Privacy Policy

Preamble

The protection of your personal data is a key concern forUniversité Grenoble Alpes, which is committed to constantly improving its compliance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the General Data Protection Regulation or "GDPR," and Law No. 78-18 of January 6, 1978, on information technology, files, and civil liberties, in its consolidated version (hereinafter, the "Information Technology and Civil Liberties Law").

See the cookie policy

This personal data protection policy aims to inform individuals whose data is processed byUniversité Grenoble Alpes a concise, transparent, understandable, and easily accessible manner about the nature of the processing and their rights regarding their data.

Data controllers

Université Grenoble Alpes, represented by its President as data controller, determines the purposes and means of the processing of personal data carried out within it.
Address: Université Grenoble Alpes 621 Avenue Centrale, 38400 Saint-Martin-d’Hères

What data do we process and why?

Université Grenoble Alpes your personal data for the administrative and educational management of visitors to the garden, students, and applicants for our job and internship offers. This processing is mandatory and falls within the scope of the public interest mission of higher education and research, compliance with legal obligations, or the consent of individuals.

The university also carries out optional processing (such as surveys) as well as processing for statistical and management purposes.

Who processes your data? Who has access to your data?

Depending on the purposes pursued, the following persons are authorized to process data concerning you: HR Department staff, local HR managers (in departments, laboratories, central services, etc.); members of the management team at jardin du Lautaret staff with functional or operational authorization.

Université Grenoble Alpes transfer data concerning you to third parties, in particular to its institutional partners such as the Regional Center for University Works (CROUS), the relevant ministries, the DGFIP, the rectorate, and other contractual partners or subcontractors.

How long are your data kept?

Personal data is retained for the period necessary to fulfill the purposes for which it was collected and/or for the period specified by law or regulations. In this regard, the university complies in particular with the provisions of instruction "DAF DPACI/RES/2005/003 of February 22, 2005 on the sorting and storage of archives received and produced by departments and institutions involved in national education."

How is your data secured?

The university has defined technical, legal, and organizational measures to protect your data appropriately according to its nature and the extent of its processing.

These measures comply with the Information System Security Policy (PSSI) ofUniversité Grenoble Alpes is in line with that of the State.

Transfers of your personal data outside the European Union

In the context of student mobility, your personal data may be transferred outside the European Union. The university will ensure that the processing is carried out in accordance with the applicable laws on the protection of personal data, in particular by signing standard contractual clauses and implementing additional measures. If these conditions are not met, your consent will be requested.

What are your rights and how can you exercise them?

The university processes your personal data in the context of its missions and, in accordance with the GDPR, you have the following rights:
  • right to be informed,
  • right of access,
  • right of rectification.
And, depending on the processing and its legal basis:  
  • right to restriction of processing,
  • right to data portability,
  • right to object or delete if your data is used for other purposes not covered by a legal obligation, or if it is not subject to a legal retention period,
  • right to withdraw your consent,
  • and you can set post-mortem guidelines for your data.
You can exercise your rights by contacting the shared Data Protection Officer:
Email address: dpo@grenet.fr
Mailing address: Data Protection – DPO – Shared Information Systems Department, University Domain, 31, rue des mathématiques, 38400 Saint-Martin-d'Hères.

You also have the right to lodge a complaint with the CNIL:
https://www.cnil.fr/fr/plaintes

Changes in personal data protection policy

This privacy policy is subject to change in light of legislative and regulatory developments.
Published on May 16, 2022
Updated on October 6, 2025