Privacy policy

Last updated: 28 October 2026

1. Who is responsible for your data?

The data controller is CSB EDUCATION GROUP (CSB.SCHOOL), SIREN 929 915 940, 78 route de Paris, 69260 Charbonnières-les-Bains, France. Contact: contact@csb.school – +33 7 49 69 38 11.

CSB.SCHOOL has appointed a Data Protection Officer (DPO), who can be reached at guillaume.collard@ext.csb.school.

2. What data do we collect and why?

Situation	Data	Purpose	Legal basis	Retention period
Contact form	Surname, first name, email, phone number, message	Replying to your request	Legitimate interest	3 years after the last contact
Online application	Identity, contact details, academic and professional background, CV, supporting documents	Reviewing your application and organising admission	Pre-contractual measures	Unsuccessful applicants: 2 years. Enrolled students: duration of studies, then legal retention periods
Partner companies	Business contact details	Managing the relationship, work-study and the apprenticeship tax	Contract / legitimate interest	Duration of the relationship + 3 years
Browsing the website	Audience measurement cookies	Visitor statistics	Consent	13 months maximum

Our booklets can be downloaded freely: no data is requested to access them.

3. Who receives your data?

Your data is only accessible to the CSB.SCHOOL teams who need it. It may be processed by our technical service providers: website hosting (Amazon Web Services), application forms (Google Forms), audience measurement (Google Analytics), anti-spam protection for forms (Google reCAPTCHA), videos (YouTube, in privacy-enhanced mode) and cookie consent management (Complianz).

For students, some data is shared with organisations involved in their training: OPCO, certifying bodies and the Workinlive learning platform. We never sell your data.

4. Transfers outside the European Union

Some service providers (Google, Amazon) may process data in the United States. These transfers are governed by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

5. Cookies

Non-essential cookies are only placed with your consent, collected through the cookie banner. You can change your choices at any time. To find out more, see our cookie policy.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to set out instructions on what happens to your data after your death.

To exercise these rights, write to contact@csb.school or to our DPO (guillaume.collard@ext.csb.school). We will reply within one month. If you believe your rights have not been respected, you can lodge a complaint with the CNIL (www.cnil.fr).

7. Security

As a cybersecurity school, we apply appropriate technical and organisational measures to protect your data: restricted access, encrypted communications (HTTPS), backups and incident management. In the event of a data breach, we notify the CNIL and, where necessary, the people concerned.

8. Changes to this policy

This policy may change. The date of the latest update is shown at the top of the page.