Privacy policy

Our personal data protection commitments

L'ECOLE DES DIRIGEANTS ET CREATEURS D'ENTREPRISES (EDC), a non-profit organization under the law of 1901, operating under the trademark "EDC Paris Business School," with SIRET number 402 499 933 00024 and State authorisation number no. 11 92 08944 92, attaches great importance to the protection and security of your personal data, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the Information Technology and Civil Liberties law of 6 January 1978 as amended.

This Privacy Policy is addressed to all persons, whether as users of the EDC website, located at www.edcparis.edu, or as students on its premises.

The purpose of this privacy policy (the "Policy") is to provide you with clear and transparent information on how EDC collects and processes your personal data when you use the services provided by EDC, both at its facilities and online: www.edcparis.edu.

This Policy is also intended to inform you of your rights concerning your personal data. It is thus important that you read this policy, our Cookies Policy, and any other specific informational statements we may occasionally provide when we collect or process personal data about you. This Policy supplements these other information notices and is not intended as a substitute for them.

 

Who is the data controller handling your data?

EDC, registered under SIRET number 402 499 933 00024, shall be the data controller for any personal data you may provide via any of our various printed or digital forms provided on the EDC websites, any information you may provide by phone, email, SMS, or paper forms, data obtained as a result of the relationship we have with you, and information generated by your browsing and consumption habits.

EDC is headquartered at 70, Galerie des Damiers - La Défense 1, 92400 COURBEVOIE; you can contact us by mail at the above address, or at the following email address: informations@edcparis.edu.

In this Policy, the terms "EDC," "us", "we," "our," and "ours" refer to EDC.

 

What kind of Data may be collected?

The notion of "personal data" includes all data directly or indirectly identifying you; this may include information you have provided or declared (for example your contact details), and information resulting from your contractual relationship with EDC (e.g. your enrolment). We collect only such personal data concerning you as is required for our specific intended uses.

 

When do we collect your Personal Data?

In the context of our provision of services, EDC may need to collect and process personal data concerning you.

Personal Data may be collected:

  • when you enrol as a student in a Program provided by EDC;
  • when you ask us to contact you to provide you with information about the Programs and services EDC provides;
  • when you create a commercial profile with EDC;
  • by means of any of the various forms on EDC's websites;
  • when you subscribe to our newsletter;
  • when you provide information by telephone, mail, email or on any of our paper forms;
  • during Forums, Master Classes, trade fairs, or on digital or paper forms completed by prospects or current students at EDC;
  • in the course of our relationship with you;
  • when you use our website.

 

  1. your Data may be collected directly or indirectly via other entities of the Planeta Group.

 

The following categories of personal data concerning you may be collected:

  • Identity data: surname, first names, nationality, telephone, email, postal address, date of birth, country of residence, identity photo, possible visa application;
  • Professional data: education level, initial academic specialization, degrees obtained, professional experience, addresses for the various employers where such professional experience was acquired, data relating to your skills and areas of interest;
  • Financial data, including bank details, in connection with tuition fee payments, scholarship applications, or financing agreements for continuing education;
  • Data associated with commentary/questions collected during pre-contractual or contractual relations with EDC;
  • Connection data: IP address, technical and location information generated by the use of our websites and applications:
  • Cookies: please consult our Cookies Policy for more information;

This data is collected based on the services you use and the relationship you have with us.

When we need to collect personal data about you (to comply with a legal obligation, or under a contract we have entered with you or intend to enter with you) and you decline to provide such personal data when requested, we may not be able to provide you with the services you want. On the various forms available on the EDC website, the provision of personal information in certain data fields is obligatory; those fields will be marked with an asterisk.

In your provision of personal data concerning yourself, you agree to provide only accurate information that does not prejudice the interests or rights of third parties.

 

What is the purpose of our processing of your personal data?

The purpose of the data processing performed corresponds to the intended use of the data.

EDC collects only such personal data concerning you as is required for its specific intended uses.

If we wish to use your data for purposes other than those for which your data was initially collected, we undertake to inform you in advance and where applicable to obtain your consent, if necessary, for any new purpose. EDC collects your personal data for the following purposes:

  • Management of business relationships with students and their legal representatives if necessary (including follow-up on student applications, whether accepted or not, enrolment, and monitoring of the student's education in administrative, academic and financial terms);
  • Management and collection of unpaid invoices;
  • Dispute management;
  • Organization of statistical surveys, in particular for the Ministry of Higher Education and Research or rankings publishing agencies for which EDC is required by current legislation to produce statistics or respond to surveys;
  • Video surveillance to ensure the safety of students, staff, lecturers, or EDC facilities;
  • To improve navigation of the EDC website;
  • Student participation in EDC Alumni networks;
  • Creation of a commercial profile for purposes of commercial prospecting;
  • Promotion of EDC and the programs provided by EDC.

 

Use of your data for commercial prospecting purposes

EDC will process your personal data in order to offer you various products and services in connection with the educational courses EDC provides.

If we wish to use your data for purposes other than those for which your data was initially collected, we undertake to inform you in advance and where applicable to obtain your consent, if appropriate, for any new purpose.

EDC may also use your data to send you marketing communications concerning products and services similar to those you have purchased from us in the past. We may deliver our communications by mail, telephone, SMS, in person and/or by email for the duration of your educational experience, and for a period not exceeding 3 years from the end of our business relationship.

Beyond this term, we undertake to request your consent to continue to send you marketing communications concerning products and services similar to those you have purchased from us in the past.

Subject to your express consent, EDC may create a "commercial profile" for you:

This commercial profile will be compiled from personal information and personal data you have provided directly, or indirectly based on information drawn from your consumption and browsing habits. This information and personal data may also be collected from third parties via various social networks (in particular when you log in using credentials specific to these social networks).

 

We may in such case send you commercial communications regarding our products and services or those of third-party companies.

 

In addition, subject to your express consent, we may disclose your personal data and your "commercial profile":

  • to all entities of the Planeta Group so that they can also create a commercial profile and send you personalized marketing communications concerning products and/or services offered by EDC or third-party companies that are similar to those purchased in the past from EDC.

 

A list of the entities of the Planeta Group is available at the following link: https://www.planeta.es/fr/qui-sommes-nous. These entities do business in the publishing, education, culture, leisure, fashion, textiles, insurance, consumer goods and jewellery sectors.

The presentation of prospective offers of our products and services and/or products and services from third-party companies, as well as the creation of commercial profiles and the transfer of these profiles and your personal data to companies belonging to the Planeta Group, may imply additional processing based on the consent being requested of you; your withdrawal of this consent will have no effect on your continued relationship with us.

In any case, any companies external to the Planeta Group that may be referred to in marketing communications you may receive from us will be companies doing business in the same sectors as the companies of the Planeta Group - namely, the sectors mentioned above - or otherwise companies doing business in the telecommunications, banking, financial, travel, technology, or legal activities sectors.

 

How long will your data be kept?

EDC will retain your personal data for the time necessary to pursue the purposes of its processing, and/or to comply with its legal and regulatory obligations, and/or to certify, defend or exercise its legal rights.

During this period, EDC will take all precautions necessary in light of the nature of the data and the risks presented by processing to maintain its confidentiality and security and in particular to prevent the data from being distorted or damaged and to prevent access by unauthorized third parties (physical protection of premises, authentication procedures for persons accessing data with individualized and secure access via confidential usernames and passwords, secure https protocol, connection logging and tracking, encryption of certain data, etc.).

Once it has provided its services, EDC will delete the user's personal data with the exception of such personal data as EDC is required to keep for compliance with its legal or regulatory obligations, and/or to certify, defend or exercise its legal rights, in accordance with civil and commercial time-bar rules.

The table below summarizes the purposes of our processing of your data, the lawful basis for this processing, and the associated retention periods:

Purposes for which we process your data

Lawful basis for processing

Retention period

For users who are not EDC students

The establishment of email-based prospecting and advertising activities relating to the programs, activities and events organized by EDC, as well as the provision of any information concerning programs provided by EDC and any support for the completion of various formalities, in particular those that may lead to enrolment in a program.

Consent of the person oncerned

 

3 years from the most recent contact

 

For EDC students:

Establishment of email-based prospecting and advertising activities relating to the programs, activities and events organized by EDC

Legitimate interests

3 years from the end of the educational course

Subscription to EDC newsletters

Consent of the person concerned

For the duration of the subscription, until the data subject unsubscribes from the newsletter

Management of applications of students not admitted or who withdraw admission

Pre-contractual processing

 

3 years after the application date in case of non-admission or withdrawal of admission.

Management of the admitted student's application

 

Contractual performance

 

For the duration of the course of study and up to 3 years after the completion of the educational course

Access to EDC's intranet/ENT [digital workspace] and access to application resources and digital documentation, where applicable.

Contractual performance

 

Duration of the course of study; data deleted at the end of the course of study.

Administrative and academic oversight of the student's course of study.

Contractual performance

 

For the duration of the course of study and up to 5 years after the end of the educational course for educational contracts

For the duration of the course of study and up to 50 years for the issuance of degrees and duplicate degrees.

Student financial monitoring.

 

Compliance with legal obligations

 

For the duration of the course of study and up to 10 years after the end of the educational course for invoices

Management of unpaid invoices and disputes

Contractual performance

 

10 years from the end of disputes related to unpaid invoices.

Disclosure of data to companies, Partners and/or other entities of the Planeta Group

Consent of the person concerned

For the duration of the course of study and up to 3 years after the end of the educational course or renewal of consent

If necessary, providing assistance to students for completing the procedures required to obtain financial subsidies

Contractual performance

 

For the duration of the course of study and up to 5 years after the end of the educational course

Organization of statistical surveys, in particular for the Ministry of Higher Education and Research or rankings publishing agencies for which EDC is required by current legislation to produce statistics or respond to surveys;

Necessary for the performance of EDC's public service mission,

Unlimited duration if data is anonymized

Organization of statistical surveys, in particular quality control surveys or educational surveys

Legitimate interests

Unlimited duration if data is anonymized

Organization of statistical surveys including EDC rankings surveys

Consent of the person concerned

Unlimited duration if data is anonymized

Creation of the student's commercial profile (compiled from personal information and personal data that you have provided directly, or based on information obtained through your consumption and browsing habits or through social networks).

Consent of the person concerned

For the duration of the course of study and up to 3 years after the end of the course of study or renewal of consent

Video surveillance to ensure the safety of students, staff, lecturers, or EDC facilities;

Legitimate interests

1 month after recording

Student participation in EDC Alumni networks;

Consent of the person concerned

For the duration of the course of study and up to 3 years after the end of the course of study or renewal of consent

 

What is our lawful basis for the processing of your personal data?

The lawful basis for our processing of your personal data includes the fulfilment and maintenance of our commercial relationship with you, our compliance with legal or regulatory obligations, legitimate interests, the express consent you have provided us, if any, for the data processing required for us to send you our own marketing communications and/or communications from third-party companies, the creation of commercial profiles, and the transfer of such data and profiles to the companies of the Planeta Group for the purposes specified in the above paragraph, entitled "What is the purpose of our processing of your personal data?"

Please be aware that the processing purpose of personal data requested when registering for the user space, and personal data provided by telephone, email, postal mail, or on our paper forms is not subject to obtaining your consent, and is strictly necessary in order for us to formalize and manage our relationship with you; if you fail to provide us with such information, we will not be able to maintain that relationship.

As indicated above, the presentation of prospective offers of our products and services and/or products and services from third-party companies, as well as the creation of commercial profiles and the transfer of these profiles and your personal data to companies belonging to the Planeta Group, may imply additional processing based on the consent being requested of you; your withdrawal of this consent will have no effect on your continued relationship with us.

 

To whom may we disclose your data?

EDC strives to offer you the best possible services, and may thus share your data:

  1. Internally:
  • A limited number of authorized persons and departments within EDC (namely to all employees in the communications, administrative, logistics and IT departments, responsible in particular for facilitating and managing customer relations);

 

  1. To third parties:
  • EDC Alumni Association;
  • The Passerelle Association, organizer of the Grande École competition;
  • Organizations linked to student life such as CNOUS or CROUS, student mutual insurers, and the Ile-de-France Region;
  • Official bodies (in particular the Ministries of Higher Education and Research, Education or Labour, among others, vocational training funding agencies [OPCO] and/or France Compétences, the Rectorate, the Conference of Grandes Ecoles),
  •  
  • Vocational training funding organizations (of the OPCO type);
  • The agency in charge of the national register of professional certifications (France Compétences);
  • Companies with which the student may perform an internship or any other work-study activity;
  • Higher education establishments located in France or abroad, as part of a partnership or as part of the student's mobility pathway;
  • IT service providers and other third party providers providing services to EDC;
  • Agencies in charge of performing EDC rankings, whether fulfilling a legal obligation incumbent upon EDC or otherwise;

-      To the various entities of the Planeta Group;

 

Transfer of Personal Data outside the European Union

Your data may be transferred to a country outside the territory of the European Economic Area (EEA), in particular if you choose to participate in international exchange programs. EDC undertakes that no personal data shall be transferred, by itself or by its partners or subcontractors, to any country located outside the EEA or to any international organization, in the absence of an adequacy decision issued by the European Commission or the provision of appropriate and adequate guarantees of personal data security and protection.

Please be aware that EDC transfers your personal data to its service provider, located in Canada, which has implemented appropriate data protection guarantees.

 

What are your rights when you provide us with your data?

Under the provisions of the Information Technology and Civil Liberties law of 6 January 1978 as amended and articles 15 et seq. of Regulation (EU) 2016/679 on the protection of personal data, you have the following rights with regard to your data: right of access, right to rectification, right to erasure (right to be forgotten), right to object to the processing of your data, right to limit processing, and the right to portability.

You may also withdraw your consent at any time and at no cost. You also have the option to provide instructions concerning the retention, erasure and release of your personal data after your death. 

In the event of a breach of the above provisions, you have the right to lodge a complaint with the competent supervisory authority (in France, this is the CNIL: www.cnil.fr).

 

How can you exercise your rights?

To exercise these rights, please provide us with your contact details (the surname, given name and email address you provided to us) and a legitimate reason, when required by law (such as when objecting to the processing of your data).

Please note that if we are unable to confirm your identity with the information you provide to us, or if a reasonable doubt persists, we may ask you to provide us with additional information or documents.

To exercise your rights, please send your request by registered mail with delivery confirmation to the following address: EDC, 70, Galerie des Damiers – La Défense 1, 92400 COURBEVOIE or by email to rgpd@planetaformation.fr.

You may lodge a complaint with a supervisory authority, and if you believe that your rights have been violated or if the supervisory authority does not follow up on your complaint you have the right to legal recourse.

Under the provisions of article 6-II of the Law of 21 June 2004 on Confidence in the Digital Economy, we may also disclose your personally identifiable information to judicial authorities when required.

 

What security measures do we implement to protect your data?

We take the necessary steps to ensure that your personal data collected via the Site will not be lost, diverted, viewed, modified or disclosed by unauthorized third parties.

For this purpose, we have set up technical measures (such as firewalls) to protect your data against any unlawful or accidental destruction, modification, loss, misuse, and against any unauthorized access, modification or disclosure.

Organizational measures have also been implemented (such as data access management systems, etc.) to ensure the confidentiality of your data. Access to your personal data is thus strictly limited to expressly authorized EDC personnel and to our partners and subcontractors acting on our instructions and in accordance with our contractual provisions and with the applicable legislation.

 

Policy Updates

This Policy may be updated in the future. We will post the most recent version on our website at www.edcparis.edu. You will be notified of any substantial change made to the Policy by notification posted online and/or at our premises, or by an email addressed to you with reasonable advance notice prior to the entry into force of such change.

Find out more ?

EDC will process your personal information to contact you and to inform you about the program of your choice for the upcoming two terms. Afterwards, your data will be deleted.

You may exercise the rights of access, deletion, rectification, opposition, limitation and portability, by post to EDC, Post office box 221 of Barcelona, or by email to edc@edc.edu. Likewise, if the interested party considers it appropriate, they can lodge a claim to the Spanish Data Protection Agency.

Moreover, you can contact our Data Protection Manager by email to dpo@planeta.es, or by post to Grupo Planeta, At.: Data Protection Manager, Avda. Diagonal 662-664, 08034 Barcelona.