adhere to the highest requirements of European law.
Website data collection
For Visitors of this website, ExAssess is the data controller to the extent that you provide us with your personal data throughout the web forms, including your approval about the data collection.
Customer and affiliates data collection (Professional)
For our Professional customers (B2B) and our affiliates (Partners), ExAssess is the data controller to the extend that you provide us your personnal data like : Company name and address, legal representative name and email, adinistrative contacts (users) and email, telephone.
What about VTest services sold by ExAssess and or its affiliates (Partners)?
For all VTest related services, The Burlington Group is the data processor. To know more about the data processed by The Burlington Group, please visit VTest privacy policy.
Data storage in ExAssess Apps
ExAssess has a management, reporting and data exchange application for each of its professional customers. Either the customer or ExAssess can store data as part of information sharing between customers and suppliers.
Hosting of the ExAssess App:
Application host:
Vercel Inc,
440 N Barranca Ave #4133
Covina, CA 91723 - USA
https://vercel.com/legal/privacy-policy
Application host for the database:
Neon
209 Orange Street, City of Wilmington,
County of New Castle, Delaware 19801 - USA
https://neon.tech/privacy-policy
Sorage of files and Customer data
AWS - Data center Stockholm
Account subcribed from France
https://aws.amazon.com/fr/compliance/gdpr-center/
What about VTest services provided by ExAssess?
ExAssess is acting as ‘Sub-processor’ of the Burlington Group for the purpose of the VTest services, within the meaning of article 28 para. 4 GDPR.
To know more about the VTest privacy policy, please refer to the VTest website
-
For the purpose of the VTest services, the ExAssess professional customers are acting as data controlers. They have the possibility to use VTest as a service provider. For this specific case, ExAssess could collect the personal data of the VTest candidates to import them into the VTest platform for the purpose of the VTest services. These data could be : First name, Last name, gender, country, email, and some optionnal information for classfication.
-
For the purpose of the VTest services, ExAssess may also extract and provide to the professional customer, VTest test results including with not limitation: name of the test, date of the test, secure code, test duration, CEFR results, and performance details, as well as official certificates.
-
For the purpose of the VTest services, ExAssess can access to all the data of its affiliates (Partners), and the professional customers of its affiliates (Partners).
What about VTest services provided by ExAssess's affiliates (Partners)?
ExAssess's affiliates are acting as ‘Sub-processor’ of ExAssess for the purpose of the VTest services, within the meaning of article 28 para. 4 GDPR.
To know more about the VTest privacy policy, please refer to the VTest website
How long do we keep your personal data?
ExAssess will keep your personal data for as long as necessary in accordance with applicable legislation.
Regarding VTest services, please refer to the VTest privacy policy to know more about the retention period of the personal data of the VTest candidates.
For more information on where and how long your personal data may be retained, please use the following form.
General statement
We do not sell your personal data to others and we only share them with third parties who facilitate the provision of our Services to you.
We use your personal data for the provision of our Services (Art. 6 par. 1 (b)). In certain cases, the processing of your personal data may be necessary for the purposes of our legitimate interests (Art. 6 par. 1 (f) GDPR), such as to communicate with you or to improve and enhance your experience while using our Platforms and our Services or for our research and development purposes.
Cookies
We use cookies (small text files placed on your device) to support our Website, to provide our online services and to collect information. Cookies allow us, among others, to store your preferences and settings, to provide interest-based advertising, and to analyze how our Website and online services work.
How do you exercise your rights and how do you contact us?
Your rights
You have the right to request access to your personal data. You also have the right to:
-
rectify or erase (in certain circumstances) your personal data;
-
restrict or object to the processing of your personal data; and
-
receive (under conditions) your personal data so that you can use it elsewhere.
Where we process data based on your consent, you also have the right to withdraw your consent at any time but this does not affect the lawfulness of the processing before the date that you withdrew your consent.
Finally, you have the right to lodge a complaint with the competent French supervisory authority, which is the Commission Nationale de l’Informatique et des Libertés (CNIL):
CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 – FRANCE
https://www.cnil.fr/fr/plaintes
How to contact us ?
To exercise your rights, or for any question about the processing of your data you can contact us directly through the following form.