Legal notice and privacy policy

As part of our communications, we process personal data that concerns you: because you have provided it to us directly, we have collected it automatically, or because we have collected it indirectly from third parties. At each processing stage, we take care to limit the data collected to what is adequate, relevant and necessary for the purposes to be achieved.

1) PERSONAL DATA PROVIDED BY YOU

The personal data we collect is the data you provide to us voluntarily (for example, when using a chatbot or filling in forms) and the data we ask from you when you:

• Contact us by email, telephone, messaging, post, or any other means;
• Request a quote, assistance, downloads, or information;
• Register for an open day;
• Ask to be called back by phone by a staff member or student;
• Request a personal meeting;
• Request an information brochure;
• Interact with our website chatbots;
• Register for events, webinars, or services;
• Subscribe to newsletters and alerts relating on events or information;
• Take part in surveys, competitions or any other promotional activities.

The type of personal data we may request from you may include, but is not limited to:

• Your identity ;
• Your contact details (physical or e-mail address, telephone number, etc.) ;
• Your professional details (e.g. job title, previous training, training requirements) ;
• Your identification information (for example, your user name) ;
• Information about your personal life, if you have given it to us;
• The opinions you have expressed about our services and products.

We may ask you to provide additional personal data, for example in the case of our online surveys to understand your needs.

When you interact with a chatbot we naturally process all the information you provide to the chatbot, on your own initiative. We draw your attention to the importance of not sharing sensitive data (concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation) unless you feel that it is absolutely essential. Some chatbots may enhance your interaction with the help of artificial intelligence systems, in which case you will be informed of it.

2) PERSONAL DATA COLLECTED AUTOMATICALLY

Our websites, and the third-party web analysis service providers we use, automatically collect certain types of data such as your IP address, the type of device you use, your device’s ID and other technical data, via cookies and other similar tracking tools.

Collecting personal data helps us better understand the type of users who visit our websites, where the visitors came from and the content they find useful. We use this data for internal purposes and to improve the quality and relevance of our websites for our visitors. Some of this data can be collected by using cookies and similar tracking tools if you agree to it. For further information, please read our Cookie Policy which can be found on the relevant websites.

3) PERSONAL DATA COLLECTED FROM THIRD PARTIES

From time to time, we may receive personal data that concerns you from third parties, but only when the said third parties are authorized or required to disclose your personal data. The data which we may collect from third parties includes your contact details, professional data where applicable, data on your course of study, etc. For instance, this is the case for data we receive directly from the Parcoursup (French national admissions) platform.

We use the personal data we collect from you for the purposes described in the present Confidentiality Policy and those we disclosed to you at the time of collection, or for compatible purposes.

In particular, we use your data:

• Primarily, to provide you with the information and services you require;
• If you have agreed to it, to inform you of future events, updates, new training programs/services, the latest services, as well as other offers, in accordance with your communication preferences and the contact methods you have given us: postal service, email, phone call, messaging, instant messaging, social media;
• To send you important notifications concerning our procedures, enrollment conditions, confidentiality policies and other legal documents;
• To carry out our activities, assess and improve the schools (especially by developing new training programs, optimizing and improving our services, analyzing our training programs and services);
• To undertake surveys (including market research and consumer studies, satisfaction surveys that concern you, trend analysis, financial analysis);
• To protect you and our staff against fraud and other illegal activities or unfounded accusations; to establish, exercise and defend your rights, as well as those of our staff, and to comply with the legal and regulatory obligations in force;
• To maintain the physical security of our premises (for example, visitor logbooks) and IT and electronic security;
• To use and manage our websites.

We may also use your personal data in aggregate form, making it impossible to identify individuals, in order to assess and improve our training programs and services.

In the European Economic Area, the legal basis for personal data processing described above depends on the personal data in question and the specific purposes for which we process it. The legal basis for processing is usually provided to you in the information you were given at the time of collection and you can find the main processing operations here.

However, we only collect personal data from you when:

• You have given us your prior express consent, for example, for any commercial prospecting via email, messaging, etc. You may withdraw your consent at any time by unsubscribing to marketing emails, by managing your communication preferences, or by contacting our Data Protection Officer (dpo@omneseducation.com);
• We may process your data in compliance with our legitimate interests, unless your interests or fundamental freedoms and rights prevail. For instance, this is the case for our satisfaction surveys, statistical analysis, operations required for the security of our websites and events.
• We may be under a legal obligation to process certain types of data to meet regulatory constraints.

For any question on the legal basis for the collection and use of your personal data, please contact our Data Protection Officer (dpo@omneseducation.com).

We may send your personal data to the following recipients:

• All the Organisation et Développement and schools’ departments, in accordance with their operational requirements for the purposes mentioned above;
• The subcontractors and service providers of Organisation et Développement and the schools, which provide us with services that require data processing, such as service providers carrying out a prospection program, data hosts, or organizers of events for which you have registered and who are tasked with welcoming you. Where applicable, details of specific recipients of your data can be sent to you at the time of collection.
• Any relevant law enforcement agency, governmental or regulatory agency, court or other third party, for whom it is necessary to disclose personal information (i) under the laws and regulations in force, (ii) to exercise, establish and defend our rights, or (iii) to protect your interests, or those of a third party;
• Any third party that has made a proposal to acquire, merge, reorganize, acquire, wind up, or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data only for the purposes set out in the present Confidentiality Policy;
• Any other person to whom we have given the authorization to disclose our personal data.

In application of the GDPR and of the French Data Protection and Civil Liberties Act, you have the right to:

• access your personal data and obtain a copy of it;
• update or rectify the inaccuracy of this data;
• request the removal of your personal data;
• request that personal data processing be limited;
• object to the processing of your personal data, except when processing is required to execute your contract, or which is imposed on us by a regulatory constraint;
• request the portability of your personal data
• when processing is based on your consent, withdraw it at any time;
• specify what happens to your personal data after your death;
• file a complaint with the local supervisory authority – in France, the CNIL (French Data Protection Agency).

You also have the right to opt out of receiving marketing emails from us at any time. You may exercise this right by clicking on the unsubscribe links in the marketing emails we send you, by replying to a message in accordance with the procedure set out, by indicating your wish to the telephone operator undertaking the prospection program, or by writing to our Data Protection Officer.

In order to exercise all your rights, you may write to our Data Protection Officer at the company’s registered office:

OMNES Education – Service du DPO – Immeuble Grenelle – 43 quai de Grenelle – 75015 Paris

or by email: dpo@omneseducation.com.

If we have any reasonable doubt as to your identity, and in order to protect your private life and ensure the security of your data, we may undertake to check it.

We attach great importance to the protection of your personal data and your private life. Which is why we have implemented the technical and organizational measures required (physical, logical and personal security, as well as regular audits and reviews) to protect your personal data against illegal or unauthorized destruction, loss, alteration, access, disclosure and accidental use.

We store your personal data when we have a legitimate and ongoing need to provide you with a service which you requested or which you agreed to, for example.

When we have no legitimate commercial need to process your personal data, we delete it or we anonymize it, or if that is not possible, including because your personal data is stored in backup archives, we store your personal data securely.

In the specific case of data used for commercial prospecting, the retention period for your data is three (3) years from the end of the business relationship or your last contact.

Log files and other journals are stored for a period of three (3) years.

Documents on the rights and liberties of the persons concerned are stored for one (1) year as regards access and rectification, and six (6) years as regards the right to object. If we have reasonable doubt, identity documents requested are stored no longer than the time required to verify them.

We host your data in the European Union. When we entrust the hosting of your data to service providers, we ensure that the data is hosted in the European Union and that it is not transferred outside the European Union without prior authorization.

If we have to transfer your personal data to third parties, we supervise and ensure the security of transfers with:

• European Commission adequacy decisions, which recognize that certain countries outside EEA have national laws that protect personal data in accordance with substantially similar standards to the standards required by European Union Law:
• European Commission standard contractual clauses, which require that the personal data of recipients outside the EEA continue to protect the personal data they receive, in accordance with the standards required by European Union law;
• other legal data transfer mechanisms or legal exemptions from restrictions on data transfer.

You may obtain further details by making a request to:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

As part of our communications, we process personal data that concerns you: because you have provided it to us directly, we have collected it automatically, or because we have collected it indirectly from third parties. At each processing stage, we take care to limit the data collected to what is adequate, relevant and necessary for the purposes to be achieved.

1) PERSONAL DATA PROVIDED BY YOU

The personal data we collect is the data you provide to us voluntarily (for example, when using a chatbot or filling in forms) and the data we ask from you when you:

• Contact us by email, telephone, messaging, post, or any other means;
• Enroll on a training program or subscribe to a service;
• Fill in an application form;
• Create or manage a student account;
• Prove your presence in class or submit a supporting document for your absence;
• Register or activate a device (computer, mobile phone or smartphone);
• Register for events, webinars, or services;
• Subscribe to newsletters and alerts on events or information;
• Take part in studies, surveys, competitions and any other promotional activities.

The type of personal data we may request from you can include, but is not limited to:

• Your identity;
• Your contact details (your physical or email address, your telephone number, etc.);
• Where applicable, your professional data or the data relating to your course of study (for example, your position title, prior education, course preferences);
• Your login data (for example, your user name);
• Your financial data (for example, your credit or payment card, your bank account number and your billing address)
• Information on your private life, if you have provided it to us;
• Data on your health status, provided that the situation justifies it, and you have agreed to providing this information;
• Data on to family and friends for emergency contact, for example;
• Opinions on our services and products that you have expressed.

We may ask you to provide additional personal data, for example, in the case of online surveys, to understand your needs.

When you interact with a chatbot, we naturally process all the information you provide to the chatbot, on your own initiative We draw your attention to the importance of not sharing sensitive data (concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation) unless you feel that it is absolutely essential. Some chatbots are likely to enhance your interaction with the help of artificial intelligence systems, in which case you will be informed of it.

2) PERSONAL DATA COLLECTED AUTOMATICALLY

Our websites, and the third-party web analysis service providers we use, automatically collect certain types of data such as your IP address, the type of device you use, your device’s ID and other technical data, via cookies and other similar tracking tools.

Collecting personal data helps us better understand the type of users who visit our websites, where the visitors came from and the content they find useful. We use this data for internal purposes and to improve the quality and relevance of our websites for our visitors. Some of this data can be collected by using cookies and similar tracking tools if you agree to it. For further information, please read our Cookie Policy which can be found on the relevant websites.

3) PERSONAL DATA COLLECTED FROM THIRD PARTIES

From time to time, we may receive personal data that concerns you from third parties, but only when the said third parties are authorized or required to disclose your personal data. The data which we may collect from third parties includes your contact details, professional data where applicable, data on your course of study, etc. For instance, this is the case for data we receive directly from the Parcoursup (French national admissions) platform.

We use the personal data we collected from you for the purpose described in the present Confidentiality Policy, and those we disclosed to you at the time of collection or for compatible purposes.

In particular, we use your data:

• Primarily, to provide you the service set out in your contract, in particular to manage your application, enrollment, and course of study, and to manage your student file;
• To provide you with the information and services you require;
• To present your profile to companies to facilitate access to the labor market or recruitment as an intern or apprentice;
• To send you important notifications concerning our procedures, enrollment conditions, confidentiality policies and other legal documents;
• To carry out our activities, assess and improve the schools (including by developing new training programs, optimizing and improving our services, analyzing our training programs and services);
• To meet the requirements imposed on us by administrative and financial checks and audits;
• To carry out auditing, accounting, invoicing, reconciliation and collection activities as well as other internal commercial operations including recovery;
• To undertake surveys (including market research and consumer studies, satisfaction surveys, trend analysis and financial analysis);
• To protect you and our staff against fraud and other illegal activities or unfounded accusations; to establish, exercise and defend your rights, as well as those of our staff, and to comply with the legal and regulatory obligations in force;
• To maintain the physical security of our premises (visitor logbooks, for instance) and IT and electronic security;
• If you have agreed to it, to inform you of future events, updates, new training programs/services, the latest services, as well as other offers, in accordance with your communication preferences and the contact methods you have given us: postal service, email, phone call, messaging, instant messaging, social media;
• To use and manage our websites.

We may also use your personal data in aggregate form, making it impossible to identify individuals, in order to assess and improve our training programs and services.

In the European Economic Area, the legal basis for personal data processing described above depends on the personal data in question and the specific purposes for which we process it. The legal basis for processing is usually provided to you in the information you were given at the time of collection and you can find the main processing operations here.

However, we only collect personal data from you when:

• You have given us your prior express consent, for example, for any commercial prospecting via email, messaging, etc. You may withdraw your consent at any time by unsubscribing to marketing emails, by managing your communication preferences or by contacting our Data Protection Officer (dpo@omneseducation.com);
• We need your personal data to provide a service you requested as part of a contract or agreement you entered into, or for pre-contractual measures necessary for their conclusion. For example, this is the case for processing implemented as part of your course of study, the management of your administrative and financial file, the management of your schedule, communication with your institution, etc.;
• We process your data in compliance with our legitimate interests, unless your interests or fundamental freedoms and rights prevail. For instance, this is the case for the improvement of our services, satisfaction surveys, statistical analysis, operations required for the security of our websites or events, the prospection of similar products.
• We are under a legal obligation to process certain types of data to meet regulatory constraints.
• In certain extreme cases, we may process your data to ensure that the vital interests of another person are protected, for example, in the case of emergency medical intervention on one of our sites.

For any question on the legal basis for the collection and use of your personal data, please contact our Data Protection Officer (dpo@omneseducation.com).

We may send your personal data to the following recipients:

• All the Organisation et Développement and schools’ departments, in accordance with their operational requirements for the purposes mentioned above;
• The subcontractors and service providers of Organisation et Développement and the schools, which provide us with services that require data processing, for example our suppliers of software, data hosts, organizers of events for which you have registered with and who are tasked with welcoming you, and recovery agencies. Where applicable, details of specific recipients of your data can be sent to you at the time of collection;
• Our financial services providers, linked to the payment of tuition fees;
• Other educational institutions with which OMNES Education has partnerships, provided that this data is necessary for the achievement of these partnerships, for example, when you follow a program in several institutions, or when your course of study involves international exchanges in other institutions;
• Companies, to facilitate your recruitment as part of internships and apprenticeship or professionalization agreements, and to ensure day-to-day management of these internships, apprenticeship agreements and professionalization agreements;
• Organizations involved in the certification or funding of training provided by the OMNES Education group, for example France compétences, certification bodies recognized by France Compétences, skills operators in charge of funding your apprenticeship or professionalization agreement, the Caisse des dépôts et consignations, or education boards;
• Any relevant law enforcement agency, governmental or regulatory agency, court or other third party, for whom it is necessary to disclose personal information (i) under the laws and regulations in force, (ii) to exercise, establish and defend our rights, or (iii) to protect your interests, or those of a third party;
• Any third party company that has made a proposal to acquire, merge, reorganize, transfer, wind up, or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data only for the purposes set out in the present Confidentiality Policy;
• Any other person to whom we have given the authorization to disclose our personal data.

In application of the GDPR and of the French Data Protection and Civil Liberties Act, you have the right to:

• access your personal data and obtain a copy of it;
• update or rectify the inaccuracy of this data;
• request the removal of your personal data;
• request that personal data processing be limited;
• object to the processing of your personal data, except when processing is required to execute your contract, or which is imposed on us by a regulatory constraint;
• request the portability of your personal data
• when processing is based on your consent, withdraw it at any time;
• specify what happens to your personal data after your death;
• file a complaint with the local supervisory authority – in France, the CNIL (French Data Protection Agency).

You also have the right to opt out of receiving marketing emails from us at any time. You may exercise this right by clicking on the unsubscribe links in the marketing emails we send you, by replying to the message in accordance with the procedure set out, by indicating your wish to the telephone operator undertaking the prospection program or by writing to our Data Protection Officer.

In order to exercise all your rights, you may write to our Data Protection Officer at the company’s registered office:

OMNES Education – Service du DPO – Immeuble Grenelle – 43 quai de Grenelle – 75015 Paris

or by email: dpo@omneseducation.com.

If we have any reasonable doubt as to your identity, and in order to protect your private life and ensure the security of your data, we may undertake to check it.

We attach great importance to the protection of your personal data and private life. Which is why we have implemented the technical and organizational measures required (physical, logical and personal security, as well as regular audits and reviews) to protect your personal data against illegal or unauthorized destruction, loss, alteration, access, disclosure and accidental use.

We store your personal data when we have a legitimate and ongoing need to provide you with a service which you requested or which you agreed to, for example. When we no longer have any legitimate commercial need to process your personal data, we delete it or anonymize it.

The data used to provide you with information and communication without commercial prospection, as well as the data used for commercial prospection, is stored for the duration of your course of study and then for a further three (3) years from the end of the agreement or your last contact.

The retention period of data on the management of your student life and course of study depends on the type of data. We store all your data for a period of five (5) years, which is the duration of common law limitation period in case of dispute. We store most of the data relating to your enrollment and course of study for a further one (1) year (therefore, for a total duration of six (6) years after your graduation) as required by the skills operators as part of their checks (Article L6316-3 of the French Labor Code). The data is then archived and stored in compliance with the Ministerial Instruction 2005-003 of February 22, 2005.

Log files and other journals are stored for a period of three (3) years.

The data relating to contracts and guarantees that a student or learner has entered into is stored for two (2) years in compliance with Article L. 218-2 of the French Consumer Code.

The data relating to recovery operations is stored for a period of five (5) years, after the last attempt to recover payment.

The data relating to a contract entered into by electronic means with a consumer (for an amount equal to or greater than 120 euros) is stored for a period of ten (10) years in compliance with Articles L. 213-1, D. 213-1 and D. 213-2 of the French Consumer code.

Documents on the rights and liberties of the persons concerned are stored for one (1) year as regards access and rectification, and six (6) years as regards the right to object. If we have any reasonable doubt, identity documents requested are stored no longer than the time required to verify them.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is backed up in the cloud or we use SaaS applications, we ensure that the data is hosted in the European Union and that it is not transferred outside the European Union without prior authorization.

Your personal data may nevertheless be transferred and processed in countries other than the country of your school, especially if you are undertaking part of your course of study abroad in a partner institution of the OMNES Education Group. These countries may have data protection laws that are different to those of the country of your original institution which may, in certain cases, not provide the same level of protection.

We take utmost precautions to ensure that your personal data remains protected in compliance with the present Confidentiality Policy.

It may be the case that the country where the host institution is located ensures a level of data protection that is adequate and appropriate, recognized by a European Commission adequacy decision, which recognizes that certain countries outside the EEA have national data protection laws that comply with standards substantially similar to those required by European Union law.

If the institution is not located in a country that ensures an equivalent level of protection, we ensure that the host institution has signed the European Commission standard contractual clauses (SCCs), which require that personal data recipients outside the EEA continue to protect the personal data they receive, in accordance with the standards required by European Union law.

If the host institution has refused to sign the standard contractual clauses, we notify you of the fact and ask your consent to transfer the data that concerns you.

You may obtain further details by making a request to:

OMNES Education – Service du DPO – Immeuble Grenelle – 43 quai de Grenelle – 75015 Paris

dpo@omneseducation.com.

As part of our communications, we process personal data that concerns you: because you have provided it to us directly, we have collected it automatically, or because we have collected it indirectly from third parties. At each processing stage, we take care to limit the data collected to what is adequate, relevant and necessary for the purposes to be achieved.

The primary source of data that concerns you comes from your student profile and the data you have given us or that we have collected throughout your course of study. We may add to this data after you have completed your course of study as follows.

1) PERSONAL DATA PROVIDED BY YOU

The personal data we collect is the data you provide to us voluntarily (for example, when using a chatbot or filling in forms) and the data we ask from you when you:

• Contact us by email, telephone, messaging, post, or any other means;
• Enroll on a training program or subscribe to a service;
• Create or manage an alumni account;
• Register for events, webinars, or services;
• Subscribe to newsletters and alerts on events or information;
• Take part in surveys, competitions and any other promotional activities.

The type of personal data we may request from you can include, but is not limited to:

• Your identity;
• Your contact details (your physical or email address, your telephone number, etc.);
• Where applicable, your professional data (for example, your position title, prior education, course preferences);
• Your login data (for example, your user name);
• Your financial data (for example, your credit or payment card, your bank account number and your billing address for the payment of your alumni membership fee);
• Information on your private life, if you have given it to us;
• Data on family and friends for emergency contact, for example;
• Opinions on our services and products that you have expressed.

We may ask you to provide additional personal data, for example, in the case of online surveys, to understand your needs.

When you interact with a chatbot, we naturally process all the information you provide to the chatbot, on your own initiative We draw your attention to the importance of not sharing sensitive data (concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation) unless you feel that it is absolutely essential. Some chatbots are likely to enhance your interaction with the help of artificial intelligence systems, in which case you will be informed of it.

2) PERSONAL DATA COLLECTED AUTOMATICALLY

Our websites, and the third-party web analysis service providers we use, automatically collect some types of data such as your IP address, the type of device you use, your device’s ID and other technical data, by via cookies and other similar tracking tools.

Collecting personal data helps us better understand the type of users who visit our websites, where the visitors came from and the content they find useful. We use this data for internal purposes and to improve the quality and relevance of our websites for our visitors. Some of this data can be collected by using cookies and similar tracking tools if you agree to it. For further information, please read our Cookie Policy which can be found on the relevant websites.

3) PERSONAL DATA COLLECTED FROM THIRD PARTIES

From time to time, we may receive personal data concerning you from third parties, but only when the said third parties are authorized or required to disclose your personal data. The data we collect from third parties includes your contact details, professional data where applicable, data on your course of study, etc.

We may also collect data concerning you if you have made it freely accessible, for example on professional social media, in order to contribute to public alumni employment surveys or for statistical purposes. You can object to this processing activity by contacting our Data Protection Officer: dpo@omneseducation.com.

We use the personal data we collected from you for the purpose described in the present Confidentiality Policy, and those we disclosed to you at the time of collection or for compatible purposes.

In particular, we use your data:

• Primarily, in order to enable you to join the OMNES Education group alumni network, in particular to put you in contact with all former group students, and enable you to develop a professional network;
• To provide you with the information and services you require;
• To monitor your career after graduation in compliance with regulations;
• To present your profile to companies to facilitate access to the labor market or for your first position;
• To suggest alumni profiles to enable you to recruit new coworkers;
• If you have agreed to it, to inform you of future events, updates, new training programs/services, the latest services, as well as other offers, in accordance with your communication preferences and the contact methods you have given us: postal service, email, phone call, messaging, instant messaging, social media;
• If you have agreed to it, to suggest that you take part in your former institution’s activities via open days, presentations to students and as a panel member;
• To send you important notifications concerning our procedures, enrollment conditions, confidentiality policies and other legal documents;
• To carry out our activities, assess and improve the schools (including by developing new training programs, optimizing and improving our services, analyzing our training programs and services);
• Meet the requirements imposed on us by administrative and financial checks and audits;
• To carry out auditing, accounting, invoicing, reconciliation and collection activities as well as other internal commercial operations;
• To undertake surveys (including market research and consumer studies, satisfaction surveys, trend analysis, financial analysis);
• To protect you and our staff against fraud and other illegal activities or unfounded accusations; to establish, exercise and defend your rights, as well as those of our staff, and to comply with the legal and regulatory obligations in force;
• To maintain the physical security of our premises (visitor logbooks, for instance) and IT and electronic security;
• To use and manage our websites.

We may also use your personal data in aggregate form, making it impossible to identify individuals, in order to assess and improve our training programs and services.

In the European Economic Area, the legal basis for personal data processing described above depends on the personal data in question and the specific purposes for which we process it. The legal basis for processing is usually provided to you in the information you were given at the time of collection and you can find the main processing operations here.

However, we mainly collect personal data from you when:

• You have given us your prior express consent, for example, for any commercial prospecting via email, messaging, etc. You may withdraw your consent at any time by unsubscribing to marketing emails, by managing your communication preferences or by contacting our Data Protection Officer (dpo@omneseducation.com);
• We need your personal data to provide a service you requested as part of a contract or agreement you entered into, or for pre-contractual measures necessary for their conclusion. For example, this is the case for processing as part of creating and using an alumni account on our dedicated platform;
• We process your data in compliance with our legitimate interests, unless your interests or fundamental freedoms and rights prevail. For instance, this is the case for graduate employment surveys, directories, statistical analysis, operations required for the security of our websites or events, prospection of similar products.
• We are under a legal obligation to process certain types of data to meet regulatory constraints.

For any question relating to the legal basis for the collection and use of your personal data, please contact our Data Protection Officer (dpo@omneseducation.com).

We may send your personal data to the following recipients:

• All the Organisation et Développement and schools’ departments, in accordance with their operational requirements for the purposes mentioned above;
• The subcontractors and service providers of Organisation et Développement and the schools, which provide us with services requiring data processing, for example, our suppliers of software, data hosts, organizers of events for which you have registered with and who are tasked with welcoming you. Where applicable, details of specific recipients of your data can be sent to you at the time of collection;
• Companies to facilitate your recruitment;
• Organizations involved in the certification of training provided by the OMNES Education group, for example France compétences, certifications recognized by France Compétences, skills operators, companies and organizations involved in the certification process, such as our service providers, or the Caisse des dépôts et consignations;
• Any relevant law enforcement agency, governmental or regulatory agency, court or other third party, for whom it is necessary to disclose personal information (i) under the laws and regulations in force, (ii) to exercise, establish and defend our rights or (iii) to protect your interests, or those of a third party;
• Any third party company that has made a proposal to acquire, merge, reorganize, transfer, wind up, or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data only for the purposes set out in the present Confidentiality Policy;
• Any other person to whom we have given the authorization to disclose our personal data.

In application of the GDPR and of the French Data Protection and Civil Liberties Act, you have the right to:

• access your personal data and obtain a copy of it;
• update or rectify the inaccuracy of this data;
• request the removal of your personal data;
• request that personal data processing be limited;
• object to the processing of your personal data, except when processing is required to execute your contract, or which is imposed on us by a regulatory constraint;
• request the portability of your personal data;
• when processing is based on your consent, withdraw it at any time;
• specify what happens to your personal data after your death;
• file a complaint with the local supervisory authority – in France, the CNIL (French Data Protection Agency).

You also have the right to opt out of receiving marketing emails from us at any time. You may exercise this right by clicking on the unsubscribe links in the marketing emails we send you, by replying to the message in accordance with the procedure set out, by indicating your wish to the telephone operator undertaking the prospection program or by writing to our Data Protection Officer.

In order to exercise all your rights, you may write to our Data Protection Officer at the registered office:

OMNES Education – Service du DPO – Immeuble Grenelle – 43 quai de Grenelle – 75015 Paris

or by email: dpo@omneseducation.com.

If we have any reasonable doubt as to your identity, and in order to protect your private life and ensure the security of your data, we may undertake to check it.

We attach great importance to the protection of your personal data and private life. Which is why we have implemented the technical and organizational measures required (physical, logical and personal security, as well as regular audits and reviews) to protect your personal data against illegal or unauthorized destruction, loss, alteration, access, disclosure and accidental use.

We store your personal data when we have a legitimate and ongoing need to provide you with a service which you requested or which you agreed to, for example.

When we have no legitimate commercial need to process your personal data, we delete it or we anonymize it, or if that is not possible, including because your personal data is stored in backup archives, we store your personal data securely.

Data relating to your course of study has been stored during this period, then archived for a further six (6) years (as requested by the skills operators as part of their checks – Article L6316‑3 of the French Labor Code) to enable us to prove the adequacy of our training programs with public benchmarks.

The data relating the management of your alumni account is stored so long as you continue to use your account and for a further three (3) years from your last login. Before we delete your data, we may contact you to inform you that deletion of your data is imminent and to allow you to reconnect to your account if you wish to do so and thus renew the storage duration. Failing reconnection before the end of this period, your data will be deleted except for the data required to prove your graduation status (full identity and details of training programs followed and diplomas obtained), which is stored for a period of fifty (50) years after your course of study.

The data used to provide you with information and communication without commercial prospection, as well as the data used for commercial prospection, is stored for the duration of your course of study and then for a further three (3) years from the end of the agreement or your last contact.

Log files and other journals are stored for a period of three (3) years.

Documents on the rights and liberties of the persons concerned are stored for one (1) year as regards access and rectification, and six (6) years as regards the right to object. If we have reasonable doubt, identity documents requested are stored no longer than the time required to verify them.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is backed up in the cloud or we use SaaS applications, we ensure that the data is hosted in the European Union and that it is not transferred outside the European Union without prior authorization.

If we have to transfer your personal data to third parties, we supervise and ensure the security of transfers with:

• European Commission adequacy decisions, which recognize that certain countries outside the EEA have national laws that protect personal data in accordance with substantially similar standards to the standards required by European Union Law:
• European Commission standard contractual clauses, which require that the personal data of recipients outside the EEA continue to protect the personal data they receive, in accordance with the standards required by European Union law;
• other legal data transfer mechanisms or legal exemptions from restrictions on data transfer such as binding corporate rules.

You may obtain further details by making a request to:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

As part of our communications, we process personal data that concerns you: because you have provided it to us directly, we have collected it automatically, or because we have collected it indirectly from third parties. At each processing stage, we take care to limit the data collected to what is adequate, relevant and necessary for the purposes to be achieved.

1) PERSONAL DATA PROVIDED BY YOU

The personal data we collect is the data you provide to us voluntarily and the data we ask from you when you:

• Apply for a position published by the group;
• Create and complete your HR account, following a successful application;
• Contact the human resources department via email, telephone, messaging, postal service, or any other means;
• Enroll in a training program;
• Register or activate a device (computer, mobile phone or smartphone);
• Register for events, webinars, or services;
• Subscribe to newsletters and alerts on events or information;
• Take part in surveys, competitions, or any other promotional activities.

The type of personal data we may request from you can include, but is not limited to:

• Your identity;
• Your contact details (your physical and email address, your telephone number, etc.);
• Where applicable, your professional data (for example your prior education, course preferences);
• Your login data (for example, your user name);
• Your financial data (for example, your bank account number);
• Data on your health status, provided that the situation justifies it;
• Information on your private life, if you have given it to us;
• Data on family and friends, for emergency contact, for example, if you have given it to us;
• Opinions you have expressed in the context of surveys.

We may ask you to provide additional personal data, for example, in the case of online surveys, to understand your needs.

2) PERSONAL DATA COLLECTED AUTOMATICALLY

Our websites (and Intranet in particular), the group’s computing equipment and third-party web analysis service providers we use, automatically collect some types of data such as your IP address, the type of device you use, your device’s ID and other technical data, via cookies and other similar tracking tools.

3) PERSONAL DATA COLLECTED FROM THIRD PARTIES

From time to time, we may receive personal data concerning you from third parties, but only when the said third parties are authorized or required to disclose your personal data. The data we collect from third parties includes your contact details, professional data where applicable, data relating to your career, etc.

We use the personal data we collected from you for the purpose described in the present Confidentiality Policy, and the data we disclosed to you at the time of collection or for compatible purposes.

In particular, we use your data:

• Primarily to manage your application, or your employment contract;
• To ensure payment of your compensation;
• To provide you with professional tools, especially computing equipment;
• To organize your workload;
• To monitor your career and mobility, and provide skills monitoring on the basis of your annual reviews;
• To offer training programs to you;
• To keep mandatory registers, especially those on staff representative bodies;
• To carry out internal communications;
• To manage any HR dispute;
• To enable you to be monitored by an occupational health team;
• To monitor your credited hours scheme (PCF);
• To provide you with psychological counseling;
• To provide you with the information and services you require;
• To send you important notifications concerning our procedures, enrollment conditions, confidentiality policies and other legal documents;
• To meet the requirements imposed on us by administrative and financial checks and audits;
• To carry out auditing, accounting, invoicing, reconciliation and collection activities as well as other internal commercial operations;
• To protect you and us against fraud and other illegal activities or unfounded accusations; to establish, exercise, and defend your rights and our rights and to comply with our legal and regulatory obligations in force;
• To maintain the physical security of our premises (visitor logbooks, for instance) and IT and electronic security;

We may also use your personal data in aggregate form, making it impossible to identify individuals in order to assess and improve our training programs and services

In the European Economic Area, the legal basis for personal data processing described above depends on the personal data in question and the specific purposes for which we process it. The legal basis for processing is usually provided to you in the information you were given at the time of collection and you can find the main processing operations here.

However, we only collect personal data from you when:

• In most cases, we need your personal data regarding your employment contract, or an agreement you have entered into or for the pre-contractual measures necessary for their conclusion. For example, this is the case for processing implemented regarding the management of your professional file, to pay your compensation, monitor your mobility or requests for training programs;
• We process your data in compliance with our legitimate interests, unless your interests or fundamental freedoms and rights prevail. For example, this is the case when giving you an internal directory, managing and maintaining the computing equipment provided to you, managing your email system and enabling you to connect with the group’s VPN, implementing a review and skills management procedure, and organizing training programs you benefit from;
• We are under a legal obligation to process certain types of data to meet regulatory constraints. For example, we are obliged to process or transfer some of your data in the context of professional elections, to organize meetings of staff representative bodies or to fill in your personal social declaration form (DSN).
• In certain extreme cases, we may process your data to ensure that the vital interests of another person are protected, for example, in the case of emergency medical intervention on one of our sites.

For any question on the legal basis for the collection and use of your personal data, please contact our Data Protection Officer(dpo@omneseducation.com).

We may send your personal data to the following recipients:

• All the Organisation et Développement and schools’ departments, in accordance with their operational requirements for the purposes mentioned above;
• The subcontractors and service providers of Organisation et Développement and the schools, which provide us with the services required for processing data, for example from our suppliers, data hosts and the service provider supplying the key to the virtual strongbox that enables you to keep your payslips. Where applicable, details of specific recipients of your data can be sent to you at the time of collection;
• Public and private organizations involved in your compensation, social contributions, retirement plan, supplementary health insurance, and insurance;
• Any relevant law enforcement agency, governmental or regulatory agency, court or other third party, for whom it is necessary to disclose personal information (i) under the laws and regulations in force, (ii) to exercise, establish and defend our rights or (iii) to protect your interests, or those of a third party;
• Any third party company that has made a proposal to acquire, merge, reorganize, transfer, wind up, or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data only for the purposes set out in the present Confidentiality Policy;
• Any other person to whom we have given the authorization to disclose our personal data.

In application of the GDPR and of the French Data Protection and Civil Liberties Act, you have the right to:

• access your personal data and obtain a copy of it;
• update or rectify the inaccuracy of this data;
• request the removal of your personal data;
• request that personal data processing be limited;
• object to the processing of your personal data, except when the processing is required for the execution of your agreement, or is imposed on us by a regulatory constraint;
• request the portability of your personal data;
• when processing is based on your consent, withdraw it at any time;
• specify what happens to your personal data after your death;
• file a complaint with the local supervisory authority – in France, the CNIL (French Data Protection Agency).

In order to exercise all your rights, you may write to our Data Protection Officer at the company’s registered office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

If we have any reasonable doubt as to your identity, and in order to protect your private life and ensure the security of your data, we may undertake to check it.

We attach great importance to the protection of your personal data and private life. Which is why we have implemented the technical and organizational measures required (physical, logical and personal security, as well as regular audits and reviews) to protect your personal data against illegal or unauthorized destruction, loss, alteration, access, disclosure and accidental use.

We store your personal data when we have a legitimate and ongoing requirement for it in compliance with the CNIL benchmarks on recruitment and human resources management.

The duration for the storage of data varies significantly, depending on the type of data and of the legal storage obligations incumbent on the employer, especially as regards the French Labor Code and the French Social Security Code.

Many types of data must be stored for at least the entire duration of your presence in the group and several years thereafter (for example, five (5) years for data required to keep a staff register, six (6) years for your DSN, ten (10) years for transfer orders and up to fifty (50) years for the digital version of your payslips in your virtual strongbox). When we store this data after your departure, we implement reinforced security measures to limit access to the data.

Should your application for a position not be successful, and if you have agreed to it, your résumé will be kept for a period of one (1) year to enhance our résumé library and enable us to contact you again should a new position matching your profile arise.

Log files and other journals are stored for a period of three (3) years.

Documents on the rights and liberties of the persons concerned are stored for one (1) year as regards access and rectification, and six (6) years as regards the right to object. If we have reasonable doubt, identity documents requested are stored no longer than the time required to verify them.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is backed up in the cloud or we use SaaS applications, we ensure that the data is hosted in the European Union and that it is not transferred outside the European Union without prior authorization.

If we have to transfer your personal data to third parties, we supervise and ensure the security of transfers with:

• European Commission adequacy decisions, which recognize that certain countries outside EEA have national laws that protect personal data in accordance with substantially similar standards to the standards required by European Union Law:
• European Commission standard contractual clauses, which require that the personal data of recipients outside the EEA continue to protect the personal data they receive, in accordance with the standards required by European Union law;
• other legal data transfer mechanisms or legal exemptions from restrictions relating to data transfer.

You may obtain further details by making a request to:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

As part of our communications, we process personal data that concerns you: because you have provided it to us directly, we have collected it automatically, or because we have collected it indirectly from third parties. At each processing stage, we take care to limit the data collected to what is adequate, relevant and necessary for the purposes to be achieved.

1) PERSONAL DATA PROVIDED BY YOU

The personal data we collect is the data you provide to us voluntarily (for example, when using a chatbot or filling in forms) and the data we ask from you when you:

• Sign a contract with us;
• Accept or supervise one of our students in a work-study program or an internship agreement;
• Register to attend or contribute to events, webinars, or services;
• Subscribe to newsletters and alerts on events or information;
• Take part in surveys, competitions, or any other promotional activities.

The type of personal data we may request from you can include, but is not limited to:

• Your identity;
• Your professional data (your physical or email address, your telephone number, etc.);
• Details of your professional life (for example your position title, prior education, course preferences)
• Your login data (for example, your user name);
• Your financial data (for example, your credit or payment card, bank account number and billing address);
• Opinions on our services and products that you have expressed.

We may ask you to provide additional personal data, for example, in the case of online surveys, to understand your needs.

2) AUTOMATICALLY COLLECTED PERSONAL DATA

Our websites, and the third party web analysis service providers we use, automatically collect some types of data such as your IP address, the type of device you use, your device’s ID and other technical data, via cookies and other similar tracking tools.

Collecting personal data helps us better understand the type of users who visit our websites, where the visitors came from and the content they find useful. We use this data for internal purposes and to improve the quality and relevance of our websites for our visitors. Some of this data can be collected by using cookies and similar tracking tools if you agree to it. For further information, please read our Cookie Policy which can be found on the relevant websites.

3) PERSONAL DATA COLLECTED FROM THIRD PARTIES

We may receive personal data concerning you from third parties, but only if these third parties are authorized or required to disclose your personal data. The data we may collect from third parties includes your contact details, professional data where applicable, data on your career, etc.

We may also collect data concerning you if you have made it freely accessible, for example on professional social media.

We use the personal data we collected from you for the purpose described in the present Confidentiality Policy, and those we disclosed to you at the time of collection or for compatible purposes.

In particular, we use your data:

• For the purposes of our pre-contractual relationship (in particular to carry out the pre-contractual verifications imposed by French and European laws), contractual and subsequent relationship (especially for the purposes of recovery or litigation);
• To present your company and the job offers it publishes to our students and to put them in contact with you;
• If you have not objected to it, to inform you of future events, updates, new training programs/services, the latest services, as well as other offers, especially those relating to our students’ course of study, in accordance with your communication preferences and the contact methods you have given us: postal service, email, phone call, messaging, instant messaging, social media;
• To provide you with the information and services you require;
• To send you important notifications concerning our procedures, enrollment conditions, confidentiality policies and other legal documents;
• To meet the requirements imposed on us by administrative and financial checks and audits;
• To carry out auditing, accounting, invoicing, reconciliation and collection activities as well as other internal commercial operations;
• To undertake surveys (including market research and consumer studies, satisfaction surveys, trend analysis, financial analysis);
• To protect you and our staff against fraud and other illegal activities or unfounded accusations; to establish, exercise and defend your rights, as well as those of our staff, and to comply with the legal and regulatory obligations in force;
• To maintain the physical security of our premises (visitor logbooks, for instance) and IT and electronic security;
• To use and manage our websites.

We may also use your personal data in aggregate form, making it impossible to identify individuals in order to assess and improve our training programs and services.

In the European Economic Area, the legal basis for personal data processing described above depends on the personal data in question and the specific purposes for which we process it. The legal basis for processing is usually provided to you in the information you were given at the time of collection and you can find the main processing operations here.

However, we only collect personal data from you when:

• We need your personal data to provide a service you requested as part of a contract or agreement you entered into, or for pre-contractual measures necessary for their conclusion.
• We process your data in compliance with our legitimate interests, unless your interests or fundamental freedoms and rights prevail. For instance, this is the case when we put our students in contact with one another or when we undertake satisfaction surveys, statistical analysis, operations required for the security of our websites and events, or prospection, unless you object to it at any time.
• We are under a legal obligation to process certain types of data to meet regulatory constraints. For example, we are obliged to process or transfer some of your data to prove the quality of our training programs with government agencies.

For any question on the legal basis for the collection and use of your personal data, please contact our Data Protection Officer(dpo@omneseducation.com).

We may send your personal data to the following recipients:

• All the Organisation et Développement and schools’ departments, in accordance with their operational requirements for the purposes mentioned above;
• The subcontractors and service providers of Organisation et Développement and the schools, which provide us with services requiring data processing, for example our suppliers of software, data hosts, organizers of events for which you have registered with and who are tasked with welcoming you, or recovery agencies. Where applicable, details of specific recipients of your data can be sent to you at the time of collection:
• Financial service providers, regarding the payment of our invoices and yours;
• Our students and alumni, so that you can send us job offers, or invite them to contact them as part of their search for an internship or work-study program;
• Organizations involved in the certification of training provided by the OMNES Education group, for example France compétences, certification bodies recognized by France Compétences, or skills operators in charge of funding your apprenticeship or professionalization agreement;
• Any relevant law enforcement agency, governmental or regulatory agency, court or other third party, for whom it is necessary to disclose personal information (i) under the laws and regulations in force, (ii) to exercise, establish and defend our rights or (iii) to protect your interests, or those of a third party;
• Any third party company that has made a proposal to acquire, merge, reorganize, transfer, wind up, or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data only for the purposes set out in the present Confidentiality Policy;
• Any other person to whom we have given the authorization to disclose our personal data.

In application of the GDPR and of the French Data Protection and Civil Liberties Act, you have the right to:

• access your personal data and obtain a copy of it;
• update or rectify the inaccuracy of this data;
• request the removal of your personal data;
• request that personal data processing be limited;
• object to the processing of your personal data, except when processing is required to execute your contract, or which is imposed on us by a regulatory constraint
• request the portability of your personal data
• when processing is based on your consent, withdraw it at any time;
• specify what happens to your personal data after your death;
• file a complaint with the local supervisory authority – in France, the CNIL (French Data Protection Agency).

You also have the right to object to receiving marketing communications that we send you, at any time. You may exercise this right by clicking on the unsubscribe links in the marketing emails we send you, by replying to the message in accordance with the procedure set out, by indicating your wish to the telephone operator undertaking the prospection program or by writing to our Data Protection Officer.

In order to exercise all your rights, you may write to our Data Protection Officer at the company’s registered office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

If we have any reasonable doubt as to your identity, and in order to protect your private life and ensure the security of your data, we may undertake to check it.

We attach great importance to the protection of your personal data and private life. Which is why we have implemented the technical and organizational measures required (physical, logical and personal security, as well as regular audits and reviews) to protect your personal data against illegal or unauthorized destruction, loss, alteration, access, disclosure and accidental use.

We store your personal data when we have a legitimate and ongoing need to provide you with a service which you requested or which you agreed to, for example.

When we have no legitimate commercial need to process your personal data, we delete it or we anonymize it, or if that is not possible, including because your personal data is stored in backup archives, we store your personal data securely.

The data used for commercial prospecting is stored for a period of three (3) years from the end of the business relationship or your last contact.

The data collected when students are hosted as part of an apprenticeship or professionalization agreement, or an internship is stored for a period of three (3) years from the end of our contractual relationship in order to propose that you welcome other students with a similar profile.

The data relating to invoicing is stored for a period of ten (10) years, starting from the end of the fiscal year, in compliance with Article L. 123-22 of the French Trade Code.

Documents on the rights and liberties of the persons concerned are stored for one (1) year as regards access and rectification, and six (6) years as regards the right to object. If we have reasonable doubt, identity documents requested are stored no longer than the time required to verify them.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is backed up in the cloud or we use SaaS applications, we ensure that the data is hosted in the European Union and that it is not transferred outside the European Union without prior authorization.

If we have to transfer your personal data to third parties, we supervise and ensure the security of transfers with:

• European Commission adequacy decisions, which recognize that certain countries outside EEA have national laws that protect personal data in accordance with substantially similar standards to the standards required by European Union Law:
• European Commission standard contractual clauses, which require that the personal data of recipients outside the EEA continue to protect the personal data they receive, in accordance with the standards required by European Union law;
• other legal data transfer mechanisms or legal exemptions from restrictions on data transfer.

You may obtain further details by making a request to:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

Some of our sites are protected by video surveillance and video protection systems. Specific notices displayed at site entrances inform you of their presence. When you enter these sites, we automatically collect your image and process the personal data that concerns you.

Videosurveillance and videoprotection systems may have been implemented in order to:

• Ensure the safety of people and property;
• Help in assisting persons and contributing to fire prevention;
• Ensure the safety of buildings.
• Exercise and defend our rights, particularly in the courts, through any contentious or pre-litigious action.

Processing relating to videosurveillance and videoprotection is implemented in accordance with our legitimate interests.

For any question on the legal basis for the collection and use of your personal data, please contact our Data Protection Officer(dpo@omneseducation.com).

We may send your personal data to the following recipients:

• The management of Organisation et Développement and the school concerned, as wall as the department in charge of the site’s support services where the videosurveillance and videoprotection system is deployed;
• The subcontractors and service providers of Organisation et Développement and the schools, which provide us with services that require data processing, such as storing images from these devices, providing surveillance and security, or those in charge of our software and server maintenance;
• Any relevant law enforcement agency, governmental or regulatory agency, court or other third party, for whom it is necessary to disclose personal information (i) under the laws and regulations in force, (ii) to exercise, establish and defend our rights or (iii) to protect your interests, or those of a third party;
• Any other person to whom we have given the authorization to disclose our personal data.

In application of the GDPR and of the French Data Protection and Civil Liberties Act, you have the right to:

• access your personal data and obtain a copy of it;
• request that personal data processing be limited;
• file a complaint with the local supervisory authority – in France, the CNIL (French Data Protection Agency).

In order to exercise all your rights, you may write to our Data Protection Officer at the company’s registered office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

If we have any reasonable doubt as to your identity, and in order to protect your private life and ensure the security of your data, we may undertake to check it.

We attach great importance to the protection of your personal data and private life. Which is why we have implemented the technical and organizational measures required (physical, logical and personal security, as well as regular audits and reviews) to protect your personal data against illegal or unauthorized destruction, loss, alteration, access, disclosure and accidental use.

Data derived from videosurveillance and videoprotection systems is stored for a period of thirty (30) days and then deleted.

We host data in the European Union.