Privacy Policy
Université Paris-Saclay takes the protection of the privacy and personal data of its users to heart.
The purpose of this privacy policy is to inform you transparently about the processing of your personal data and the extent of your rights in connection with the use of CASA Université Paris-Saclay.
Université Paris-Saclay - a public scientific, cultural and professional establishment, whose registered office is located at Bâtiment Breguet, 3 rue Joliot Curie 91190 Gif-Sur-Yvette
SIRET No.: 130 026 024 00054
Represented by Mr Camille GALAP, in his capacity as President,
What is personal data?
Personal data means any information relating to a natural person that makes it possible to identify them directly, such as their surname, first name, postal or email address, or indirectly, such as a User identifier, an IP address, browsing data, etc.
The purpose of this Privacy Policy is to inform the users of the platform dedicated to the students of Université Paris-Saclay (hereinafter « the Platform ») about the conditions under which their personal data is collected, used and protected, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the French Data Protection Act (loi Informatique et Libertés).
Université Paris-Saclay reserves the right to amend this Privacy Policy in order to comply with changes to the laws and regulations in force. Any changes made will be notified via our Site or by email, as far as possible, at least thirty days before they come into effect.
Consult the Privacy Policy:
Users agree to always provide sincere and truthful Personal Data and to update it where necessary so that it remains complete and accurate.
When you use our site, personal data is processed. This processing is carried out in compliance with the applicable regulations, in particular the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
This data is collected and used for specified, explicit and legitimate purposes, such as the creation and management of your account, putting users and lessors in contact with one another, and the improvement of the services offered. It is processed on appropriate legal bases (performance of the contract, legal obligation, legitimate interest or consent, as the case may be) and is retained only for the period strictly necessary to achieve those purposes.
Below you will find a detailed presentation of the processing operations implemented, organised by category of data subjects.
For students:
| Purpose | Data processed | Legal basis | Recipients | Retention period |
|---|---|---|---|---|
| Creation and management of the account | Identity (surname, first name), email, password, telephone, address, date of birth, establishment, status (scholarship holder, disability) | Performance of the contract | Authorised internal departments, technical service providers | Duration of the account + 2 years of inactivity |
| Putting in contact with lessors | Identity, email, telephone, content of the exchanges | Performance of the contract | Lessors (private individuals/professionals) | Duration of the account |
| Personalisation of searches | Profile data, search criteria, search history, favourites | Performance of the contract / Legitimate interest | Internal departments, technical service providers | Duration of the account |
| Analysis of the use of the site | Browsing data, pages viewed, searches carried out, IP address | Legitimate interest / Consent (cookies) | Analytics service providers | 13 months max (cookies) |
| Fight against fraud | Identification data, contact details, connection data | Legitimate interest | Internal departments, technical service providers | Period necessary for processing + archiving if required |
For lessors:
| Purpose | Data processed | Legal basis | Recipients | Retention period |
|---|---|---|---|---|
| Creation and management of the lessor account | Identity (surname, first name), email, password, telephone, address, company data (SIRET, company name, legal representative) | Performance of the contract | Internal departments, technical service providers | Duration of the account + 1 year of inactivity |
| Publication and management of listings | Lessor data, contact details, property data (location, description, rent, photos, characteristics of the accommodation) | Performance of the contract | Users (students) | Duration of publication + duration of the account |
| Putting in contact with students | Identity, email, telephone, content of the exchanges | Performance of the contract | Users | Duration of the account |
| Verification and fight against fraud | Identification data, contact details, account information | Legitimate interest | Internal departments, technical service providers | Period necessary for processing |
| Administrative management and legal obligations | Identification data, contractual data, billing data (where applicable) | Legal obligation | Authorities, internal departments | Applicable legal periods (up to 10 years) |
Management of your requests and of being put in contact with lessors (private individual or professional)
The student will contact the lessor directly via their email, their telephone number or via their website.
Publication of your listing and Management of the display of accommodation
When you post a listing to rent out accommodation as a lessor, you publish the property on CASA in order to be contacted by interested students:
- characteristics of the property: location, description, amount of the rent, photos, energy assessment, type of property, typology, housing benefits, application fees, adapted accommodation, mode of occupancy, mode of habitation, length of stay, number of dwellings, possible type of lease, residence amenities, accommodation amenities, possible guarantors, establishment criteria, scholarship criteria, photos, EPC (energy performance certificate).
- telephone number to be contacted
- email address to be contacted
- website to be contacted,
- account creation data (email address and password created).
Private individual lessors must consent to being contacted either by email, or by telephone, or both; as they choose.
Professional lessors must consent to being contacted either by email, or by telephone, or via the link they have mentioned, or all three; as they choose.
Once you have signed the partnership agreement, you can access the publication of offers on CASA.
You will indicate:
- The location of the property, and characteristics of the property (type of property, number of rooms, Carrez law surface area), a full description
- The rent, the fees,
- The desired duration of the lease
- The conditions for renting the accommodation
This information enables us to inform our Users about your offer made available to them.
Fight against fraud
When you provide us with your contact details (email address and/or telephone number) or any other data within the framework of the services listed above, we analyse them in order to detect fraudulent behaviour or the provision of incorrect contact details.
What are your rights?
In accordance with the GDPR and under the conditions provided for by that text, you have the following rights:
- Right of access: you can obtain confirmation that your data is being processed, and if so, access your data and information about the circumstances of the processing.
- Right to rectification: you can obtain the rectification of your data when it is inaccurate or incomplete, as soon as possible.
- Right to erasure: under certain conditions you can obtain the erasure of your data, as soon as possible.
- Right to restriction: you can obtain the restriction of processing when you contest the accuracy of the data, the lawfulness of its processing, or you object to the processing, or you wish it to be retained for evidentiary purposes.
- Right to object: you can object at any time to a processing of your statistical data, unless the University has legitimate and compelling grounds for processing your data.
- Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority, in particular the CNIL.
- Directives in the event of death: you have the right to formulate directives concerning the fate of your data in the event of death.
How to exercise your rights?
Contact the DPO directly, being sure to indicate your contact details as well as your request. Contact address: dpd@université-paris-saclay.fr
Security of your data
CASA Université Paris Saclay collects and processes the Data with the utmost confidentiality and security, and in compliance with the applicable laws.
CASA Université Paris Saclay undertakes to take all reasonable measures necessary to secure and protect Users' Data.
Transfers of data outside the European Union
Personal data is hosted and processed within the European Union.
In the event that transfers were to be carried out outside the European Union, CASA Université Paris-Saclay undertakes to put in place the appropriate safeguards in accordance with the applicable regulations (in particular the standard contractual clauses of the European Commission).
The protection of personal data and the privacy policy are liable to be amended in order to develop the CASA Université Paris-Saclay housing platform.
About cookies
When consulting CASA Université Paris-Saclay, information may be recorded in « cookie » files installed on the User's computer, tablet or mobile phone. This page makes it possible to understand what a cookie is, what it is for and how it can be configured.
What is a cookie?
A cookie is a text file that may be recorded, subject to the User's choice, in a dedicated space on the hard drive of your device, when consulting an online service using the User's browsing software.
A cookie file enables its issuer to identify the device on which it is recorded, for the duration of the cookie's validity.
We use cookies on the site to measure audience and to integrate services that improve the interactivity of the site.
Type of cookie:
We use MATOMO in order to compile anonymous attendance statistics and thus measure the audience of the Site and the Application. The collection of this data and these analyses enable us to carry out studies and thereby improve our housing platform.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _stripe_mid | Font Awesome | Loading of icons, technical optimisation | Strictly necessary | Long (up to ~1 year+) |
| _pk_id.76.6164 | Matomo | Identify a unique visitor | Audience measurement | ~13 months |
| _pk_ref.76.6164 | Matomo | Store the visit source (referrer) | Audience measurement | ~6 months |
| _pk_ses.76.6164 | Matomo | Track the current session | Audience measurement | ~30 min |
| INGRESSCOOKIE | Server (infrastructure) | Load balancing | Strictly necessary | Session |
| ph_phc_..._posthog | PostHog | Tracking of the volume of icon usage | Necessary for the operation of Font Awesome | 12 months |
| PHPSESSID | PHP server | Maintaining the user session | Strictly necessary | Session |
| saclay-tac | Website | Storage of consent choices (cookies/services) | Consent | 6 months (configurable) |
The audience measurement services are necessary for the operation of the site by enabling its proper administration.
You can, however, object to the use of audience measurement cookies by clicking on the « Refuse » button below.
Amendment of the general data protection policies
The publisher reserves the right to amend, at any time and without notice, these general data protection policies in order to adapt them to changes to the site and/or to the regulations. The user is invited to consult them regularly.