Privacy policy

1. Introduction

This Privacy Policy explains how ABI School, SAS (“we”, “our”, “us”) collects, uses, and protects personal data obtained through www.abischool.fr.

We are committed to ensuring that your privacy is protected and that all data processing complies with the General Data Protection Regulation (EU Regulation 2016/679 — “GDPR”).

Data Controller Identity ABI School, SAS 60 rue François 1er, 75008 Paris, France SIRET: 941 711 822

Data Protection Contact: office@abischool.fr

2. Data We Collect

We may collect the following personal data:

• Identification and contact details (name, email, phone number).
• Information provided through contact or registration forms.
• Technical data (IP address, browser type, pages visited, connection times).
• Cookie and analytics data (see Cookie Policy below).

We may collect the following categories of personal data:

2.1. From parents/legal guardians:

Identity information (surname, first name)

Contact details (postal address, email, telephone)

Information related to child's enrollment and academic follow-up

2.2. From minor students (with parental consent):

Identity information (surname, first name, date of birth)

Academic information (grade level, class, results)

Photographs and videos (only with express parental authorization)

2.3. From website visitors:

Browsing data (IP address, browser type, pages visited, timestamps)

Data submitted through contact forms

Cookie data (see Cookie Policy)

2.4. From job applicants (CV/recruitment):

Resume and cover letter information

Professional contact details

3. Purpose and Legal Basis

Your data are processed for the following purposes:

• To respond to contact or information requests, to manage recruitment  (based on consent).
• To manage registrations for our activities and services, to nanage enrollments and contractual relationship (based on contractual necessity).
• To send occasional updates or newsletters (based on consent).
• To analyze traffic and improve website performance, targeted advertising (based on consent).

4. Data Retention

Personal data are kept only for the time necessary to fulfill the purposes above:

• Contact requests: up to 12 months after last contact
• Customer or registration data: up to 3 years after the last interaction.
• Active student data: Duration of schooling + 3 years
• Former student data: 3 years after end of schooling (then possible intermediate archiving)
• Unsuccessful applications: 2 years maximum (CNIL recommendation)
• Newsletters: Until consent withdrawal
• Analytics cookies: 13 months maximum
• Accounting data: 10 years
• Data is then deleted or anonymized, unless there is a legal obligation to retain it.

5. Data Recipients

Access to personal data is limited to:

• Authorized staff members of ABI School.
• Technical service providers acting as data processors:

• Web hosting provider (GoDaddy LLC)
• Analytics tools (Google Analytics with IP anonymization)
• Email services
• Payment processors (if applicable)

All our processors are bound by contractual clauses ensuring data security and confidentiality in accordance with GDPR.

No data is sold to third parties

6. Data Security

We use technical and organizational measures to protect data against unauthorized access, alteration, or disclosure. We implement appropriate technical and organizational measures:

• HTTPS protocol (SSL/TLS encryption)
• Secure hosting with regular backups
• Restricted data access (authentication, access control)
• Staff training on data protection
• Strong password policy
• Access logging and monitoring
• Regular security audit

7. Transfers Outside the EU

Some data may be transferred to third countries, specifically:

• GoDaddy (United States)

Protection mechanism: Standard Contractual Clauses (SCCs) approved by the European Commission

Assessment: Additional security measures implemented (encryption, access controls)

Post-Schrems II compliance: Transfer impact assessment conducted

• Google Analytics (United States) - if used

Configuration: IP anonymization enabled

Mechanism: Standard Contractual Clauses + CNIL configuration tools

You may obtain a copy of the safeguards implemented by contacting us

8. Your Rights

In accordance with GDPR and the French Data Protection Act, you have the following rights:

• Right of access (Art. 15 GDPR): obtain a copy of your data
• Right to rectification (Art. 16 GDPR): correct inaccurate data
• Right to erasure (Art. 17 GDPR): request deletion of your data
• Right to restriction (Art. 18 GDPR): limit processing of your data
• Right to object (Art. 21 GDPR): object to processing on legitimate grounds
• Right to data portability (Art. 20 GDPR): receive your data in a structured format
• Right to withdraw consent: at any time, for consent-based processing
• Right to define post-mortem directives: regarding the fate of your data after death

How to Exercise Your Rights?

By email:

office@abischool.fr

By post: ABI School, 60 rue François 1er, 75008 Paris, France

Please include a copy of your ID. Response within 1 month (extendable to 3 months if necessary).

Lodging a Complaint with the Supervisory Authority

If you believe your rights are not being respected, you may lodge a complaint with the CNI (www.cnil.fr)

9. Updates

See our detailed Cookie Policy here. This Privacy Policy may be updated periodically. The last modification date is shown at the bottom of the page.