Legal information

Privacy policy

Privacy policy: data collected, purposes, retention periods, cookies and your rights.

Last updated: 12 October 2026. This English version is provided for convenience; the French version prevails.

This policy explains which personal data MYPASCHOOL collects on https://mypaschool.fr, and why. It also says how long we keep it and how you can exercise your rights. It follows the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The data controller is MYPASCHOOL, SASU with a share capital of €500. Its address is 5 rue du Clos des Peupliers, 58240 Langeron, France. It is listed in the Nevers Trade and Companies Register under 909 137 044. It is represented by Yvon-Patrick Mamia, President.

For any question about your data, write to contact@mypaschool.fr.

2. Data collected and purposes

For each use, here is what we collect, why, and on what legal basis.

Account

  • What we collect: your name, email address, encrypted password and language.
  • Why: to create and secure your account.
  • Legal basis: performance of the contract.

Orders

  • What we collect: your name and email, the order details and amount, and the promo code. For print books, we also need the delivery address and phone. If a partner recommended the course to you, we also note who it was.
  • Why: to sell and deliver courses and books, invoice and handle refunds.
  • Legal basis: performance of the contract and accounting obligations.

We never receive or store your bank details. Indeed, you enter them with the payment provider.

Training records

  • What we collect: enrolments, positioning questionnaire and progress. We also record the learning time on lesson pages. Then come quizzes, personal notes and the login log. In this log, the IP address is encrypted one way, so it cannot be reversed. Next, we keep your questions to the trainer, certificates and the certificate of achievement. Finally, this includes satisfaction and drop-out surveys.
  • Why: to deliver the training and issue the certificate of completion (article L.6353-1 of the French Labour Code). We also use this data to improve our courses.
  • Legal basis: performance of the contract and legal obligations of a training organisation.

Adjustment needs

  • What we collect: your optional answer in the positioning questionnaire. It may reveal a disability.
  • Why: to work out adjustments to the course with you.
  • Legal basis: your explicit consent, by giving it.

This answer is read only by the trainer and the disability officer. You can ask for it to be deleted at any time.

Partner programme

  • What we collect: first name, last name, email address and phone. You may also give your company and SIRET number (optional). Then come a description of your activity and your assigned promo code. We also handle the sales made with that code and the commissions. Finally, you enter your bank details yourself (account holder and IBAN) in your partner area.
  • Why: to review your application and manage your code. Then, we work out and pay your commissions. It is also how we meet our accounting and tax duties. For example, we report commissions to the tax office when the law requires it.
  • Legal basis: performance of the partnership contract and legal obligations.

When you buy with a partner's code, the partner only sees the course, the date and the sale amount. They never see your identity.

Live sessions

  • What we collect: registration, reminder, attendance in the room.
  • Why: to send you the joining link and a reminder. It also lets you follow the session in the page.
  • Legal basis: performance of your request.

Mentoring

  • What we collect: your name and email, the session topic, the time slot, your time zone and the payment.
  • Why: to organise, schedule and invoice the session.
  • Legal basis: performance of the contract.

Messages

  • What we collect: contact form, appointment request, complaint, blog comment.
  • Why: to reply and handle your request.
  • Legal basis: legitimate interest and obligations of a training organisation (complaint handling).

Newsletter

  • What we collect: email address, double opt-in.
  • Why: to keep you informed of our news.
  • Legal basis: your consent. You can withdraw it at any time using the link in every email.

Security

  • What we collect: technical logs and, for forms, an IP address hashed one way, so it cannot be reversed.
  • Why: to prevent abuse and fraud.
  • Legal basis: legitimate interest.

3. Recipients and processors

Your data is meant for MYPASCHOOL. We never sell it. However, we share it with the following providers, but only as far as strictly needed:

  • OVH (France): hosting of the website, database and emails;
  • Stripe, SumUp and PayPal: online payment, depending on the method chosen;
  • Vimeo: course video streaming;
  • Google (YouTube, Google Meet, Google Calendar): video replays and live session rooms. Google also helps us schedule live and mentoring sessions. They go in the trainer's calendar (name, email and session topic);
  • Zoom (Zoom Communications, United States): video calls for live and mentoring sessions. This also applies when the meeting is shown in the live session room on the site. Zoom then gets the participant's name and email;
  • La Poste: delivery of print books;
  • Amazon: only if you choose to buy a book there. You then leave the website;
  • Our bank: transfer of commissions to partners;
  • The French tax authorities: reporting of commissions paid to partners, where required by law.

Transfers outside the European Union

Some of these providers may process data outside the European Union. This is the case, in particular, in the United States. These transfers are covered by the safeguards provided for by the GDPR:

  • first, the European Commission adequacy decision. It covers companies certified under the EU–US Data Privacy Framework (in particular Google, Zoom, Stripe and PayPal);
  • failing that, European Commission standard contractual clauses.

4. Retention periods

  • Account: while active, then 3 years after the last activity;
  • Orders and accounting records: 10 years (article L.123-22 of the French Commercial Code);
  • Training records: 6 years after the end of the course. That way, we can answer audits and funding bodies. They include enrolment, positioning, progress, learning time, logins, certificate and assessments;
  • Messages, appointment requests and complaints: 3 years after the last exchange;
  • Mentoring sessions: 3 years after the session (accounting records: 10 years);
  • Newsletter: until you unsubscribe;
  • Partner programme:
    • unsuccessful application: 1 year (deleted automatically);
    • partner: for the whole partnership, then 3 years;
    • bank details: until the end of the partnership;
    • commissions and transfers: 10 years as accounting records;
  • Technical logs and security data: 12 months at most.

5. Cookies

The website uses no advertising or audience measurement cookies. It only sets technical cookies that it needs to work. For example: the session, form security, and staying signed in if you ask for it. These cookies do not require your consent.

If you arrive through a partner's link, we keep their promo code only during your visit. That way, it can be pre-filled at checkout. No tracking cookie is set.

Embedded videos load in a privacy-friendly mode. Vimeo runs without tracking, and YouTube in “privacy-enhanced” mode. Still, the video service may record technical data when you start playback.

6. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can also set instructions about your data after your death.

To update your details, go to “My profile” in your account. To exercise your rights, write to contact@mypaschool.fr or to the registered office. We will reply within one month.

If you feel your rights have not been respected, you can lodge a complaint with the CNIL. Its address: 3 place de Fontenoy, 75007 Paris, France (www.cnil.fr).

7. Security

We protect your data in several ways:

  • traffic with the website is encrypted (HTTPS);
  • passwords are stored with one-way encryption, which cannot be reversed;
  • partners' bank details are encrypted in the database;
  • only the team can access the admin area, and two-factor authentication is available for every account;
  • finally, only authorised people can open private files (ebooks, course resources).

8. Changes to this policy

This policy may be updated. The date of the last update appears at the top of the page.

A question about our privacy policy?

To exercise your rights or ask a question about this privacy policy, contact us. You can also read our legal notice and our terms of sale. Finally, if you believe your rights are not respected, you can contact the French data protection authority (CNIL).