WEB conferencing system management with Zoom or Teams

HEC Paris, headquartered at 8 avenue de la Porte de Champerret, 75017 Paris, operates personal data processing in order to allow remote users to access and participate in virtual classes or meetings.

A report is made and recorded by the Web conference platform when the user accesses and navigates in its space for later statistics. If necessary, these data will be used to attest the courses attendance. The Web conference organiser could capture the session in video and/or audio mode and then, if necessary, make these resources available to the participants of the program.

The legal base of the data processing is the mission in the general public interest (cf. Article 6(1)(e)) of the General Data Protection Regulation in accordance with the Education Code (Article D. 611-12).

The data is collected directly from the concerned people. The capture of the data related to the learners’ visual and sound environment is not mandatory but, in this case, the learner has to switch off his/her camera and microphone. The data processing does not provide a full automated individual decision (see https://www.cnil.fr/fr/profilage-et-decision-entierement-automatisee).

The categories of collected data are: identity, images, contacts, school life elements for learners and work elements for staff and teachers and some technical or connection data such as cookies and logs and other data such as chats comments, emails, personal or collective video presentations.

Staff, teachers and speakers, students and participants in training at HEC Paris who have to attend a course or meeting online. They could be invited by email or on their digital work environment.

The data is managed by the concerned HEC Paris staff and teachers and will be in read access for the other students of the class once it is published in the context of this class.

The HEC Paris IT staff and the company’s staff, in charge of the operation and maintenance of the platform can also access the data for this sole purpose.

You are informed when accessing a Webconference session that the collected data is transferred in order to be hosted on US servers.

The data will also be used by our service provider for diagnostic and maintenance purposes.

The data is kept, depending on the type of training, in accordance with the legal obligations of HEC Paris for the platform’s content and for one year for the logs.

The data subject has the right to access, modify and limit the process of their personal data as well as a right of objection on legitimate grounds, which can be exercised

• by writing to HEC Paris:
  Correspondant à la protection des données,
  1 rue de la libération, 78350 Jouy-en-Josas
• or by sending an email to donnees-personnelles@hec.fr mentioning in the subject line "Droit des personnes" (personal rights).

For more information on your data and your rights : data privacy policy

If you consider, after contacting us, that your rights and freedoms are not fully respected, you can make an on-line request to the CNIL or by postal service.