Privacy policy

Data controller

THE ASSOCIATION GROUPE SUP DE CO MONTPELLIER (MONTPELLIER BUSINESS SCHOOL or MBS) acts as personal data controller for the purposes listed in the table below.

Data Protection Officer

MBS designated Ernst & Young Law firm as their Data Protection Officer (DPO). His email and postal coordinates are as follows:

• DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins 34185 MONTPELLIER CEDEX 4
• data-protection-officer@Montpellier-BS.com.

Purposes and legal basis

The table below summarizes the purposes for which internet users’ personal data are processed by MONTPELLIER BUSINESS SCHOOL as well as the legal basis for such processing: 

Categories of data collected and sources

Personal data are collected directly by MONTPELLIER BUSINESS SCHOOL in case of applications made directly with its services. They can also be provided by MONTPELLIER BUSINESS SCHOOL’s partners (institutions of higher education, entities in charge of recruiting candidates for entrance tests, etc.).

In general, the data processed by MONTPELLIER BUSINESS SCHOOL are the following:

• Civil status and identification data (surnames, first names, place of birth, nationality, etc.),
• Personal postal, telephone and e-mails,
• Elements of personal life (marital status, social welfare benefits, etc.),
• Data relating to the payment of registration fees and unpaid fees,
• diplomas obtained,
• Languages spoken,
• Personal data relating to schooling (timetables, internal and external curricula, diplomas, validation of prior learning, transcripts and grades, examination/assessment reports, attendance sheets, etc.),
• Social difficulties in the context of the granting of scholarships,
• Student’s special needs (including disability), (especially during exams and assessments),
• Data relating to the identification and connection to the computer facilities made available by MONTPELLIER BUSINESS SCHOOL,
• Results of non-anonymous surveys and polls, testimonials,
• Functions within student associations acting in relation to MONTPELLIER BUSINESS SCHOOL,
• Disciplinary sanctions,
• Data related to commercial marketing.

Data recipients

Personal data are mainly accessible to MONTPELLIER BUSINESS SCHOOL’s Communication and Marketing Department, Programs Department, Human Resources and CSR Department, Operations Department, Finance Department, Student Life Department, Planning Department, Academic Department, Development and Corporate Relations Department, Organizational and Educational Support Department, Organizational and Educational Support Department, and to the persons in charge of the security of the premises and reception.

Personal data may be communicated by MONTPELLIER BUSINESS SCHOOL to the following entities:

• Montpellier Business School Alumni association which facilitates the network of MONTPELLIER BUSINESS SCHOOL graduates;
• Foreign educational institutions which are partners of MONTPELLIER BUSINESS SCHOOL and win which students would follow a training;
• The partners of MONTPELLIER BUSINESS SCHOOL for contracts management, such as, for example, debts recovery;
• The technical and IT subcontractors of MONTPELLIER BUSINESS SCHOOL, such as hosting and IT maintenance providers;
• Entities specializing in surveys and statistics (particularly for the ranking of educational institutions);
• The rectorate and any establishment under the supervision of the Ministry of National Education (such as the “Centre d’études et de recherches sur les qualifications” (Céreq)), notably for the purpose of conducting national surveys;
• The Fondation de France, under the aegis of which the Montpellier Business School Foundation is placed, for the scholarships and prizes it finances;
• The European Commission for the management of the scholarships awarded by the Montpellier Business Foundation within the framework of the Erasmus program;
• the Region Occitanie for the management of mobility grants awarded by the Montpellier Business School Foundation;
• the High Council for the Evaluation of Research and Higher Education (HCERES) for the evaluation and control of the EESPIG Label.

Subcontractors acting under the instructions of MBS will be required to implement appropriate protective measures.

If MBS uses subcontractors located in countries whose regulations do not offer an adequate level of protection in terms of personal data protection, MBS will ensure that these transfers are carried out in accordance with French regulatory requirements (for example, implementation of contractual clauses adopted by the European Commission). You can contact our Data Protection Officer for more information on these subjects as well as to obtain a copy of the relevant documents.

Data retention period

Personal data processed by MONTPELLIER BUSINESS SCHOOL are kept in accordance with data protection regulations and legal retention periods. In general, data is kept in accordance with the Ministry of National Education, Higher Education and Research’s Circular 2005-003 dated 22 February 2005. For example:

• Data related to commercial marketing are kept for three years from the date of last contact;
• Data relating to unsuccessful job applicants are retained for a period of two years.

Information collected by MONTPELLIER BUSINESS SCHOOL and deemed essential to fulfil the aforementioned purposes are identified by an asterisk on the data collection forms. If you choose not to fill these mandatory fields, MONTPELLIER BUSINESS SCHOOL may not be able to provide the concerned services.

Your rights

• You have the right to request access to, and rectification of, your personal data.
• You have the right to request the limitation of the processing of your personal data, (i) if you dispute the accuracy of this data during the period during which we verifying the accuracy of such data, (ii) if you consider that we are unlawfully processing your data and you require a limitation of its use rather than an erasure, (iii) if the data is no longer needed for the above mentioned purposes but is still deemed necessary for the establishment, exercise or defense of legal claims, (iv) if, during the verification period, we are unable to prove that our legitimate interests override your own interests.
• You have the right to request the erasure of your personal data.
• You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
• You have the right to object to the processing of your personal data for commercial prospecting, without having to provide any reason.
• You have the right to exercise your right to data portability, which affords you the right to obtain a copy of your personal data or to transfer it to a third party in a structured, commonly used and machine-readable format.
• You also have the right not be subject to a decision based solely on automated processing, which produces legal effects concerning you or similarly significantly affects you.
• You have the right to withdraw your consent at any time.
• You also have the right to formulate specific or general guidelines regarding the storage, deletion and communication of your personal data after death.

These rights can be exercised, at any time, by sending an e-mail to the following address data-protection-officer@Montpellier-BS.com or by postal mail to the following address : DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins, 34185 Montpellier Cedex 4.

You may also lodge a complaint with the French data protection authority (CNIL). Additional information is available on their website www.cnil.fr.

If you have any questions on these subjects, you can contact the Data Protection Officer by email at the following address: data-protection-officer@Montpellier-BS.com or by postal mail to the following address: DPO – MONTPELLIER BUSINESS SCHOOL – 2300 avenue des Moulins, 34185 Montpellier Cedex 4.