Personal data and personal data processing: what does this mean?
Personal Data means any information or data that identifies, or makes identifiable, a natural person (name, email address, telephone number, IP address, etc.), whether processed electronically or otherwise.
Processing of Personal Data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The User is defined, within the meaning of Article 4(1) of the GDPR, as a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number or an online identifier.
Categories of data processed, purposes and legal basis for processing
As data controller, ENAAI ensures a high level of protection of the Personal Data of the individuals concerned at every stage of its processing (collection, storage, destruction, etc.).
Based in France, ENAAI undertakes to comply with the legislation and regulations in force on the protection of personal data, and in particular:
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR);
• the French Data Protection Act (loi Informatique et Libertés) and Order no. 2018-1125 of 12 December 2018 on the protection of personal data, amending Act no. 78-17 of 6 January 1978 on information technology, data files and civil liberties, together with various provisions concerning the protection of personal data;
ENAAI acts as data controller when it processes the User's personal data in the following cases:
• Creation of a personal account on the basis of consent (Article 6(a) GDPR) /
• Requests for information or brochure downloads on the basis of legitimate interest (Article 6(f) GDPR)
• Applications for a job or work placement on the basis of consent (Article 6(a) GDPR);
To fulfil these purposes, the personal data collected is as follows:
• Data relating to identity and contact details (surname, first name, email address and telephone number)
The website and cookie collection
The ENAAI website (www.enaai.fr) is hosted by DAG under conditions that comply with the GDPR.
When you connect to and use the website, browsing data may be collected and processed by ENAAI, or by any third-party provider of its choosing, for statistical purposes, in order to improve the site's usability and to measure the number of page views and visits, as well as your activity and journey on the site.
When you connect to and use the website, browsing data (cookies) may be collected and processed by the company, or by any third-party provider of its choosing, for browsing and statistical purposes, in order to improve the site's usability and to measure the number of page views and visits, as well as your activity and journey on the site.
Personal data security
ENAAI undertakes to take all technical and organisational measures needed to ensure the protection, security and confidentiality of the Personal Data of the individuals concerned, in particular against any loss, alteration, disclosure or unlawful use.
ENAAI ensures that such measures are applied to all operations carried out as part of its processing activities, in particular when Personal Data is collected, stored and hosted.
In this respect, ENAAI also ensures that any third parties it may call upon (technical service providers, suppliers, etc.) comply with this requirement to protect Personal Data by implementing appropriate measures, in accordance with the GDPR. The technical and organisational measures put in place may include the use of secure registration forms, encryption and/or restricted access to Personal Data.
ENAAI urges the individuals concerned to exercise the greatest caution when disclosing their Personal Data to third parties, as well as the personal login details and passwords that give them access to the website.
Some messages or requests received may come from malicious individuals seeking to obtain personal information about the individuals concerned with a view to fraudulent use (a practice known as phishing). If you receive a message that appears to be an attempt at phishing, you are advised not to reply to it and not to open any attachments, images or links contained in the message.
Your rights
You have a right of access, rectification and objection, as well as a right to erasure and portability where your data has been collected on the basis of consent.
To do so, you must send your request, together with proof of identity, to the following postal address: 10 allée Lac Saint André 73 370 Le Bourget du Lac – FRANCE, or to the following email address: info@enaai.fr
In the event of a dispute, the individual concerned may submit a claim directly to the competent supervisory authority (CNIL).
Reproduction rights:
You are free to link to the content of this site; simply notify the editorial manager by email. Photographs, however, are protected by copyright.
Copying pages from this site requires the authorisation of the publication director and must credit ENAAI's copyright.
Enrolment cancellation terms:
Any signed enrolment agreement is deemed firm and final, including the programme, options and trips, once the 14 calendar-day withdrawal period has elapsed, running from the day after the agreement is signed. The student then becomes liable for the cost of the programme for the whole of their study cycle.