Legal terms

Head of publication 

Joël Cuny, Chief Executive of ESTP 
 

Identity

The  www.estp.fr  website is published by the Ecole Spéciale des Travaux Publics, du Bâtiment et de l’Industrie (Association under the 1901 Act).

Contact

ESTP 
28 avenue du Président Wilson, 94234 Cachan Cedex
Tel.: +33 1 49 08 56 50
Fax.: +33 1 45 47 60 39

Host

The  www.estp.fr  website is hosted by OVH

Credits

Website layout: ESTP and Softeam Digital
Multimedia documents: ESTP, except rights reserved indicated

Règlement Intérieur Formation Initiale 2024- 2025

Charte de bon usage des moyens informatiques de l'ESTP | 2024-2025  (Annexe 1 au règlement intérieur de la formation initiale)

⚫ Déclaration de la politique Responsabilité sociétale et environnementale | Charte RSE de ESTP

ESTP is committed to respecting and protecting the personal data of users accessing its internet services.

This policy aims to transparently describe the rules governing the processing of personal data carried out by ESTP, to ensure the compliance of personal data processing, and to guarantee the respect of the rights of individuals in the context of using the website www.estp.fr, all secure data collection or entry platforms managed by ESTP services, and external hosting services. All of these are collectively referred to in this document as "ESTP Websites."

This Data Protection Policy may be subject to changes based on legal and regulatory developments or recommendations from the Commission Nationale de l'Informatique et des Libertés (CNIL).

What is personal data?

Data is defined as "personal" when it identifies a natural person, directly or indirectly. For example, a person is directly identified when their first and last name appear in a file, i.e., a set of data organized in a structured way. Similarly, an individual may be identifiable when a file contains information that allows for their indirect identification (e.g., registration number, phone number, etc.).

These data may also include certain information about you when you simply browse our website, including information about your use of the website, such as the areas you visit, the services you access, your IP address, the type of browser used, your access times, etc.

This information must be processed and stored in accordance with the legal and regulatory provisions regarding the protection of personal data.

Data Controller

ESTP is a private institution of higher education established as an association under the law of July 1, 1901, published in the Official Journal on July 2, 1901, and the decree of August 16, 1901, implementing this law, registered under SIRET number 325 002 111 00012, with its headquarters located at 28 Avenue du Président Wilson in Cachan (94230).

ESTP is responsible for the processing of these data and determines the purposes and means of the processing carried out through its "ESTP Websites."

Purpose of processing: Why do we use your personal data?

In general, you can visit our "ESTP Websites" without revealing your identity or providing us with any personal data. However, we may occasionally ask you to provide certain personal data, with the most confidential data being collected through secure access points.

Processing based on the performance of ESTP’s public interest mission

We process your requests for information to meet your needs in training or consultancy. We track the progress of graduates, the community, and ESTP partners, with the goal of publishing testimonials and interviews with members of the ESTP community (alumni, institutional partners, companies, etc.).

Processing based on your consent

We use cookies on your device to perform measurements and improve your experience on our site. We process your contact and subscription requests to our publication services: communications and information related to ESTP on our website www.estp.fr (brochures, newsletters, etc.), invitations to promotional or informational events organized by ESTP or its partners.

If you have consented to the use of your personal data for these purposes, this consent can be withdrawn at any time.

Processing based on ESTP's legitimate interests

These are the processing activities necessary for the operation and security of our websites, conducting satisfaction surveys, compiling statistics, sharing news, academic works, and generally, ESTP's knowledge with users of its "ESTP Websites."

Processing based on ESTP's legal obligations

The legal basis for processing your personal data is your consent (Article 6.1 of the General Data Protection Regulation – GDPR).

Some data collected on our secure areas is essential for the administrative and legal processing carried out by ESTP Paris to achieve the purposes of its statutes.

Categories of individuals concerned by the processing

All users, i.e., internet users browsing or consulting our "ESTP Websites," are concerned by the processing of personal data.

The data processing carried out by ESTP generally concerns:

• Students (pupils, apprentices, and trainees);
• Alumni;
• Doctoral candidates;
• Teaching and research staff;
• Participants in research projects;
• Administrative staff;
• Guests and external speakers;
• Internet users browsing the "ESTP Websites";
• Donors;
• Third parties (subcontractors or partners) contributing to ESTP’s public interest missions;
• Interviewed persons;
• Prospective students;
• Applicants;
• Graduates;
• Etc.

Recipients or categories of recipients of the data

Given the purpose pursued by these processes, the data processed on the "ESTP Paris Websites" are intended for:

• ESTP’s internal services and are not shared with third parties. They are necessary for the proper functioning of the website and the processes carried out by ESTP. They are only accessible to authorized persons.
• Service providers acting on behalf of and according to the instructions of ESTP (hosting providers, training platforms, external data processing platforms, etc.).
• Public authorities or other authorized third parties (judicial authorities, public bodies) only if ESTP is compelled to do so under its legal or reporting obligations and if the sharing is lawful under applicable law.

Data retention period

ESTP ensures that personal data is retained in accordance with current provisions or for a period necessary to achieve the purposes of the processes carried out, taking into account applicable legal provisions, which may impose a specific retention period for certain categories of data, applicable prescription periods, and CNIL recommendations.

Data retention periods are defined by ESTP based on the legal and contractual constraints that apply to it, and if not, based on its needs:

• Data related to access tracking on the "ESTP Websites" (audience measurements): data retained for a maximum of 2 years;
• Personal data collected via the contact form: data retained for 3 years from the date of your contact request if no follow-up occurs;
• Data used as part of ESTP’s institutional missions of training, scientific research, and documentation in the public interest, whether collected or produced by the School: they are retained and updated in ESTP’s various management tools according to administrative utility durations and legal requirements;
• Data used for research purposes are retained until the end of the research project or its publication and are then archived in compliance with data protection principles, confidentiality, and any access restrictions.

At the end of these retention periods, your data is securely archived.

Rights of individuals concerned

In accordance with the provisions of Law No. 78-17 of January 6, 1978, as amended, any person concerned by the processing of personal data has the right to access, rectify, erase, restrict, port, and object to the processing, as well as to issue advance directives regarding the fate of their data after death.

• Right of access: You have the right, without prior justification, to request direct access to your personal data from ESTP. Therefore, any user has the right to access the data collected by contacting the service responsible for data protection.
• Right to rectification of your personal data: If your personal data is being processed, ESTP implements appropriate measures to ensure the accuracy of your data and to update it for the purposes for which it was collected. If your personal data is inaccurate or incomplete, you have the right to obtain its rectification.
• Right to erasure of your personal data: You have the right, in certain specific situations, to request that personal data concerning you be erased. This right to erasure may be exercised by the concerned individuals when:

Your data is used for marketing purposes; It is no longer necessary for the purposes for which it was initially collected or processed; It is being processed unlawfully; It must be erased to comply with a legal obligation.

• Right to data portability: You have the option to retrieve a portion of your personal data in an open and readable format for reuse for personal purposes.
• Right to object or withdraw consent: You have the right to object at any time to the processing of your data. However, this right to object is not a simple and definitive right to delete all data concerning you. Thus, the objection request will not be fulfilled if:

There are legitimate and compelling reasons to continue processing your data; Your data is necessary for the establishment, exercise, or defense of legal claims; A legal obligation requires the retention of your data.

Contact for any requests related to exercising your rights:

We remind you that you have the right to file a complaint with the supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).

CNIL – Complaint Service 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 Phone: 01 53 73 22 22

For more information on exercising your rights: https://www.cnil.fr/en/understanding-your-rights.

Contact and Data Protection Officer (DPO)

ESTP has appointed a Data Protection Officer known as the "DPO."

If you have any questions about this privacy policy and the data processing activities carried out by ESTP, or if you wish to exercise any of your rights under the GDPR, you can contact the DPO by:

Email: dpo@estp-paris.eu

Postal mail:

ESTP

Attn: DPO 28, avenue du Président Wilson 94234 Cachan cedex

Contact form on the website www.estp.fr: Contact Us | ESTP

GDPR Consent management