Information on personal data
Regulation (EU) 2016/679 of the european parliament and of the council of 27 april 2016
Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
This "information on personal data" aims to inform students of the policy that the CNOUS follows to respect their Personal Data.
This "information" describes the methods of managing Personal Data concerning students, natural persons, obtained when consulting or registering on the "evote" site, allowing participation in the electronic vote for the elections of the Crous' Boards of Directors. It relates only to the processing for which CROUS are responsible.
Purpose of the processing
As part of their social missions and under the supervision of the Ministry of Higher Education and Professional Integration (MESRI), the Crous have a Board of Directors on which sit the student representatives elected by the students during the elections provided for this purpose.
Nature of the data processing
Purpose
The treatment allows :
- Any eligible student to apply for and participate in the electoral list for the elections to the Administrative Council.
Legal basis
This data processing is part of the public service mission of the Crous.
Articles 6-e and 6-c of the general data protection regulation - GDPR
6-e
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
6-c
The processing is necessary to comply with a legal obligation to which the controller is subject.
Person responsible for the processing
The CROUS represented by the president of the CNOUS Dominique Marchand.
CNOUS - Centre National des Œuvres Universitaires et Scolaires
60, bd du Lycée
92170 Vanves
Data processed
Categories of data processed
Identification data, connection data, personal data.
Data source
This information comes from the governmental portal for student life (etudiant.gouv.fr), where it has been previously filled in by the student user of the messervices.etudiant.gouv.fr portal.
Mandatory nature of the data collection
The digital service for registration on the electoral roll for the elections to the Boards of Directors and for participation in the elections provides, unless otherwise stated, for the compulsory collection of data that are necessary for the processing of the request.
Automated decision making
The processing does not involve automated decision-making.
Persons concerned
The data processing concerns any student who is eligible to apply for registration on the electoral list for the elections to the Administrative Boards and to participate in them.
Recipients of personal data
Categories of recipients
Depending on their respective needs, the following are recipients of all or part of the data :
- CROUS.
- The supervisory authorities (ministry in charge of higher education)
- The Rector of the Academy.
- The electronic voting company.
Personal data collected by CNOUS subcontractors
List of subcontractors
No subcontractors
Transfer of data outside the european union
No data is transferred outside the European Union.
Retention of personal data
The information collected relating to the traceability of accesses is kept within the time limits of possible appeals. In the event of an appeal, until the end of the appeal investigation.
At the end of this statutory retention period, the data is permanently deleted.
Security
As a data controller, the CNOUS implements appropriate methods to protect personal data, including security audits.
Your rights regarding your data
The student has a general right of access, rectification and deletion of all personal data concerning him/her that has been collected in connection with his/her application to benefit from the digital service offered by the portal. They also have the right to lodge a complaint with the CNIL.
The right of access is exercised either on the first visit to the site by displaying the personal data on the home page or via "my profile" on the messervices.etudiant.gouv.fr portal.
It allows the student's personal data to be viewed at any time.
Concerning the right of rectification, the "my profile" form on the messervices.etudiant.gouv.fr portal allows certain data to be modified online when the student is authenticated. The modification of identity data and the INE requires a prior request via an online assistance form on the messervices.etudiant.gouv.fr portal. See the information on the messervices.etudiant.gouv.fr portal.
The right of deletion is conditioned by the statutory data retention periods.
Exercise his rights with the data protection officer
The CROUS have appointed their regional data protection delegate and are the relay of the CNOUS delegate to the students.
The CROUS Data Protection Officer receives complaints from students concerned by the processing operations for which he/she has been appointed and ensures that students' rights are respected. He deals with these complaints or implements procedures to ensure their proper handling.
For any question relating to the processing of Personal Data, the student may contact the CROUS Data Protection Officer:
- By post: see the list of CROUS
- By electronic means: see the list of data protection officers
The processing of Personal Data in the context of exercising your rights is done on a personal and confidential basis. In this respect, in order for your request to be taken into account, you must send the elements necessary for your identification, namely
- A statement on your honour by which you certify that you are the owner of the said Personal Data
- A photocopy of an identity document
CROUS commitment to the processing of personal data
CROUS undertakes to make every effort to ensure that the student's personal data is :
- obtained and processed fairly and lawfully
- collected for the specified purposes and in a legitimate manner, and to limit their use to those purposes
- adequate, relevant and not excessive in relation to these purposes
- accessible and subject to a right of rectification or deletion following a request sent by post or electronically to the above-mentioned data controller
- retained in accordance with the purposes for which they are intended
CROUS undertakes to implement the necessary means to ensure the security of the data, in order to prevent it from being damaged, modified, destroyed or communicated to unauthorised third parties.
Contact details of the CROUS
| CROUS | Postal address | Email DPO |
|---|---|---|
| CNOUS |
60, Boulevard du Lycée 92170 Vanves |
dpo[at]CNOUS.fr |
| CROUS D'AIX MARSEILLE AVIGNON |
31, Avenue Jules Ferry 13621 Aix-en-Provence Cedex 1 |
dpo[at]CROUS-aix-marseille.fr |
| CROUS D'AMIENS PICARDIE |
25, rue Saint-Leu BP 50541 80005 Amiens Cedex 1 |
dpo[at]CROUS-antillesguyane.fr |
| CROUS DE BORDEAUX AQUITAINE |
18, rue du Hamel- CS 11616 33090 Bordeaux Cedex |
dpo[at]CROUS-bordeaux.fr |
| CROUS DE BOURGOGNE-FRANCHE-COMTE | 38, Avenue de l'observatoire 25000 Besançon | dpo[at]CROUS-bfc.fr |
| CROUS DE CLERMONT AUVERGNE |
25, rue Etienne Dolet 63037 Clermont-Ferrand Cedex 1 |
dpo[at]CROUS-clermont.fr |
| CROUS DE CORSE |
22, Avenue Jean Nicoli- BP 55 20250 Corte |
dpo[at]CROUS-corse.fr |
| CROUS DE GRENOBLE ALPES |
351, Allée Berlioz Domaine Universitaire 38400 Saint-Martin-d'Hères |
dpo[at]CROUS-grenoble.fr |
| CROUS DE LILLE PAS DE CALAIS |
74, rue de Cambrai CS 90006 59043 Lille Cedex |
dpo[at]CROUS-lille.fr |
| CROUS DE LORRAINE |
5, rue de Laxou 54042 Nancy Cedex |
dpo[at]CROUS-lorraine.fr |
| CROUS DE LYON |
59, rue de la Madeleine 69365 Lyon Cedex 07 |
dpo[at]CROUS-lyon.fr |
| CROUS DE MONTPELLIER OCCITANIE |
2, rue Monteil – BP 5053 34033 Montpellier Cedex 1 |
dpo[at]CROUS-montpellier.fr |
| CROUS DE NANTES PAYS DE LOIRE |
2, Boulevard Guy Mollet BP 52213 44322 Nantes Cedex 3 |
dpo[at]CROUS-nantes.fr |
| CROUS DE NICE TOULON |
18, Avenue des Fleurs 06050 Nice Cedex 1 |
dpo[at]CROUS-nice.fr |
| CROUS DE NORMANDIE |
135, Boulevard de l'Europe 76100 Rouen |
dpo[at]CROUS-normandie.fr |
| CROUS D'ORLEANS TOURS |
17, Avenue Dauphine 45072 Orléans Cedex 2 |
dpo[at]CROUS-orleans-tours.fr |
| CROUS DE PARIS |
39, Avenue Georges Bernanous 75231 Paris Cedex 05 |
dpo[at]CROUS-paris.fr |
| CROUS DE POITIERS |
15 rue Guillaume VII Troubadour 86000 POITIERS |
dpo[at]CROUS-poitiers.fr |
| CROUS DE REIMS |
34, Boulevard Henry Vasnier BP 2751 51063 Reims Cedex |
dpo[at]CROUS-reims.fr |
| CROUS DE RENNES BRETAGNE |
7, Place Hoche – CS 26428 35064 Rennes Cedex |
dpo[at]CROUS-rennes.fr |
| CROUS DE LA REUNION |
20, rue Hippolyte Foucque 97490 Sainte-Clotilde |
dpo[at]CROUS-reunion.fr |
| CROUS DE STRASBOURG |
1, Quai du Maire Dietrich BP 50168 67004 Strasbourg Cedex |
dpo[at]CROUS.strasbourg.fr |
| CROUS DE TOULOUSE OCCITANIE |
58, rue du Taur CS 67096 31070 Toulouse cedex 7 |
dpo[at]CROUS-toulouse.fr |
| CROUS DE VERSAILLES |
145 Bis Boulevard de la Reine 78005 Versailles Cedex |
dpo[at]CROUS-versailles.fr |
The personal data collected
| Identity data | Data provider |
|---|---|
| Civility | messervices.etudiant.gouv.fr |
| Surname | messervices.etudiant.gouv.fr |
| First name | messervices.etudiant.gouv.fr |
| Middle name | messervices.etudiant.gouv.fr |
| 3rd name | messervices.etudiant.gouv.fr |
| Use of name | messervices.etudiant.gouv.fr |
| Date of birth | messervices.etudiant.gouv.fr |
| Contact details | Data provider |
|---|---|
| email address | messervices.etudiant.gouv.fr |
| landline telephone number | messervices.etudiant.gouv.fr |
| mobile phone number | messervices.etudiant.gouv.fr |
| Student data | Data provider |
|---|---|
| INE number | messervices.etudiant.gouv.fr |
| Additional student data | Data provider |
|---|---|
| Proof of identity | at the initiative of the student |
| Proof of enrolment in the study programme | at the initiative of the student |
| Technical data | Data provider |
|---|---|
| IP, logs | evote module |
