Compilatio acts as a subcontractor of the institution and uses the data provided by it only upon written instruction.
Processing of personal data
You can view the informational notice “GDPR compliance: how is your personal data processed?". It is updated as necessary, so remember to subscribe to receive updates.
In the context of providing Compilatio services, the two articles below guide Compilatio project leads (account managers) and teachers to handle GDPR requests that may come from students and teachers:
- What should you do when a student asks a teacher to exercise one of their rights?
- What should you do when a teacher asks the Compilatio manager/project lead to exercise one of their rights?
Register of all categories of processing activities
Article 28 of the GDPR defines the subcontractor's obligations towards its client. In particular, it requires keeping a “Register of all categories of processing activities”.
It identifies all the processing operations that Compilatio is required to perform based on written instruction from the data controller or one of its representatives.
This register:
- is accessible by clicking here
- is one of the contractual documents and is delivered at the same time as the General Terms and Conditions of Sale.
If you think any data processing has been carried out contrary to applicable regulations, you may file a complaint with the CNIL (https://www.cnil.fr/).