Privacy Policy

Hexagone is a SAS (French Simplified Joint Stock Company) under French law with its registered office at 2 rue Jean Perrin, 14460 Colombelles (“Inject”, “Inside”, “Schoolab”, or “we”).

When you use our services, you trust us to handle your information.

We understand that this is a big responsibility, which is why we strive to protect them while allowing you to maintain control.

The following privacy policy tells you what information we collect and why, and how to update, manage, export, and delete it.

Through our contact forms, various documents and our exchanges by e-mail, mail, or telephone, “Schoolab” may collect personal data.

“Schoolab” builds its software and services in compliance with the RGPD regulations on data protection. Your personal information allows us to process your requests, provide assistance and training, and improve the quality of our services. It is also used to get to know you better so that we can offer you personalized content and services tailored to your needs.

Your personal data will only be used by “Schoolab” to process your request and will not be disclosed to outside companies.

In accordance with the French Data Protection Act of January 6, 1978, as amended, as well as the European Regulation n°2016/679/EU of April 27, 2016, the user has the right to access, rectify, oppose, limit, and if necessary, delete data. These rights can be exercised by simple request, accompanied by proof of identity, sent by mail to: dpo@theschoolab.com.

How “Schoolab” collects your personal data

Schoolab’s digital services facilitate the establishment and management of communities, programs, and innovation venues. We regularly receive personal data in the course of providing our services. The personal data we collect and process may include:

Personal data that you provide to us, including:

  • Registration. We collect the mandatory information needed to create your user account and to register for the services we provide on our websites, namely your title, first name, last name, email address and password. The text “optional” is associated with non-mandatory fields in our interfaces.
  • Profile. Various information is included in your profile, some of which is optional, for example, the option to include or not include your photo, country of residence, educational information, and job skills. You are not required to include any other information in your profile; however, the information in your profile allows you to take better advantage of our services, for example, to be identified by our staff so that you can participate in a program. Where applicable, your profile will also display your membership in one or more teams.
  • Postings, Publications, and Downloads. We collect personal data from you when you submit, post or upload it to our website, including when you register to participate in a program when you upload resources (e.g., documents, deliverables) submitted as part of your participation in a program, or collected on public areas of our websites.
  • Technical information. Dates and times you connect to our services. We also keep track of all correspondence between you and us, including information you send when you report a problem with our websites or services.
  • Any other information about you that you may wish to share with us.

The complete list of personal data collected and processed by our websites and services is available in our technical documentation (in French).

Information we automatically collect from a third party source, including:

Authentication information via your company’s calendar. If you register on our website using SSO authentication (SAML 2.0, Azure AD Provisioning, OpenID…), we will access certain personal data (e.g., your first name, last name, or email address) from your profile in your company’s calendar, in accordance with the terms and conditions of use of those platforms.

Authentication Information via Social Networks. If you register on our website using authentication via social networks (such as LinkedIn, Google, Facebook, etc.), we will access certain personal data (e.g., your first name, last name, or email address) from your profile on the social networks in accordance with the terms and conditions of use of those platforms.

Technical Information. When you visit our website, we collect information about the devices you use and the networks you are connected to. This technical information includes your IP address, login information, the bandwidth you use, the time of your visit, your browser type and version, your browser add-on types and versions, your operating system, information about your visit, including click stream displaying URLs, download/upload errors, pages you visited, interactions between pages, and other connection data contained in our logs. This collected information is anonymized and processed with third-party Inspectlet and Google Analytics technology.

Duration for which Schoolab keeps your personal data.

We keep your personal data as long as you have an active account with us for 36 months. If you close your account, your personal data will be deleted immediately.

Information that you have shared with others (e.g., through messages, discussions, or on walls/chat rooms) will remain visible after you close your account but will be anonymized. Your profile may continue to be displayed as part of other people’s services (for example, search engine results) until the user refreshes their cache.

If your account is suspended or blocked, we will retain your data for between 2 and 5 years to prevent you from violating the terms and conditions of our website.

We may also retain your personal data for an additional period of time to the extent necessary for us to enforce or defend legal claims against them.

Use of your personal data.

We use your personal data to provide, support, and develop our services. We use your personal data to:

  • inform you as well as possible about our offers and services;
  • allow you to participate in innovation programs on our website;
  • allow you to customize your user profile/account;
  • send you information related to our services (e.g., confirmation of your enrollment in a program) by e-mail and/or any other means of communication;
  • allow you to communicate and interact with other members of the community, such as team members, mentors, jury members and/or program organizers (e.g., messages exchanged with team members or invitations to join a team);
  • post an announcement that you are a finalist or winner of a program;
  • give you access to our support services so that you can communicate with us;
  • send you, in accordance with applicable law and, where appropriate, with your consent, marketing materials and suggestions about our services (e.g., upcoming programs) that may be of interest to you;
  • inform you of changes to our services;
  • administer our websites, including for problem resolution, access, data analysis, testing, research, investigation, and analytical purposes;
  • improve our websites to ensure that content is presented in the most effective manner;
  • maintain the security of our website; and
  • comply with our legal obligations, including ordinances and other legal or regulatory requirements.

Disclosure of your personal data.

We may share your personal information with the companies sponsoring the innovation programs in which you participate for the purposes set forth in this Privacy Policy.

Profile. When you use our services, your entire profile is visible to all members of our community, such as program participants, mentors, panelists, and the company or business sponsoring a program. Some of your profile information (e.g., your name, photo, etc.) may also be visible to others on or off our website (e.g., visitors to our website or users of third-party search engines).

Threaded posts, messages, and deliverables. When you post to a thread, that post can be seen by the entire community. You can send messages to team members, individual participants, jurors, mentors, or program administrators.

Deliverables for a particular program may be viewed by other members of your team (if applicable), jury members, team mentors or program administrators,

Public Programs. Some of our public programs allow the public to vote on the winning deliverables. In these situations, the public may see wall postings related to the program, team and individual profiles, and deliverables related to the program in question (presentations, audio/video files, etc.). Before participating in a public program, you will be asked to agree to have such information made public. Please do not participate in a public program if you do not wish to make this information public.

In addition, we work with third parties who are recipients of your personal data, such as:

  • the company that sponsors a program, its directors, mentors, and jury members, or others to whom it has granted access to your personal data for the sole purpose of administering the program. We have entered into data sharing agreements with the companies with which we co-host a program to ensure compliance with data protection laws;
  • social networking platforms that may provide you with login services so that you can use our website;
  • our subcontractors, who are technical service providers (e.g., cloud platforms, data and content management and delivery systems, search engine providers, etc.) or analytics providers; and
  • social networking platforms that may advertise our services on their websites.

We disclose your personal data to third parties only in the following situations:

  • when necessary for the provision of our services (for example, providing your personal data to a partner company with whom we are co-organizing a program);
  • to enable us to improve and optimize our website using analytics and search engines;
  • when you have explicitly requested us to do so (for example, when you register through authentication via social networks);
  • when we do so in light of your consent;
  • when we are required to do so by law or when we believe in good faith that disclosure is reasonably necessary to respond to claims made against us, to comply with legal process, in connection with an investigation, or to protect the rights, property or personal safety of Schoolab or its members;
  • if we sell or buy any business or asset, we may disclose your personal data to the prospective seller or buyer; and
  • if all or part of our assets is acquired by a third party, your personal data may be included in the transferred assets.

If you choose to provide us with your personal data using authentication via social networks, the privacy policies of those networks apply to you. We do not control these platforms’ collection or processing of your information.

The legal basis for Schoolab’s data processing

We collect, use and disclose the data we have in the ways described below:

  • when necessary for the provision of the services on our website and for the execution of the Terms of Use;
  • in light of your consent, collected at the time of your registration;
  • when necessary to comply with our legal obligations;
  • when necessary to serve our legitimate interests, including our interests in providing an innovative, personalized, and efficient service to our users and partners, unless your interests or fundamental rights and freedoms that require the protection of personal data override such interests.

Direct marketing emails

In accordance with applicable law and, where appropriate & with your consent, we may use the information you provide to us on our website for direct electronic marketing purposes (for example, to receive our newsletters, invitations to upcoming programs or events, or other communications that we think may be of interest to you). You may withdraw your consent at any time by clicking on the unsubscribe link in any email sent by Schoolab, or by contacting us at the contact information below.

Transfer of your personal data.

We store your personal data within the European Economic Area. If you use our website, your personal data may be shared between Schoolab affiliates (both within and outside the European Economic Area). Our policy requires all affiliates to provide a level of data protection at least equal to that required by the European Economic Area.

We may also transfer your personal data to third parties, including those outside the European Economic Area, for example (but not limited to) subcontractors and third parties engaged in the provision of services. When we transfer your personal data, we will do so in accordance with applicable data protection laws and will take appropriate security measures to ensure its integrity and protection.

Security of your personal data.

We will take appropriate technical and organizational measures to prevent unauthorized or unlawful processing of your personal data, or accidental loss, destruction, or damage of your personal data by using our internal security procedures, which cover the storage, access, and destruction of your personal data.

Your rights with respect to your personal data.

In addition to your rights under applicable data protection law, and where permitted or required by applicable law or regulation, we will, upon request, provide you with a copy of your data and correct any inaccuracies you have identified. You also have the right to receive and/or have us transfer a subset of your personal data to another controller. You have the right to object to our processing of your personal data and to restrict such processing, as well as the right to lodge a complaint with the supervisory authorities regarding processing your personal data.

You should submit all such requests, or any questions or comments about this policy or our handling of your personal data, to dpo@theschoolab.com. You can find a sample letter from the Commission Nationale de l’Informatique et des Libertés (the “CNIL”) at this link https://www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-incompletes

Links.

Our Website contains links to other websites, including those of partner companies. These websites have their own privacy practices, for which we are not responsible. Please check those policies before submitting any personal data.

Update.

This Privacy Policy was updated in December 2018. We reserve the right to modify this Privacy Policy at any time to reflect changes in legal requirements or our processing practices. Each such change will be posted on our website and will be effective upon posting.

Cookie Policies

A cookie is a file that records information about your visit to our website (date and time of page load; browser used and language; pages viewed; frequency and duration of visits to the site; the number of visits; sources of visits; location) and may facilitate your visits to the site.

By continuing to use our site, you agree to this cookie policy and to the use of cookies on your computer.

Please note that if you uninstall a cookie or refuse to accept cookies, you may not be able to use some of our services on our website.

Types of cookies

We use the following types of cookies:

  1. Session cookies for site management. When you access the site, a “token” cookie with a unique encrypted session ID is sent to your computer. This token then controls your access to the site for that session, and is deleted when you close your browser or log out of the site. These cookies also allow us to identify your device and preferences when you return to our website, including personalized features, language and regional preferences. These cookies are an essential component of the site’s delivery system, and you will not be able to fully use our site if these cookies are not enabled. The information collected by these cookies is anonymous and is used for the sole purpose of improving your experience on our website.
  2. Persistent cookies for site management. If you register on the site and select the “Remember me” option, a persistent cookie is sent to your computer. This cookie is not deleted when you leave the site or close your browser but is stored on your computer. This cookie contains an encrypted user identification code that identifies your computer on future visits and automatically logs you into the site. This is a functional cookie, designed to remember your preferences to enhance your experience on our site. It does not contain any personal information that can be used to identify you.
  3. Analytics Cookies. We use Google Analytics and Inspectlet to monitor traffic to our site. When you visit our site, these programs install certain cookies that record statistical information about your visits to the site. We measure the number of visits, the number of pages viewed, the activity of visitors on the site, and how often they return. This allows us to improve our website and its operation, for example, ensuring intuitive navigation for users. These cookies do not record any personal information that can be used to identify you.
  4. Which cookies are installed?

Cookies installed by Schoolab:

PHPSESSID, context: Contains information about the browsing session and allows the user to access the site (expiration: end of the browsing session)

__zlcstore: Necessary for the functioning of the messaging function of the site (expiration: end of the navigation session).

cookies_policy_accepted: Records a user’s choice regarding cookies (expires in 13 months)

Third-party cookies:

Google Analytics, opt-out: Google Analytics

_gid: Used to distinguish users. (expiration: 24 hours)

_gat :Used to limit the rate of requests. (expiration : 1 minute)

_ga : Used to distinguish users. (expiration: 13 months)

Google Recaptcha, opt-out: Google Recaptcha

rc::a : Used to distinguish humans from robots. This is beneficial for the website to create valid reports on site usage. (expiration: 13 months)

rc::c : rc::c : Used to distinguish humans from robots. (expiration: end of browsing session).

Inspectlet, opt-out: Inspectlet

__insp_sid, __insp_ref, __insp_scpt, __insp_nv, __insp_wid, __insp_identity : Used to distinguish users and whether a user is included in the sample used to generate statistics (expiration: end of browsing session).

__insp_uid : Used to recognize a returning user (expiration: 13 months)

Zendesk*, opt-out: Zendesk*

__cfruid : is part of the services provided by Cloudflare, including load balancing, website content delivery, and DNS connection to serve website operators (expiration: end of browser session).

__zlcmid : Keeps the configuration of user settings through page requests (expiration: 12 months).

zte# : Stores a Zopim Live Chat ID that recognizes a device when visited during a chat session.

ZD-suid : Unique identifier that identifies the user’s session. (expiration: 13 months)

ZD-buid : Unique identifier that identifies the user during recurring visits. (expiration: 13 months)

ZD-store : Records whether the Zendesk Answer Bot self-service wizard has been displayed to the website user (expiration: 13 months).

AWSALBCORS: records which server group the visitor is serving. This is used in the context of load balancing to optimize the user experience (expiration: 6 days).

How to delete cookies, be notified of their installation, or configure your browser?

All web browsers allow you to set your cookie preferences before browsing the Internet.

At any time, you can delete cookies, refuse the installation of new cookies, or be notified before a new cookie is installed by configuring your browser or by using our Consent Management Platform: Axeptio.

If you have any questions about our Cookie Policy, please email us at dpo@theschoolab.com 

Effective Date

This Privacy Policy became effective on December 12, 2018.