Privacy policy
Skillhabit Learning AB (“SHAB”) offers a platform commercialized as Skillhabit Learning (“Skillhabit”), which provides the means to create courses and analyze results for organizations. Created material can be used to train and maintain key competencies within and outside any organization (“Customer”) using Skillhabit. The importance of protecting personal information is of key importance for SHAB. For this reason, SHAB ensures to have business procedures and security safeguards in place to protect personal information under its control. By signing up for Skillhabit and creating your own environment, all information within this document as well as our Terms and conditions is to be considered approved.
Information we collect
Account and profile information
Upon registration, all users in Skillhabit will provide us with data to enable the usage of the functionality to its full extent. Information such as company name, user names, email addresses, payment information, configurable fields detailing organizational belonging and similar are collected by Skillhabit.
Created content
Within Skillhabit, educational courses can be created containing videos, audio files, descriptions, images and any other user-generated material. SHAB takes no responsibility for potential personal data in such added material. However, SHAB reserves the right to take whatever action deemed necessary in case our Terms and conditions have been broken. This may inclulde contacting Customer or deleting data.
Communication
As part of using the system, communication through different channels such as mail or other notification channels will occur.
Logging and backups
Account activities done within the system and when the system communicates with its users may be logged in the system and kept safe by SHAB. Logs are regularly cleared of old content. For security and safety reasons, the system is regularly backed up. These backups contain all data and old log content is regularly deleted.
Website data collection
SimplyAnalytics
Skillhabit's website, owned by SHAB, uses SimplyAnalytics, which allows us to see information on user activities, including page views, sources and time spent on our website. This information is displayed as numbers and cannot be tracked back to individuals. Users may find out more by visiting SimplyAnalytics' website.
Cookies
This website uses cookies. By continuing to use this website, you accept the handling of these according to this Privacy policy.
Our processing of your information
Your provided personal data will be used to organize users in groups, create and execute courses and training within the system, as well as to perform analytics of results from training. Communication as part of interacting with Skillhabit will occur in the form of emails or other notification procedures.
We use data from previous user interactions to optimize and adapt our artificial intelligence. This helps us minimize disturbance to users as well as maximize proficiency in key areas selected by Customer.
Who we share data with
SHAB will not sell, rent or trade personal information to any third party. However, SHAB may share personal information when authorized and/or required by law or as follows:
- Service providers. We may provide access to or share your information with select third parties who perform services on our behalf. These third parties provide a variety of services to us, including without limitation billing, sales, marketing, provision of content and features, analytics, data storage, communication, security, payment processing and legal services. SHAB will ensure that the third party maintains reasonable data management practices covering confidentiality, security and prevention of unauthorized access.
- As permitted or required by law. SHAB may disclose personal information as required by applicable law or by proper legal or governmental authority. SHAB may also disclose information to its accountants, auditors and lawyers in connection with the enforcement or protection of its legal rights.
- Business transaction. SHAB may disclose personal information to a third party in connection with a sale or transfer of business or assets. However, in the event the transaction is completed, personal information will remain protected by applicable data protection laws.
The way we secure your data
Data security is of utmost importance for SHAB and we make every reasonable effort to secure and protect your data.
Security in our software development and deployment
Skillhabit’s software (SW) is version controlled. Changes to Skillhabit SW go through a series of quality assurance principles to ensure the highest possible quality as well as minimal risk of data loss or data breach. Each change is performed by at least two persons. Automated tests are developed and run for each change. Regression tests are executed and change cannot be deployed to the production system until 100% pass rate is archieved. Prior to deployment, a risk analysis is performed and actions are taken to ensure minimal risk of data breach. We also work with third-party security professionals to test our code for common exploits and we use network scanning tools against our production servers. On a yearly basis we perform, document and act upon findings from penetration tests against our production servers.
Skillhabit architecture and reliability
Skillhabit uses GleSYS to host and manage user data. The database is replicated synchronously so that we can quickly recover from a database failure.
Office and data center security
SHAB office has a security design intended to prevent any compromise of its own information systems, computer networks or data files by unauthorized users. SHAB uses GleSYS. GleSYS employs a robust physical security program with multiple certifications, including ISO 9001:2015, ISO 14001:2015 and ISO/IEC 27001:2013. For more information on GleSYS physical security processes, please visit GleSYS Compliance & Security.
SHAB personnel security competence
Personnel at SHAB undergo regular competence development and diagnostics to ensure a high level of knowledge in privacy policy and data security. Results are documented.
Access handling to personal data stored in Skillhabit
SHAB strives to minimize people with access to personal data stored in Skillhabit. Prior to access, each person must have a genuine business need-to-know. Each access request is determined by the company Chief Technology Officer, CTO.
Risk analysis
Each change to Skillhabit undergoes a risk analysis with respect to personal data. Not until risks have been validated and dealt with is a release possible. Documentation of process adherence is performed within our SW delivery process. SHAB also regularly, but at a minimum on a yearly basis, undergoes review of policies and risks. Weaknesses, if any, are documented and acted on.
Data storage
SHAB will store and process the personal information in a manner consistent with industry security standards. SHAB is headquartered in Sweden and data is stored by default within the European union.
However, upon demand we have the ability to transfer your data for storage in the United States. Contact support@skillhabit.com in case of such need.
Incident management
SHAB shall immediately notify Customer of any suspected or actual loss of data or breach that may result in the loss or unauthorized access, disclosure, use or acquisition of personal data. SHAB shall promptly take all necessary and advisable corrective actions and shall cooperate fully with Customer in all reasonable efforts to mitigate the adverse effects of a data incident and to prevent its recurrence. All incidents are documented by an appointed incident manager. All personal data breaches affecting EU citizens must be reported to the relevant Data Protection Authority by Data Controller, Customer, within 72 hours of becoming aware of the breach, if the incident is likely to result in a risk to the rights and freedoms of natural persons. SHAB is registered in Sweden and the appropriate authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten or IMY).
Compliance
General Data Protection Regulation - GDPR
Regulation (EU) 2016/679 – GDPR is an important regulation covering personal data for EU citizens and is valid for all global companies storing any personal data concerning EU citizens.
Skillhabit has from day one been designed with GDPR as an important guideline and the system is designed for privacy in all reasonable aspects.
In terms of GDPR and Skillhabit, SHAB is the Data Processor and Customer is the Data Controller. In the capacity of Data Processor, SHAB covers the following regulatory items:
- Consent: Customer is responsible for collecting consent from the users they add to Skillhabit.
- Right to be informed: This document holds the information on what data is stored and how it will be processed.
- Right to access: SHAB will support Customer in presenting all personal data stored about a user.
- Right to be rectified: SHAB will support Customer in correcting any personal data not correctly stored in Skillhabit.
- Right to be forgotten: Upon request, SHAB will support Customer in deleting user and personal data connected to user.
- Right to data portability: SHAB will export user data along with all personal data if so requested by Customer.
- Right to object: Skillhabit makes individual adaptations to training schedules. Users have the right to opt out of these adaptations on an individual basis. Opting out will limit the functionality of Skillhabit and may increase notifications.
SHAB uses GleSYS as the operating environment for the system Skillhabit. GleSYS Privacy Policy.
Contact us
If you have any questions about our practices or this Privacy policy, please contact us at support@skillhabit.com.
Changes to this Privacy policy
SHAB may change this Privacy policy at any time. If such changes are material, a notice of the changes will be posted along with the revised Privacy policy before the changes take effect. We encourage you to regularly visit this page for the latest updates on our privacy practices.
Need help from one of our experienced developers?
