Personal data processing policy
Personal data about you, may be subject to automated processing in accordance with the European Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data, and the law on the protection of personal data No. 2018-493 of 20 June 2018.
The data controller is EURECOM.
This personal data must be processed lawfully, fairly and transparently.
EURECOM is concerned to respect the applicable obligations regarding the processing of your personal data, and in order to respect the principle of transparency here are answers to the questions you may have.
What information may we collect?
Why and how do we collect it?
Depending on your relationship with EURECOM, we may need to collect certain information about you.
This information may be necessary for administrative and accounting purposes, for the follow-up of students' education at EURECOM, for the needs of the Alumni Association, to execute a contract, to fulfill our legal obligations or our obligations towards you.
The data collected is adequate, useful, necessary and limited to the strict minimum.
The information that we may collect is of various kinds and some of it may constitute "personal data":
- Civil status, contact information, data relating to your educational or professional background, data required for registration, login details, bank details ....
Thus, depending on your relationship with EURECOM, we may need to collect, for example (but not exclusively), your first and last name, telephone number, email address, CV, social security number, identity card or passport, passport photograph, bank details, etc.
This data will be collected when you fill out an online registration form, when you enter into a contract with EURECOM (employment contract, client, supplier...)
With whom can we share this data?
Your personal data is primarily intended for EURECOM.
It is processed by the staff of the various departments concerned, for the purposes indicated above.
Nevertheless, we may share your personal data with your consent, or when necessary with
With our service providers. We may use service providers to perform technical services, for example. Our contractors must comply with our privacy and data security requirements. They are not permitted to use the personal data they receive from us for any other purpose.
With banks or payment management institutions, which provide financial services.
With legal authorities. To comply with our legal obligations, we may share some of your data with legal or regulatory authorities, the Ministry of Higher Education and Research, the CTI...
What is the legal basis for processing your data?
EURECOM only collects, uses and shares your personal data as permitted by law.
We may process your data either:
Because you have given your consent.
To perform our contract with you or for pre-contractual measures
Because a legal text makes this file mandatory
To carry out a task in the public interest or under public authority
Because this processing is in our legitimate interest
Because this processing is necessary to safeguard the vital interests of a person.
How long do we keep your data?
Your personal data is kept for the time necessary to fulfil the purpose for which it was collected or as required by law.
The length of time we retain data varies depending on several factors, including
EURECOM's business needs
Legal obligations (Insurance, Tax, Human Resources, etc.)
Recommendations from regulatory authorities
Your data may be retained beyond the end of our contractual relationship, for example to defend our legal rights, to provide you with documents that you no longer have in your possession or to meet our legal obligations.
After this period, your personal data will be permanently deleted.
How secure is your data?
EURECOM has put in place strong technical measures to ensure the security of our information system and to prevent any loss, alteration or unauthorized disclosure of your personal data.
What are your rights?
In accordance with the laws and regulations relating to the protection of personal data in force, you have (under certain conditions) the right to
- Of rectification
- Deletion: under certain conditions, you can ask us to delete your personal data. Please note that we may retain certain information about you
- when required to do so by applicable laws and regulations or when we have a legitimate reason to do so (e.g., performance of a contract or to prevent legal action).
- To object