Contact
Privacy Policy

Privacy Policy

This Privacy Policy explains how Pancake Chapter processes personal data in connection with its website and online courses on IT security and digital literacy. It describes the types of data we collect, the reasons for processing, the circumstances in which data may be shared, and the rights available to users under applicable law.

Terms of ServiceContact
Effective Date
As stated in this policy
Scope
All users of our services
Questions?
Contact
User Rights

Your Rights

Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data. You may also have the right to data portability and the right to lodge a complaint with a competent supervisory authority. Some requests may be declined where the law permits or requires us to do so.

Available rights depend on the legal basis and the nature of the processing involved.
Requests

How to Make a Request

To exercise a privacy right, please use the contact details in this policy and describe the request clearly. We may ask for information needed to verify your identity and to understand the scope of the request. We will respond within the period required by applicable law and will explain any refusal or limitation where relevant.

Requests are handled after reasonable verification of identity and scope.
Data Retention

Data Retention

We retain personal data for the period necessary to provide the site and course services, manage accounts, meet legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete it or anonymize it, unless a longer retention period is required by law or justified by a legitimate operational need.

Data is kept only for as long as needed for the stated purpose or legal retention duties.
Policy Updates

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services, processing activities, or legal requirements. The revised version will apply from the date it is posted unless a different effective date is stated. Where changes are material, we will take reasonable steps to draw attention to them.

We review this policy when our practices or legal obligations change.
GDPR
Regulation

GDPR Overview

For GDPR purposes, we act as a controller for the personal data we determine the purposes and means of processing. We process personal data on a lawful basis such as consent, contract performance, legal obligation, or legitimate interests, depending on the context. Where consent is used, it may be withdrawn at any time without affecting prior processing.

Regulatory context
Because Pancake Chapter targets users in France and the European Union, GDPR applies to personal data processing where the regulation is relevant.
Regulation General Data Protection Regulation (GDPR) - EUR-Lex
Supervisory Authority Commission Nationale de l'Informatique et des Libertés (CNIL)
This section applies to users protected by EU data protection law.
GDPR-compliant data handling

GDPR Rights

Where GDPR applies, users may have the right to access, rectify, erase, restrict, or object to processing, and to receive data portability in appropriate cases. Users may also withdraw consent where processing is based on consent. These rights are not absolute and may be limited by legal obligations or the need to establish, exercise, or defend legal claims.

GDPR rights are available subject to the conditions and limits set by law.
Data category

Data We Collect

We may collect identification details, contact information, account credentials, course enrollment data, payment-related records where applicable, communications sent to us, and technical data such as device type, browser information, log data, and usage patterns. We do not seek to collect sensitive data unless a user chooses to provide it or it is required for a specific service feature.

The categories of data collected depend on how users interact with the site and course services.
Collection source

Sources of Data

We receive data directly from users when they create an account, enroll in a course, submit a form, or contact us. We also collect data automatically through the website and related tools, including cookies and similar technologies. In some cases, we receive limited information from service providers that support hosting, analytics, payment processing, or security functions.

Information comes from users, their devices, and service providers involved in site operation.
Cookie type

Types of Cookies

The site may use essential cookies for core operation, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent. Where required, non-essential cookies are used only after consent or another valid legal basis.

We use cookies with different lifespans and functions, depending on the feature involved.
User control

Cookie Controls

Users can usually block or delete cookies through their browser settings. Where the site provides a consent tool, users may change non-essential cookie choices there. Some cookies are necessary for the site to function and cannot be disabled without affecting access or performance.

Cookie preferences may be adjusted through browser settings and, where available, site controls.
Privacy Office

Contact Information

Email contact
[email protected]
Telephone
+33 6 11 01 08 07
Postal address
2 Chemin du Vigneau, 44800 Saint-Herblain
Privacy contact

Use the contact details below for privacy questions, rights requests, or policy-related correspondence.

Contact Page
01

How We Use Data

We use personal data to provide and manage accounts, deliver course content, process enrollments, respond to inquiries, maintain site security, prevent fraud or misuse, analyze service performance, comply with legal obligations, and support internal recordkeeping. Where required, we also use data to manage consent choices and to communicate important service notices.

Processing is limited to the operational and legal purposes described here.
02

Service Providers

We may share personal data with hosting providers, analytics providers, payment processors, communication tools, and security or maintenance vendors that support the operation of the site and courses. These parties act under contractual or equivalent obligations and may process data only for the services they provide to us.

Service providers receive only the information needed to perform their functions.
03

Legal Disclosures

We may disclose personal data when required to comply with law, a court order, or a valid request from a public authority. We may also share data where necessary to protect our rights, users, or the security and integrity of the site, or to investigate suspected misuse or unlawful activity.

Disclosure to public authorities is limited to lawful requests or binding obligations.