Privacy Policy

In the course of our business, we process personal data about you: either because you have provided it to us directly, or because we have collected it automatically, or because we have collected it indirectly from third parties. At each stage of processing, we take care to limit the data collected to that which is adequate, relevant and necessary for the purposes pursued.

1) Personal data provided by you

The personal data we collect is that which you provide to us spontaneously (for example when using chat robots or in the free comment areas of our forms) and that which we ask you for when you :

• Contact us by e-mail, telephone, courier, post or any other means;
• Request a quote, help, downloads or information;
• Register for an Open Day;
• Ask to be called back by an administrative staff member or a student;
• Request a personal appointment;
• Request an information brochure;
• Chat with our conversational robots on our websites;
• Register for events, webinars or services;
• Subscribe to newsletters and alerts about events and information;
• Take part in surveys, competitions or other promotional activities.

The type of personal data we may request from you may include, but is not limited to, the following:

• Your identity ;
• Your contact details (physical or electronic address, telephone number, etc.);
• Your professional details (e.g. job title, previous training, training requirements) ;
• Your identification details (for example, your user name) ;
• Information about your personal life, if you have given it to us;
• Opinions you have expressed about our services and products.

We may ask you to provide additional personal data, for example in the case of our online surveys to understand your needs.

When you interact with a conversational robot, we will naturally process any information that you provide to the robot on your own initiative. We would draw your attention to the importance of not sharing sensitive data (relating to your racial or ethnic origin, your political opinions, your religious or philosophical beliefs or your trade union membership, your health, your sex life or your sexual orientation), unless you feel it is absolutely essential. Certain conversational robots are likely to enrich your exchange using artificial intelligence systems, in which case you will be informed.

2) Personal data collected automatically

Our websites, or third party web analytics services we use, automatically collect certain data such as your IP address, the type of device you are using, your device ID and other technical information through cookies and similar tracking technologies.

Collecting personal data allows us to better understand the type of visitors to our sites, where they come from and what content interests them on our sites. We use this information for internal analysis and to improve the quality and relevance of our sites for visitors. Some of this information may be collected using cookies and similar tracking technologies where you have consented to this. For more information, please consult our Cookie Policy available on the websites in question.

3) Personal data collected from third parties

From time to time, we may receive personal data about you from third party sources, but only where such third parties are authorised or required to disclose your personal information to us. The information that we may collect from third parties includes your contact details, contact data, any professional data, data relating to your educational background, etc. This is the case, for example, of data that we receive from third parties. This is the case, for example, with data that we receive directly from the Parcoursup platform.

We use the personal information we collect from you for the purposes described in this Privacy Policy, and those we disclosed to you at the time of collection or for compatible purposes.
In particular, we use your information to:

• Firstly, to provide you with the information and services you request;
• If you have consented, to inform you of forthcoming events, updates, new training/services and the latest services and other offers in accordance with your communication preferences and the means of contact you have indicated to us: postal or electronic mail, telephone call, SMS, instant messaging, social networks;
• Send important notices about our terms and conditions, registration conditions, privacy policies or other legal documents;
• Carrying out our activities, evaluating and improving schools (in particular developing new training courses, optimising and improving our services, analysing our training courses/services);
• Carry out analyses (including market and consumer research, customer satisfaction research, trend analysis, financial analysis);
• To protect you and our staff from fraud and other illegal activities or from unfounded accusations; to establish, exercise and defend your rights and those of our staff and to comply with our legal and regulatory obligations;
• Maintain the physical security of our premises (e.g. visitor registers) and computer or electronic security;
• Operate and manage our websites.

We may also use your personal data in an aggregated form that does not allow individuals to be identified in order to evaluate and improve our training and service offerings.

For the European Economic Area, the legal basis for the processing of personal data described above will depend on the personal information concerned and the specific purposes for which we process it. The legal basis for the processing is most often indicated in the information sent to you when your personal data is collected, and you can find the legal basis for our main processing operations here.
However, we only collect personal data from you when:

• You have given us your express prior consent, for example for any commercial prospecting by e-mail, SMS, etc. In this case, you can withdraw your consent at any time, either simply in the prospecting messages, or by managing your communication preferences, or by contacting our Data Protection Officer(dpo@omneseducation.com);
• We may process your data in accordance with our legitimate interests, unless your interests or fundamental rights and freedoms prevail. This is the case, for example, for our satisfaction surveys, the compilation of statistics, operations necessary for the security of our websites or our events.
• We may be legally obliged to process some of your data in order to comply with regulatory requirements.

If you have any questions about the legal basis on which we collect and use your personal information, please contact our Data Protection Officer(dpo@omneseducation.com).

We may pass on your personal data to the following recipients:

Any other person to whom you have authorised us to disclose your personal data.which we rely on to collect and use your personal information, you can contact our Data Protection Officer(dpo@omneseducation.com).

All the departments of Organisation et Développement and the schools according to their operational needs to achieve the above objectives;

The sub-contractors and service providers of Organisation et Développement and the schools who provide us with services requiring the processing of data, for example service providers carrying out prospecting campaigns, data hosts, or the organisers of events for which you have registered and who are responsible for welcoming you. Where appropriate, details of the specific recipients of your data may be communicated to you at the time of collection.

Any competent body responsible for law enforcement, any governmental or regulatory agency, any court or other third party to whom it is necessary to disclose personal information (i) pursuant to applicable laws or regulations, (ii) to exercise, establish or defend our rights or (iii) to protect your interests or those of a third party;

Any third party company that has made a proposal to purchase, merge, reorganise, acquire, dissolve or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data solely for the purposes set out in this Privacy Policy;

Pursuant to the RGPD and the Data Protection Act, you have the right to:

• access your personal data and obtain a copy;
• to update or correct inaccurate data;
• request the deletion of your personal data;
• to request that we restrict the processing of your personal data;
• to object to the processing of your personal data, except where such processing is necessary for the performance of your contract or is required by law;
• request the portability of your personal data;
• where processing is based on your consent, to withdraw it at any time;
• to set out instructions on what to do with your personal data after your death;
• lodge a complaint with the competent authority – in France, the CNIL.

You also have the right to refuse to receive marketing communications from us at any time. You can exercise this right by clicking on the unsubscribe links in the marketing e-mails we send you, by replying to SMS messages in the manner set out in the message, by indicating this to the telephone operator carrying out the canvassing, or by writing to our Data Protection Officer.

To exercise all your rights, you can write to our Data Protection Officer at the company’s head office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

Where we have reasonable doubts as to your identity, and in order to protect your privacy and ensure the security of your data, we may verify it.

We attach great importance to protecting your personal data and your privacy. This is why we have put in place the necessary technical and organisational measures (physical, logical and human security, regular audits and reviews) to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure and use.

We retain your personal data where we have a legitimate and continuing need to do so, for example to provide you with a service you have requested or to which you have given your consent.

Where we have no legitimate business need to process your personal data, we will delete or anonymise it or, if this is not possible, in particular because your personal data is stored in a back-up archive, we will store your personal data securely.

With regard specifically to data used for commercial canvassing, your data is kept for 3 years from the end of the relationship or the last contact on your initiative.
Log files and other computer logs are kept for 6 months.

Documents relating to the data protection rights of the persons concerned are kept for 1 year in the case of rights of access and rectification, and for 6 years in the case of the right to object. Identity documents requested when we have reasonable doubt are not kept beyond the time required for verification.

We host your data within the European Union. When we entrust the hosting of your data to service providers, we ensure that your data is hosted within the European Union and that it cannot be transferred outside the European Union without our prior consent.
If we are obliged to transfer your personal data to third countries, we supervise and secure the transfers with :

• Adequacy decisions by the European Commission, which recognise that certain countries outside the EEA have national laws that protect personal data to standards substantially similar to those required by European Union law;
• the European Commission’s standard contractual clauses (SCCs) which require non-EEA recipients of personal data to continue to protect the personal data they receive to the standards required by European Union law;
• other legal mechanisms for transferring data or legal exemptions to restrictions on the transfer of data.

You can obtain further details by making your request to :
OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

In the course of our business, we process personal data about you: either because you have provided it to us directly, or because we have collected it automatically, or because we have collected it indirectly from third parties. At each stage of processing, we take care to limit the data collected to that which is adequate, relevant and necessary for the purposes pursued.

1) Personal data provided by you

The personal data we collect is that which you provide to us spontaneously (for example when using chat robots or in the free comment areas of our forms) and that which we ask you for when you :

• Contact us by e-mail, telephone, courier, post or any other means;
• Register for a course or subscribe to a service;
• Fill in an application form;
• Create or manage a student account;
• Provide proof of attendance or reasons for absence;
• Register or activate a device (PC, mobile phone or smartphone);
• Chat with our conversational robots on our websites;
• Register for events, webinars or services;
• Subscribe to newsletters and alerts about events and information;
• Take part in surveys, competitions or other promotional activities.

The type of personal data we may request from you may include, but is not limited to, the following:

• Your identity ;
• Your contact details (physical or electronic address, telephone number, etc.);
• Any professional or educational details you may have (e.g. job title, previous training, training requirements);
• Your identification details (for example, your user name) ;
• Your financial data (for example, your credit or debit card number, your bank account number, your billing address);
• Information about your personal life, if you have given it to us;
• Data relating to your state of health, if your situation justifies it and you have given your consent;
• Information about your family and friends, for emergency contacts for example;
• Opinions you have expressed about our services and products.

We may ask you to provide additional personal data, for example in the case of our online surveys to understand your needs.

When you communicate with a conversational robot, we naturally process any information that you provide to the robot on your own initiative. We would draw your attention to the importance of not sharing sensitive data (relating to your racial or ethnic origin, your political opinions, your religious or philosophical beliefs or your trade union membership, your health, your sex life or your sexual orientation), unless you feel it is absolutely essential. Certain conversational robots are likely to enrich your exchange using artificial intelligence systems, in which case you will be informed.

2) Personal data collected automatically

Our websites, or third party web analytics services we use, automatically collect certain data such as your IP address, the type of device you are using, your device ID and other technical information through cookies and similar tracking technologies.

Collecting personal data allows us to better understand the type of visitors to our sites, where they come from and what content interests them on our sites. We use this information for internal analysis and to improve the quality and relevance of our sites for visitors. Some of this information may be collected using cookies and similar tracking technologies where you have consented to this. For more information, please consult our Cookie Policy available on the websites in question.

3) Personal data collected from third parties

From time to time, we may receive personal data about you from third party sources, but only where such third parties are authorised or required to disclose your personal information to us. The information that we may collect from third parties includes your contact details, contact data, any professional data, data relating to your educational background, etc. This is the case, for example, of data that we receive from third parties. This is the case, for example, with data that we receive directly from the Parcoursup platform.

We use the personal information we collect from you for the purposes described in this Privacy Policy, and those we disclosed to you at the time of collection or for compatible purposes.
In particular, we use your information to:

• Firstly, to provide you with the service provided for in your contract, in particular to manage your application, registration and schooling, and to manage your student file;
• Providing the information and services you request;
• Present your profile to companies to help you find a job or be recruited as a trainee or apprentice;
• Send important notices about our terms and conditions, registration conditions, privacy policies or other legal documents;
• Carrying out our activities, evaluating and improving schools (in particular developing new training courses, optimising and improving our services, analysing our training courses/services);
• Meet the requirements imposed on us by administrative and financial controls and audits;
• Perform accounting, auditing, invoice reconciliation and collection functions, as well as other internal commercial functions, including debt collection;
• Carry out analyses (including market and consumer research, customer satisfaction research, trend analysis, financial analysis);
• To protect you and our staff from fraud and other illegal activities or from unfounded accusations; to establish, exercise and defend your rights and those of our staff and to comply with our legal and regulatory obligations;
• Maintain the physical security of our premises (e.g. visitor registers) and computer or electronic security;
• If you have consented, to inform you of forthcoming events, updates, new training/services and the latest services and other offers in accordance with your communication preferences and the means of contact you have indicated to us: postal or electronic mail, telephone call, SMS, instant messaging, social networks;
• Operate and manage our websites.

We may also use your personal data in an aggregated form that does not allow individuals to be identified in order to evaluate and improve our training and service offerings.

For the European Economic Area, the legal basis for the processing of personal data described above will depend on the personal information concerned and the specific purposes for which we process it. The legal basis for the processing is most often indicated in the information sent to you when your personal data is collected, and you can find the legal basis for our main processing operations here.
However, we only collect personal data from you when:

• You have given us your express prior consent, for example for any commercial prospecting by e-mail, SMS, etc. In this case, you can withdraw your consent at any time, either simply in the prospecting messages, or by managing your communication preferences, or by contacting our Data Protection Officer(dpo@omneseducation.com);
• We need your personal data to provide a service that you request as part of a contract or agreement concluded with you or for the pre-contractual measures necessary for their conclusion. This is the case, for example, for the processing of data relating to your studies, the management of your administrative and financial file, the management of your timetable, communication with your school, etc. ;
• We process your data in accordance with our legitimate interests, unless your interests or fundamental rights and freedoms prevail. This is the case, for example, for the improvement of our services, our satisfaction surveys, the compilation of statistics, operations necessary for the security of our websites or our events, and canvassing for similar products.
• We are legally obliged to process some of your data in order to comply with regulatory requirements.
• In certain extreme cases, we process your data in order to safeguard your vital interests or those of another person, for example in the event of an emergency medical intervention on one of our sites.

If you have any questions about the legal basis on which we collect and use your personal information, please contact our Data Protection Officer(dpo@omneseducation.com).

We may pass on your personal data to the following recipients:

Any other person to whom you have authorised us to disclose your personal data.

All the departments of Organisation et Développement and the schools according to their operational needs to achieve the above objectives;

The sub-contractors and service providers of Organisation et Développement and the schools who provide us with services requiring the processing of data, for example our software suppliers, data hosts, the organisers of events for which you have registered and who are responsible for welcoming you or collection companies. Where appropriate, details of the specific recipients of your data may be provided to you at the time of collection;

Our financial service providers, in connection with the payment of your tuition fees;

Other educational establishments with which the OMNES Education Group has partnerships, where this data is necessary for the purposes of these partnerships, for example when you follow courses in several establishments, or when your course involves international exchanges in other establishments;

Companies, either to help you recruit for work placements, apprenticeship contracts or professionalisation contracts, or to manage the day-to-day running of these work placements, apprenticeship contracts and professionalisation contracts;

Bodies involved in the certification or funding of training provided by the OMNES Education Group, such as France Compétences, certification bodies recognised by France Compétences, skills operators responsible for funding your apprenticeship or professionalisation contract, the Caisse des dépôts et consignations, education authorities, etc;

Any competent body responsible for law enforcement, any governmental or regulatory agency, any court or other third party to whom it is necessary to disclose personal information (i) pursuant to applicable laws or regulations, (ii) to exercise, establish or defend our rights or (iii) to protect your interests or those of a third party;

Any third party company that has made a proposal to purchase, merge, reorganise, acquire, dissolve or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data solely for the purposes set out in this Privacy Policy.

Pursuant to the RGPD and the Data Protection Act, you have the right to:

• access your personal data and obtain a copy;
• to update or correct inaccurate data;
• request the deletion of your personal data;
• to request that we restrict the processing of your personal data;
• to object to the processing of your personal data, except where such processing is necessary for the performance of your contract or is required by law;
• request the portability of your personal data;
• where processing is based on your consent, to withdraw it at any time;
• to set out instructions on what to do with your personal data after your death;
• lodge a complaint with the competent authority – in France, the CNIL.

You also have the right to refuse to receive marketing communications from us at any time. You can exercise this right by clicking on the unsubscribe links in the marketing e-mails we send you, by replying to SMS messages in the manner set out in the message, by indicating this to the telephone operator carrying out the canvassing, or by writing to our Data Protection Officer.

To exercise all your rights, you can write to our Data Protection Officer at the company’s head office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

Where we have reasonable doubts as to your identity, and in order to protect your privacy and ensure the security of your data, we may verify it.

We attach great importance to protecting your personal data and your privacy. This is why we have put in place the necessary technical and organisational measures (physical, logical and human security, regular audits and reviews) to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure and use.

We retain your personal data where we have a legitimate ongoing need to do so, for example to provide you with a service you have requested or to which you have consented. Where we have no legitimate business need to process your personal data, we will delete or anonymise it.

Data used to provide you with information and communication without commercial canvassing, such as that used for commercial canvassing operations, is kept for the duration of your schooling, then 3 years from the end of the contract or the last contact on your initiative.

The retention period for data relating to the management of your student life and schooling varies according to the type of data. We keep all of your data for 5 years, which is the normal statute of limitations, in the event of litigation. We keep most of the data relating to your enrolment and schooling for a further 1 year (i.e. for a total of 6 years after your graduation), as required by the skills operators as part of their controls (article L6316-3 of the French Labour Code). This data is then archived and stored in accordance with ministerial instruction 2005-003 of 22 February 2005.

Log files and other computer logs are kept for 6 months.

Data relating to contracts and guarantees concluded with a student or learner are kept for 2 years, in accordance with article L. 218-2 of the French Consumer Code.

Data relating to debt collection operations is kept for 5 years after the last attempt to collect the sums.

Data relating to a contract concluded electronically with a consumer (for a sum of €120 or more) is kept for 10 years, in accordance with articles L. 213-1, D. 213-1 and D. 213-2 of the French Consumer Code.

Documents relating to the data protection rights of the persons concerned are kept for 1 year in the case of rights of access and rectification, and for 6 years in the case of the right to object. Identity documents requested when we have reasonable doubt are not kept beyond the time required for verification.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is stored in the cloud or when we use SaaS applications, we ensure that your data is hosted in the European Union and that it cannot be transferred outside the European Union without our prior consent.

Your personal data may nevertheless be transferred to and processed in countries other than the country of your School, in particular when you spend part of your schooling abroad, in a partner establishment of the OMNES Education Group. These countries may have data protection laws which differ from the laws of the country of your home establishment and which, in some cases, may not be as protective.

We take every precaution to ensure that your personal data remains protected in accordance with this Privacy Policy.

It is possible that the State in which the host establishment is located is situated in a country ensuring a sufficient and appropriate level of data protection recognised by an adequacy decision of the European Commission, which recognises that certain countries outside the EEA have national laws protecting personal data to standards substantially similar to those required by European Union law.

Where the establishment is not located in a State providing an equivalent level of protection, we ensure that the host establishment has signed the European Commission’s standard contractual clauses (SCCs) which require non-EEA recipients of personal data to continue to protect the personal data they receive to the standards required by European Union law.

Where the host establishment has refused to sign the standard contractual clauses, we will alert you and seek your consent to the transfer of your data.

For further details, please contact :

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

In the course of our dealings with you, we process personal data about you: either because you have given it to us directly, or because we have collected it automatically, or because we have collected it indirectly from third parties. At each stage of processing, we take care to limit the data collected to that which is adequate, relevant and necessary for the purposes pursued.

The first source of data about you is your student profile and the data you have given us or that we have collected during your studies. We may supplement this data at the end of your studies in the following ways.

1) Personal data provided by you

The personal data we collect is that which you provide to us spontaneously (for example when using chat robots or in the free comment areas of our forms) and that which we ask you for when you :

• Contact us by e-mail, telephone, courier, post or any other means;
• Register for a course or subscribe to a service;
• Create or manage an alumni account;
• Register for events, webinars or services;
• Subscribe to newsletters and alerts about events and information;
• Take part in surveys, competitions or other promotional activities.

The type of personal data we may request from you may include, but is not limited to, the following:

• Your identity ;
• Your contact details (physical or electronic address, telephone number, etc.);
• Your professional details (e.g. job title, previous training, training requirements) ;
• Your identification details (for example, your user name) ;
• Your financial data (for example, your credit or debit card number, your bank account number, your billing address for the payment of your alumni dues);
• Information about your personal life, if you have given it to us;
• Information about your family and friends, for emergency contacts for example;
• Opinions you have expressed about our services and products.

We may ask you to provide additional personal data, for example in the case of our online surveys to understand your needs.

When you interact with a conversational robot, we will naturally process any information that you provide to the robot on your own initiative. We would draw your attention to the importance of not sharing sensitive data (relating to your racial or ethnic origin, your political opinions, your religious or philosophical beliefs or your trade union membership, your health, your sex life or your sexual orientation), unless you feel it is absolutely essential. Certain conversational robots are likely to enrich your exchange using artificial intelligence systems, in which case you will be informed.

2) Personal data collected automatically

Our websites, or third-party web analysis services we use, automatically collect certain data such as your IP address, the type of device you are using, your device ID and other technical information through cookies and other similar tracking technologies.

Collecting personal data allows us to better understand the type of visitors who come to our sites, where they come from and what content interests them on our sites. We use this information for internal analysis and to improve the quality and relevance of our sites for visitors. Some of this information may be collected using cookies and similar tracking technologies where you have consented to this. For more information, please consult our Cookie Policy available on the websites in question.

3) Personal data collected from third parties

From time to time, we may receive personal data about you from third party sources, but only where such third parties are authorised or required to disclose your personal information to us. The information we may collect from third parties includes your contact details, any professional details you may have, details of your educational background etc.
We may also collect information about you if you have made it freely available, for example on professional social networks, to respond to public surveys on the integration of our alumni or for statistical purposes. You may object to this collection by contacting our Data Protection Officer: dpo@omneseducation.com.

We use the personal information we collect from you for the purposes described in this Privacy Policy, and those we disclosed to you at the time of collection or for compatible purposes.
In particular, we use your information to:

• First, manage your job application or employment contract;
• Ensuring payment of your remuneration;
• Provide you with professional tools, in particular IT equipment;
• Organising your work;
• Monitor your career and mobility, and keep track of your skills based on your appraisals;
• Training courses;
• Keep the mandatory registers, particularly in relation to staff representative bodies;
• Ensuring our internal communications;
• Managing HR disputes;
• Enable you to be monitored by the occupational health services;
• Keeping track of your personal training account ;
• Provide you with a psychological support team;
• Providing the information and services you request;
• Send important notices about our terms and conditions, registration conditions, privacy policies or other legal documents;
• Meet the requirements imposed on us by administrative and financial controls and audits;
• Perform accounting, auditing, invoice reconciliation and collection and other internal business functions;
• To protect you and us against fraud and other illegal activities or against unfounded accusations; to establish, exercise and defend your rights and our rights and to comply with our legal and regulatory obligations in force;
• Maintaining the physical security of our premises (e.g. visitor registers) and computer or electronic security.

We may also use your personal data in an aggregated form that does not allow individuals to be identified in order to evaluate and improve our training and service offerings.

For the European Economic Area, the legal basis for the processing of personal data described above will depend on the personal information concerned and the specific purposes for which we process it. The legal basis for the processing is most often indicated in the information sent to you when your personal data is collected, and you can find the legal basis for our main processing operations here.
However, we only collect personal data from you when:

• In most cases, we need your personal data as part of your employment contract or an agreement entered into with you, or for the pre-contractual measures necessary for their conclusion. This is the case, for example, for the processing implemented to manage your professional file, to manage your payroll, to manage your mobility or your training requests;
• We process your data in accordance with our legitimate interests, unless your interests or fundamental rights and freedoms take precedence. This is the case, for example, for presenting you with an internal directory, managing and maintaining the IT equipment supplied to you, managing your e-mail and enabling you to connect to the Group’s VPN, implementing a skills assessment and management procedure, and organising the training you receive;
• We are legally obliged to process some of your data in order to comply with regulatory requirements. For example, we are obliged to process or transmit some of your data as part of professional elections, to organise meetings of staff representative bodies or to complete your nominative social declaration (DSN).
• In certain extreme cases, we process your data in order to safeguard your vital interests or those of another person, for example in the event of an emergency medical intervention on one of our sites.

If you have any questions about the legal basis on which we collect and use your personal information, please contact our Data Protection Officer(dpo@omneseducation.com).

We may pass on your personal data to the following recipients:

Any other person to whom you have authorised us to disclose your personal data.

All the departments of Organisation et Développement and the schools according to their operational needs to achieve the above objectives;

The sub-contractors and service providers of Organisation et Développement and the schools who provide us with services requiring the processing of data, for example our software suppliers, data hosts, or the organisers of events for which you have registered and who are responsible for hosting you. Where appropriate, details of the specific recipients of your data may be provided to you at the time of collection;

Companies to help you recruit;

The bodies responsible for certifying the training provided by the OMNES Education Group, such as France Compétences or certification bodies recognised by France Compétences, or the companies and bodies involved in this certification process, such as our service providers or the Caisse des dépôts et consignations ;

Any competent body responsible for law enforcement, any governmental or regulatory agency, any court or other third party to whom it is necessary to disclose personal information (i) pursuant to applicable laws or regulations, (ii) to exercise, establish or defend our rights or (iii) to protect your interests or those of a third party;

Any third party company that has made a proposal to purchase, merge, reorganise, acquire, dissolve or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data solely for the purposes set out in this Privacy Policy;

Pursuant to the RGPD and the Data Protection Act, you have the right to:

• access your personal data and obtain a copy;
• to update or correct inaccurate data;
• request the deletion of your personal data;
• to request that we restrict the processing of your personal data;
• to object to the processing of your personal data, except where such processing is necessary for the performance of your contract or is required by law;
• request the portability of your personal data;
• where processing is based on your consent, to withdraw it at any time;
• to set out instructions on what to do with your personal data after your death;
• lodge a complaint with the competent authority – in France, the CNIL.

You also have the right to refuse to receive marketing communications from us at any time. You can exercise this right by clicking on the unsubscribe links in the marketing e-mails we send you, by replying to SMS messages in the manner specified in the message, by indicating this to the telephone operator carrying out the canvassing, or by writing to our Data Protection Officer.

To exercise all your rights, you can write to our Data Protection Officer at the company’s head office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

We attach great importance to protecting your personal data and your privacy. This is why we have put in place the necessary technical and organisational measures (physical, logical and human security, regular audits and reviews) to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure and use.

We retain your personal data where we have a legitimate ongoing need to do so, for example to provide you with a service you have requested or to which you have consented.

Where we have no legitimate business need to process your personal data, we will delete or anonymise it or, if this is not possible, for example because your personal data is stored in a back-up archive, we will store your personal data securely.

Data relating to your education is kept for this period, then archived for 6 years (as required by the skills operators as part of their controls – article L6316-3 of the French Labour Code) to enable us to justify the suitability of our training courses with the public reference frameworks.

Data relating to the management of your alumni account is kept for as long as you continue to use your account and for 3 years after your last connection. Before deleting your data, we may contact you to inform you of the imminence of this deletion and offer you the opportunity to reconnect to your space to renew this retention period. If you do not reconnect before the expiry of this period, your data will be deleted, with the exception of that required to prove your graduation (full identity and details of courses taken and diplomas obtained), which will be kept for 50 years after your graduation.

Data used to provide you with information and communication without commercial canvassing, such as that used for commercial canvassing operations, is kept for the duration of your schooling, then 3 years from the end of the contract or the last contact on your initiative.

Log files and other computer logs are kept for 6 months.

Documents relating to the data protection rights of the persons concerned are kept for 1 year in the case of rights of access and rectification, and for 6 years in the case of the right to object. Identity documents requested when we have reasonable doubt are not kept beyond the time required for verification.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is stored in the cloud or when we use SaaS applications, we ensure that your data is hosted in the European Union and that it cannot be transferred outside the European Union without our prior consent.
If we are obliged to transfer your personal data to third countries, we supervise and secure the transfers with :

• Adequacy decisions by the European Commission, which recognise that certain countries outside the EEA have national laws that protect personal data to standards substantially similar to those required by European Union law;
• the European Commission’s standard contractual clauses (SCCs) which require non-EEA recipients of personal data to continue to protect the personal data they receive to the standards required by European Union law;
• other legal mechanisms for transferring data or legal exemptions to restrictions on the transfer of data, such as BCRs.

You can obtain further details by making your request to :

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

In the course of our business, we process personal data about you: either because you have provided it to us directly, or because we have collected it automatically, or because we have collected it indirectly from third parties. At each stage of processing, we take care to limit the data collected to that which is adequate, relevant and necessary for the purposes pursued.

1) Personal data provided by you

The personal data we collect are those that you provide to us voluntarily and those that we ask you to provide when you :

• Apply for a job published by the group ;
• Create and complete your HR account following a successful application;
• Contact the Human Resources Department by e-mail, telephone, courier, post or any other means;
• Register for a course;
• Register or activate a device (PC, mobile phone or smartphone);
• Register for events, webinars or services;
• Subscribe to newsletters and alerts about events and information;
• Take part in surveys, competitions or other promotional activities.

The type of personal data we may request from you may include, but is not limited to, the following:

• Your identity ;
• Your contact details (physical and e-mail address, telephone number, etc.);
• Any professional details you may have (e.g. previous career, training requirements) ;
• Your identification details (for example, your user name) ;
• Your financial details (for example, your bank account number) ;
• Data relating to your state of health, if your situation so warrants;
• Information about your personal life, if you have given it to us;
• Information about your family and friends, for emergency contact purposes for example, if you have given it to us;
• The opinions you have expressed in surveys.

We may ask you to provide additional personal data, for example in the case of our online surveys to understand your needs.

2) Personal data collected automatically

Our websites (including the intranet), the Group’s IT tools, or third-party web analysis services we use, automatically collect certain data such as your IP address, the type of device you are using, your device ID and other technical information through cookies and other similar tracking technologies.

3) Personal data collected from third parties

From time to time, we may receive personal data about you from third party sources, but only where such third parties are authorised or required to disclose your personal information to us. The information we may collect from third parties includes your contact details, any professional data, data relating to your professional background, etc.

We use the personal information we collect from you for the purposes described in this Privacy Policy, and those we disclosed to you at the time of collection or for compatible purposes.
In particular, we use your information to:

• Firstly, to enable you to join the OMNES Education alumni network, in particular to put you in touch with all the group’s former students and enable you to develop your professional network;
• Providing the information and services you request;
• Follow your career path after graduation, in accordance with regulatory requirements;
• Present your profile to companies to help you find work or recruit for your first job;
• Introduce you to the profiles of our graduates and help you recruit new staff;
• If you have consented, to inform you of forthcoming events, updates, new training/services and the latest services and other offers in accordance with your communication preferences and the means of contact you have indicated to us: postal or electronic mail, telephone call, SMS, instant messaging, social networks;
• Again with your consent, we can offer you the opportunity to take part in the life of your former school, through open days, student presentations and jury work;
• Send important notices about our terms and conditions, registration conditions, privacy policies or other legal documents;
• Carrying out our activities, evaluating and improving schools (in particular developing new training courses, optimising and improving our services, analysing our training courses/services);
• Meet the requirements imposed on us by administrative and financial controls and audits;
• Perform accounting, auditing, invoice reconciliation and collection and other internal business functions;
• Carry out analyses (including market and consumer research, customer satisfaction research, trend analysis, financial analysis);
• To protect you and our staff from fraud and other illegal activities or from unfounded accusations; to establish, exercise and defend your rights and those of our staff and to comply with our legal and regulatory obligations;
• Maintain the physical security of our premises (e.g. visitor registers) and computer or electronic security;
• Operate and manage our websites.

We may also use your personal data in an aggregated form that does not allow individuals to be identified in order to evaluate and improve our training and service offerings.

For the European Economic Area, the legal basis for the processing of personal data described above will depend on the personal information concerned and the specific purposes for which we process it. The legal basis for the processing is usually indicated in the information sent to you when your personal data is collected, and you can find the legal basis for our main processing operations here.
However, we collect personal data from you mainly when:

• You have given us your express prior consent, for example for any commercial prospecting by e-mail, SMS, etc. In this case, you can withdraw your consent at any time, either simply in the prospecting messages, or by managing your communication preferences, or by contacting our Data Protection Officer(dpo@omneseducation.com);
• We need your personal data to provide a service that you request as part of a contract or agreement concluded with you or for the pre-contractual measures necessary for their conclusion. This is the case, for example, for the processing carried out as part of the creation and use of an alumni account on our dedicated platform;
• We process your data in accordance with our legitimate interests, unless your interests or fundamental rights and freedoms take precedence. This is the case, for example, for our insertion surveys, the maintenance of directories, the compilation of statistics, the operations necessary for the security of our websites or our events, and for canvassing for similar products.
• We are legally obliged to process some of your data in order to comply with regulatory requirements.

If you have any questions about the legal basis on which we collect and use your personal information, you can contact our Data Protection Officer(dpo@omneseducation.com).ucation.com).ter our Data Protection Officer(dpo@omneseducation.com).

We may pass on your personal data to the following recipients:

• All the departments of Organisation et Développement and the schools according to their operational needs to achieve the above objectives;
• The sub-contractors and service providers of Organisation et Développement and the schools who provide us with services requiring the processing of data, for example our software suppliers, data hosts, such as the service provider supplying the digital safe solution enabling you to keep your payslips. Where appropriate, details of the specific recipients of your data may be communicated to you at the time of collection;
• Public and private bodies involved in your pay, social security contributions, pension scheme, supplementary health insurance and provident fund;
• Any competent body responsible for law enforcement, any governmental or regulatory agency, any court or other third party to whom it is necessary to disclose personal information (i) pursuant to applicable laws or regulations, (ii) to exercise, establish or defend our rights or (iii) to protect your interests or those of a third party;
• Any third party company that has made a proposal to purchase, merge, reorganise, acquire, dissolve or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data solely for the purposes set out in this Privacy Policy;
• Any other person to whom you have authorised us to disclose your personal data.

Pursuant to the RGPD and the Data Protection Act, you have the right to:

• access your personal data and obtain a copy;
• to update or correct inaccurate data;
• request the deletion of your personal data;
• to request that we restrict the processing of your personal data;
• to object to the processing of your personal data, except where processing is necessary for the performance of your contract or is required by law;
• request the portability of your personal data;
• where processing is based on your consent, to withdraw it at any time;
• to set out instructions on what to do with your personal data after your death;
• lodge a complaint with the competent authority – in France, the CNIL.

To exercise all your rights, you can write to our Data Protection Officer at the company’s head office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

Where we have reasonable doubts as to your identity, and in order to protect your privacy and ensure the security of your data, we may verify it.

We attach great importance to protecting your personal data and your privacy. This is why we have put in place the necessary technical and organisational measures (physical, logical and human security, regular audits and reviews) to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure and use.

We retain your personal data when we have a legitimate and ongoing need to do so, and in accordance with the CNIL’s guidelines on recruitment and personnel management.

The length of time data is kept varies greatly depending on the type of data and the employer’s legal obligations to keep it, particularly with regard to the Labour Code and the Social Security Code.

A lot of data needs to be kept for at least as long as you are with the Group and then for several years after you leave (for example, 5 years for the data needed to keep the staff register, 6 years for the data needed for your DSN, even 10 years for transfer orders and up to 50 years for the electronic version of your payslips in your digital safe). When we keep this data after your departure, we put in place reinforced security measures to limit access.

If your application is unsuccessful, and if you have given your consent, your CV will be kept for 1 year to add to our CV library and to enable us to contact you again in the event of a new offer corresponding to your profile.

Log files and other computer logs are kept for 6 months.

Documents relating to the data protection rights of the persons concerned are kept for 1 year in the case of rights of access and rectification, and for 6 years in the case of the right to object. Identity documents requested when we have reasonable doubt are not kept beyond the time required for verification.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is stored in the cloud or when we use SaaS applications, we ensure that your data is hosted in the European Union and that it cannot be transferred outside the European Union without our prior consent.
If we are obliged to transfer your personal data to third countries, we supervise and secure the transfers with :

• Adequacy decisions by the European Commission, which recognise that certain countries outside the EEA have national laws that protect personal data to standards substantially similar to those required by European Union law;
• the European Commission’s standard contractual clauses (SCCs) which require non-EEA recipients of personal data to continue to protect the personal data they receive to the standards required by European Union law;
• other legal mechanisms for transferring data or legal exemptions to restrictions on the transfer of data.

For further details, please contact :

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

In the course of our business, we process personal data about you: either because you have provided it to us directly, or because we have collected it automatically, or because we have collected it indirectly from third parties. At each stage of processing, we take care to limit the data collected to that which is adequate, relevant and necessary for the purposes pursued.

1) Personal data provided by you

The personal data we collect is that which you provide to us spontaneously (for example when using chat robots or in the free comment areas of our forms) and that which we ask you for when you :

• Sign a contract with us;
• Host or supervise one of our students under a work-study contract or an internship agreement;
• Register to attend or participate in events, webinars or services;
• Subscribe to newsletters and alerts about events and information;
• Take part in surveys, competitions or other promotional activities.

The type of personal data we may request from you may include, but is not limited to, the following:

• Your identity ;
• Your business contact details (your physical or electronic address, your telephone number, etc.);
• Details of your professional life (e.g. job title, previous training, training requirements);
• Your identification details (for example, your user name) ;
• Your financial data (for example, your credit or debit card number, your bank account number, your billing address);
• Opinions you have expressed about our services and products.

We may ask you to provide additional personal data, for example in the case of our online surveys to understand your needs.

2) Personal data collected automatically

Our websites, or third party web analytics services we use, automatically collect certain data such as your IP address, the type of device you are using, your device ID and other technical information through cookies and similar tracking technologies.

Collecting personal data allows us to better understand the type of visitors who come to our sites, where they come from and what content interests them on our sites. We use this information for internal analysis and to improve the quality and relevance of our sites for visitors. Some of this information may be collected using cookies and similar tracking technologies where you have consented to this. For more information, please consult our Cookie Policy available on the websites in question.

3) Personal data collected from third parties

We may receive personal data about you from third party sources, but only where those third parties are authorised or required to disclose your personal information to us. The information we may collect from third parties includes your contact details, any professional data, data relating to your professional background etc.
We may also collect information about you if you have made it freely available, for example on professional social networks.

We use the personal information we collect from you for the purposes described in this Privacy Policy, and those we disclosed to you at the time of collection or for compatible purposes.
In particular, we use your information to:

• The requirements of our pre-contractual relationship (in particular to carry out the pre-contractual checks required by French and European laws), the contractual relationship and its consequences (in particular for debt collection or litigation purposes);
• Introduce your company and the job offers it publishes to our students and put them in touch with you;
• If you have not objected, to inform you of forthcoming events, updates, new training courses/services and the latest services and other offers, particularly in connection with the education of our students, in accordance with your communication preferences and the means of contact you have provided us with: postal or electronic mail, telephone call, SMS, instant messaging, social networks;
• Providing the information and services you request;
• Send important notices about our terms and conditions, registration conditions, privacy policies or other legal documents;
• Meet the requirements imposed on us by administrative and financial controls and audits;
• Perform accounting, auditing, invoice reconciliation and collection and other internal business functions;
• Carry out analyses (including market and consumer research, customer satisfaction research, trend analysis, financial analysis);
• To protect you and our staff from fraud and other illegal activities or from unfounded accusations; to establish, exercise and defend your rights and those of our staff and to comply with our legal and regulatory obligations;
• Maintain the physical security of our premises (e.g. visitor registers) and computer or electronic security;
• Operate and manage our websites.

We may also use your personal data in an aggregated form that does not allow individuals to be identified in order to evaluate and improve our training and service offerings.

For the European Economic Area, the legal basis for the processing of personal data described above will depend on the personal information concerned and the specific purposes for which we process it. The legal basis for the processing is most often indicated in the information sent to you when your personal data is collected, and you can find the legal basis for our main processing operations here.
However, we only collect personal data from you when:

• We need your personal data in order to conclude a contract or an agreement with you or for the pre-contractual measures necessary for their conclusion;
• We process your data in accordance with our legitimate interests, unless your interests or your fundamental rights and freedoms take precedence. This is the case, for example, for contact with our students, our satisfaction surveys, the compilation of statistics, operations necessary for the security of our websites or our events, and canvassing, unless you object at any time;
• We are legally obliged to process some of your data in order to comply with regulatory constraints. For example, we are obliged to process or transmit some of your data to justify the quality of our training courses to government bodies.

If you have any questions about the legal basis on which we collect and use your personal information, please contact our Data Protection Officer(dpo@omneseducation.com).

We may pass on your personal data to the following recipients:

• All the departments of Organisation et Développement and the schools according to their operational needs to achieve the above objectives;
• The sub-contractors and service providers of Organisation et Développement and the schools who provide us with services requiring the processing of data, for example our software suppliers, data hosts, the organisers of events for which you have registered and who are responsible for welcoming you or collection companies. Where appropriate, details of the specific recipients of your data may be communicated to you at the time of collection;
• Our financial service providers, in connection with the payment of our or your invoices;
• Our students and alumni, to offer them the job offers you send us or to invite them to contact you as part of their search for an internship or work-study contract;
• Bodies responsible for certifying the training provided by the OMNES Education Group, such as France Compétences or labelling bodies recognised by France Compétences or skills operators responsible for funding apprenticeship and professionalisation contracts;
• Any competent body responsible for law enforcement, any governmental or regulatory agency, any court or other third party to whom it is necessary to disclose personal information (i) pursuant to applicable laws or regulations, (ii) to exercise, establish or defend our rights or (iii) to protect your interests or those of a third party;
• Any third party company that has made a proposal to purchase, merge, reorganise, acquire, dissolve or liquidate all or part of the OMNES Education Group, provided that we inform the interested third party that it must use your personal data solely for the purposes set out in this Privacy Policy;
• Any other person to whom you have authorised us to disclose your personal data.

Pursuant to the RGPD and the Data Protection Act, you have the right to:

• access your personal data and obtain a copy;
• to update or correct inaccurate data;
• request the deletion of your personal data;
• to request that we restrict the processing of your personal data;
• to object to the processing of your personal data, except where such processing is necessary for the performance of your contract or is required by law;
• request the portability of your personal data;
• where processing is based on your consent, to withdraw it at any time;
• to set out instructions on what to do with your personal data after your death;
• lodge a complaint with the competent authority – in France, the CNIL.

You also have the right to object at any time to receiving marketing communications from us. You can exercise this right by clicking on the unsubscribe links in the marketing e-mails we send you, by replying to SMS messages in the manner set out in the message, by indicating this to the telephone operator carrying out the canvassing, or by writing to our Data Protection Officer.

To exercise all your rights, you can write to our Data Protection Officer at the company’s head office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.
Where we have reasonable doubts as to your identity, and in order to protect your privacy and ensure the security of your data, we may verify it.

We attach great importance to protecting your personal data and your privacy. This is why we have put in place the necessary technical and organisational measures (physical, logical and human security, regular audits and reviews) to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure and use.

We retain your personal data where we have a legitimate ongoing need to do so, for example to provide you with a service you have requested or to which you have consented.

Where we have no legitimate business need to process your personal data, we will delete or anonymise it or, if this is not possible, for example because your personal data is stored in a back-up archive, we will store your personal data securely.

Data collected for commercial canvassing purposes is kept for 3 years from the end of the relationship or from the last contact at your initiative.

Data collected when we take on students under apprenticeship, professionalisation or internship contracts is kept for 3 years from the end of our contractual relationship in order to offer you the opportunity to take on other students with a similar profile.

Data relating to invoices is kept for 10 years from the end of the financial year, in accordance with article L. 123-22 of the French Commercial Code.

Documents relating to the data protection rights of the persons concerned are kept for 1 year in the case of rights of access and rectification, and for 6 years in the case of the right to object. Identity documents requested when we have reasonable doubt are not kept beyond the time required for verification.

We host your data in the European Union. When we entrust the hosting of your data to service providers, in particular when it is stored in the cloud or when we use SaaS applications, we ensure that your data is hosted in the European Union and that it cannot be transferred outside the European Union without our prior consent.
If we are obliged to transfer your personal data to third countries, we supervise and secure the transfers with :

• Adequacy decisions by the European Commission, which recognise that certain countries outside the EEA have national laws that protect personal data to standards substantially similar to those required by European Union law;
• the European Commission’s standard contractual clauses (SCCs) which require non-EEA recipients of personal data to continue to protect the personal data they receive to the standards required by European Union law;
• other legal mechanisms for transferring data or legal exemptions to restrictions on the transfer of data.

You can obtain further details by making your request to :

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
dpo@omneseducation.com.

Some of our sites are protected by video-surveillance and video-protection systems. You are informed of their presence by a specific sign at the entrance to the sites. When you enter these sites, we automatically collect your image and process your personal data.

Our video surveillance and CCTV systems may have been set up to :

• Ensuring the safety of people and property;
• Helping to rescue people and defend against fire;
• Ensuring the safety of buildings;
• Exercise and defend our rights, in particular in court, through any contentious or pre-litigious action.

Processing relating to video surveillance and video protection is carried out in accordance with our legitimate interests.

If you have any questions about the legal basis on which we collect and use your personal information, please contact our Data Protection Officer(dpo@omneseducation.com).

We may pass on your personal data to the following recipients:

• The Department of Organisation and Development and the school concerned, as well as the department in charge of general resources at the site where the video surveillance or video protection system is deployed;
• The sub-contractors and service providers of Organisation et Développement and the schools that provide us with services requiring the processing of data, for example those hosting the images from the devices, providing security services or maintaining our software or servers;
• Any competent body responsible for law enforcement, any governmental or regulatory agency, any court or other third party to whom it is necessary to disclose personal information (i) pursuant to applicable laws or regulations, (ii) to exercise, establish or defend our rights or (iii) to protect your interests or those of a third party;
• Any other person to whom you have authorised us to disclose your personal data.

Pursuant to the RGPD and the Data Protection Act, you have the right to:

• access your personal data and obtain a copy;
• to request that we restrict the processing of your personal data;
• lodge a complaint with the competent authority – in France, the CNIL.

To exercise all your rights, you can write to our Data Protection Officer at the company’s head office:

OMNES Education – Service du DPO – Immeuble Greenelle – 43 quai de Grenelle – 75015 PARIS
or by e-mail: dpo@omneseducation.com.

Where we have reasonable doubts as to your identity, and in order to protect your privacy and ensure the security of your data, we may verify it.

We attach great importance to protecting your personal data and your privacy. This is why we have put in place the necessary technical and organisational measures (physical, logical and human security, regular audits and reviews) to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure and use.

Data from video-surveillance and video-protection systems is kept for 30 days and then deleted.

We host the data in the European Union.