PrivacyPrivacy

Who this site is for

This site is for the 14-to-19-year-old students of the partner schools, their teachers, their families and the older people taking part in the project. Anyone can browse it without creating an account or saying who they are. Like any website, it receives your connection address (IP address) in order to show you the pages; what it does with it is explained below, under “Technical data”.

An account is only needed to register for an event or to propose a contribution to the guide. Under 15? Ask a parent (or the adult responsible for you) for permission before creating an account: that is what the French “Informatique et Libertés” data protection law requires for under-15s. That adult can also ask us, on your behalf, to see, correct or delete your data (see “Your rights” below).

What we collect

To create an account: your first name, your e-mail address and a password. The password is irreversibly transformed before being stored: nobody, not even the association, can read it. Nothing else — no surname, no date of birth, no phone number, no photo.

After that, only what you do on the site: your event registrations and the text of the contributions you propose for the guide.

What it is used for

Your first name identifies you on the site; your e-mail lets you sign in and recover your account. It will also be used to receive a reset link if you forget your password, once the association's sending service is in place; during the beta, that link cannot be sent yet: write to info@wifii.eu from your account's address and the association will help you regain access. We send no other messages.

This data is used only to make the site work: that is the service you ask for when you create an account. It is never sold, shared with third parties or used for advertising.

What others can see

If one of your guide contributions is published after review by an administrator, your first name appears next to it. That is the only data visible to all visitors.

The first names of people registered for an event are visible only to the site's administrators, so that they can prepare for the event.

Photos, videos and voices: the site shows students, teachers and participants in the mobilities (photo album, short film, pronunciation of the glossary words). These images and recordings are provided by the partner schools, whose responsibility it is to obtain the person's agreement and, for minors, their parents' agreement. They stay online for the duration of the project. You can withdraw your agreement at any time by writing to info@wifii.eu: the content is then removed as soon as possible.

Technical data

When you sign in, the site opens a “session”: this is what keeps you signed in from one page to the next without retyping your password. It records the IP address (the number your Internet connection uses) and the type of browser. These two pieces of information are not looked at day to day; they would only be used, in the event of a security problem, to check where a sign-in came from. A session ends after seven days without activity; ended sessions are removed from the database during regular automatic clean-up.

To stop a robot from trying thousands of passwords, the site counts the sign-in or sign-up attempts made from the same IP address during one minute. After that minute the counter is no longer used; it is erased at the next automatic clean-up, which removes any counter left for more than an hour without a new attempt.

For the counters of public pages (film views, quiz games, visits), the site does not keep the IP address: it turns it into a code that changes every day and cannot be turned back into an address. This code is erased after two minutes without a new request.

The site's statistics (visits per section, quiz games per theme, film views per language) are plain daily totals: no figure can be linked to a person.

When a server error occurs, the technical log records the page and the type of error, never who you are. The hosting provider keeps its own access logs (IP address, requested page) for a short time, at most seven days, for the security and operation of its services.

For how long

Your account and everything attached to it are kept as long as the account exists. It is not deleted automatically: you can ask for its deletion at any time (see “Your rights”).

Sign-in sessions: seven days without activity, then removal at the next automatic clean-up. Password reset link: one hour. Sign-in attempt counter: removed at the automatic clean-up once it has been left for more than an hour without a new attempt. Public counter code: two minutes without a new request.

Published guide contributions stay online for the duration of the project; if you delete your account they become anonymous (“a former member”). Anonymous statistics are kept for the project's final report.

Where the data is

The site, its database, and the photos and videos are hosted in Paris by Scaleway SAS, a French company, under an account held in the association's name. Pages are generated, data stored and media delivered from its data centres in the Paris area.

No data leaves the European Union: the hosting provider is subject to French and European law and is bound by contract to protect the data in accordance with the GDPR. It keeps a daily backup of the database for seven days, in the same place, and then deletes it.

During the beta, the site sends no e-mail. Once the sending of the reset link is in service, it will go through an e-mail service that this page will name; the e-mail will contain only your first name and the link.

Cookies

At most two cookies, both strictly necessary: one keeps your sign-in session alive (seven days), the other remembers the language you chose if it differs from your browser's (until you close the browser). No advertising cookies, no trackers, no third-party analytics — which is why the site shows no cookie banner.

The events page briefly keeps, in your browser only, a note that a registration has just been made, in order to show the confirmation; nothing of it is sent to the server.

Your rights

You can ask to access your data, correct it, delete it, restrict its processing, or object to a use, by writing to info@wifii.eu from your account's e-mail address. The association replies within one month.

When an account is deleted, everything is erased: account, sessions, registrations, unpublished contributions. Contributions already published stay online but become anonymous (“a former member”).

If you believe your rights are not respected, you can lodge a complaint with the CNIL (the French data protection authority), www.cnil.fr.

Data controller

The data controller is the Association Tourquenoise de Gestion (Lycée EIC, 27 rue du Dragon, 59200 Tourcoing, France), coordinator of the Erasmus+ WIFII partnership. Contact for any question about your data: info@wifii.eu.

On the site, the administrators appointed by the association have access to registrations and contributions. The technical provider who built the site and maintains it for the association also accesses the database (accounts, registrations, sessions), only on its instructions, for maintenance and to carry out your requests, such as deleting an account: it acts as a processor within the meaning of the GDPR. The partner schools provide content (texts, photos, videos), not account data.