Data protection policy

This policy is intended to meet the École Polytechnique's information obligations regarding the protection of data processed by the websites and internet pages under its responsibility. 

These information obligations are defined in particular in Articles 5, 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016: Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation - hereinafter referred to as "GDPR").

The École Polytechnique is a public scientific, cultural and professional education institution, Grand Etablissement (EPSCP-GE), and placed under the supervision of the Ministry of the Armed Forces. The institution is mainly governed by Decree No. 2015-1176 of September 24, 2015 on the organization and administrative and financial regime of the École Polytechnique and its missions are also defined in Article L675-1 of the Education Code.

The mailing, email, and telephone contact information for the École Polytechnique is: 

École polytechnique
Route de Saclay
91128 Palaiseau Cedex
Phone number : 01 69 33 33 33
E-mail address : editorial@polytechnique.fr

In accordance with Article 4 of the RGPD, the École Polytechnique is considered to be a "data controller" when one of its departments,  a natural person, or legal entity , working legally on its behalf, determines the purposes of the data processing that is carried out via a website or internet page, and when the École Polytechnique defines the means by which this website is made operational (e.g., hosting and structuring of web pages, deployment of web services, definition of the usage and connection data used).

Purpose of the processing 

The purpose of the websites and pages is to provide detailed information about all the activities of the École Polytechnique, its services and its partnerships. The websites and internet pages are also intended to allow users to ask questions about the activities and operation of the School.

Legal basis 

Generally speaking and in accordance with Article 6-e of the RGPD, "processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller." (for more information, refer to Article 2 paragraph 1). 

In the context of the processing of data collected and processed automatically on users of the Ecole Polytechnique web pages ("cookie" data), the legal basis is your prior consent (requested when you access the pages - "cookie" banner). 

On the other hand, your consent is explicitly requested when you submit a request on a registration or assistance form on this site.

Processed data

The data processed within the framework of the École Polytechnique websites and internet pages may be:

• connection and usage data ("cookies" - see article 4 below);
• contact data (e-mail, for example); 
• location data (IP address and geographical area of connection - "cookies") 
• identity data (title, surname, first name, address, e-mail address, nationality, telephone number, educational institution, course of study, national student identity number or INE).

For more information on the "cookies" processed by the École Polytechnique, please refer to article 4 of this Policy. 

Nature and purpose of processing 

The main purpose of the websites is to disseminate all information concerning the École Polytechnique, in particular: its news, its training offers, its organization (including the organization of education and administrative registrations) and its operation.  

Several secondary purposes may also be pursued, such as: 

• to display the names of competitive examination laureates and the lists of juries and any nominative information concerning admission to the School's programs;
• to subscribe to the various newsletters offered by the school's departments; 
• to manage a communication space between users and the site via contact forms;
• to broadcast communication campaigns on events related to the School;
• to prevent and fight against computer fraud (spamming, hacking...)
• to optimize the layout and functioning of the sites according to their traffic and their uses. 

It is specified that in the online forms, the mandatory fields are marked with an asterisk. If you do not answer the mandatory questions, we will not be able to provide you with the requested service(s).

Principle and duration of conservation 

No personal data may be further processed in a manner incompatible with the purposes described above or under the collection forms. 

Your data is kept for the time necessary for the purpose of the processing when it comes to responding to your requests.

The data of "cookies" are processed for a maximum period of 13 months, which can be extended with your prior and explicit consent (renewal of your authorization on the banners dedicated to the management of "cookies").

Recipients of the data

Your personal data may be communicated to certain departments of the École Polytechnique in order to process your complaints and requests for information.

On the Internet pages that allow it, we remind you that if you post a comment online, some of your personal data may be published on the website. 

Given the characteristics of the Internet network, which are the free capture of information disseminated and the difficulty, or even the impossibility, of controlling the use that could be made of it by third parties, we inform you that you may oppose such dissemination by sending your request to the contact address specified below: dpd@polytechnique.fr 

Introductory note

A cookie is a file that records information relating to your computer's browsing of the École Polytechnique's websites and internet pages (date and time of page loading; browser used and language; pages viewed, frequency and duration of visits to the site, number of visits, sources of the visit, location) and makes it possible to ease your visits to the site.

You can at any time by the "cookies" installed on your computer, oppose the recording of new "cookies" and receive a notification before the installation of a new cookie by configuring your navigation tool via the instructions that appear in the "cookie management" window of the sites.

You are reminded that if you uninstall a "cookie" or if you oppose the installation of "cookies" on your machine, you may not be able to benefit from some of the website's services.
 

Description of the cookies used by the School

 

Cookies	Description of purpose	Category	Duration
SSESS [...]	Login session management	Mandatory	Until brower is closed
Tarteaucitron	Saving of cookie consent choices	Mandatory	12 months

 

 Subcontractors  

 

Identity (Company name)	Cookies concerned	Country of residence
Alphabet Inc.	Google Analytics - Localization  dara - Search engine data	United States
Acast	Podcast player Acast	Sweden
Dailymotion	Dailymotion video player	France
Vimeo	Vimeo video player	United States
Youtube	Youtube video player	United States

How to exercise your right to access, modify or delete data

In the context of the processing carried out by the École Polytechnique: websites and web pages, you may ask to exercise your rights guaranteed by the RGPD, namely the right to access, modify and delete your data, by sending a written request to the following e-mail address: webmaster@polytechnique.fr or to the following mailing address: École Polytechnique - Route de Saclay - 91128 Palaiseau cedex. 

How to contact the data protection officer

The École Polytechnique has appointed a data protection officer. He or she receives complaints from users concerned by the processing operations for which he or she has been appointed and ensures that users' rights are respected. He deals with complaints or implements procedures to ensure that they are handled correctly.

For any question relating to the processing of personal data, the user may contact the data protection officer at the following address:

École polytechnique
Délégué à la protection des données
Direction générale des services
Route de Saclay
911258 Palaiseau cedex
dpd@polytechnique.fr

The processing of personal data within the framework of the exercise of your rights is done on a personal and confidential basis. 

Any request must also respect the following conditions: 

• the request must be made by the person himself/herself (or his/her legal representative) and must be accompanied by a copy of his/her (and the legal representative's, if applicable) identity document;
• the request is made in writing.

 

How to refer a matter to the CNIL 

Any person concerned by the processing of their personal data by the École Polytechnique is informed of their right to lodge a complaint with a supervisory authority, namely the CNIL (Commission Nationale Informatique et Libertés), if it considers that the processing of personal data concerning them does not comply with European data protection regulations, at the following address:

CNIL – Service des plaintes
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Tél : 01 53 73 22 22

This Policy may be amended or supplemented at any time in the event of legal or jurisprudential developments and in accordance with new decisions or recommendations of the CNIL.

Any new version of this policy will be updated on this web page. 

You can consult the follow-up of the modifications, hereafter:

Version	Description (changes, if any)	Date (mm-yyyy)
1	Document creation	04-2021