Privacy Policy

Article 1: Preamble

The purpose of this privacy policy is to inform users of the site:

• About how their personal data is collected. Personal data is defined as any information that can be used to identify a user. This may include: their first and last name, age, mailing or email address, location, or IP address (non-exhaustive list);

• About the rights they have regarding this data;

• About the person responsible for the processing of personal data collected and processed;

• About the recipients of this personal data;

• About the site's policy regarding cookies.

This policy supplements the Legal Notice and the General Terms of Use.

Article 2: Principles relating to the collection and processing of personal data

In accordance with Article 5 of European Regulation 2016/679, personal data must be:

• Processed lawfully, fairly, and in a transparent manner in relation to the data subject;

• Collected for specified (see Article 3.1 herein), explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes;

• Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;

• Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;

• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;

• Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Processing is lawful only if, and to the extent that, at least one of the following conditions is met:

• The data subject has given consent to the processing of their personal data for one or more specific purposes;

• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

• Processing is necessary for compliance with a legal obligation to which the controller is subject;

• Processing is necessary in order to protect the vital interests of the data subject or of another natural person;

• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Article 3: Personal data collected and processed

Article 3.1: Collected data

The personal data collected as part of our activity are as follows:

• Identification data (last name, first name, email address)

• Documents imported by users (exam subjects, student papers)

• Application usage data (login history, actions performed)

• Navigation data (cookies, IP address)

The collection and processing of this data serve the following purposes:

• Creation and management of your Examino account

• Provision of requested services (importing, storage, and processing of documents)

• Support for using the application via our customer service

• Improvement of our services and development of new features

• Communication regarding updates and new application features

• Compliance with our legal and regulatory obligations

Article 3.2: Data collection method

When you use our website or application, the following data is automatically collected:

• IP address

• Connection data (date, time)

• Type of browser used

• Cookies strictly necessary for the operation of the application

Other personal data is collected when you perform the following operations on the platform:

• During registration: last name, first name, email address (purpose: creation of user account)

• When importing documents: exam subjects and student papers (purpose: provision of archiving and processing service)

• When using features: interaction data with the application (purpose: service improvement)

They are kept by the data controller under reasonable security conditions, for a period of 6 years after you stop using the services.

The company may retain certain personal data beyond the periods announced above in order to fulfill its legal or regulatory obligations.

Article 3.3: Data hosting

The personal data we process is stored by our hosting providers Amazon Web Services (AWS) and Backblaze on servers located in the United States.

By using our application, you acknowledge and agree that your personal data may be transferred, stored, and processed in the United States. To ensure an adequate level of protection for your personal data, we have implemented appropriate safeguards with our service providers, notably through the conclusion of standard contractual clauses established by the European Commission.

We implement technical and organizational security measures to ensure the protection of your personal data, including the encryption of data transmitted and stored on our servers, the use of advanced security protocols, and regular backups to ensure the integrity and availability of your data.

Article 4: Data controller and data protection officer

Article 4.1: The data controller

Personal data is collected by EXAMINO, a simplified joint-stock company with a share capital of €1000, whose registered office is located at 49 RUE DE PONTHIEU 75008 PARIS, registered with the Paris Trade and Companies Register under number 845 015 858, represented by Mr. Dimitri NICOLAS acting and having the necessary powers as president.

The data controller for personal data can be contacted as follows:

By mail at the address: EXAMINO, 49 RUE DE PONTHIEU 75008 PARIS

By email: dpo@examino.ai

Article 4.2: The data protection officer

The company's or controller's data protection officer is:

Mr. Dimitri NICOLAS
49 RUE DE PONTHIEU 75008 PARIS
dpo@examino.ai.

If you believe, after contacting us, that your "Data Protection and Civil Liberties" rights are not respected, you may file a complaint with the CNIL.

Article 5: User rights regarding data collection and processing

Any user concerned by the processing of their personal data may exercise the following rights, in accordance with European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of January 6, 1978):

• Right of access, rectification, and right to erasure of data (set forth respectively in Articles 15, 16, and 17 of the GDPR);

• Right to data portability (Article 20 of the GDPR);

• Right to restriction (Article 18 of the GDPR) and to objection to data processing (Article 21 of the GDPR);

• Right not to be subject to a decision based solely on automated processing;

• Right to determine the fate of data after death;

• Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your request to EXAMINO or by email to dpo@examino.ai.

In order for the data controller to fulfill your request, the user may be required to provide certain information such as: first and last names, email address, as well as account, personal space, or subscriber number.

Consult the cnil.fr website for more information on your rights.

Article 6: Conditions for modifying the privacy policy

The site publisher EXAMINO reserves the right to modify this Policy at any time to ensure its compliance with current law for site users.

Any modifications will not affect purchases previously made on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user upon validation of the purchase.

Users are invited to review this Policy each time they use our services, without formal notification being necessary.

This policy, issued on October 20, 2024, was updated on April 20, 2025.