Privacy Policy

1. Data Controller

The data controller responsible for the processing of personal data is:

Humabloom
Association governed by the French Law of 1901
Email: contact@humabloom.org

Humabloom determines the purposes and means of processing personal data carried out in connection with the online training courses and subscriptions offered on the website.

2. Personal Data We Collect

In connection with course registration, subscription management and communications with users, Humabloom may collect the following personal data:

First and last name
Email address
Organization
Country
Job title or position
Login and connection data
Course progress and completion data
Subscription information
Billing information
Messages sent to customer support

Certain technical data may also be collected automatically, including IP addresses, connection logs and cookies that are necessary for the operation of the website.

3. Purposes of Processing

Personal data is collected for the following purposes:

Creating and managing user accounts
Providing access to online training courses
Managing subscriptions
Processing payments and billing
Providing technical support
Sending information relating to our training courses
Improving the services we provide

4. Legal Bases for Processing

Personal data is processed on the following legal bases:

Performance of a contract: to provide access to training courses and manage subscriptions
Compliance with legal obligations: including billing and accounting requirements
Legitimate interests of the association: in particular, to improve our services
Consent: for sending marketing communications

Where consent is the legal basis for processing, it may be withdrawn at any time.

5. Technical Service Providers and Data Processors

In connection with its activities, Humabloom uses technical service providers to operate the website and related services.

Hosting and infrastructure: LWS

LWS hosts the website and associated databases. Its services may involve the processing of personal data outside the European Union, in accordance with its data protection policy and the safeguards it has put in place.

Training management and access: LearnDash

LearnDash, a WordPress plugin, is used to manage training programmes, user accounts, course progress and access to protected content.

The use of this service may involve the processing of personal data outside the European Union, depending on the technical infrastructure used and the provider’s privacy policy.

Communications and email: Brevo

Brevo is used to send transactional emails, subscription-related communications, newsletters and informational campaigns.

This service may involve the processing of personal data outside the European Union, in accordance with the contractual safeguards put in place and Brevo’s privacy policy.

Consent is required for marketing communications where required by applicable law.

These service providers act as data processors or technical partners and process personal data only on Humabloom’s instructions.

Humabloom ensures that these providers offer sufficient safeguards to comply with the GDPR.

6. Subscription Payments

Payments are processed through secure payment service providers selected by Humabloom.

These providers collect and process the information necessary to complete financial transactions. Humabloom does not have access to users’ complete banking information.

Payment service providers act as independent data controllers with regard to financial data.

The list of payment service providers used by Humabloom will be specified on the website when they are implemented.

7. Subscriptions and Access to Training Courses

Training courses are offered through subscriptions for a specified period.

During the subscription period:

Users retain access to the course content
Their course progress data is recorded

When the subscription expires:

Access to the course content is deactivated
Personal data is retained in accordance with applicable legal requirements

Data may be retained in particular for contractual and accounting purposes and to provide evidence of transactions where required.

8. Transfers of Personal Data Outside the European Union

When certain technical tools are used, personal data may be transferred outside the European Union.

Humabloom ensures that such transfers are based on appropriate safeguards, including:

Standard Contractual Clauses
Data protection mechanisms recognized under applicable regulations

The technical service providers mentioned above may process data in third countries in accordance with their respective data protection policies.

9. Data Retention

Personal data is retained for the following periods:

Subscription-related data: duration of the contract + 5 years
Accounting data: 10 years
Marketing and prospecting data: 3 years from the last contact
User account data: retained while the account remains active and subsequently archived

Data may be deleted upon request where permitted by applicable regulations.

10. Your Rights

In accordance with the GDPR, individuals have the following rights:

The right to access their personal data
The right to rectify inaccurate or incomplete data
The right to request erasure of their data
The right to restrict processing
The right to object to processing
The right to data portability

Requests may be sent to:

contact@en.humabloom.org

Humabloom will respond within a maximum period of one month.

11. Data Security

Humabloom implements appropriate technical and organizational measures to protect personal data against:

Unauthorized access
Loss
Disclosure
Alteration

Access to databases is restricted to authorized individuals.

12. Cookies

The website uses cookies:

Necessary for the operation of the website
Related to authentication
Used to analyze how the website is used
Potentially used for statistical purposes

Where required by applicable regulations, an information banner allows users to accept or refuse non-essential cookies.

13. Changes to This Privacy Policy

Humabloom reserves the right to modify this Privacy Policy to reflect changes in legal, technical or organizational requirements.

The version currently in force is the version published on the website.