In short. We collect what is necessary to create your account, give you access to the content, issue your certificates and invoice you. We do not sell any data. Your data is hosted in France. You can access, correct or request deletion of your data at any time.
1. Data Controller
The data controller is DATAGOZ, whose contact details are available in the legal notice.
For any question about your data: contact@datagoz.com.
DATAGOZ is not required to appoint a Data Protection Officer. Questions about your data are handled by our data contact person, reachable at the address above.
2. Data Collected
What you give us
- When you sign up: first name, last name, e-mail address, password (encrypted), phone number and date of birth if you provide them.
- In your profile: employment status, job title, sector, employer, training goal, intended funding method — all optional.
- If you write to us: the content of your messages.
- If you subscribe: billing address. Bank card details are processed directly by Stripe and do not pass through our servers.
What is generated by your use
- Progress in courses, lessons viewed, time spent, experience points.
- Quiz and assessment results.
- Certificates obtained.
- Connection dates and IP address, for security purposes.
If you sign in with Google
We receive from Google your e-mail address, your name and a technical identifier. We do not receive your password or the content of your Google account.
3. Why we process them
| Purpose | Legal basis |
|---|---|
| Create and manage your account, give you access to the content | Performance of a contract |
| Track your progress and issue your certificates | Performance of a contract |
| Manage subscriptions, payments and invoicing | Performance of the contract and legal obligation |
| Responding to your requests and providing support | Legitimate interest |
| Securing the service, preventing fraud and automated registrations | Legitimate interest |
| Sending you our news and new learning paths | Your consent, which you may withdraw at any time |
| Measuring website audience | Your consent for non-essential cookies |
The optional fields in your profile are only used to direct you to relevant content. Leaving them blank does not limit your access in any way.
4. Retention periods
| Data | Duration |
|---|---|
| Active account | As long as the account exists |
| Inactive account | 3 years after the last login, then deletion after a reminder |
| Progress data and certificates | 3 years after the end of the subscription |
| Invoices and accounting documents | 10 years (legal obligation) |
| Connection logs | 12 months |
| Marketing consent | 3 years after the last contact |
| Support messages | 3 years |
5. Who has access
Your data is accessible to authorised DATAGOZ staff and to our subcontractors, strictly within the scope of their mission.
| Service provider | Role | Location |
|---|---|---|
| OVH SAS | Website and database hosting | France |
| Stripe | Payment processing | Ireland / United States |
| Google sign-in and reCAPTCHA anti-bot protection | United States |
We do not sell, rent or exchange any personal data. Your data may be disclosed to an administrative or judicial authority when required by law.
If your access was opened by your employer under a team licence, the designated manager can view your progress and certificates for the relevant content. They have no access to your password, nor to your personal data beyond this scope.
6. Hosting and transfers
The data is hosted in France by OVH.
Some of our subcontractors are established outside the European Union. These transfers are governed either by an adequacy decision of the European Commission or by the standard contractual clauses. The corresponding documents can be obtained on request.
7. Security
We implement appropriate measures to protect your data:
- HTTPS encryption of communications across the entire site.
- Passwords are stored as encrypted hashes, never in plain text.
- Access to data is limited to authorised personnel.
- Protection against automated sign-ups.
- Regular backups.
No system is infallible, so we invite you to choose a unique password and never share it. In the event of a personal data breach likely to pose a risk to your rights, we notify the CNIL within 72 hours and inform you directly when the risk is high.
8. Your rights
In accordance with the General Data Protection Regulation, you have the following rights:
- Access — obtain a copy of the data we hold about you.
- Rectification — have inaccurate information corrected.
- Erasure — request the deletion of your data, subject to our legal retention obligations.
- Restriction — request that the processing of disputed data be frozen.
- Objection — object to processing based on our legitimate interest.
- Portability — receive your data in a machine-readable format.
- Withdrawal of consent — at any time, for processing that depends on it, without affecting what was done beforehand.
- Post-mortem directives — define what happens to your data after your death.
To exercise these rights, write to contact@datagoz.com. We respond within one month. Proof of identity may be requested if there is reasonable doubt about your identity.
You may also lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris — cnil.fr.
9. Minors
The service is not intended for children under 15 years of age. Registering a minor under 15 requires the consent of their legal guardian. If we find that an account has been created without this authorisation, it is deleted.
10. Changes
This policy may change. Any substantial change will be notified to you by e-mail or by a message in your personal area, at least 30 days before it takes effect. The date of the last update appears at the top of this page.