01Regulatory framework
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016,
known as the GDPR, governs the processing of personal data
on the territory of the European Union and confers rights on the natural
persons concerned. Although established outside the European Union, SkewCorp
complies in full with the GDPR for its processing relating to persons
established in the Union, as well as with the applicable legislation on
data protection.
Data arising from participation in the Skeworl# environments falls under a distinct framework, governed by participation charter 4.2; it is neither collected nor processed by this site.
02SkewCorp commitments
- Minimisation — we collect only the data strictly necessary for the declared purposes.
- Sovereignty — all data is hosted in the EU and in Switzerland, on the Weave infrastructure.
- Security — tier-cryptographic chain of custody, ARIA 4.2.1 acceptance protocol, quarterly audits.
- Traceability — every access to data is logged and kept for 5 years.
- Notification — any breach is notified to the competent authority within 72 hours (Art. 33 GDPR).
- Privacy by design — new features are the subject of a prior impact assessment (Art. 35).
03Your rights in detail
Access
To obtain confirmation that your data is processed and to receive a copy of it, in a readable format (Art. 15 GDPR).
Rectification
To have any inaccurate data corrected or any incomplete data completed (Art. 16).
Erasure
To request the deletion of your data — save where a legal retention obligation says otherwise — known as the “right to be forgotten” (Art. 17).
Restriction
To request the temporary freezing of a contested processing operation, pending verification (Art. 18).
Portability
To receive your data in a structured, commonly used and machine-readable format (Art. 20).
Objection
To object to processing based on legitimate interest or on canvassing (Art. 21). For canvassing, the right is absolute.
Automated decision
Not to be subject to a decision based solely on automated processing producing legal effects concerning you (Art. 22).
Post mortem
To lay down directives on the fate of your data after your death, pursuant to French law no. 2016-1321.
Withdrawal of consent
Where the processing rests on consent, you may withdraw it at any time, without consequence for its past lawfulness.
04How to exercise your rights
- Send your request by email to dpo@skewcorp.com or by post to the head office address (see legal notice).
- State the right you wish to exercise and the scope of the request.
- Attach a copy of a valid identity document, only where there is legitimate doubt as to your identity.
- The reply is sent to you within one month, extendable by two months for complex requests (Art. 12(3)).
- Exercising these rights is free of charge. A contribution to reasonable costs may be requested only in the case of manifestly unfounded or excessive requests.
05Complaint to the supervisory authority
If you consider that your rights have not been respected, you may at any time,
without prejudice to any other remedy, lodge a complaint with
the competent authority of your place of residence, of work or of the place of the
alleged breach.
Competent supervisory authorities
- Switzerland — Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
- France — Commission nationale de l'informatique et des libertés (CNIL) — cnil.fr
- Germany — Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — bfdi.bund.de
- Belgium — Data Protection Authority (DPA) — autoriteprotectiondonnees.be
- Italy — Garante per la protezione dei dati personali — garanteprivacy.it
- European Union — European Data Protection Board (EDPB) — edpb.europa.eu
