Home /
Privacy policy

Privacy policy

Data controller

THE ASSOCIATION GROUPE SUP DE CO MONTPELLIER (MONTPELLIER BUSINESS SCHOOL or MBS) acts as personal data controller for the purposes listed in the table below.

Data Protection Officer

MBS designated Ernst & Young Law firm as their Data Protection Officer (DPO). His email and postal coordinates are as follows:

DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins 34185 MONTPELLIER CEDEX 4
data-protection-officer@Montpellier-BS.com.

Purposes and legal basis

The table below summarizes the purposes for which internet users’ personal data are processed by MONTPELLIER BUSINESS SCHOOL as well as the legal basis for such processing:

Processing Purposes	Legal basis
Promotion of our school and courses	Our legitimate interest or your consent when required by law
Recruitment (job applicants)	The performance of pre-contractual obligations, or our legitimate interest for data that exceed what is strictly necessary for the performance of pre-contractual obligations.
Management of contact requests on our website	Our legitimate interest
Management of applications for training programs	The performance of pre-contractual obligations, or our legitimate interest for data that exceed what is strictly necessary for the performance of pre-contractual obligations
Management of entrance tests including organization of tests and follow-up on the candidates’ evaluation, eligibility and admission	The execution of the contract entered into with entrance tests organizer
Administrative management of students/ learners	The performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our mission of public interest
Management of our training programs	The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our contractual obligations
Management of special needs (including but not limited to handicap) of students / learners (notably during exams and evaluations)	Our legitimate interest
Enrollment, training programs attendance and nonattendance tracking	The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations
Management of students / learner’s exams and evaluations	The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations
Management and monitoring of actions in favor of MBS’s social policy (social inclusion, ascending mobility, etc.) such as the PHARES or the « La cordée de la réussite » programs.	The performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our mission of public interest
Management of student internships	The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations
Management of work-study programs (apprenticeship / professionalization contracts)	The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations
Management of social welfare files	The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest
Assignment, management and follow-up of scholarships and prizes funded by the Montpellier Business School Foundation, under the umbrella of the Fondation de France	The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest
Management of disciplinary sanctions issued by the disciplinary authorities of MONTPELLIER BUSINESS SCHOOL	The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations
Organization and follow-up on the training courses followed with foreign educational institutions, partners of MONTPELLIER BUSINESS SCHOOL	The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our contractual obligations
Administrative management of graduates	The performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our mission of public interest
Facilitation of the alumni network	Our legitimate interest or your consent when required by law
Connecting graduates with students for internship or job search purposes	Our legitimate interest or your consent when required by law
Management of contracts entered into with students, including management and follow-up of invoicing and payments	The execution of the contract uniting us
Management and follow-up of surety agreements subscribed to the benefit of MONTPELLIER BUSINESS SCHOOL	The performance of our contractual obligations
Management and monitoring of MBS incubators (such as the Entrepreneur J incubator for example)	Our legitimate interest
Management of suppliers and providers	The performance of our contractual obligations or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations
Compliance by MONTPELLIER BUSINESS SCHOOL with its reporting and information obligations to the administrative authorities (in particular its accounting and tax obligations).	Compliance with regulatory obligations
Logistics management, including management of badges and resources of MONTPELLIER BUSINESS SCHOOL	Our legitimate interest
Premises, car parks and people security (CCTV)	Our legitimate interest
Control of the use of the resources made available by MONTPELLIER BUSINESS SCHOOL, notably management of Internet access on educational premises	Our legitimate interest
Management of access to public WIFI made available by MBS	Compliance with regulatory obligations
Conducting satisfaction surveys and polls	Our legitimate interest or your consent when required by law
Management of right-to-image forms	The performance of our contractual obligations
Management of the lists of persons exercising their rights relating to their personal data	Compliance with regulatory obligations

Categories of data collected and sources

Personal data are collected directly by MONTPELLIER BUSINESS SCHOOL in case of applications made directly with its services. They can also be provided by MONTPELLIER BUSINESS SCHOOL’s partners (institutions of higher education, entities in charge of recruiting candidates for entrance tests, etc.).

In general, the data processed by MONTPELLIER BUSINESS SCHOOL are the following:

Civil status and identification data (surnames, first names, place of birth, nationality, etc.),
Personal postal, telephone and e-mails,
Elements of personal life (marital status, social welfare benefits, etc.),
Data relating to the payment of registration fees and unpaid fees,
diplomas obtained,
Languages spoken,
Personal data relating to schooling (timetables, internal and external curricula, diplomas, validation of prior learning, transcripts and grades, examination/assessment reports, attendance sheets, etc.),
Social difficulties in the context of the granting of scholarships,
Student’s special needs (including disability), (especially during exams and assessments),
Data relating to the identification and connection to the computer facilities made available by MONTPELLIER BUSINESS SCHOOL,
Results of non-anonymous surveys and polls, testimonials,
Functions within student associations acting in relation to MONTPELLIER BUSINESS SCHOOL,
Disciplinary sanctions,
Data related to commercial marketing.

Data recipients

Personal data are mainly accessible to MONTPELLIER BUSINESS SCHOOL’s Communication and Marketing Department, Programs Department, Human Resources and CSR Department, Operations Department, Finance Department, Student Life Department, Planning Department, Academic Department, Development and Corporate Relations Department, Organizational and Educational Support Department, Organizational and Educational Support Department, and to the persons in charge of the security of the premises and reception.

Personal data may be communicated by MONTPELLIER BUSINESS SCHOOL to the following entities:

Montpellier Business School Alumni association which facilitates the network of MONTPELLIER BUSINESS SCHOOL graduates;
Foreign educational institutions which are partners of MONTPELLIER BUSINESS SCHOOL and win which students would follow a training;
The partners of MONTPELLIER BUSINESS SCHOOL for contracts management, such as, for example, debts recovery;
The technical and IT subcontractors of MONTPELLIER BUSINESS SCHOOL, such as hosting and IT maintenance providers;
Entities specializing in surveys and statistics (particularly for the ranking of educational institutions);
The rectorate and any establishment under the supervision of the Ministry of National Education (such as the “Centre d’études et de recherches sur les qualifications” (Céreq)), notably for the purpose of conducting national surveys;
The Fondation de France, under the aegis of which the Montpellier Business School Foundation is placed, for the scholarships and prizes it finances;
The European Commission for the management of the scholarships awarded by the Montpellier Business Foundation within the framework of the Erasmus program;
the Region Occitanie for the management of mobility grants awarded by the Montpellier Business School Foundation;
the High Council for the Evaluation of Research and Higher Education (HCERES) for the evaluation and control of the EESPIG Label.

Subcontractors acting under the instructions of MBS will be required to implement appropriate protective measures.

If MBS uses subcontractors located in countries whose regulations do not offer an adequate level of protection in terms of personal data protection, MBS will ensure that these transfers are carried out in accordance with French regulatory requirements (for example, implementation of contractual clauses adopted by the European Commission). You can contact our Data Protection Officer for more information on these subjects as well as to obtain a copy of the relevant documents.

Data retention period

Personal data processed by MONTPELLIER BUSINESS SCHOOL are kept in accordance with data protection regulations and legal retention periods. In general, data is kept in accordance with the Ministry of National Education, Higher Education and Research’s Circular 2005-003 dated 22 February 2005. For example:

Data related to commercial marketing are kept for three years from the date of last contact;
Data relating to unsuccessful job applicants are retained for a period of two years.

Information collected by MONTPELLIER BUSINESS SCHOOL and deemed essential to fulfil the aforementioned purposes are identified by an asterisk on the data collection forms. If you choose not to fill these mandatory fields, MONTPELLIER BUSINESS SCHOOL may not be able to provide the concerned services.

Your rights

You have the right to request access to, and rectification of, your personal data.
You have the right to request the limitation of the processing of your personal data, (i) if you dispute the accuracy of this data during the period during which we verifying the accuracy of such data, (ii) if you consider that we are unlawfully processing your data and you require a limitation of its use rather than an erasure, (iii) if the data is no longer needed for the above mentioned purposes but is still deemed necessary for the establishment, exercise or defense of legal claims, (iv) if, during the verification period, we are unable to prove that our legitimate interests override your own interests.
You have the right to request the erasure of your personal data.
You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
You have the right to object to the processing of your personal data for commercial prospecting, without having to provide any reason.
You have the right to exercise your right to data portability, which affords you the right to obtain a copy of your personal data or to transfer it to a third party in a structured, commonly used and machine-readable format.
You also have the right not be subject to a decision based solely on automated processing, which produces legal effects concerning you or similarly significantly affects you.
You have the right to withdraw your consent at any time.
You also have the right to formulate specific or general guidelines regarding the storage, deletion and communication of your personal data after death.

These rights can be exercised, at any time, by sending an e-mail to the following address data-protection-officer@Montpellier-BS.com or by postal mail to the following address : DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins, 34185 Montpellier Cedex 4.

You may also lodge a complaint with the French data protection authority (CNIL). Additional information is available on their website www.cnil.fr.

If you have any questions on these subjects, you can contact the Data Protection Officer by email at the following address: data-protection-officer@Montpellier-BS.com or by postal mail to the following address: DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins, 34185 Montpellier Cedex 4.

This page