Personal data

Data controller

The data controller is the Fédération des Médias et des Initiatives des Grandes Écoles et de l'Enseignement Supérieur (FMGE), 50 rue des Tournelles, 75003 Paris, which publishes the CRGE website.

Data collected

The contact form collects your first and last name, email address and message and, depending on the request, your phone number, institution or organisation and job title. Optional fields are marked as such.

The website's server also keeps technical logs (IP address, date, page viewed), used only for the security of the website.

With your consent, Matomo audience measurement also records your browsing on the website, as described on the Cookie management page.

Purpose and legal basis

This data is used only to answer your request and follow it up. The processing is based on the legitimate interest of the CRGE in answering the requests it receives (article 6(1)(f) GDPR). It is neither sold nor used for advertising.

Recipients

Requests are only accessible to the members of the CRGE team in charge of answering them.

They go through the website's server, hosted by OVH SAS, and are then stored in a spreadsheet hosted by Google (Google Workspace), which notifies the team by e-mail. A confirmation e-mail is sent to you by SparkPost from the European Union, and the form may be protected against automated submissions by Cloudflare Turnstile. While you type the name of your organisation or school, the text typed is sent to the French State's company search API (recherche-entreprises.api.gouv.fr) to suggest names, with no other data. These providers act as processors for the CRGE. Any transfer outside the European Union is governed by the EU-US Data Privacy Framework and by the European Commission's standard contractual clauses.

Retention

Requests are kept for 3 years after the last exchange, then deleted.

The server's technical logs are kept for 12 months at most.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, use the contact form ("Other" topic) or write to the CRGE head office, 50 rue des Tournelles, 75003 Paris.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).