Privacy Policy

Our commitments to personal data protection

ESLSCA SAS, located at 15, rue de Cambrai, 75019 Paris, a simplified joint-stock company with a share capital of 246,730 euros, a training organization registered under number 11 75 01507 75, operating under the brand EGE Ecole de Guerre Economique, whose SIREN number is 784 308 306 (hereinafter “ESLSCA-EGE”) attaches great importance to the protection and security of your personal data, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the Data Protection Act of January 6, 1978, as amended.

This Privacy Policy is intended for any person using the ESLSCA-EGE website as a user: CR451.FR or for learners within the institution.

The purpose of this privacy policy (“Policy”) is to provide you with clear and transparent information on how ESLSCA-EGE collects and processes your personal data when you use the services provided by ESLSCA-EGE, both within its establishments and online: CR451.FR

This Policy also aims to inform you of your rights regarding your personal data. It is therefore important that you read it, as well as our Cookie Policy , and any other specific information notices that we may provide to you from time to time, when we collect or process personal data concerning you. This Policy supplements these other information notices and is not intended to replace them.

Who is the data controller for your data?

ESLSCA SAS, located at 11 rue Cambrai 75019 Paris, a simplified joint-stock company with a share capital of 246,730 euros, a training organization registered under number 11 75 01507 75, operating under the brand EGE Ecole de Guerre Economique, whose SIREN number is 784 308 306 (hereinafter “ESLSCA-EGE”) is responsible for processing the personal data you provide via the various paper or digital forms on the ESLSCA-EGE websites, the information you communicate by phone, email, SMS, or through one of our paper forms, the data obtained as a result of our relationship with you, and the information resulting from your browsing and consumption habits.

ESLSCA-EGE is established at 11 rue de Cambrai – 75019 PARIS. You can contact it by mail at the aforementioned address or by email at the following address: cr451@ege.fr

In this Policy, the terms “ESLSCA-EGE”, “we”, “us”, “our” refer to ESLSCA-EGE.

What is the nature of the Data collected?

The concept of “personal data” encompasses all directly or indirectly identifying data concerning you, whether it is information you have provided or declared (e.g., your contact details) but also information resulting from the contractual relationships you have with ESLSCA-EGE (e.g., your registration). We ensure that we only collect personal data concerning you that is necessary for the purposes pursued.

On what occasions do we collect your Personal Data?

In the context of providing our services, ESLSCA-EGE may collect and process personal data concerning you.

Your Personal Data may be collected during:

contact requests, particularly to receive information about the services provided by CR451;
via the various forms on the CR451 websites;
your subscription to our newsletter;
your use of our website.

The following categories of personal data concerning you may be collected:

Identity data: name, first names, phone, email;
Connection data: IP address, technical and location information generated during the use of our websites and applications:
- Cookies: please refer to our
- Cookie Policy for more information;
- This data is collected based on the services you use and your relationship with us.

Where we need to collect personal data concerning you (under a legal obligation or a contract we have entered into with you, or intend to enter into with you) and you do not provide this personal data when requested, we may not be able to provide you with the services you desire. In the context of the various forms on the CR451 website, the mandatory nature of the personal data to be provided is indicated to you during collection by asterisks.

When you provide personal data concerning you, you undertake to communicate accurate information that does not prejudice the interests or rights of third parties.

What is the purpose of processing your personal data?

The purpose of processing corresponds to the objective pursued by the use of your data.

CR451 ensures that it only collects personal data concerning you that is strictly necessary for the purposes pursued.

Should we wish to use your data for purposes other than those for which your data was originally collected, we undertake to inform you beforehand and, if necessary, to obtain your consent, if required for any new purpose. CR451 collects your personal data for the following purposes:

Dispute management;
Organization of statistical surveys, particularly for the Ministry of Higher Education and Research, organizations publishing rankings for which CR451 must produce statistics or respond to surveys in accordance with current legislation;
Improvement of navigation on the CR451 website;

CR451 will process your personal data to offer you its products and various services related to the training courses provided by CR451.

How long will your data be stored?

CR451 will retain personal data for the duration necessary to pursue the processing purposes, and/or comply with legal and regulatory obligations, and/or establish, defend, or exercise legal rights.

During this period, CR451 takes all necessary precautions, considering the nature of the data and the risks presented by the processing, to preserve its confidentiality and security, and in particular to prevent the data from being distorted, damaged, or accessed by unauthorized third parties (physical protection of premises, authentication procedures for persons accessing data with personal and secure access via confidential identifiers and passwords, secure https protocol, logging and traceability of connections, encryption of certain data, etc.).

Once the services have been rendered, CR451 will delete the user’s personal data, with the exception of personal data that must be retained to allow CR451 to comply with a legal or regulatory obligation, and/or to establish, defend, or exercise legal rights, in accordance with civil and commercial limitation periods.

The table summarizes the reasons why we process your data, the legal basis for this processing, and the associated retention periods:

Purposes for which we process your data	Legal basis for processing	Retention period
For non-learner users of ESLSCA-EGE Implementation of prospecting and advertising operations by email relating to programs, activities, and events organized by ESLSCA-EGE, as well as the provision of any information on the programs taught by ESLSCA-EGE and support in the various procedures, particularly those that may lead to enrollment in a program.	– Consent of the data subject	– 3 years after the last contact
For ESLSCA-EGE learners: Implementation of prospecting and advertising operations by email, relating to programs, activities, and events organized by ESLSCA-EGE	– Legitimate interest	– 3 years after the end of the training
Subscription to ESLSCA-EGE newsletters	– Consent of the data subject	– For the entire duration of the subscription and until the data subject unsubscribes from the newsletter
Management of the application of non-admitted or withdrawn learners	– Pre-contractual execution	– 3 years after the application date in case of non-admission or withdrawal.
Management of the application of admitted learners	– Contractual execution	– For the entire duration of the training and up to 3 years after the completion of the training cycle
Access to the ESLSCA-EGE intranet/ENT and, where applicable, access to application resources and digital documentation.	– Contractual execution	– For the entire duration of the training, then deletion of data at the end of the training.
Administrative and academic monitoring of the learner’s training.	– Contractual execution	– For the entire duration of the training and up to 5 years after the end of the training for training contracts. – For the entire duration of the training and up to 50 years for the issuance of diplomas and duplicates.
Financial monitoring of the learner.	– Compliance with legal obligations	– For the entire duration of the training and up to 10 years from the end of the training for invoices
Management of unpaid invoices and disputes	– Contractual execution	– 10 years from the resolution of the dispute related to an unpaid amount.
Communication of data to companies, Partners and/or other entities of the Planeta Group	– Consent of the data subject	– For the entire duration of the training and up to 3 years after the end of the training or renewal of consent
Where applicable, assisting the learner in the procedure for obtaining financial grants	– Contractual execution	– For the entire duration of the training and up to 5 years after the end of the training
Organization of statistical surveys, particularly for the Ministry of Higher Education and Research, organizations publishing rankings for which ESLSCA-EGE must produce statistics or respond to surveys in accordance with current legislation;	– Necessary for the performance of ESLSCA-EGE’s public service mission,	– Unlimited duration if data is anonymized
Organization of statistical surveys, particularly quality and pedagogical surveys	– Legitimate interest	– Unlimited duration if data is anonymized
Organization of statistical surveys, particularly ESLSCA-EGE ranking surveys	– Consent of the data subject	– Unlimited duration if data is anonymized
Creation of the learner’s commercial profile (constituted from the information you have provided directly or based on information obtained through your consumption and browsing habits, as well as those obtained through social networks).	– Consent of the data subject	– For the entire duration of the training and up to 3 years after the end of the training or renewal of consent
Video surveillance to ensure the safety of learners, staff, speakers, and ESLSCA-EGE premises	– Legitimate interest	– 1 month after recording
Learner participation in the ESLSCA-EGE “Alumni” networks	– Consent of the data subject	– For the entire duration of the training and up to 3 years after the end of the training or renewal of consent

What are your rights when you provide us with your data?

In accordance with the Data Protection Act of January 6, 1978, as amended, and Articles 15 et seq. of Regulation (EU) 2016/679 on the protection of personal data, you have the following rights regarding your data: right of access, right to rectification, right to erasure (right to be forgotten), right to object to the processing of your data, right to restriction of processing, and right to data portability.

You may also withdraw your consent at any time and free of charge. You also have the option to define directives regarding the retention, erasure, and communication of your personal data after your death.

In the event of a breach of the above provisions, you have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr).

How to exercise your rights?

To exercise these rights, you must provide us with your contact details (name, first name, email address you provided to us) and a legitimate reason when required by law (particularly in case of objection to processing).

Please note that if the information you provide does not allow us to confirm your identity or if a reasonable doubt persists, we may ask you to provide additional information or documents.

To exercise your rights, please send your registered letter with acknowledgment of receipt to the following address: ESLSCA-EGE, 15 rue de Cambrai 75019 PARIS, or to the following email address: rgpd@planetaformation.fr.

You may lodge a complaint with a supervisory authority and have the right to a judicial remedy if you believe your rights have been violated or if the supervisory authority does not act on your complaint.

In accordance with Article 6-II of the law of June 21, 2004, for Confidence in the Digital Economy, data that can identify you may be communicated to the judicial authority when requested.

What security measures do we implement to protect your data?

We take the necessary measures to ensure that your personal data collected via the Site is not lost, misused, accessed, modified, or disclosed by unauthorized third parties.

To do this, we have implemented technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, alteration or loss, misuse, and unauthorized access, modification, or disclosure.

In addition, organizational measures (such as authorization management systems for data access, etc.) help preserve the confidentiality of your data. Thus, access to your personal data is strictly limited to CR451 personnel, expressly authorized, and to our partners and subcontractors, acting themselves according to our instructions and in compliance with our contractual provisions and applicable legislation.

Policy Update

We may revise this Policy. We ensure that the most recent version is published on the website: cr451.fr. When significant changes are made to the Policy, we will inform you by posting a notice online and/or in our premises, or by sending you an email within a reasonable period prior to its entry into force.