Personal data

Preamble

The protection of your personal data is a core commitment of Université Grenoble Alpes, which strives to continually improve its compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the General Data Protection Regulation or "GDPR", and French Act No. 78-18 of January 6, 1978, on data processing, files, and individual liberties, as amended (hereinafter the "French Data Protection Act").

Please consult our cookie policy

This personal data protection policy aims to provide individuals whose data is processed by Université Grenoble Alpes with concise, transparent, understandable, and easily accessible information regarding the nature of the processing and their rights concerning their data.

Data controllers

Université Grenoble Alpes, represented by its President as data controller, determines the purposes and means of the personal data processing carried out within the institution.
Address: Université Grenoble Alpes - 621 avenue centrale 38400 Saint-Martin-d’Hères

What data do we process and why?

The LabEx CerCoG of Université Grenoble Alpes processes personal data limited to browsing and technical data, as part of improving the user experience on its website.

These processing activities are carried out for statistical, audience measurement, and management purposes, and are based on the LabEx's legitimate interest in ensuring the proper functioning and optimization of its website.

No processing for administrative, educational, or contractual purposes is carried out via this website. No other type of personal data (identification, payment, etc.) is collected.

Who processes your data? Who has access to your data?

Paragraph below to be customized: list the services accessing the data
Depending on the purposes pursued, only members of the committees of the LabEx CerCoG of Université Grenoble Alpes (Executive Board, Management Committee, and Steering Committee, the list of which is available on this website under the Governance tab) are authorized to process data concerning you.

The LabEx CerCoG of Université Grenoble Alpes may transfer data concerning you to third parties, particularly its institutional partners such as the higher authorities of Université Grenoble Alpes, the Ministry of Higher Education and Research, the Ministry of National Education, the Ministry of Health, the DGFIP, the rectorate, and other contractual partners or subcontractors.

How long is your data retained?

Personal data is retained for the period necessary to achieve the purposes for which it was collected and/or for the duration required by laws or regulations.
In this regard, the university complies in particular with the provisions of instruction "DAF DPACI/RES/2005/003 of February 22, 2005, on the sorting and conservation of archives received and produced by services and institutions contributing to national education".

How is your data secured?

The university has defined technical, legal, and organizational measures to appropriately protect your data according to its nature and the scope of the processing.

These measures comply with the Information System Security Policy (PSSI) of Université Grenoble Alpes, which aligns with government standards.

Transfers of your personal data outside the European Union

No transfer of your personal data outside the European Union is carried out.
All data collected and processed by the LabEx CerCoG of Université Grenoble Alpes remains hosted and secured within the European Union, in compliance with applicable personal data protection regulations.

What are your rights and how can you exercise them?

The university processes your personal data as part of its missions and, in accordance with the GDPR, based on the legal basis of "public interest". Within this framework, you have the following rights regarding your data and its use:

• the right to be informed,
• the right of access,
• right to rectification.
• right to restriction of processing,
• right to object if your data is used for other purposes not falling under a legal obligation, or if it is not subject to a legal retention period,

You can exercise your rights by contacting the joint Data Protection Officer:
Email address: dpogrenet.fr
Postal address: Protection des données – DPO - Direction des Systèmes d’information mutualisés, Domaine universitaire, 31, rue des mathématiques 38400 Saint-Martin-d'Hères.

You also have the right to lodge a complaint with the CNIL:
https://www.cnil.fr/fr/plaintes

Updates to the personal data protection policy

This privacy policy may be subject to modifications in light of legislative and regulatory developments.