The Institut d’\u00c9conomie Scientifique Et de Gestion, I\u00c9SEG – School of Management, is a non-profit organization pursuant to the French Law of 1901 and one of the leading management schools. Its head office is located at 3 rue de la Digue, 59000 Lille (FRANCE), and its company number is 783 707 052 00032 (hereinafter referred to as “I\u00c9SEG”).<\/p>\n\n\n\n
I\u00c9SEG takes personal data protection very seriously.<\/p>\n\n\n\n
This Personal Data Protection Policy is one of the methods used to ensure that the services I\u00c9SEG offers its students, employees and partners are of the highest standards. I\u00c9SEG is committed to managing the information it collects in a secure and responsible manner.<\/p>\n\n\n\n
To ensure it functions properly and achieves its goals, I\u00c9SEG is required to process personal data relating to its prospects, candidates, graduates, students, employees, suppliers and partners (as well as the employees of its prospects, suppliers and partners).<\/p>\n\n\n\n
When you use I\u00c9SEG\u2019s website, download a brochure, apply for a program, or if you have a contractual relationship with I\u00c9SEG, you are sending I\u00c9SEG personal data belonging to you and\/or authorizing it to collect and process it.<\/p>\n\n\n\n
I\u00c9SEG is committed to processing your data in accordance with the legislation covering personal data and, in particular, Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as well as Law 78-17 of 6 January 1978 (Loi Informatique et Libert\u00e9s<\/em> \u2013 Data Protection Act) as amended.<\/p>\n\n\n\n The data controller is I\u00c9SEG at 3, rue de la Digue, 59000 Lille (FRANCE), represented by its Chairman.<\/p>\n\n\n\n I\u00c9SEG has appointed a Data Protection Officer who can be contacted by using the online form available here www.ieseg.fr\/en\/gdpr-form\/<\/a> or by sending a letter to I\u00c9SEG.<\/p>\n\n\n\n ><\/strong><\/span> “Personal data<\/strong>” refers to information relating to an identified or identifiable natural person (surname, forename, photo, email address, data obtained by cross-referencing anonymous information).<\/p>\n\n\n\n ><\/strong><\/span> “Processing<\/strong>” refers to any operation involving personal data, regardless of the method used (automated or otherwise).<\/p>\n\n\n\n ><\/strong><\/span> “Data Controller<\/strong>” refers to the natural or legal person who determines the purposes and means of processing personal data. Regarding this policy, the data controller is I\u00c9SEG.<\/p>\n\n\n\n ><\/strong><\/span> “Data Processor<\/strong>” refers to any natural or legal person who processes personal data on behalf of the controller. In practice, these are service providers that I\u00c9SEG works with and who handle personal data.<\/p>\n\n\n\n ><\/strong><\/span> “Data Subject<\/strong>” refers to any individual whose personal data is processed by an organization. At I\u00c9SEG, these include prospects, candidates, students, participants, graduates, professors, collaborators and partners, etc.<\/p>\n\n\n\n ><\/strong><\/span> “Recipients<\/strong>” are natural or legal persons who receive personal data. At I\u00c9SEG, these include a variety of departments, employees and external bodies (partners, social organizations, etc.).<\/p>\n\n\n\n ><\/strong><\/span> “Graduate<\/strong>” refers to any person who has completed an I\u00c9SEG course and validated the end of his\/her training.<\/p>\n\n\n\n ><\/strong><\/span> “Prospect<\/strong>” refers to any person interested in a course or event offered by I\u00c9SEG.<\/p>\n\n\n\n ><\/strong><\/span> “Candidate<\/strong>” refers to any person who has applied for an I\u00c9SEG program.<\/p>\n\n\n\n ><\/strong><\/span> “Student<\/strong>” refers to any person taking an I\u00c9SEG course.<\/p>\n\n\n\n ><\/strong><\/span> “Employee<\/strong>” refers to any person who has an employment contract with I\u00c9SEG.<\/p>\n\n\n\n ><\/strong><\/span> “Partner<\/strong>” refers to any person or company acting as a participant, customer, supplier, subcontractor or co-contractor.<\/p>\n\n\n\n The types and quantity of data collected vary depending on your relationship with I\u00c9SEG (prospect, candidate, student, employee, partner, graduate, other):<\/strong><\/p>\n\n\n\n ><\/span> Your name and contact details<\/strong>: including any information enabling us to contact you: your surname, forename, home address, email address and phone number.<\/p>\n\n\n\n ><\/span> Demographic information<\/strong>: your date of birth, gender, nationality and marital status.<\/p>\n\n\n\n ><\/span> Information required for enrollment<\/strong>: this includes a copy of your identity card or passport, your student number, your scholarship level, a photograph, etc.<\/p>\n\n\n\n ><\/span> The name and contact details<\/strong> of an emergency contact person (legal representative for minors).<\/p>\n\n\n\n ><\/span> Information relating to your education<\/strong>: <\/strong>your academic background at the time of your application\/admission to I\u00c9SEG, as well as transcripts and other information gathered during your time at I\u00c9SEG.<\/p>\n\n\n\n ><\/span> Information relating to your education and career path<\/strong>: your professional contact details, CV, job title, skills and expertise, your career history.<\/p>\n\n\n\n ><\/span> Login credentials<\/strong>: information you need to authenticate yourself and access your personal accounts\/pages.<\/p>\n\n\n\n ><\/span> Browsing information<\/strong>: you are interacting with our websites when you use them. We collect certain information about your browsing activities.<\/p>\n\n\n\n ><\/span> Financial and accounting information<\/strong>: This includes information such as bank details, account holder number and name, guarantor, etc., which may be processed as when paying enrollment fees.<\/p>\n\n\n\n Directly:<\/strong> Indirectly from:<\/strong> Depending on the case, I\u00c9SEG processes your personal data for the following purposes:<\/strong><\/p>\n\n\n\n ><\/span><\/strong> to provide services and requested documents (brochures), and to answer questions.<\/p>\n\n\n\n ><\/span><\/strong> to promote I\u00c9SEG\u2019s programs and services.<\/p>\n\n\n\n ><\/span><\/strong> to select and manage candidates using Parcoursup*<\/em> and other application methods. ><\/span><\/strong> to negotiate and execute contracts: administration and accounting management of your records and management of your relationship with I\u00c9SEG.<\/p>\n\n\n\n ><\/span><\/strong> to manage your studies at I\u00c9SEG; to constitute your application process, organize courses and exams and track your results, internships and international exchanges.<\/p>\n\n\n\n ><\/span><\/strong> to provide internal services such as access to libraries and the sports department.<\/p>\n\n\n\n ><\/span><\/strong> to produce official documents relating to contractual and partner relationships enabling them to be executed and monitored.<\/p>\n\n\n\n ><\/span><\/strong> to create marketing campaigns.<\/p>\n\n\n\n ><\/span><\/strong> to manage attendance of I\u00c9SEG events.<\/p>\n\n\n\n ><\/span><\/strong> to produce statistical reports and surveys.<\/p>\n\n\n\n ><\/span><\/strong> to enable I\u00c9SEG to comply with its obligations regarding to supervisory bodies (accreditation procedures, ministerial inquiries, etc.).<\/p>\n\n\n\n ><\/span><\/strong> in studies and research carried out by I\u00c9SEG professors (whether salaried or not).<\/p>\n\n\n\n ><\/span><\/strong> in proposals for services provided by the Alumni association I\u00c9SEG Network.<\/p>\n\n\n\n ><\/span><\/strong> in dispute resolution; I\u00c9SEG may need to process personal data in order to respond to claims or to defend its rights in court cases.<\/p>\n\n\n\n ><\/span><\/strong> in the implementation of security measures for people and property (video surveillance, access badge management, login logs).<\/p>\n\n\n\n Depending on your profile, the following people may access your data:<\/strong> I\u00c9SEG Information System is centralized and used by both campuses (Lille and Paris-La D\u00e9fense). The profiles of users with access to the Information System are defined on the basis of our authorization management policy and the principle of need-to-know.<\/p>\n\n\n\n Please note, however, that your personal data may be sent to any authority which is legally empowered to access it. If it is, I\u00c9SEG cannot be held responsible for the ways in which the staff at these authorities access and use your data.<\/p>\n\n\n\n I\u00c9SEG only collects, uses and shares your personal data in accordance with the regulations.<\/p>\n\n\n\n We may process your data either:<\/strong><\/p>\n\n\n\n ><\/span> <\/strong>because you have given your consent. For certain operations including marketing campaigns, we can use your data because you have authorized us to do so.<\/p>\n\n\n\n ><\/span> <\/strong>to meet pre-contractual needs or to execute the contract binding you to I\u00c9SEG (or the company that employs you at I\u00c9SEG). I\u00c9SEG processes your data in order to execute the contract it has concluded with you and to fulfill its obligations.<\/p>\n\n\n\n ><\/span> <\/strong>to meet legal obligations. In some cases, we need to collect or retain certain information about you in order to meet our own legal obligations, for example in relation to taxes or security, or for Parcoursup<\/em> (Decree of December 31st, 2020).<\/p>\n\n\n\n ><\/span> <\/strong>when said processing is necessary for the performance of a task which is in the public interest.<\/p>\n\n\n\n ><\/span> <\/strong>when said processing is in our legitimate interests. It is sometimes in I\u00c9SEG’s legitimate interests to process your personal data, particularly regarding the administrative management of its employees and contributors.<\/p>\n\n\n\n ><\/span> <\/strong>when processing is necessary to safeguard a person’s vital interests.<\/p>\n\n\n\n I\u00c9SEG sets data retention periods according to its legal and contractual constraints and, otherwise, according to its needs.<\/p>\n\n\n\n Retention periods vary depending on a number of factors:<\/strong> Your data may be retained beyond the end of our contractual relationship either to protect our rights in the event of legal disputes, or to enable us to fulfill our legal obligations. I\u00c9SEG regularly reviews the technical and organizational measures it uses to guarantee the security of its Information System and to prevent unauthorized disclosure, disappearance or alteration (loss of confidentiality or integrity) of your personal data.<\/p>\n\n\n\n I\u00c9SEG undertakes:<\/strong><\/p>\n\n\n\n ><\/span> In the event of a breach of your personal data,<\/strong> ><\/span> In the event that your personal data are processed by a data processor,<\/strong> ><\/span> In the event that personal data are transferred to a third country outside the European Union or to an international organization,<\/strong> You have the following rights, as provided for by the legislation on the protection of personal data:<\/strong><\/p>\n\n\n\n ><\/span> the right to information and the right of access<\/strong>: you have the right to know which personal data we hold about you, to view it and to obtain a copy.<\/p>\n\n\n\n ><\/span> the right to rectification<\/strong>: if you discover an error, you can ask us to rectify the incorrect information at any time.<\/p>\n\n\n\n ><\/span> the right to cancellation<\/strong>: under certain circumstances you can ask us to delete your personal data. Please note that we may retain certain information about you when we are required to do so by the applicable laws and regulations and when we have a legitimate reason to do so (e.g. the performance of an existing contract, to comply with legal and regulatory obligations and to prevent legal action).<\/p>\n\n\n\n ><\/span> the right to object<\/strong>: in certain cases, you may object to the use of your personal data for certain processing operations (e.g. direct marketing campaigns).<\/p>\n\n\n\n ><\/span> the right to portability<\/strong>: you have the right to ask us to provide you or another data controller with the personal data you have provided to us, in a structured, commonly-used machine-readable format.<\/p>\n\n\n\n ><\/span> the right to restrict processing<\/strong>: under certain circumstances you can ask us to restrict the ways in which we use your personal data, e.g. for the time required to examine a request for rectification.<\/p>\n\n\n\n ><\/span> the right to withdraw your consent (when consent is the legal basis for processing operations)<\/strong>.<\/p>\n\n\n\n In order to handle your request we may ask you to provide proof of your identity.<\/p>\n\n\n\n Please note that you may withdraw your consent to the processing of your data for a specific purpose at any time.<\/p>\n\n\n\n I\u00c9SEG has appointed a Data Protection Officer to whom you can address any questions you may have concerning this policy and to exercise your rights.<\/p>\n\n\n\n You can contact him\/her:<\/strong> Furthermore, if you believe that your rights have been breached or that your personal data has been processed in a way that does not comply with the GDPR, you have the right to lodge a complaint with the relevant supervisory body:<\/p>\n\n\n\n CNIL – Commission Nationale de l\u2019Informatique et des Libert\u00e9s<\/em><\/strong> This data protection policy was updated on November 17th, 2023; it may be modified or amended at any time, especially in order to comply with changes in legislation or case law.<\/p>\n\n\n\n Cookies are used to facilitate navigation on the site and to streamline registration or audience measurement procedures. Your computer may be configured to accept cookies. However, you can change this setting to refuse it and we suggest you do so if you are concerned about using cookies. When you visit our website, we collect and retain certain \u201cuser information\u201d details, such as the name of the domain, Internet Protocol (IP) address, the date and time of your visit, and the URLs from which you entered our site. We use this information to analyze and measure traffic to our site and to help us make it more user-friendly. The installation of Cookies is done for a maximal period of 13 months.<\/p>\n\n\n\n I\u00c9SEG School of Management obtains your consent in accordance with the policies and technical specifications of the IAB Europe Transparency & Consent Framework. It uses the Consent Management Platform n\u00b092.<\/p>\n\n\n\n You can change your choices at any time by clicking here<\/a>.<\/p>\n\n\n\nData Controller<\/h3>\n\n\n\n
Definitions<\/h3>\n\n\n\n
Which types of information are collected?<\/h3>\n\n\n\n
How is this information collected?<\/h3>\n\n\n\n
><\/span><\/span> when you log in to I\u00c9SEG website (www.ieseg.fr)
><\/span> when you download a brochure or request information
><\/span> when you apply for and\/or enroll for a program
><\/span> during your academic career
><\/span> during meetings at events (trade fairs, forums, etc.)
><\/span> during site visits
><\/span> from your recruitment at I\u00c9SEG and throughout your career at I\u00c9SEG
><\/span> for the purposes of contractual and partner relation.<\/p>\n\n\n\n
><\/span> our partners (organizers of physical and virtual events, for example)
><\/span> social networks (I\u00c9SEG does not use private data and information without the prior consent of the individual, even when it has already been made public and disseminated by I\u00c9SEG on social networks, or when it is provided by partners).<\/p>\n\n\n\nWhy is this information collected?<\/h3>\n\n\n\n
*Web platform designed to collect and manage the higher education requests and applications of future French students.<\/em><\/p>\n\n\n\nWho receives your data?<\/h3>\n\n\n\n
><\/span> I\u00c9SEG staff dealing with prospects and candidates
><\/span> staff handling partner relations
><\/span> event organization staff
><\/span> teaching, academic and research staff
><\/span> administrative, accounts, legal and HR staff
><\/span> logistics and IT staff
><\/span> security and reception staff
><\/span> controllers (purchasing, management control, etc.)
><\/span> professors, mentors and investors who advise and finance projects supported by our incubator
><\/span> the alumni association (Alumni I\u00c9SEG Network)
><\/span> student associations and the federation
><\/span> the I\u00c9SEG Foundation
><\/span> authorized partners (Ministries, Conf\u00e9rence des Grandes \u00c9cole<\/em>s*, etc.)
*French association of higher education and research institutions<\/em>.
><\/span> national and international certification and accreditation bodies
><\/span> I\u00c9SEG data processors<\/p>\n\n\n\nWhat is the legal basis for our data processing operations?<\/h3>\n\n\n\n
How long is the information kept for?<\/h3>\n\n\n\n
><\/span> I\u00c9SEG business requirements
><\/span> the processing purposes
><\/span> contractual requirements
><\/span> legal obligations (insurance policies, tax, compulsory declarations relating to staff management, etc.)
><\/span> recommendations made by supervisory bodies.<\/p>\n\n\n\n
Your personal data will be permanently deleted at the end of this period.
I\u00c9SEG keeps copies of all diplomas issued by the school in order to be able to provide official duplicates certifying the graduation and thereby guaranteeing continuity of service to all its graduates.<\/p>\n\n\n\nHow do we guarantee that your information is secure?<\/h3>\n\n\n\n
To notify CNIL<\/em> (Commission nationale de l’informatique et des libert\u00e9s<\/em> – French Data Protection Authority) pursuant to the provisions of the GDPR.
If said breach poses a high risk to the data subject, I\u00c9SEG will notify him or her and provide the necessary information and recommendations.<\/p>\n\n\n\n
To ensure that the data processor complies with its obligations under the GDPR. I\u00c9SEG undertakes to sign written contracts with its data processors and to require them to apply the same data protection obligations as it does itself.<\/p>\n\n\n\n
To inform the data subject of such and to ensure that his or her rights are respected in accordance with the provisions of the GDPR.
To implement the Standard Contractual Clauses approved by the European Commission and to include a Data Processing Agreement (“DPA”) in contracts signed with service providers operating in countries which are not considered to offer adequate levels of protection by the European Commission.<\/p>\n\n\n\nWhat are your rights regarding your data?<\/h3>\n\n\n\n
How can you exercise your rights?<\/h3>\n\n\n\n
><\/span> using the online form available at this address: www.ieseg.fr\/en\/gdpr-form\/<\/a>
><\/span> by sending a letter to the Data Controller\u2019s address: I\u00c9SEG – 3 Rue de la Digue – 59000 Lille (FRANCE)<\/p>\n\n\n\n
either at the URL www.cnil.fr\/fr\/plaintes<\/a>
or by post: 3 Place de Fontenoy – TSA 80715 – 75334 Paris CEDEX 07 (FRANCE)<\/p>\n\n\n\nChanges to the Data Protection Policy<\/h3>\n\n\n\n
Cookies<\/h2>\n\n\n\n