Privacy Policy

Our commitments to the protection of personal data

ECOLE DES DIRIGEANTS ET CREATEURS D'ENTREPRISES (EDC), an association under the law of 1901, operating under the brand name EDC Paris Business School, whose siret number is 402 499 933 0024 and whose declaration of activity is registered under number 11 92 08944 92 with the Préfet des Hauts de Seine, attaches great importance to the protection and security of your personal data, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the French Data Protection Act of 6 January 1978 as amended.

This Confidentiality Policy is addressed to all users of the EDC website: www.supdeluxe.com or learners within the establishment.

The purpose of this privacy policy ("Policy") is to provide you with clear and transparent information about the way in which EDC collects and processes your personal data when you use the services provided by EDC, both within its establishments and online: www.supdeluxe.com.

The purpose of this Policy is also to inform you of your rights regarding your personal data. It is therefore important that you read it, as well as our Cookies Policy and any other specific information that we may communicate to you from time to time when we collect or process personal data about you. This Policy supplements these other notices and is not intended to replace them.

Who is responsible for processing your data?

EDC, registered under the SIRET number 402 499 933 00024, is responsible for processing the personal data that you provide via the various paper or dematerialised forms present on the EDC Internet Sites, the information that you communicate by telephone, e-mail, sms or via one of our paper forms, the data obtained as a result of the relationship that we have with you and the information resulting from your browsing and consumption habits.

EDC is located at 74 / 80 rue Roque de Fillol, CS 10074, 92807 Puteaux Cedex, France. You may contact it by e-mail at the above address or by e-mail at the following address: [[email protected]].

In this Policy, the terms "EDC", "we", "us" and "our" refer to EDC.

What type of data is collected?

The concept of "personal data" covers all data that directly or indirectly identifies you, whether it is information that you have provided or declared (for example, your contact details) or information resulting from your contractual relationship with EDC (for example, your registration). We take care to collect only the personal data concerning you that is necessary for the purposes for which it is to be used.

When do we collect your Personal Information?

In the course of providing our services, EDC may collect and process personal data about you.

Your Personal Information may be collected when :

• - the registration of a learner for a Programme offered by EDC;
• - contact requests, in particular to receive information on the Programmes and services provided by EDC;
• - the creation of a Commercial Profile with EDC;
• - via the various forms on the EDC websites;
• - your subscription to our newsletter;
• - the communication of information provided by telephone, post, e-mail or by means of one of our paper forms;
• - during Forums, Master classes, trade fairs, via computerised or paper forms filled in by a prospect or a learner of EDC;
• - the performance of the relationship we have with you;
• - use of our website.
• - EDC may collect your Data directly or indirectly through other entities of the Planeta Group.

The following categories of personal data about you may be collected:

Identity data: surname, first names, nationality, telephone number, email address, postal address, date of birth, country of residence, passport photo, visa application if applicable;
Professional data: level of education and field of initial training, diplomas obtained, professional experience and addresses of the various employers where this professional experience was acquired, data relating to your skills and interests;
Financial data, including bank details, relating to the payment of enrolments and scholarship applications, or financing agreements for continuing education;
Data relating to comments/questions collected during the pre-contractual or contractual relationship with EDC;
Connection data: IP address, technical and location information generated in connection with the use of our websites and applications:
Cookies: please refer to our Cookies Policy for more information;

This data is collected depending on the services you use and the relationship you have with us.

Where we are required to collect personal data about you (under a legal obligation or under a contract that we have entered into with you, or that we intend to enter into with you) and you do not provide such personal data when requested, we may not be able to provide you with the services that you require. In the various forms on the EDC Website, the compulsory nature of the personal data to be provided is indicated at the time of collection by asterisks.

When you provide personal data concerning yourself, you undertake to provide accurate information that does not prejudice the interests or rights of third parties.

What is the purpose of processing your personal data?

The purpose of the processing corresponds to the objective pursued by the use of your data.

EDC only collects personal data concerning you that is strictly necessary for the purposes for which it is to be used.

If we wish to use your data for purposes other than those for which it was initially collected, we undertake to inform you in advance and, if necessary, to obtain your consent, if this is required for any new purpose. EDC collects your personal data for the following purposes:

• - Management of the commercial relationship with the learner and, if necessary, his/her legal representative (including monitoring the learner's application, whether admitted or not, registration and monitoring of the learner's training from an administrative, academic and financial point of view);
• - Management and recovery of unpaid invoices;
• - Management of disputes;
• - Organisation of statistical surveys, in particular for the Ministry of Higher Education and Research and organisations publishing rankings for which EDC must produce statistics or respond to surveys in accordance with the legislation in force;
• - Video surveillance to ensure the safety of learners, staff, participants and EDC premises;
• - Improving navigation on the EDC website;
• - Participation of the learner in the networks of former EDC "Alumni";
• - Creation of a commercial profile for commercial prospecting;
• - Promotion of EDC and its programmes.

Use of your data for commercial prospecting purposes

EDC will process your personal data in order to offer you its products and various services related to the training that EDC provides.

If we wish to use your data for purposes other than those for which it was initially collected, we undertake to inform you in advance and, where appropriate, to obtain your consent for any new purpose.

EDC may also use your data to send you commercial communications about products and services similar to those you have subscribed to with us. Our communications may be made by post, telephone, SMS, in person and/or by email, throughout the duration of your training and for a period not exceeding 3 years from the end of our commercial relationship.

After that time, we will seek your consent to allow us to continue to send you marketing communications about products and services similar to those you have purchased from us.

Subject to your express consent, EDC may create a "Business Profile":

This business profile will be created from the personal information and data that you have provided to us directly or indirectly on the basis of information obtained with regard to your consumption and browsing habits. This personal information and data may also be collected from third parties through various social networks (in particular when you connect using identifiers specific to these social networks).

In this case, we may send you commercial communications about our products and services or those of third-party companies.

In addition, subject to your express consent, we may communicate your personal data and your “commercial profile”:

• - to all Planeta Group entities so that they can also create a commercial profile and send you personalized commercial communications about their products and / or services similar to those subscribed to with EDC and those of third-party companies.

You can consult the list of Planeta Group entities on the following link: https://www.planeta.es/en/who-we-are. These entities carry out their activities in the publishing, training, culture, leisure, fashion, textiles, insurance, consumer goods and jewelry sectors.

The prospective offer of own products and services and / or third-party companies as well as the creation of commercial profiles and the transfer of these profiles and your personal data to companies belonging to the Planeta Group constitute additional processing operations based on consent which you are asked, without the withdrawal of this consent conditioning the maintenance of your relationship with us.

In any case, the third-party companies outside the Planeta Group that are the subject of the commercial communications that, if applicable, you will receive from us, will be companies that carry out their activity in the same sectors as those of the companies of the Planeta Group. and which have been indicated above, or in the telecommunications, banking, finance, travel, technology and legal sectors.

How long will your data be kept?

EDC will keep personal data for the time necessary to pursue the processing purposes, and / or to comply with legal and regulatory obligations, and / or to establish, defend or exercise legal rights.

During this period, EDC takes all the necessary precautions, with regard to the nature of the data and the risks presented by the processing, to maintain its confidentiality and security and in particular to prevent the data from being distorted, damaged, or that third parties not. authorized access (physical protection of premises, authentication procedures for persons accessing data with personal and secure access via confidential usernames and passwords, secure https protocol, logging and traceability of connections, encryption of certain data, etc.).

Once the services have been rendered, EDC will delete the user’s personal data with the exception of personal data which must be kept to allow EDC to comply with a legal or regulatory obligation, and / or to find, defend or exercise legal rights, in accordance with the rules of civil and commercial prescriptions.

The table summarizes the reasons for which we process your data, the legal basis for this processing as well as the associated retention periods:

What is the legal basis for processing your data?

The legal basis for processing your personal data is the execution and maintenance of our commercial relationship with you, compliance with a legal or regulatory obligation, legitimate interest, express consent, if any, that you have given to us. given for processing consisting of sending our own commercial communications and / or communications from third-party companies, the creation of commercial profiles and the transfer of these data and profiles for the benefit of the companies of the Planeta Group for the purposes specified in the previous paragraph “What is the purpose of processing your personal data? “

We inform you that the personal data required at the time of your registration in the user area as well as those provided by telephone, email, mail or in our paper forms, the purpose of which is not based on the collection of your consent, are strictly necessary. to formalize and manage our relationship with you, so that failing to provide us with such information, we will not be able to maintain that relationship.

As we indicated to you previously, the prospective offer of own products and services and / or third-party companies as well as the creation of commercial profiles and the transfer of these profiles and your personal data to companies belonging to the Planeta Group constitute additional processing operations based on the consent requested from you, without the withdrawal of this consent conditioning the maintenance of your relationship with us.

To which recipients are we likely to communicate your data?

EDC strives to provide you with the best possible services, and as such may share your data:

1. Internally:

• A limited number of people and departments authorized within EDC (namely all employees working in the communications, administrative, logistics and IT departments, responsible in particular for facilitating and managing customer relations;

1. To third parties:

• EDC Alumni Association;
• The Passerelle Association, organizer of the Concours Grande École;
• Organizations linked to student life such as Cnous, Crous, student mutual societies, Ile de France region;
• Official bodies (in particular the Ministry of Higher Education and Research, Education, Labor, among others, skills operators – OPCO and / or France Compétences, the Rectorate, the Conférence des Grandes Ecoles), Lfunding organizations in the field of vocational training (OPCO type);
• The body in charge of the national directory of professional certifications (France Compétences);
• Companies in which the learner is likely to do an internship or any other work-study training;
• Higher education establishments located in France or abroad as part of a partnership or learner mobility path;
• IT service providers and other third party providers providing services to EDC;
• Bodies in charge of conducting EDC classifications, whether or not meeting EDC’s legal obligation;

– To the various entities of the Planeta Group;

Transfer of Personal Data outside the European Union

Your data may be transferred to a country outside the territory of the European Economic Area (EEA), in particular if you decide to participate in international exchange programs. EDC ensures that no transfer of personal data is made by itself or by its partners or subcontractors to a country located outside the EEA or to an international organization, in the absence of a decision adequacy provided by the European Commission or the establishment of appropriate and adequate guarantees to ensure the security and protection of personal data.

We inform you that EDC transfers your personal data to its service provider located in Canada who has put in place the appropriate data protection guarantees.

What are your rights when you provide us with your data?

In accordance with the Data Protection Act of 6 January 1978 as amended and articles 15 et seq. Of Regulation (EU) 2016/679 relating to the protection of personal data, you have the following rights over your data: right of access, right of rectification, right of erasure (right to be forgotten), right of opposition to the processing of your data, right to limitation of processing and right to portability.

You can also withdraw your consent at any time and at no cost. You also have the option of defining guidelines for the retention, erasure and communication of your personal data after your death.

In the event of a breach of the above provisions, you have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr).

How to exercise your rights?

For the exercise of these rights, it is advisable to indicate to us your contact details (last name, first name, email address that you have communicated to us) and a legitimate reason when this is required by law (in particular in the event of opposition to the processing. ).

Please note that if the information you provide to us does not allow us to confirm your identity or if a reasonable doubt persists, we may ask you to provide us with additional information or documents.

To exercise your rights, please send your RAR mail to the following address EDC Paris Business School, 74-80, rue Roque de Fillol 92800 Puteaux or to the following email address [email protected].

You can lodge a complaint with a supervisory authority and have the right to legal recourse if you believe that your rights have been violated or if the supervisory authority does not follow up on your complaint.

In accordance with Article 6-II of the Law of 21 June 2004 on Confidence in the Digital Economy, data which may allow your identification may be communicated to the judicial authority when it so requires.

What security measures do we implement to protect your data?

We take the necessary steps to ensure that your personal data collected via the Site is not lost, diverted, viewed, modified or disclosed by unauthorized third parties.

To do this, we have put in place technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, modification or loss, misuse and access, modification or disclosure. unauthorized.

In addition, organizational measures (such as data access authorization management systems, etc.) make it possible to preserve the confidentiality of your data. Thus, access to your personal data is strictly limited to EDC staff, expressly authorized, and to our partners and subcontractors, themselves acting according to our instructions and in accordance with our contractual provisions and applicable legislation.

Update of the Policy

We may need to revise this Policy. We ensure that the most recent version is published on the Website: www.supdeluxe.com. When material changes are made to the Policy, we will notify you by posting a notice online and / or at our premises, or by sending you an email within a reasonable period of time prior to its entry into force.