Privacy policy
The privacy of visitors to our website is very important to us, and we are committed to protecting it. This policy details what we do with your personal information.
Our DPO is Cécile Machut, Director of the IUT de Béthune, who can be contacted by e-mail at dpo@univ-artois.fr
Définitions
- The publisher of the site is IUT de Béthune, whose SIREN number is 196244016, and whose registered office is located at 1230 rue de l’Université – CS 20819 – 62408 Béthune Cédex.
- The URL of the site is https://iut-bethune.univ-artois.fr/
- The Site: All the sites, web pages and online services offered by the Publisher.
- The User: The person using the Site and its services.
Type of data collected
When using the Sites, the Publisher may collect the following categories of data about its Users:
- Civil status, identity and identification data…
- Data relating to personal life (lifestyle, family situation, etc., excluding sensitive or dangerous data)
- Data relating to personal life (lifestyle, family situation, etc., excluding sensitive or dangerous data)
- Economic and financial information (income, financial situation, tax situation, etc.)
- Connection data (IP addresses, event logs, browser used, etc.)
- Location data (movements, GPS, GSM data, etc.)
- Data resulting from the use of cookies to which you have consented. To find out more, please consult our cookies policy (‘insert link to cookies policy’).
Usage
Personal information provided to us through our Site will be used for the purposes described in this policy or on the relevant pages of the Site.
We may use your personal information to:
- Administering our website and our company;
- Personalising our website for you;
- To enable you to use the services offered on our website;
- To deliver and provide you with products or services purchased on our site;
- Send you statements, invoices and payment reminders, and collect your payments;
- To send you non-marketing commercial communications;
- To send you e-mail notifications that you have expressly requested;
- Send you our newsletter by e-mail, if you have requested it (you can inform us at any time that you no longer wish to receive our newsletter)
- To send you marketing communications relating to our company or to carefully selected third party companies which we think may be of interest to you, in the form of a publication, or if you have expressly agreed, by e-mail or similar technology (you can inform us at any time that you no longer wish to receive marketing communications);
- To provide statistical information about our users to third parties (without such third parties being able to identify individual users from this information);
- Handle requests and/or complaints relating to your website made by you or concerning you;
- To maintain the security of our website and prevent fraud;
If you submit personal information to our website for the purpose of publication, we will publish that information and may use it in accordance with the permissions you grant us.
Your confidentiality settings can be used to limit the publication of your information on our website and can be adjusted in your confidentiality settings on the website.
Disclosure of personal data to third parties
Communication to third parties for commercial solicitation for equivalent products and services
Without your explicit and specific consent, we will not provide your personal information to third parties for their marketing or for the marketing of other third parties.
Communication to third-party partners
We may make certain personal data available to strategic partners working with us to provide products and services or to help us market our products to customers.
You can access the list of our subcontractors, partners and/or service providers by requesting this list from the following address: dpo@univ-artois.fr
Communication to third parties in aggregated and anonymised form
Your personal data may be used to enrich our databases. They may be passed on to third parties after being anonymised and exclusively for statistical purposes.
Communication to the authorities on the basis of legal obligations
On the basis of legal obligations, your personal data may be disclosed in application of a law, a regulation or by virtue of a decision by a competent regulatory or judicial authority. In general, we undertake to comply with all legal rules that may prevent, limit or regulate the dissemination of information or data and, in particular, to comply with Law no. 78-17 of 6 January 1978 relating to information technology, files and civil liberties.
Aggregation of non-personal data
We may publish, disclose and use Aggregate Information (information about all of our Users or specific groups or categories of Users that we combine so that an individual User can no longer be identified or referred to) and Non-Personal Information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.
Commitment to viral conditions
If your personal data is passed on to a third party, the latter is required to apply the same confidentiality conditions as the Site.
Prior notification of the transfer of personal data to third parties in the event of a merger or takeover
In the event that we take part in a merger, acquisition or any other form of transfer of assets, we undertake to guarantee the confidentiality of your personal data and to inform you before they are transferred or subjected to new confidentiality rules.
International data transfers
The information we collect may be stored, processed and transferred in any country in which we operate, to enable us to use the information in accordance with this policy.
The information we collect may be transferred to the following countries, which do not have data protection laws equivalent to those in force in the European Economic Area: the United States of America, Russia, Japan, China and India.
The personal information that you publish on our website or that you submit for publication may be available, via the Internet, throughout the world. We cannot prevent the use, good or bad, of this information by third parties.
You expressly agree to the transfer of personal information described in this section.
Geolocation
We collect and process your geolocation data in order to provide you with our services. We may use personal data to determine your geographical position in real time. In accordance with your right of opposition under the French Data Protection Act no. 78-17 of 6 January 1978, you may deactivate the geolocation functions at any time.
Collection of terminal data
Collection of profiling data and technical data for the purposes of providing the service Some of the technical data on your device is collected automatically by the Site. This information includes in particular your IP address, Internet access provider, hardware configuration, software configuration, browser type and language, etc. The collection of this data is necessary for the provision of services.
Collection of technical data for advertising, commercial and statistical purposes Technical data from your device is automatically collected and recorded by the Site for advertising, commercial and statistical purposes. This information helps us to personalise and continually improve your experience on our Site. We do not collect or store any personal data (surname, first name, address, etc.) that may be attached to technical data.
Retention period for personal data, anonymisation and deletion
Retention of data for the duration of the contractual relationship
Personal information that we process for any purpose whatsoever is not kept any longer than is necessary for that purpose or those purposes. In accordance with article 6-5° of law no. 78-17 of 6 January 1978 relating to information technology, files and civil liberties, personal data that is processed is not kept beyond the time required to fulfil the obligations defined when the contract was concluded or the predefined duration of the contractual relationship.
Retention of anonymised data beyond the contractual relationship
We keep personal data for the period strictly necessary to achieve the purposes described in these Confidentiality Policies (the maximum period is 36 months). After this period, the data will be anonymised and kept exclusively for statistical purposes and will not be used in any way whatsoever.
- Right of access and rectification of your data :
You have the right to obtain confirmation from the data controller as to whether or not Personal Data concerning you is being processed and, where it is, the right to access it and/or have it rectified. (See articles 15 and 16 of the GDPR).
- Right to have your data deleted.
In accordance with Article 17 of the GDPR, you have the right to ask us to delete your Personal Data as soon as possible; for certain reasons/ under certain conditions that you can consult in the said article/ in the cases provided for in the article.
- Right to limit data processing.
You have the right to ask us to limit the processing of your Personal Data in the cases provided for in Article 18 of the GDPR.
- Right to object to data processing.
In accordance with Article 21 of the GDPR, you have the right to object to processing of Personal Data concerning you where the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of the Personal Data prevail, in particular where the data subject is a child.
- The right to portability of your data.
You have the right to the portability of your Personal Data, which gives you the possibility of receiving the Personal Data that you have provided to us, in a structured, commonly used and machine-readable format, as well as the possibility of transmitting this data to another data controller. The exercise of this right will be subject to the conditions set out in Article 20 of the RGPD.
- Right to withdraw your consent.
In accordance with Article 7 of the GDPR, where processing is based on consent, you have the right to withdraw your consent at any time. This will put an end to the processing of your data.
- The right to define post-mortem directives.
You have the possibility of defining directives relating to the conservation, deletion and communication of your Personal Data after your death with a trusted third party, certified and responsible for ensuring that the wishes of the deceased are respected in accordance with the requirements of the applicable legal framework (Article 85 of Law no. 78-17 of 6 January 1978 relating to information technology, files and freedoms).
You may exercise your rights as follows: By sending your request to the following email address: dpo@univ-artois.fr, by post accompanied by a copy of an identity document to the IUT de Béthune at 1230 rue de l’Université – CS 20819 – 62408 Béthune Cédex, or by completing the form below (if applicable).
You can also lodge a complaint with the CNIL.
Data extraction and deletion
Security
Informing the User in the event of a security breach
We undertake to implement all appropriate technical and organisational measures to guarantee a level of security appropriate to the risks of accidental, unauthorised or illegal access, disclosure, alteration, loss or destruction of your personal data. In the event that we become aware of unlawful access to your personal data stored on our servers or those of our service providers, or of unauthorised access resulting in the risks identified above, we undertake to :
- Notify you of the incident as soon as possible;
- Examine the causes of the incident and inform you;
- Take the necessary measures within reasonable limits to mitigate the negative effects and damage that may result from the said incident.
Limitation of liability
Under no circumstances may the undertakings set out in the point above relating to notification in the event of a security breach be assimilated to any acknowledgement of fault or responsibility for the occurrence of the incident in question.
In addition, our Site contains hypertext links to third-party websites and information about them. We have no control over these sites and are not responsible for their privacy policies or practices.
Changes to the privacy policy
We undertake to inform you in the event of any substantial modification to this Confidentiality Policy, and not to lower the level of confidentiality of your data substantially without informing you and obtaining your consent.
We may update this policy from time to time by posting a new version on our website. We undertake to inform you in the event of any substantial modification to this Confidentiality Policy, and not to lower the level of confidentiality of your data substantially without informing you and obtaining your consent.
You should check this page regularly to ensure that you are aware of any changes to this policy.
Applicable law and recourse procedures
This Privacy Policy and your use of the Site are governed by and construed in accordance with the laws of France, and in particular with Law no. 78-17 of 6 January 1978 relating to data processing, data files and individual liberties. The choice of applicable law does not affect your rights as a consumer under the applicable law of your place of residence. If you are a consumer, you and we agree to submit to the non-exclusive jurisdiction of the French courts, which means that you can bring an action relating to this Privacy Policy in France or in the EU country in which you live. If you are a professional, any action against us must be brought in a court in France.
In the event of a dispute, the parties shall seek an amicable solution before taking any legal action. Should these attempts fail, any disputes regarding the validity, interpretation and/or execution of the Confidentiality Policy must be brought before the French courts, even in the event of multiple defendants or third party proceedings.