Exam Management

HEC Paris, headquartered at 8 avenue de la Porte de Champerret, 75017 Paris, operates personal data processing in order to ensure the exam management and their supervision.

When the exam is managed using online means, supervision can then be provided either by videoconference and a proctor, or by an online exam supervision system, hereinafter referred to as Asynchronous Supervision, which is set up according to the methods desired by the teacher for his/her exam.

For any online exams managed by asynchronous monitoring, a video and audio recording are made, the user's interaction with his browser, equipment and environment will be tracked and a score will be determined in relation to the minimum requirements for compliance with the rules set for the exam. If the score is not reached or if there is any doubt as to the exam's behaviour, the teacher or programme manager will be responsible for checking the different elements recorded in order to determine whether the rules have been respected. If there is a breach of the rules, a report will be written, edited and stored in the learner's school file and will be considered in relation to the results obtained.

If there is a breach of the regulations, a report will be made, edited and stored in the learner's school folder and will be considered with regard to the results obtained.

The legal base of the data processing is the mission in the general public interest (cf. Article 6(1)(e)) of the General Data Protection Regulation in accordance with the Education Code (Article D. 611-12) and with the business continuity plan implemented by HEC Paris.

The data are provided by students and participants taking HEC Paris exams.

The data collected for the visual and sound environment of the examinee as well as the video capture of the student's image during the exam are mandatory.

Without this data, the exam could not be corrected and/or validated because HEC Paris would be unable to check if the exam conditions were fulfilled in compliance with its legal obligations under the Article L63-1 of the Education Code.

The data processing does not provide a full automated individual decision.

All data collected in the event of suspicion of non-compliance with the examination conditions, like the image, sound and behavioural data of the student will be viewed, listened to and studied in order to remove any doubts. If the doubt is confirmed, a report will be written up with the digressions detected. This report will be used as part of the sanction procedure or during the graduation jury.

The types of collected data are : Identity, identification data such as school number and internal blackboard number, images (photo and video), academic and school data (including cursus, courses, school email and any element collected for the purpose of the exam answers), login data and cookies set up and other data, such as the commitment to respect the conditions of the E-examination, and more generally, any element related to the surveillance, in particular, in addition to the images and videos of the participant and his environment, the participant's voice, his sound environment, and in the case of an asynchronous monitoring any element collected and related to the control of the exam session ( (in particular, any attempt to remove the full screen, deactivation of new tabs, navigation other than on the exam page). In case of breach of the examination conditions, a report will be established.

HEC Paris students and participants enrolled in a course and who have to take an exam as part of this course.

The data is managed by the relevant HEC Paris administrative and teaching staff.

The HEC Paris Digital Pole staff and the company's staff in charge of the operation and maintenance of the platforms can, for their own platforms, also access the data, for this sole purpose.

For online monitored exams, you are informed that the personal data collected for these monitoring purposes is transferred for hosting and processing on servers located outside the European Union. The transferred data may also be used by the provider in charge of the solution for diagnostic and maintenance purposes. These transfers are based on the standard contractual clauses of the European Union.

The collected data is being kept:

• 6 months maximum after the exam for the monitoring element,
• one year after the exam for the copies,
• 50 years for the obtained grades

The data subject has the right to access, modify and limit the process of their personal data as well as a right of objection on legitimate grounds, which can be exercised

• by writing to HEC Paris:
  Correspondant à la protection des données,
  1 rue de la libération, 78350 Jouy-en-Josas
• or by sending an email to donnees-personnelles@hec.fr mentioning in the subject line "Droit des personnes" (personal rights).

For more information on your data and your rights : data privacy policy

If you consider, after contacting us, that your rights and freedoms are not fully respected, you can make an on-line request to the CNIL or by postal service.