As a data controller within the meaning of the French Data Protection Act, École Centrale de Lyon attaches great importance to the protection of your personal data.
As you read this Charter, you will discover how we collect, manage and process this information. We also inform you of your rights regarding your personal data and how you can exercise them.
For the purposes hereof, the terms "Data Controller", "Data Subjects", "Personal Data", "Process/Processing", "Subprocessor", "Data Protection Impact Assessment" and "Personal Data Breach" shall have the meaning given to them in the Legislation in Force on the Protection of Personal Data.
What is personal data?
This is any information relating to a natural person who is identified or identifiable directly or indirectly. This includes, for example, your name, address, telephone number, etc.
Nature and purpose of data processing
As part of our activities, we collect and process several types of personal data depending on the offers and services you have subscribed to and the forms you have filled in. These processing operations are based on one of the following legal grounds:
Nature of data
This is identity data: (surnames, first names) and contact data (email addresses).
Data collection and purpose
We use this data to identify and contact you in order to facilitate our exchanges, track your requests and complaints, enable you to receive faster responses from us, for the purpose of legitimate interest.
As part of the purpose listed above, we collect personal data about you on the internet via exchanged e-mails and contact forms between you and us for any request for information.
Data retention
Data collected to identify and contact you in order to facilitate our exchanges are retained for a maximum of 1 year and within the limit of your consent.
We only retain your data for the time necessary to process it according to the purpose that has been set.
Nature of data
This is identity data: (surnames, first names) and contact data (email addresses).
Data collection and purposes
We use this data to register for the School's newsletter and newsletters as part of your legal basis for consent.
In this context, we collect personal data about you on the internet via the newsletter registration link to register and send you BiblioNews.
Data retention
We only keep your data for as long as is necessary to process it according to the purpose that has been set.
The data collected for your subscription to the Bibliothèque Centrale Lyon newsletter is kept for a maximum of 4 years and within the limit of your consent; years of identity: (surnames, first names) and contact (email addresses).
Data retention for statistical purposes
Your personal data may be analyzed in order to maintain a good knowledge of our customers and improve customer satisfaction.
In this case, they are aggregated so that we can process this data statistically and carry out analyses enabling us to constantly improve our quality of service.
In this way, we pursue several objectives:
- To improve our understanding of your needs or dissatisfactions.
- To compile statistics on the use of our offers, services, sites and applications.
- To improve our proposed services.
- To carry out studies in order to consider new offers and services to be developed.
- To produce activity indicators.
- This processing for statistical purposes is based on our legitimate economic and commercial interest.
All of the above data may also be processed in the following ways:
- To enable us to ensure sound management of our accounts, this is done on the basis of a legal or regulatory obligation.
- To enable us to monitor and manage any disputes, to protect our rights and interests, this is done on the basis of the performance of the Contract.
- To respond to legal or administrative proceedings, this is done on the basis of fulfilling a legal or regulatory obligation.
- To ensure the management of requests to exercise rights, this is done on the basis of the execution of a legal or regulatory obligation.
Transmission of data
The data collected is intended for our internal departments and our subcontractors (IT service providers or customer relations and public relations service providers when it is necessary to carry out the missions entrusted to them.
We also communicate necessary data to authorized third parties (e.g. tax authorities, judicial authorities, police and gendarmerie, Social Security organizations, etc.).
Data processing outside the EU
Your data is stored within the European Union, either by École Centrale de Lyon or by its service providers (subcontractors). Some data may be processed from time to time outside the European Union in countries that do not benefit from an adequacy decision issued by the European Commission. Specific measures and guarantees are implemented to ensure the security of such transfers. In practice, these include Standard Contractual Clauses and binding company rules. To find out more about the measures implemented or to obtain a copy of the guarantees, we invite you to make a request to the École Centrale de Lyon Data Protection Officer at dpd.rgpd@listes.ec-lyon.fr.
Rights and contacts
With regard to personal data concerning you, you have the following rights under the conditions laid down by the regulations:
- A right of access as well as a right of rectification in the event that this information proves to be inaccurate, incomplete and/or out of date.
- A right to object to the use of this information by École Centrale de Lyon, in particular for commercial prospecting purposes.
- A right to the deletion of your data.
- A right to the limitation of the processing of your data. This right means that the processing of your personal data that we carry out is limited, so that we can keep this data, but we cannot use or process it in any other way.
- A right to the portability of your data.
- We provide you with several channels through which you can exercise your rights.
You can contact us using the following means of contact:
- by e-mail at the following address: biblio.informatique@listes.ec-lyon.fr
- by post at the following address: Bibliothèque Centrale Lyon, 36 avenue Guy de Collongue 69134 Écully Cedex FRANCE.
If, however, you encounter any difficulties, you may contact our Data Protection Officer by e-mail at the following address: dpo.centralelyon@listes2.ec-lyon.fr
You also have the possibility of lodging an appeal with the Commission Nationale de l'Informatique et des Libertés.
Data security
We implement administrative, logical and physical measures to protect the security of your personal data against theft, unauthorized access, use and modification. Technical and organizational measures are taken to ensure that any application or information system supporting the processing of personal data is subject to a process of integrating security into projects under conditions that comply with best practice.
Use of cookies
We use various cookies on the site to improve site interactivity and our services.