Privacy
Policy

The data controller is the GIE Forum CentraleSupélec.

Name: GIE Forum CentraleSupélec
SIRET: 524 920 220 00026
Registered office: 3 rue Joliot-Curie, 91190 Gif-sur-Yvette, France
Contact: contact@forum-cs.fr

• Account: your e-mail address. Sign-in uses a one-time code sent by e-mail, with no password.
• Profile: your display name and, for students, your programme and year of study (optional, editable at any time).
• CVs: the CVs (PDF files) you upload in the app.
• Satisfaction survey: your answers, linked to your account (they are not anonymous).
• Notifications: if you enable them, a technical notification identifier specific to your device.
• Location (Forum staff only): if you enable it, your one-off location, for event-day logistics.

We do not collect phone numbers, dates of birth or postal addresses.

We use your data solely to run the Forum: connecting students and companies, uploading and sharing CVs, event-day logistics, and improving the event through the satisfaction survey.

Recipients: participating companies receive the CVs and information you choose to share with them. This is the very purpose of the Forum (connecting people), not a sale of data.

No resale, no advertising, no profiling.

A CV you upload is only visible to a company when you choose to share it: sharing is explicit and revocable at any time from the CV tab. A company never sees a CV you have not shared with it.

When you share a CV, the company receives that CV along with your name and e-mail address. A company may add annotations to your CV and may choose to make one visible to you.

Location sharing only concerns staff members and is never enabled by default. It relies on your explicit consent, only reads your location on a one-off basis (never in the background), and can be disabled at any time.

The camera is used only to scan QR codes; the app takes no photos and records no sound.

The app's data is hosted in France (Scaleway, Paris region) and does not leave the European Union. It is encrypted in transit (HTTPS/TLS) and at rest. On your device, your session credentials are stored in the system's secure vault (iOS Keychain / Android Keystore).

To function, the app relies on a few technical service providers, without passing them the content of your personal data:

• Expo (EAS) — delivery of app updates (technical metadata: version, platform, installation identifier, IP address).
• Apple (APNs) and Google (FCM), via Expo — solely to deliver notifications, if you enable them.

Your data is kept for as long as necessary for the purposes described, for a maximum of 2 years, then deleted or anonymised. You can delete your CVs directly in the app, and request deletion of your account at any time by writing to contact@forum-cs.fr.

Under the GDPR, you have the right to access, rectify, erase, object to and port your data. To exercise these rights, write to contact@forum-cs.fr.

You may also lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.