Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect personal data within our training activities and through our learning platform (Moodle). It is designed to comply with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the requirements of the French Qualiopi certification (Référentiel National Qualité).

1. Data Controller

The data controller responsible for processing your personal information is:
IUT Lorient
10, rue Jean Zay - 56321 Lorient
Email: training.admin@nessie-energy-ubs.eu

2. Types of Personal Data Collected

• Identification data (name, email address, phone number)
• Professional information (job title, employer, training needs)
• Learning data (course enrollment, progress, activity logs, assessment results)
• Technical data (IP address, browser type, connection logs)
• Administrative data required for certification or funding (OPCO, CPF, training contracts)

All data collected is strictly necessary for the delivery and management of our training services.

3. Purpose of Data Processing

• Managing training registrations and administrative follow-up
• Providing access to the learning platform and training resources
• Monitoring learning progress and issuing certificates
• Ensuring compliance with Qualiopi requirements (proof of attendance, evaluations, traceability)
• Improving training quality through feedback and performance analysis
• Meeting legal obligations related to professional training in France

4. Legal Basis for Processing

We process your data based on:

• Your consent (account creation, platform usage)
• The execution of a training contract
• Our legal obligations as a certified training provider
• Our legitimate interest in ensuring the quality and security of our services

5. Data Storage and Security

Your data is stored securely on servers located in the European Union. We implement technical and organizational measures to protect your data, including:

• Secure hosting
• Access control and authentication
• Encryption of sensitive data where appropriate
• Regular backups
• Monitoring and incident prevention

6. Data Sharing

Your data may be shared only with:

• Training partners or instructors involved in your course
• Certification bodies (if applicable)
• Funding organizations (OPCO, CPF, employer)
• Legal authorities when required

We never sell or transfer your data for commercial purposes.

7. Data Retention Period

Data is retained only for the duration necessary to fulfill training, administrative, and legal obligations:

• Training records: 5 years (Qualiopi requirement)
• Learning platform data: duration of your account + 2 years
• Financial and contractual documents: 10 years (legal obligation)

8. Your Rights Under GDPR

You have the following rights:

• Right of access
• Right to rectification
• Right to deletion
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time

To exercise your rights, please contact:
Nessie On Line DPO
Email: training.admin@nessie-energy-ubs.eu
Phone: 33 297872889

9. Cookies and Tracking Technologies

Our platform uses cookies to:

• Ensure proper functioning of Moodle
• Improve user experience
• Analyze training activity for quality improvement

You may manage or disable cookies through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy to reflect regulatory changes or improvements to our services. The latest version will always be available on our training platform.

11. Contact Information

For any questions regarding data protection or your rights, please contact:
Nessie On Line DPO
Email: training.admin@nessie-energy-ubs.eu
Phone: 33 297872889