Processing of users' personal data (Privacy notice)

Foreword

Blockchain Certified Data ("BCD"), as publisher of the BCdiploma solution, reminds that it is its responsibility to inform its Clients of the processing of personal data of users of the BCdiploma SaaS platform; in particular under Regulation (EU) 2016/679 of the European Parliament and of the Council of April 17, 2016 (hereinafter the "GDPR") and Law 78-17 of January 6, 1978, as amended (hereinafter the "Loi Informatique et Libertés - French Data Protection Act"). Please note that the notice below is specific to the processing of personal data related to the customer's user account on the BCdiploma platform.

Note

Data controller

The following information is provided so that you may be aware of the commitments regarding the personal data protection of BLOCKCHAIN CERTIFIED DATA, Société par Actions Simplifiée (simplified joint-stock company) with a stated capital of 66,461.50 euros, registered with the Nanterre Company and Trade Register, under the number 833 138 951, having its registered office at 104 avenue Albert 1er - 92500 Rueil-Malmaison, represented by Mr. Luc Jarry-Lacombe as Chairman, who acts as data controller for the processing of personal data mentioned below.

Registry et Contact

Name of the registry: Customers using the BCdiploma solution. For questions related to the registry, you can contact the DPO: dpo@bcdiploma.com

Purposes

BCD processes personal data for the following purposes:

• User access to the full functionality of the BCdiploma SaaS platform, including user support ;
• Application maintenance and troubleshooting of the BCdiploma SaaS platform ;
• The quality of the commercial relationship with the customer.

Legal basis

The legal basis for this processing of personal data is the legitimate interests pursued by BCD, namely the proper use of the BCiploma SaaS platform under the general terms and conditions of use and the user contracts.

Mandatory nature

Your identity data that we collect, as well as those that are collected subsequently, are necessary in order to carry out the aforementioned processing operations. Therefore, if you choose not to provide us with this data, this refusal will result in the impossibility to use the BCdiploma SaaS platform and user support features.

Processed data

• Name, first name and email address of users authorized to connect to the solution;
• Logs of connections and actions on the platform;
• E-mail exchanges with the support and sales departments.

Data Recipients

All BCD's authorized services and, where applicable, our subcontractors are recipients some of your data, according to the scopes defined below. Here a complete list of subcontractors we use to process data:

* Integrated e-mail service, optional; you can use your own e-mail tool to deliver certificates.

** Mandatory only for Self-Service plans, namely in "Free Trial" and "Essentials Pack" modes

*** Mandatory only for Self-Service plans, namely in "Free Trial" and "Essentials Pack" modes, only for the person who pays for the subscription

Security

The supplier implements all the technical measures in accordance with the state of the art necessary to ensure the logical security of the access to the processed data and to prevent any intrusion of unauthorized persons, whatever the nature or the technique used. Only the authorized personnel of BCD may have access to the personal data processed, under the confidentiality conditions in force within the company.

Retention time

Your data are kept for 2 years after the end of the agreement between the user's entity and BCD.

Your rights

Per the applicable regulations on the protection of personal data, you have the right to access, query, modify and delete information concerning you, to limit the processing, and the right to the portability of data concerning you.

You also have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data having as a legal basis the legitimate interest of BCD, as well as the right to object to unsolicited commercial communications. All inquiries regarding this Notice should be made in writing to the person listed in the Registry and Contact section.

If you feel, after contacting us, that your rights to your data are not being respected, you can submit a complaint to the Commission Nationale Informatique et Libertés (National Commission on Informatics and Liberty).