Privacy Policy | Formation Magasin

Introduction

Formation Magasin ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce training platform at https://formation.fthek.be.

Data Accessed

When you sign in with Google, we access the following Google user data:

Email address
Name
Profile picture (if available)

For Google Sign-In, we request the minimum OAuth scopes needed for authentication (typically openid, email, and profile).

We do not access your Google contacts, calendar, Drive files, or any other Google services data unless you explicitly authorize additional scopes in the future.

Google User Data (Google Sign-In)

This section specifically describes how we handle data obtained through Google Sign-In, in compliance with the Google API Services User Data Policy.

Data Accessed

When you authenticate using Google Sign-In, we request access to the following information from your Google account:

Email address - Used to identify your account and send platform notifications
Name - Used to personalize your experience and display your identity within the platform
Profile picture - Displayed in the application interface (optional, if available on your Google account)

We only request the minimum scopes necessary for authentication. We do not access your Google contacts, calendar, Drive files, or any other Google services data.

As part of the sign-in process, Google may also provide authentication credentials (such as an ID token and, in some cases, OAuth access/refresh tokens). If provided, these are stored and used only to maintain your authenticated session and account connection. We do not use them to call other Google APIs unless you explicitly authorize additional scopes.

Data Usage

Google user data is used exclusively for the following purposes:

Authentication: To verify your identity and allow you to sign in to the platform securely
Account identification: To create and maintain your user account within our system
Platform personalization: To display your name and profile picture within the application
Communication: To send you training-related notifications, reminders, and important platform updates via email

We do not use Google user data for advertising, marketing to third parties, or training AI/ML models.

Data Sharing

Your Google user data (email, name, profile picture) may be shared in the following limited circumstances:

Within your organization: Your name and email may be visible to managers and administrators within your organization for training management purposes
Service providers: We use Vercel for hosting and a database provider for data storage. These providers process your data only as necessary to provide their services and are bound by confidentiality obligations

We do not sell, rent, or share your Google user data with third parties for their own marketing or advertising purposes.

Data Storage & Protection

Google user data is protected through the following measures:

Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
Secure database storage: Your data is stored in a PostgreSQL database with encrypted connections and access controls
Access controls: Database access is restricted to authorized systems and personnel only
OAuth 2.0 security: We use Google's OAuth 2.0 protocol for secure authentication. We never see or store your Google password

Data Retention & Deletion

Retention period: We retain your Google user data for as long as your account is active on our platform. If your account becomes inactive, your data may be retained for up to 12 months before automatic deletion, unless longer retention is required for legal or compliance purposes.

Requesting deletion: You can request deletion of your Google user data at any time by:

Emailing us at support@fthek.be with the subject line "Data Deletion Request"
Contacting your organization's administrator to request account removal

Upon receiving a valid deletion request, we will delete your Google user data within 30 days. You will receive confirmation once the deletion is complete.

Revoking access: You can also revoke our application's access to your Google account at any time through your Google Account permissions settings. Note that revoking access will prevent you from signing in to the platform using Google.

Data Collection

Information from Google Sign-In

When you sign in using Google, we receive:

Your email address
Your name
Your profile picture (if available)

Information You Provide

Through your use of the platform, we may collect:

Training progress and completion records
Assessment responses
Comments or feedback you submit

Information from Integrations

If your organization uses our integrations, we may receive work-related data such as:

Shift schedules and work hours (from Tanda/Workforce)
Location and department assignments
Role and position information

Automatically Collected Information

We automatically collect certain technical information:

Browser type and version
Access times and dates
Pages viewed within the application

Data Usage

We use the information we collect to:

Authenticate your identity and provide access to the platform
Track and display your training progress
Generate reports for managers and administrators
Send training-related notifications and reminders
Improve and optimize our platform
Comply with legal obligations

Data Sharing

We may share your information with:

Your Employer/Organization

Training progress, completion records, and related data are shared with authorized personnel within your organization (managers, administrators, HR staff).

Service Providers

We use third-party services to operate our platform:

Vercel - Application hosting
Google - Authentication services
Database provider - Data storage

Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

Data Storage & Protection

We store account and training data in our application database (PostgreSQL) and in application logs as needed for security and troubleshooting. Data is hosted on our infrastructure and service providers (such as our hosting provider and database provider).

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of data in transit (HTTPS)
Secure authentication via Google OAuth
Access controls limiting data access to authorized personnel
Regular security reviews

Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability
Withdraw consent (where processing is based on consent)

To exercise these rights, contact us at support@fthek.be.

Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide services. Training records may be retained longer for compliance and reporting purposes as required by your organization.

When you or your organization requests deletion, we will remove your personal data within 30 days, except where retention is required by law.

Cookies

We use essential cookies for:

Authentication and session management
Security (CSRF protection)

We do not use advertising or tracking cookies. Essential cookies cannot be disabled as they are necessary for the platform to function.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Children's Privacy

Our platform is intended for use by employees of organizations. We do not knowingly collect information from children under 16. If we learn we have collected data from a child under 16, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending an email. Your continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

Email: support@fthek.be