Your rights — GDPR

This page details the rights you have over your personal data and how to exercise them with Skilluv. It complements our Privacy Policy.

1. Legal framework

Your rights are notably guaranteed by:

  • the General Data Protection Regulation (EU) 2016/679 ("GDPR") for EU residents;
  • the French Data Protection Act No. 78-17 of 6 January 1978 as amended;
  • Beninese Act No. 2017-20 of 20 April 2018 (Digital Code, provisions on personal data protection);
  • equivalent local laws in other African and non-EU countries (Malabo Convention, national laws).

2. Your rights in detail

2.1 Right of access (Art. 15 GDPR)

You may obtain confirmation that your data is processed and receive a copy, together with information on the purposes, categories, recipients, retention periods, etc.

2.2 Right to rectification (Art. 16)

You may request the correction of inaccurate data or the completion of incomplete data. Most profile information can be edited directly from your settings.

2.3 Right to erasure (Art. 17 — "right to be forgotten")

You may request deletion of your data, subject to cases where we must retain it (legal obligation, defence of legal claims, etc.). Deleting your Account triggers deletion or anonymisation of your data within 30 days.

2.4 Right to restriction of processing (Art. 18)

In certain cases (contesting accuracy, pending objection, etc.), you may ask that the processing of your data be restricted — kept but not actively used.

2.5 Right to data portability (Art. 20)

For data processed based on your consent or contract performance, by automated means, you may receive your data in a structured, commonly used and machine-readable format, or have it transmitted directly to another controller where technically feasible.

2.6 Right to object (Art. 21)

You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interest. You may object without any reason to processing for direct marketing.

2.7 Withdrawal of consent (Art. 7(3))

Where processing is based on your consent (e.g. marketing communications, "allow expressions of interest" setting), you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.

2.8 Post-mortem directives (French Act 78-17, Art. 85)

You may set directives regarding the fate of your data after your death (retention, erasure, disclosure to a third party).

2.9 Automated individual decision-making (Art. 22)

You have the right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you. Skilluv does not currently make such decisions.

3. How to exercise your rights

To exercise any of these rights, you may:

  1. use the self-service tools in your account settings (profile editing, account deletion, visibility settings);
  2. email us at [TODO: dpo@skilluv.…] with the subject "GDPR rights request";
  3. write to the registered office address (see legal notice).

3.1 Proof of identity

In case of reasonable doubt about your identity, we may request additional proof. This information is used only to process your request.

3.2 Response time

We respond within one month of receiving your request. This period may be extended by two months given the complexity or number of requests; we will then inform you of the reasons for the delay.

3.3 Free of charge

Exercising your rights is free. For manifestly unfounded or excessive requests (in particular due to their repetitive nature), we may charge reasonable fees or refuse to act, with reasons.

4. Lodging a complaint with a supervisory authority

If, after contacting us, you believe your rights are not respected, you have the right to lodge a complaint with the competent data-protection authority:

  • France: CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr
  • Benin: APDP — Personal Data Protection Authority — apdp.bj
  • European Union: supervisory authority of your country of residence (list at edpb.europa.eu)
  • Other countries: competent national authority, where applicable.

5. Data Protection Officer (DPO)

[TODO: indicate whether a DPO is appointed, name and contact details, or "No DPO appointed, data-protection contact: …".]

Note: this document is a template. It must be reviewed and completed by a qualified legal professional before official publication, including the exact exercise procedure and any DPO appointment.