As the data controller under the French Data Protection Act, École Centrale de Lyon places great importance on the protection of your personal data.
By reading this Policy, you will learn how we collect, manage, and process this information. We also inform you of your rights regarding your personal data and how you can exercise them.
For the purposes of this Policy, the terms “Data Controller,” “Data Subjects,” “Personal Data,” “Process/Processing,” “Processor,” “Data Protection Impact Assessment,” and “Personal Data Breach” shall have the meanings assigned to them in the applicable personal data protection legislation.
What is personal data?
It refers to any information relating to an identified or identifiable natural person, either directly or indirectly. This includes, for example, your name, address, phone number, etc.
Nature and Purpose of Data Processing
As part of our business activities, we collect and process various types of personal data depending on the offers and services you have subscribed to and the forms you have filled out. This processing is based on one of the following legal grounds:
Nature of the Data
This includes identification data (last names, first names) and contact information (email addresses).
Data Collection and Purpose
We use this data to identify you and contact you in order to facilitate our communications, follow up on your requests and complaints, and enable you to receive faster responses from us, for the purpose of our legitimate interest.
In connection with the purpose listed above, we collect personal data about you online through email correspondence and contact forms exchanged between you and us for any requests for information.
Data Retention
Data collected to identify you and contact you in order to facilitate our communications is retained for a maximum of 1 year and within the limits of your consent.
We retain your data only for as long as necessary to process it in accordance with the specified purpose.
Nature of the Data
This includes personal identification data (last names, first names) and contact information (email addresses). Newsletters also contain a tracking pixel used to measure their open rates for statistical purposes.
Data Collection and Purposes
We use this data to process your subscription to the School’s newsletter and other communications based on your legal basis of consent.
In this context, we collect your personal data online via the newsletter sign-up link to register you and send you the newsletters.
Data Retention
We retain your data only for as long as necessary to process it in accordance with the specified purpose.
The data collected for your subscription to the School’s newsletters and updates is retained for a maximum of 4 years, subject to the limits of your consent; this includes identity information (last name, first name) and contact information (email addresses).
Data Retention for Statistical Purposes
Your personal data may be analyzed to help us maintain a thorough understanding of our customer base and improve customer satisfaction.
In such cases, the data is aggregated so that we can process it statistically and perform analyses that enable us to continuously improve the quality of our services.
We pursue several objectives in doing so:
- To improve our understanding of your needs or areas of dissatisfaction.
- Compile statistics on the use of our offerings, services, websites, and applications.
- To improve the services we offer.
- Conduct studies to explore new offerings and services to be developed.
- Generate performance metrics.
- This processing for statistical purposes is based on our legitimate economic and commercial interest.
All of the aforementioned data may also be subject to the following processing:
- To enable us to ensure sound management of our accounting, which is carried out on the basis of a legal or regulatory obligation.
- To enable us to monitor and manage any disputes and to protect our rights and interests, this is done based on the performance of the Contract.
- To respond to a judicial or administrative proceeding, this is done based on the fulfillment of a legal or regulatory obligation.
- Managing requests to exercise rights, this is done to comply with a legal or regulatory obligation.
Data Sharing
The data collected is intended for our internal departments and our subcontractors (IT service providers or customer relations and public relations service providers) when necessary to carry out the tasks entrusted to them.
We also disclose the necessary data to authorized third parties (e.g., tax authorities, judicial authorities, police and gendarmerie, Social Security agencies, etc.).
Data Processing Outside the EU
Your data is stored within the European Union by École Centrale de Lyon or by its service providers (processors). Certain data may be processed on an ad hoc basis outside the European Union in countries that do not benefit from an adequacy decision issued by the European Commission. Specific measures and safeguards are implemented to secure such transfers. In practice, these include Standard Contractual Clauses or binding corporate rules. To learn more about the measures in place or to obtain a copy of the safeguards, please submit a request to the Data Protection Officer at École Centrale de Lyon at the following address: dpo.centralelyon@listes2.ec-lyon.fr.
Rights and Contacts
With regard to your personal data, you have the following rights, subject to the conditions set forth in the regulations:
- The right to access and the right to correct such information should it prove to be inaccurate, incomplete, and/or out of date.
- The right to object to Ecole Centrale de Lyon’s use of this information, particularly for marketing purposes.
- The right to have your data erased.
- The right to restrict the processing of your data. This right means that our processing of your personal data is restricted, so that we may retain this data but may not use or otherwise process it.
- The right to data portability.
- We provide you with several channels through which you can exercise your rights.
You can contact us using the following contact methods:
- by email at the following address: communication@ec-lyon.fr.
- by mail at the following address: 36 avenue Guy de Collongue 69134 Écully Cedex FRANCE.
If you encounter any difficulties, you may contact our Data Protection Officer by email at: dpo.centralelyon@listes2.ec-lyon.fr
You also have the option to file a complaint with the French Data Protection Authority (CNIL).
Data Security
We implement administrative, logical, and physical measures to protect the security of your personal data against theft, unauthorized access, use, and modification. Technical and organizational measures are taken to ensure that any application or information system involved in the processing of personal data undergoes a security integration process in accordance with industry best practices.
Use of Cookies
We use various cookies on the site to improve the site’s interactivity and our services.