At Pyxis Suisse SA, the protection of your personal data is a priority. Within the framework of the training actions that we carry out, we are brought to collect personal data concerning you.
The purpose of this policy is to inform you about how we process such data in compliance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).
1)Who is the data controller?
The controller is Pyxis Suisse SA, (a limited company), CHE-436.164.492 VAT, whose registered office is Pyxis Suisse SA c/o CBC-L Sàrl Rue du Simplon 37, 1006 Lausanne.
2. What data do we collect?
Personal data is data that can be used to identify an individual directly or by cross-referencing with other data. We collect data in the following categories:
- Identification data (including your name, first name, email and postal address, telephone number);
- Connection data (including your IP address and connection log);
- Data related to your professional life (in particular your diplomas, your profession);
- Data from emails you have exchanged with our teams (e.g.: content of the emails, their dates);
- Economic and financial data (e.g. bank details, credit card details). Mandatory data are indicated when you provide us with your data. They are marked with an asterisk and are necessary to carry out our training activities.
3. On what legal grounds, for what purposes and for how long do we keep your data?
Provide our training services in person or by distance learning
Legal basis: Fulfillment of a contract you have entered into.
Duration of conservation: The data are kept in active base during all the duration of the contractual relation and increased by a period of 3 years as from this last one, at ends of prospection. In addition, your data is archived for 5 years from the end of the business relationship for evidentiary purposes, in intermediate storage.
Proceed to the payment of online training, perform operations related to customer management concerning contracts, invoices and follow-up of customer relations
Legal basis: Execution of a contract you have signed.
Retention period: The data is kept for the duration of the contractual relationship and increased by a period of 3 years from the end of the latter. In addition, your data (with the exception of your bank details) is archived for evidential purposes for a period of 5 years. Your credit card information is kept by our payment service provider (*). The data relating to the visual cryptogram or CVV2, written on your bank card, are not stored.
Build a customer file
Legal basis: our legitimate interest in developing and promoting our business
Retention period: the data are kept for the duration of the commercial relationship and are deleted after a period of 3 years from the end of the commercial relationship.
Send newsletters, solicitations and promotional messages
Retention period: the data is kept for 3 years from your last contact.
Respond to your information requests
Legal basis: our legitimate interest in developing and promoting our business
Legal basis: our legitimate interest in responding to your requests.
Retention Period: Data is retained for the time necessary to process your request for information and deleted once the request for information has been processed.
Comply with the legal obligations applicable to our activity:
Legal basis: to comply with our legal and regulatory obligations.
Retention period: For invoices: invoices are archived for a period of 10 years.
Manage requests to exercise rights:
Legal basis: to comply with our legal and regulatory obligations.
Retention period: if we ask you for proof of identity, we keep it only for the time necessary to verify your identity. Once the verification is done, the receipt is deleted. If you exercise your right to opt-out of prospecting: we keep this information for 3 years.
4. Who are the recipients of your data?
Will have access to your personal data: (i) Our company’s personnel; (ii) Our subcontractors: hosting provider, training management and billing software, newsletter sending provider, CRM tool. If applicable: public and private organizations, exclusively to meet our legal obligations.