Privacy policy

Privacy policy

Privacy Policy

This Privacy Policy is intended to inform you about how your personal data is processed via the website 42.fr. At the end of this document, you will also find information on how to exercise your rights regarding your personal data.

To have a clear overview of all the processing of your personal data, we invite you to take a few minutes to read this entire document.

If you only wish to access the key points of this Privacy Policy, you will find a summary below.

For any question or comment regarding our Privacy Policy, you can send an email to: [email protected]

IN SHORT

When you visit our website 42.fr, we collect and process certain personal data about you. The data collected depends on the purpose of the processing.

In these cases, the controller of your personal data is Association 42: it determines how and for what reasons your data is processed.

Your personal data is processed for strictly limited purposes, namely:

  • responding to requests for information, in particular the follow-up of applications,
  • managing and monitoring relationships with our partners,
  • handling complaints,
  • managing visits to the 42 Paris Campus,
  • managing applications for job offers available via the Welcome To The Jungle platform and accessible from our website 42.fr,
  • managing donations made to Association 42 via the HelloAsso website and accessible from our website 42.fr,
  • managing space rental for the privatization of our premises,
  • managing VAE (Validation of Acquired Experience) requests and managing the jury,
  • sending email communications about our events, competitions, or 42 news,
  • managing our social networks,
  • measuring the audience on our website (producing statistics, monitoring activity, analyzing traffic and pages viewed),
  • conducting targeted advertising on Facebook and Instagram.

The processing of your personal data is always carried out within a legal framework that varies depending on the type of processing. The processing of your personal data may be based on our legitimate interest in collecting your data, for example when you submit a request for information so that we can respond to it.

We use cookies on our website. For more information on this subject, we invite you to consult our Politique Cookies.

We retain your personal data only for the duration necessary to achieve the purposes for which it was collected, after which we delete your data. These durations therefore vary depending on the purpose pursued.

We implement appropriate physical and logical security measures to protect the integrity and confidentiality of your personal data.

To provide you with tailored services, we use various trusted service providers who need access to some of your personal data. We only choose providers with data protection policies that comply with legal requirements and with whom we strictly regulate the use of processed data through appropriate contractual documentation.

You have various rights over your personal data (right of access, rectification, objection, erasure, portability, and the right to withdraw your consent). To exercise these rights, you simply need to send your request to: [email protected] or by post to:

Data Protection Officer
Association 42
96 boulevard Bessières
75017 Paris
FRANCE

To learn more about how 42 processes the personal data of applicants and students, we invite you to consult the dedicated pages:

  • For the Admission platform, click on the relevant link and then access the “Politique de confidentialité” page.
  • For the Intranet platform, click directly on the “Politique de confidentialité”.

Definitions

Personal data: any data that directly or indirectly identifies a natural person (name, first name, telephone number, IP address, etc.), sometimes simply referred to as “Data” in this document;

Processing of personal data: any operation performed on personal data (collection, storage, extraction, etc.);

Controller: the entity that determines the purposes and means (the “why” and “how”) of processing your personal data;

Recipients: entities and persons with whom data is shared by the controller;

Purposes: the objectives for processing personal data (the “why” of the processing);

Legal basis: the justification or context that allows us to process your personal data.

Contents

The controller of your personal data

Association 42 is the controller of your personal data insofar as it determines the reasons for which your data is processed (the “purposes”) and how it is processed (the “means”).

You can contact our teams:

Data Protection Officer
Association 42
96 boulevard Bessières
75017 Paris
FRANCE

The personal data processed by Association 42

We collect and process only the data that is adequate, relevant, and limited to what is necessary to achieve our objectives. The nature of the personal data processed varies depending on the context that justifies the collection.

We make every effort to inform you as precisely as possible whenever we use personal data, in particular by indicating the purposes for which we process such data.

As controller, we collect and process different categories of personal data, including:

  • Identity and professional contact details: surname, first name, position, company, email address, phone number, subject of the request
  • Information relating to donors and donations: surname, first name, address, form of the donation, amount and date of the donation
  • Applications and recruitment: surname, first name, CV, cover letter, professional information provided during a recruitment process
  • Technical and browsing data: IP address, cookies and other trackers (statistics, marketing, social networks)

The reasons why your personal data is processed

In general, we may collect data about you for the following purposes:

  • responding to requests for information, in particular the follow-up of applications,
  • managing and monitoring relationships with our partners,
  • handling complaints,
  • managing visits to the 42 Paris Campus,
  • managing applications for job offers available via the Welcome To The Jungle platform and accessible from our website 42.fr,
  • managing donations made to Association 42 via the HelloAsso website and accessible from our website 42.fr,
  • managing space rental for the privatization of our premises,
  • managing VAE requests and managing the jury,
  • sending email communications about our events, competitions, or 42 news,
  • managing our social networks,
  • measuring the audience on our website (producing statistics, monitoring activity, analyzing traffic and pages viewed),
  • conducting targeted advertising on Facebook and Instagram.

We do not process your data for purposes other than those listed above where such further purposes would be incompatible with the purposes initially pursued.

If we wished to use your data for other purposes that are incompatible with the initial collection, we would seek your consent for this new use.

The legal bases on which this processing is carried out

We carry out our processing of personal data on the basis of one of the legal grounds provided for by the applicable regulations. More specifically, the processing we implement is based on the following legal bases:

Purpose Legal basis
responding to requests for information Legitimate interests of 42
managing and monitoring relationships with our partners Pre-contractual measures or contract
handling complaints Legitimate interests of 42
managing visits to the 42 Paris Campus Consent
managing applications for job offers available via the Welcome To The Jungle platform and accessible from our website 42.fr Pre-contractual measures or contract
managing donations made to Association 42 via the HelloAsso website and accessible from our website 42.fr Legal obligation
managing space rental for the privatization of our premises Legitimate interests of 42 in offering space privatization / Pre-contractual measures or contract
managing VAE requests and managing the jury Pre-contractual measures or contract
sending communications about our events, competitions, or 42 news Legitimate interests of 42 or consent
managing our social networks Legitimate interests of 42
measuring the audience on our website (producing statistics, monitoring activity, analyzing traffic and pages viewed) Consent
conducting targeted advertising on Facebook and Instagram Consent

The obligation to provide us with personal data

Certain processing operations that we carry out require that you provide us with specific information, which may be personal data.

Where information is essential, we generally indicate it with an asterisk (*).

If you refuse to provide such information and where it is operationally, contractually, or legally mandatory, we may not be able to provide you with the related products or services.

Retention of your personal data

We retain your personal data only for specific and proportionate periods. At the end of these periods, we delete your data.

More specifically, the retention periods applied to your data are as follows:

Purpose Retention period
responding to requests for information for the duration of the contact
managing and monitoring relationships with our partners 3 years from the last contact
handling complaints for the duration of handling the complaint file plus the duration of proceedings in case of litigation
managing visits to the 42 Paris Campus 1 month from the visit
managing applications for job offers available via the Welcome To The Jungle platform and accessible from our website 42.fr 2 years from the last contact with the candidate unless the right to object is exercised
managing donations made to Association 42 via the HelloAsso website and accessible from our website 42.fr 10 years for accounting purposes
managing prospects for the opening of new campuses 3 years from the last contact in the active database, then 2 years in the archive database unless the right to object is exercised
managing space rental for the privatization of our premises for the duration of the privatization plus 1 year in intermediate archives
managing VAE requests and managing the jury Jury minutes: 3 years from the issuance of the minutes
VAE refusal: 3 years from the refusal
VAE acceptance: 50 years
sending email communications about our events, competitions, or 42 news 3 years from the last contact unless the right to object is exercised
for events, data is kept for 2 months after the event
managing our social networks for as long as the social network account exists, unless a deletion request is made
measuring the audience on our website (producing statistics, monitoring activity, analyzing traffic and pages viewed) 13 months from the time the tracker is stored
conducting targeted advertising on Facebook and Instagram 13 months from the time the tracker is stored

You may also request earlier deletion of your data by exercising your rights (described below).

Regarding data processed via cookies, specific retention periods are set out in our Politique Cookies.

Storage of your personal data and recipients having access to it

Personal data collected on our website may be shared with third-party companies in the following cases:

  • when we use the services of a provider or partner to achieve the purposes of a processing operation;
  • when we use hosting providers for our databases;
  • where required by law, we may transfer data to respond to claims made against us and to comply with legal or administrative procedures.

In all cases, we undertake to:

  • transfer your personal data only when necessary to achieve the purpose of the processing;
  • transfer your personal data only to providers offering sufficient guarantees in terms of personal data protection;
  • strictly regulate the processing of personal data carried out on our behalf by our processors.

To protect your personal data, we have also adopted physical and logical security measures to ensure, as far as possible, the integrity and confidentiality of your data.

Your rights

You have the right to access, rectify, and erase your data.

You also have the right to restrict and object to the processing carried out. You have the right to portability of your personal data. In addition, you have the right to define general or specific instructions relating to the use of your data after your death.

You always have the right to withdraw your consent where you have previously given it.

You can exercise all of these rights, within the limits provided for by law, by providing proof of your identity by any appropriate means and using the following contact details:

Data Protection Officer
Association 42
96 boulevard Bessières
75017 Paris
FRANCE

You also have the right to lodge a complaint directly with the CNIL (French Data Protection Authority).

Regarding cookies

We provide a specific information notice on cookies on the Politique Cookies page of our website.

Changes to this policy

We may amend this Privacy Policy based on the evolution of our activities and the legal requirements applicable to us.

We will make reasonable efforts to inform you in the event of any changes to this document.

You are encouraged to consult it regularly; we always indicate the date of the last update.

DOCUMENT LAST UPDATED ON: DECEMBER 15TH, 2025