Privacy Policy (GDPR)
Last updated: August 2026
1. Introduction and Data Controller
The École Spécialisée en Data, Management & Intelligence Artificielle (ESDMIA) is committed to protecting the privacy of its applicants and students. This policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and the French Data Protection Act, as applicable in 2026. The Data Controller is École Spécialisée en Data, Management & Intelligence Artificielle (ESDMIA) (dpo@esdmia.paris).
2. Data Collected
As part of your application (Admissions), we collect the following categories of data:
- Identity and contact: Title, last name, first name, postal address, email, phone, date and place of birth, nationality.
- Supporting documents: ID photo, copy of ID card/passport, residence permit or visa.
- Academic background: Resume/CV and diplomas.
3. Purposes and Legal Bases
Your data is processed exclusively for:
- Evaluating your application and managing your admission (Legal basis: Pre-contractual measures).
- Identity verification and fraud prevention (Legal basis: Legal obligation).
4. Use of Artificial Intelligence (AI)
In accordance with the European AI framework (AI Act 2026), ESDMIA uses artificial intelligence systems for the preliminary screening of CVs to accelerate the selection process. However, no admission decision is made entirely automatically (GDPR Article 22). All final decisions are evaluated and validated by a human committee.
5. Data Retention Period
- Non-admitted applicants: Your data is deleted 2 years after the last contact, except for ID documents which are deleted immediately after verification.
- Admitted students: Your data is kept for the duration of your studies, then archived in accordance with the legal obligations of the Ministry of Higher Education.
6. Your Rights
You have the right to access, rectify, delete, restrict, transfer, and object to the processing of your data. To exercise these rights, contact our Data Protection Officer (DPO) at: dpo@esdmia.paris.
You also have the right to file a complaint with the CNIL (www.cnil.fr).