Montpellier Business School

Privacy policy

Data controller

THE ASSOCIATION GROUPE SUP DE CO MONTPELLIER (MONTPELLIER BUSINESS SCHOOL or MBS) acts as personal data controller for the purposes listed in the table below.

 

Data Protection Officer

MBS designated Ernst & Young Law firm as their Data Protection Officer (DPO). His email and postal coordinates are as follows:

 

Purposes and legal basis

The table below summarizes the purposes for which internet users’ personal data are processed by MONTPELLIER BUSINESS SCHOOL as well as the legal basis for such processing: 

Processing Purposes

Legal basis

Promotion of our school and courses

Our legitimate interest or your consent when required by law

 Recruitment (job applicants)

The performance of pre-contractual obligations, or our legitimate interest for data that exceed what is strictly necessary for the performance of pre-contractual obligations.

Management of contact requests on our website

 Our legitimate interest

Management of applications for training programs

The performance of pre-contractual obligations, or our legitimate interest for data that exceed what is strictly necessary for the performance of pre-contractual obligations

Management of entrance tests including organization of tests and follow-up on the candidates’ evaluation, eligibility and admission

The execution of the contract entered into with entrance tests organizer

Administrative management of students/ learners

The performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our mission of public interest

Management of our training programs

The performance of our mission of public interest, or

the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our contractual obligations  

Management of special needs (including but not limited to handicap) of students / learners (notably during exams and evaluations)

Our legitimate interest

Enrollment, training programs attendance and nonattendance tracking

The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations

Management of students / learner’s exams and evaluations

The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations

Management and monitoring of actions in favor of MBS’s social policy (social inclusion, ascending mobility, etc.) such as the PHARES or the « La cordée de la réussite » programs.

The performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our mission of public interest

Management of student internships

The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations

Management of work-study programs (apprenticeship / professionalization contracts)

The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations

Management of social welfare files

The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest

Assignment, management and follow-up of scholarships and prizes funded by the Montpellier Business School Foundation, under the umbrella of the Fondation de France

The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest

Management of disciplinary sanctions issued by the disciplinary authorities of MONTPELLIER BUSINESS SCHOOL

The performance of our contractual obligations, or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations

Organization and follow-up on the training courses followed with foreign educational institutions, partners of MONTPELLIER BUSINESS SCHOOL

The performance of our mission of public interest, or the performance of our contractual obligations for the data that exceeds what is strictly necessary for the performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our contractual obligations 

Administrative management of graduates

The performance of our mission of public interest, or our legitimate interest for data that exceed what is strictly necessary for the performance of our mission of public interest

Facilitation of the alumni network

Our legitimate interest or your consent when required by law

Connecting graduates with students for internship or job search purposes

Our legitimate interest or your consent when required by law

Management of contracts entered into with students, including management and follow-up of invoicing and payments

The execution of the contract uniting us

Management and follow-up of surety agreements subscribed to the benefit of MONTPELLIER BUSINESS SCHOOL

The performance of our contractual obligations

Management and monitoring of MBS incubators (such as the Entrepreneur J incubator for example)

Our legitimate interest

Management of suppliers and providers

The performance of our contractual obligations or our legitimate interest for the data that exceeds what is strictly necessary for the performance of our contractual obligations

Compliance by MONTPELLIER BUSINESS SCHOOL with its reporting and information obligations to the administrative authorities (in particular its accounting and tax obligations).

Compliance with regulatory obligations

Logistics management, including management of badges and resources of MONTPELLIER BUSINESS SCHOOL

Our legitimate interest

Premises, car parks and people security (CCTV)

Our legitimate interest

Control of the use of the resources made available by MONTPELLIER BUSINESS SCHOOL, notably management of Internet access on educational premises

Our legitimate interest

Management of access to public WIFI made available by MBS

Compliance with regulatory obligations

Conducting satisfaction surveys and polls

Our legitimate interest or your consent when required by law

Management of right-to-image forms

The performance of our contractual obligations

Management of the lists of persons exercising their rights relating to their personal data

Compliance with regulatory obligations

 

Categories of data collected and sources

Personal data are collected directly by MONTPELLIER BUSINESS SCHOOL in case of applications made directly with its services. They can also be provided by MONTPELLIER BUSINESS SCHOOL’s partners (institutions of higher education, entities in charge of recruiting candidates for entrance tests, etc.).

In general, the data processed by MONTPELLIER BUSINESS SCHOOL are the following:

  • Civil status and identification data (surnames, first names, place of birth, nationality, etc.),
  • Personal postal, telephone and e-mails,
  • Elements of personal life (marital status, social welfare benefits, etc.),
  • Data relating to the payment of registration fees and unpaid fees,
  • diplomas obtained,
  • Languages spoken,
  • Personal data relating to schooling (timetables, internal and external curricula, diplomas, validation of prior learning, transcripts and grades, examination/assessment reports, attendance sheets, etc.),
  • Social difficulties in the context of the granting of scholarships,
  • Student’s special needs (including disability), (especially during exams and assessments),
  • Data relating to the identification and connection to the computer facilities made available by MONTPELLIER BUSINESS SCHOOL,
  • Results of non-anonymous surveys and polls, testimonials,
  • Functions within student associations acting in relation to MONTPELLIER BUSINESS SCHOOL,
  • Disciplinary sanctions,
  • Data related to commercial marketing.

 

Data recipients

Personal data are mainly accessible to MONTPELLIER BUSINESS SCHOOL’s Communication and Marketing Department, Programs Department, Human Resources and CSR Department, Operations Department, Finance Department, Student Life Department, Planning Department, Academic Department, Development and Corporate Relations Department, Organizational and Educational Support Department, Organizational and Educational Support Department, and to the persons in charge of the security of the premises and reception.

Personal data may be communicated by MONTPELLIER BUSINESS SCHOOL to the following entities:

  • Montpellier Business School Alumni association which facilitates the network of MONTPELLIER BUSINESS SCHOOL graduates;
  • Foreign educational institutions which are partners of MONTPELLIER BUSINESS SCHOOL and win which students would follow a training;
  • The partners of MONTPELLIER BUSINESS SCHOOL for contracts management, such as, for example, debts recovery;
  • The technical and IT subcontractors of MONTPELLIER BUSINESS SCHOOL, such as hosting and IT maintenance providers;
  • Entities specializing in surveys and statistics (particularly for the ranking of educational institutions);
  • The rectorate and any establishment under the supervision of the Ministry of National Education (such as the “Centre d’études et de recherches sur les qualifications” (Céreq)), notably for the purpose of conducting national surveys;
  • The Fondation de France, under the aegis of which the Montpellier Business School Foundation is placed, for the scholarships and prizes it finances;
  • The European Commission for the management of the scholarships awarded by the Montpellier Business Foundation within the framework of the Erasmus program;
  • the Region Occitanie for the management of mobility grants awarded by the Montpellier Business School Foundation;
  • the High Council for the Evaluation of Research and Higher Education (HCERES) for the evaluation and control of the EESPIG Label.

Subcontractors acting under the instructions of MBS will be required to implement appropriate protective measures.

If MBS uses subcontractors located in countries whose regulations do not offer an adequate level of protection in terms of personal data protection, MBS will ensure that these transfers are carried out in accordance with French regulatory requirements (for example, implementation of contractual clauses adopted by the European Commission). You can contact our Data Protection Officer for more information on these subjects as well as to obtain a copy of the relevant documents.

 

Data retention period

Personal data processed by MONTPELLIER BUSINESS SCHOOL are kept in accordance with data protection regulations and legal retention periods. In general, data is kept in accordance with the Ministry of National Education, Higher Education and Research’s Circular 2005-003 dated 22 February 2005. For example:

  • Data related to commercial marketing are kept for three years from the date of last contact;
  • Data relating to unsuccessful job applicants are retained for a period of two years.

Information collected by MONTPELLIER BUSINESS SCHOOL and deemed essential to fulfil the aforementioned purposes are identified by an asterisk on the data collection forms. If you choose not to fill these mandatory fields, MONTPELLIER BUSINESS SCHOOL may not be able to provide the concerned services.

 

Your rights

  • You have the right to request access to, and rectification of, your personal data.
  • You have the right to request the limitation of the processing of your personal data, (i) if you dispute the accuracy of this data during the period during which we verifying the accuracy of such data, (ii) if you consider that we are unlawfully processing your data and you require a limitation of its use rather than an erasure, (iii) if the data is no longer needed for the above mentioned purposes but is still deemed necessary for the establishment, exercise or defense of legal claims, (iv) if, during the verification period, we are unable to prove that our legitimate interests override your own interests.
  • You have the right to request the erasure of your personal data.
  • You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
  • You have the right to object to the processing of your personal data for commercial prospecting, without having to provide any reason.
  • You have the right to exercise your right to data portability, which affords you the right to obtain a copy of your personal data or to transfer it to a third party in a structured, commonly used and machine-readable format.
  • You also have the right not be subject to a decision based solely on automated processing, which produces legal effects concerning you or similarly significantly affects you.
  • You have the right to withdraw your consent at any time.
  • You also have the right to formulate specific or general guidelines regarding the storage, deletion and communication of your personal data after death.

These rights can be exercised, at any time, by sending an e-mail to the following address data-protection-officer@Montpellier-BS.com or by postal mail to the following address : DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins, 34185 Montpellier Cedex 4.

You may also lodge a complaint with the French data protection authority (CNIL). Additional information is available on their website www.cnil.fr.

 

If you have any questions on these subjects, you can contact the Data Protection Officer by email at the following address: data-protection-officer@Montpellier-BS.com or by postal mail to the following address: DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins, 34185 Montpellier Cedex 4.

Partager cette page
Share
This page
Contact us
Identity(Required)
Preferred contact method(Required)
RGPD
This field is for validation purposes and should be left unchanged.
Contactez-nous
Identité(Required)
Je préfère être contacté par(Required)
RGPD
This field is for validation purposes and should be left unchanged.