Privacy Policy
Last updated: February 2025
This privacy policy describes how Edenn School collects, uses, stores, and protects your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable data protection laws.
Article 1 — Data Controller
EDENN SCHOOL FZCO
Dubai Silicon Oasis, Dubai Digital Park, Building A2, Office 312, PO Box 341028, Dubai, UAE
DPO Contact: contact@edenn-school.fr
Article 2 — Data Collected
In the context of using the Site and Services, EDENN SCHOOL collects the following data:
Identification Data
Last name and first name, date of birth, postal address, email address, phone number.
Professional/Academic Data
Last diploma obtained, training path, internship information (company, tutor, missions, etc.).
Connection Data
IP address, connection logs, browsing data.
Financial Data
Payment information processed by Stripe. We never store your bank card details.
Article 3 — Purposes of Processing
Personal data is collected for the following purposes:
• Order management and training registrations
• Establishment and monitoring of internship agreements
• Access to and use of the training platform
• Communication with Users (customer support, service information)
• Service and Site improvement
• Fraud prevention and security management
• Compliance with legal and regulatory obligations
• Sending commercial information (with prior consent)
Article 4 — Legal Basis
Data processing is based on:
Contract performance — between the User and EDENN SCHOOL
User consent — particularly for commercial prospecting
Legal obligations — of EDENN SCHOOL
Legitimate interest — of EDENN SCHOOL (service improvement, security)
Article 5 — Data Recipients
Personal data may be shared with:
• Internal EDENN SCHOOL services
• Payment service providers (Stripe)
• Hosts and technical service providers
• Competent authorities (upon legal requisition)
Data is only shared with partners located in the European Union or ensuring an adequate level of protection.
Article 6 — Data Retention
Account data — Duration of contract + 5 years (legal prescription)
Billing data — 10 years (accounting obligations)
Connection data — 1 year
Prospecting data — 3 years from last contact
Article 7 — Your Rights
In accordance with the GDPR and the Data Protection Act, you have the following rights:
- Right of access — Obtain confirmation of processing and receive a copy of your data
- Right of rectification — Request correction of inaccurate data
- Right to erasure — Request deletion of your data (within legal limits)
- Right to restriction — Request suspension of processing
- Right to object — Object to processing of your data
- Right to portability — Receive your data in a structured format
- Right to withdraw consent — At any time, without affecting prior processing
To exercise these rights, contact us at: contact@edenn-school.fr
Any request must be accompanied by a copy of ID. A response will be provided within one month.
Article 8 — Complaint
In case of difficulty, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr
Article 9 — Cookies
9.1 What is a cookie?
A cookie is a text file placed on your device (computer, tablet, smartphone) when visiting the Site. It collects information about your browsing.
9.2 Cookies used
Strictly necessary cookies
Session cookies, authentication cookies, security cookies. Cannot be disabled.
Analytics cookies
PostHog (audience analysis - EU hosted). Require your consent.
9.3 Cookie management
On your first visit, a banner informs you about the use of cookies and allows you to accept or refuse non-essential cookies. You can modify your preferences at any time:
• Via the Site cookie manager
• Via your browser settings
Cookie consent is valid for 13 months. Cookies have a maximum lifespan of 13 months.
Article 10 — Service Providers
We work with the following service providers, all of which offer EU hosting or adequate data protection:
- Supabase — Database and authentication. EU hosted (Frankfurt). Processes account data and training progress.
- Stripe — Payment processing. PCI-DSS certified. We never store your bank card details.
- PostHog — Analytics. EU hosted (Frankfurt). Collects anonymized usage data with consent.
- Vercel — Website hosting. Processes connection data for content delivery and security.
Article 11 — Policy Updates
This privacy policy may be updated from time to time to reflect changes in our practices or legal requirements. The latest version is always available on this page. We encourage you to review this policy periodically.
Questions about your data?
For any questions about this privacy policy, to exercise your rights, or to report a concern about data protection, contact us at: contact@edenn-school.fr
See also: Legal Notice — Terms of Sale