Protection of personal data

Each processing operation implemented by the University of Burgundy limits the collection of personal data to what is strictly necessary (data minimization) and is accompanied by an informative notice containing:

• the purposes for which the data are to be processed;
• the legal basis for data processing;
• whether data collection is mandatory or optional, and a reminder of the categories of data processed;
• the source of the data;
• the categories of data subjects;
• data recipients;
• data retention period;
• security measures (general description);
• the possible existence of data transfers outside the European Union;
• automated decision-making, if any;
• your rights with regard to information technology and civil liberties, and how to exercise them within the University of Burgundy.

All personal data collected or held by the University of Burgundy for statistical processing is subject to strict rules and measures guaranteeing its security and confidentiality. All persons with access to the data collected (interviewers, agents, statisticians, researchers) are bound by statistical secrecy. Like all civil servants and government employees, the staff of the University of Burgundy are also subject to the legislative and regulatory rules on professional secrecy and the obligation to maintain confidentiality, which apply to files and information that come to their knowledge in the course of their work.

For information or to exercise your rights concerning the processing of personal data by the Université Bourgogne Europe, you can contact the Data Protection Officer of the University of Burgundy (with a copy of your identity card if you wish to exercise your rights):

• by e-mail at the following address: dpd@u-bourgogne.fr
• by post to the following address
• The Data Protection Officer of the University of Burgundy
• Pôle des affaires juridiques et institutionnelles
• Maison de l’Université – Esplanade ERASME
• 21 078 DIJON CEDEX

Note: the right to erasure does not apply to processing carried out to perform a task of public interest, nor does the right to object to processing carried out for statistical purposes necessary for the performance of a task of public interest (Articles 17 (3) b and 21 (6) of the General Data Protection Regulation).