Privacy Policy

Edflex ("Edflex" or "we") may collect and process personal data ("Data") relating to the Website visitors (or "you"). Data protection is a top concern for us. Hence, this Privacy Policy allows us to inform you about how we collect, use and manage Data, in compliance with applicable local legislation relating to personal data and privacy, and in particular in compliance with the EU General Data Protection Regulation 2016/679 of April 27, 2016 ("GDPR").

Edflex also offers an optional, available for a fee, payment card service (EDCARD) to authorized users. Whenever the customer demands this option, the service is provided by the payment service provider Treezor. Use of the payment card is subject to the acceptance of the Treezor Privacy Policy.

1. DATA PROCESSING PURPOSES

Your Data may only be used for:

Enabling your account creation and login;

Answering any request, queries or inquiries you may submit;

Hosting your Data;

Improving our services and the Website functionalities;

Ensuring the security of the Website;

Ensuring the exercise of your rights and the defence of our rights;

Analysing the statistics of use of the Website.

We may process your Data on several grounds: (i) with your consent, which you may withdraw at any time; (ii) where it is necessary for the provision of our services or to respond to your requests; (iii) where it enables us to comply with a legal obligation to which we are subject; (iv) to ensure our legitimate interests relating to the security of the Website, its proper functioning and to interact with you.

If you no longer wish to receive communications from us, you may either set your preferences by going to your user profile section under the "Settings" tab, or you may click on the unsubscribe link contained in our emails. You may also contact us at the following address: contact[at]edflex.com

2. PROCESSED DATA

We may only process the Data which is strictly necessary to achieve the purposes specified. This Data is collected directly from you when you contact us or throughout the use of the Website (id, contact details, viewed content, connection data, data arising from technical cookies or tracers with your consent, preferences, type of requests and any other information you may provide us on the Website forms).

As soon as it is necessary, we thank you for updating your Data.

3. DATA RECIPIENTS

We may only share your Data with our contractors and partners when necessary to fulfil one of the purposes mentioned above. Your name may be shared with other users of the Website when you recommend content. Finally, upon the receipt of a specific request, your Data may be transferred to third parties legally entitled to access it in certain cases provided for by the law (e.g., a request in connection with civil or criminal proceedings). Your Data may also be communicated to third parties if it is necessary to conserve and/or defend our rights, or to ensure compliance with these provisions.

We take care to work with subcontractors who do not transfer your Data outside the European Union. To learn more about the appropriate safeguards in place in this regard, you can contact us at dpo[at]edflex.com

4. DATA RETENTION PERIODS

We will only keep your Data for 3 years from your last login, unless you request the deletion of the Data.

We also keep your Website connection logs for a period of 6 months for security purposes. In addition, in accordance with the applicable legislation, the Data necessary for the defence of our rights is kept for a period of 5 years after our contractual and/or business relationship lasts.

However, your Data may be kept for a longer period if a longer retention period is allowed or imposed by virtue of a legal, contractual, tax or social obligation.

5. YOUR RIGHTS

In accordance with European data privacy laws (in particular Articles 15 to 22 of the EU GDPR), you have the following rights regarding the processing of your Data, within the legal limits:

  • Right of access: to obtain information about your Data and a copy of your Data;

  • Right to information: to obtain information on the conditions of the processing (recipients, purposes, categories of data, etc.);

  • Right of rectification: to correct or update your Data when it is inaccurate or incomplete;

  • Right to object : to object the carrying out of a processing operation for reasons related to your specific situation, or to withdraw your consent for processing operations based upon this legal basis;

  • Right to withdraw consent, where consent is the legal basis for processing;

  • Right to limitation: to ask not to process all or part of the Data temporarily, without asking to delete them;

  • Right to erasure: to request the deletion of its Data. This right cannot be applied if the processing of the data is necessary by virtue of a legal provision, particularly regarding applicable provisions relating to the prevention of money laundering and terrorism .

  • Right to portability: to obtain one's Data in a structured, machine-readable format and to be able to transmit it easily to a third party;

  • The right to define specific guidelines for the processing of his or her post-mortem Data.

You can exercise your rights via the contact address mentioned below. In case of doubt about your identity, you may be asked to provide a proof of identity. We may reject any request that is abusive or unfounded with regard to the applicable laws and regulations.

When you exercise your rights, we undertake to respond to you as soon as possible and, in any event, within the timeframe required by the applicable law.

You also have the right to complain to a supervisory authority in the country of your residence or to our Data Protection Officer by using the following contact: dpo[at]edflex.com

6. CONTACT

If you would like any further information, or have any questions or concerns, regarding your personal data, please email us at dpo[at]edflex.com