Privacy Policy

Last updated: February 2025

This privacy policy describes how Edenn School collects, uses, stores, and protects your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable data protection laws.

Article 1 — Data Controller

EDENN SCHOOL FZCO
Dubai Silicon Oasis, Dubai Digital Park, Building A2, Office 312, PO Box 341028, Dubai, UAE
DPO Contact: contact@edenn-school.fr

Article 2 — Data Collected

In the context of using the Site and Services, EDENN SCHOOL collects the following data:

Identification Data

Last name and first name, date of birth, postal address, email address, phone number.

Professional/Academic Data

Last diploma obtained, training path, internship information (company, tutor, missions, etc.).

Connection Data

IP address, connection logs, browsing data.

Financial Data

Payment information processed by Stripe. We never store your bank card details.

Article 3 — Purposes of Processing

Personal data is collected for the following purposes:

Order management and training registrations
Establishment and monitoring of internship agreements
Access to and use of the training platform
Communication with Users (customer support, service information)
Service and Site improvement
Fraud prevention and security management
Compliance with legal and regulatory obligations
Sending commercial information (with prior consent)

Article 4 — Legal Basis

Data processing is based on:

Contract performancebetween the User and EDENN SCHOOL
User consentparticularly for commercial prospecting
Legal obligationsof EDENN SCHOOL
Legitimate interestof EDENN SCHOOL (service improvement, security)

Article 5 — Data Recipients

Personal data may be shared with:

Internal EDENN SCHOOL services
Payment service providers (Stripe)
Hosts and technical service providers
Competent authorities (upon legal requisition)

Data is only shared with partners located in the European Union or ensuring an adequate level of protection.

Article 6 — Data Retention

Account dataDuration of contract + 5 years (legal prescription)
Billing data10 years (accounting obligations)
Connection data1 year
Prospecting data3 years from last contact

Article 7 — Your Rights

In accordance with the GDPR and the Data Protection Act, you have the following rights:

  • Right of accessObtain confirmation of processing and receive a copy of your data
  • Right of rectificationRequest correction of inaccurate data
  • Right to erasureRequest deletion of your data (within legal limits)
  • Right to restrictionRequest suspension of processing
  • Right to objectObject to processing of your data
  • Right to portabilityReceive your data in a structured format
  • Right to withdraw consentAt any time, without affecting prior processing

To exercise these rights, contact us at: contact@edenn-school.fr

Any request must be accompanied by a copy of ID. A response will be provided within one month.

Article 8 — Complaint

In case of difficulty, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

Article 9 — Cookies

9.1 What is a cookie?

A cookie is a text file placed on your device (computer, tablet, smartphone) when visiting the Site. It collects information about your browsing.

9.2 Cookies used

Strictly necessary cookies

Session cookies, authentication cookies, security cookies. Cannot be disabled.

Analytics cookies

PostHog (audience analysis - EU hosted). Require your consent.

9.3 Cookie management

On your first visit, a banner informs you about the use of cookies and allows you to accept or refuse non-essential cookies. You can modify your preferences at any time:

Via the Site cookie manager
Via your browser settings

Cookie consent is valid for 13 months. Cookies have a maximum lifespan of 13 months.

Article 10 — Service Providers

We work with the following service providers, all of which offer EU hosting or adequate data protection:

  • SupabaseDatabase and authentication. EU hosted (Frankfurt). Processes account data and training progress.
  • StripePayment processing. PCI-DSS certified. We never store your bank card details.
  • PostHogAnalytics. EU hosted (Frankfurt). Collects anonymized usage data with consent.
  • VercelWebsite hosting. Processes connection data for content delivery and security.

Article 11 — Policy Updates

This privacy policy may be updated from time to time to reflect changes in our practices or legal requirements. The latest version is always available on this page. We encourage you to review this policy periodically.

Questions about your data?

For any questions about this privacy policy, to exercise your rights, or to report a concern about data protection, contact us at: contact@edenn-school.fr