SkillPills Privacy Policy

1. Introduction

SkillPills is a corporate learning application built on Microsoft’s Power Platform. It enables employees to discover and engage with curated YouTube tutorials in a secure, integrated digital environment.

This privacy policy explains how SkillPills processes personal data in compliance with the EU General Data Protection Regulation (GDPR – Regulation 2016/679) and the Swiss Federal Act on Data Protection (nFADP – effective from September 1, 2023) and subsequent amendments and additions.

SkillPills operates entirely within your organization’s Microsoft 365 tenant and follows the data handling and security measures provided by Microsoft Power Platform. You can refer to Microsoft’s privacy policy here: https://privacy.microsoft.com/en-us/privacystatement.

2. Data Collection

SkillPills collects and uses the following personal data from users via the Microsoft 365 environment:

First name
Last name
Email address
Job title

Location (if included in the user profile)

This data is used solely to personalize the user experience within SkillPills and provide access control and usage tracking features.

3. Purpose and Legal Basis of Processing

Personal data is used for the following purposes:
Displaying user-specific learning dashboards and saved content
Managing user permissions and access to curated tutorials
Tracking user engagement for internal analytics
Enabling content sharing within the organization

SkillPills does not use personal data for marketing purposes or any form of automated decision-making or profiling.

4. Data Retention

SkillPills does not independently store personal data outside of your organization’s Microsoft 365 environment. The retention of personal data within SkillPills relies entirely on your organization’s data retention policies, specifically those applied to the Office 365 user profile.

When a user leaves the organization and their Office 365 profile is deactivated or deleted according to your internal processes, their associated data and access within SkillPills are automatically governed and cleaned up in accordance with those same retention policies.

SkillPills does not retain or archive any personal data beyond what is available through your Microsoft environment.

5. Data Storage and Security

All personal data used by SkillPills remains within your organization’s Microsoft Power Platform and SharePoint Online environment.
No personal data is transmitted outside of your tenant or stored on external servers.

SkillPills does not store, transmit, or process video content; it only references public YouTube URLs.

6. Data Sharing

SkillPills does not share any personal data with third parties.
There is no data transfer to external platforms or services.

All interactions with YouTube content occur via embedded links that do not send user data to YouTube. YouTube may log standard access information as per its own privacy policy.

7. International Data Transfers

SkillPills does not transfer personal data outside of the European Economic Area (EEA) or Switzerland.

All data remains within the Microsoft infrastructure governed by your organization. Should international transfers occur (e.g., Microsoft hosting location changes), your organization is responsible for ensuring adequate safeguards in accordance with GDPR Articles 44–49 and nFADP Article 16 and subsequent amendments and additions.

8. User Rights

Under GDPR and nFADP, users have the following rights:

Right to access their personal data
Right to rectification of inaccurate or incomplete data
Right to erasure (“right to be forgotten”)
Right to restriction or objection to processing, where applicable
Right to lodge a complaint with a supervisory authority (e.g., Swiss FDPIC or relevant EU DPA)

Users can exercise these rights through your organization’s internal data protection or IT channels.

9. Roles and Responsibilities

SkillPills acts as a software provider and may qualify as a data processor or sub-processor depending on your organizational structure and agreements with Microsoft.

Your organization remains the data controller, defining the purposes and means of the data processing.

10. Changes to this Policy

This privacy policy may be updated periodically. Any significant changes will be communicated through internal channels within your organization.

11. Contact

For any privacy-related questions about SkillPills, please contact:

Support Team – SkillPills
Email: support.skillpills@progeswiss.ch