Skillhabit Learning AB (“SHAB”) offers a platform commercialized as Skillhabit Learning (“Skillhabit”) which provide the means to create courses and analyze results for organizations. Created material can be used to train and maintain key competencies within and outside any organization (“Customer”) using Skillhabit. The importance of protecting personal information is of key importance for SHAB. For this reason, SHAB ensures to have business procedures and security safeguards in place to protect personal information under its control. By signing up for Skillhabit and creating your own environment; all information within this document as well as terms of use is to be considered approved.
Information we collect
Account and Profile Information
Upon registration all users in Skillhabit will provide us with data to enable the usage of the functionality to its full extent. Information such as company name, user names, email addresses, payment information, configurable fields detailing organizational belonging and similar are collected by Skillhabit.
Created content
Within Skillhabit educational courses can be created containing videos, audio files, descriptions, images and any other material created by the users. SHAB take no responsibility of potential personal data in such added material. However SHAB reserves the right to take whatever action deemed necessary in case terms of use has been broken. This could be contacting customer or deletion of data.
Communication
As part of using the system communication through different channels such as mail or other notification channels will occur.
Logging and backups
Account activities done within the system and when the system communicates with its users may be logged in the system and kept safe by SHAB. Logs are regularly deleted of old content. The system is for security and safety reasons backup-ed regularly. These backup contain all data and old content is deleted on regular basis.
Website data collection
SimplyAnalytics
Skillhabit website, owned by SHAB, uses SimplyAnalytics which allows it to see information on user activities including, page views, source and time spent on our website. This information is displayed as numbers and cannot be tracked back to individuals. Users may read more of SHAB’s use of SimplyAnalytics by visiting their website.
Cookies
This website uses cookies. By continuing to use this website, you accept the handling of these according to current privacy policy.
Our processing of your information
Your provided personal data will be used to organize users in groups, create and execute courses and training within the system as well as performing analytics of results from training. Communication as part of interacting with Skillhabit will occur in form of mails or other notification procedures.
We use the users previous results to optimise and adapt our artificial intelligence to minimize disturbance to users as well as maximize combined knowledge level of key competences selected by our customer.
Who we share data with
SHAB will not sell, rent or trade personal information to any third party. However, SHAB may share personal information when authorized and/or required by law or as follows:
Service Providers. We may provide access to or share your information with select third parties who perform services on our behalf. These third parties provide a variety of services to us, including without limitation billing, sales, marketing, provision of content and features, analytics, data storage, communication, security, payment processing, and legal services. SHAB will ensure that the third party maintains reasonable data management practices covering confidentiality, security and preventing unauthorized access.
As permitted or required by law. SHAB may disclose personal information as required by applicable law or by proper legal or governmental authority. SHAB may also disclose information to its accountants, auditors and lawyers in connection with the enforcement or protection of its legal rights.
Business transaction. SHAB may disclose personal information to a third party in connection with a sale or transfer of business or assets. However, in the event the transaction is completed, personal information will remain protected by applicable data protection laws.
The way we secure your data
Data security is of utmost importance for SHAB and we take every reasonable effort in securing and protecting your data.
Security in our Software Development and Deployment
Skillhabit’s SW is version controlled. Changes to Skillhabit SW goes through a series of quality assurance principles to ensure highest possible quality as well as minimal risk of data loss or data breach. Each change is performed by at least two persons. Automated tests are developed and run for each change. Regressions test are executed and not until 100% pass rate is archived change can be deployed to production system. Prior to deployment a risk analysis is performed and actions taken to ensure minimal risk of data breach. We also work with third-party security professionals to test our code for common exploits and we use network scanning tools against our production servers. On a yearly basis we perform, document and act upon findings from penetration tests against our production servers.
Skillhabit architecture and reliability
Skillhabit uses GleSYS to host and manage user data. The database is replicated synchronously so that we can quickly recover from a database failure.
Office and data center security
SHAB office has a security design intended to prevent any compromise of its own information systems, computer networks or data files by unauthorized users. SHAB uses GleSYS. GleSYS employs a robust physical security program with multiple certifications, including ISO 9001:2015, ISO 14001:2015 and ISO/IEC 27001:2013. For more information on GleSYS physical security processes, please visit GleSYS Compliance & Security.
SHAB personnel security competence
Personnel at SHAB undergo regular competence development and diagnostics to ensure a high level of knowledge in Privacy Policy and data security. Results are documented.
Access handling to personal data stored in Skillhabit
SHAB strives to minimize people with access to personal data stored in Skillhabit, each person must have a genuine business need-to-know prior to access. Each access request is determined by the Company Chief Technology Officer, CTO.
Risk analysis
Each change to Skillhabit undergoes a risk analysis with respect to personal data. Not until risks has been validated and dealt with a release is possible. Documentation of process adherence is performed within our SW delivery process. SHAB also regularly, but at a minimum on a yearly basis, undergo review of policies and risks. Weaknesses if any are documented and acted on.
Data storage
SHAB will store and process the personal information in a manner consistent with industry security standards. SHAB is headquartered in Sweden and data is stored by default within European union.
However, if you have concerns that data is stored in Europe we have the ability to transfer data and only store data in the United States upon demand. Contact support@skillhabit.com in case of such demands.
Incident management
SHAB shall immediately notify Customer of any suspected or actual loss of data or breach which result in the loss or unauthorized access, disclosure, use or acquisition of personal data. SHAB shall promptly take all necessary and advisable corrective actions, and shall cooperate fully with Customer in all reasonable efforts to mitigate the adverse effects of Data Incident and to prevent its recurrence. All incidents are documented by appointed incident manager. All personal data incidents considering EU citizens shall be reported to Data protection Agency by Data Controller, Customer, within 72 hours. SHAB is registered in Sweden and appropriate agency is Swedish Data Inspection.
Compliance
General Data Protection Regulation - GDPR
Regulation (EU) 2016/679 - GDPR is an important regulation covering personal data for EU citizens and is valid for all global companies storing any personal data concerning EU citizens.
Skillhabit has from day one been designed with GDPR as an important guideline and the system is designed for privacy in all reasonable aspects.
In terms of GDPR and Skillhabit, SHAB is the Data Processor and Customer is Data Controller. In the capacity of Data Processor, SHAB covers following regulatory items:
Customer are responsible for collecting consent from the users they add to Skillhabit.
Right to be informed; This document holds the information on what data is stored and how it will be processed.
Right to access; SHAB will support Customer in presenting all personal data stored about a user.
Right to be rectified; SHAB will support Customer in correcting any personal data not correctly stored in Skillhabit.
Right to be forgotten; SHAB will support Customer in deleting user and all personal data connected to user.
Right to data portability; SHAB will export user data along with all personal data if so requested by Customer.
Right to object; Skillhabit, provided by SHAB, does individual adaptations to training schedule. This can be opted out on an individual basis. This will limit the functionality and may increase notifications from Skillhabit.
SHAB uses GleSYS as the operating environment for the system Skillhabit. GleSYS Privacy Policy.
Contact Us
If you have any questions about our practices or this Privacy Policy, please contact us at support@skillhabit.com.
Changes to this privacy policy
SHAB may change this Privacy Policy from time to time. If such changes are material, a notice of the changes will be posted along with the revised Privacy Policy, prior to the change becoming effective. We encourage you to visit this page from time to time for the latest on our privacy practices.