Privacy policy
1. Who we are
This website is published by the ESSEC Club of Economics (“ECE”, “we”), a student association of ESSEC Business School. ECE is the data controller for the personal data described in this policy.
You can reach us about your data at [contact email], or by post at [registered office address].
2. What we collect and why
You can browse this site without telling us who you are. We collect personal data only when you choose to contact us or use Ask ECE.
Messages you send us
When you use “Get in touch”, we receive your email address, the topic you chose, and your message. We use them only to reply to you and to follow up on what you asked about, which is our legitimate interest in answering the messages we receive (Article 6(1)(f) GDPR).
Messages are delivered to [where messages go, e.g. the club’s shared inbox] and kept for [12 months] after our last exchange, then deleted.
Ask ECE
When you ask Ask ECE a question, it’s sent to our server, along with the visible text of the page you asked from, if any. Our server keeps the conversation in its memory so it can answer your follow-up questions. It deletes it when you leave the conversation or close the page, and otherwise after 30 minutes without a new message, or 4 hours after it began. The conversation is never written to a database or to our logs, and we don’t attach your name or email.
Answers are generated by AI models that we access through outside AI providers, some of them in the United States, which process your conversation as our service providers to generate the answer. The provider we contract with keeps the content of requests for up to 30 days and doesn’t use it to train its own models; [how long the model’s own provider keeps it, and whether it trains on it]. [Describe the safeguard for this transfer outside the EU, e.g. a Data Processing Addendum with standard contractual clauses.]
Please don’t include sensitive personal information in your questions. Nothing is saved in your browser: the conversation disappears from your screen when you leave or reload the page.
PDF attachments
If you attach a PDF to a question, your browser reads it to count its pages. Only the file name and page count are sent with your question. The file’s contents stay on your device.
Voice input
The microphone button uses your browser’s built-in speech recognition. Depending on your browser, your voice may be sent to its provider to be transcribed, under that provider’s privacy policy. We only receive the resulting text, and only if you send it.
3. Technical data
Like any website, ours is served by a hosting provider, [hosting provider], which processes technical data such as your IP address, browser type, and the pages you request. This is needed to deliver the site and keep it secure. These server logs are kept for [retention period].
4. Cookies and analytics
We don’t use cookies, analytics, or advertising trackers, and we don’t store anything in your browser. Your language choice is kept in the page address (for example, ?lang=fr).
5. Who sees your data
Only the ECE members who handle our messages ([e.g. the executive board]) can read what you send us. We never sell your data or share it for advertising.
We use these service providers to run the site: [hosting provider] (hosting), AI providers (Ask ECE answers), and [the tool that receives contact messages]. They process data only on our instructions.
6. Your rights
Under the GDPR and the French Data Protection Act, you can ask to access, correct, or delete your data, to restrict or object to its processing, and to receive it in a portable format. Email us at [contact email] and we’ll reply within one month.
If you think we haven’t respected your rights, you can complain to the French data protection authority, the CNIL.
7. Changes to this policy
We’ll post any change on this page and update the date at the top.