Draft, to be validated by the school.
Working version of 29 September 2026
Privacy policy
This page explains how École Internationale Eridan handles personal data: the data you share through the website's forms (visits, pre-registration, open days, activities), and the data in Constellation, the online space for families and staff (class life, messages, canteen, absences, forms, invoices).
Data controller
The association ECOLE INTERNATIONALE ERIDAN (SIREN 419 741 772), 2429 avenue de Maurin, 34070 Montpellier, France.
[To be completed: name and contact of the school's data protection lead.]
Family enquiries (website and fair stand)
The parent's name, email, phone number if given, the child's first name and level, your message, and depending on the form the start year, activity or time slot chosen, and how you heard about the school (including the campaign of a link, kept for the duration of your visit).
Purpose: answering and following up your enquiry (call back, visit, confirmation, reminders). Legal basis: your consent, given with the form's tick box; its version and date are recorded.
Questionnaires about the school's tools
Short questionnaires ask parents, teachers and the school office what they think of the school's current tools. Answers are anonymous: no account or IP address is linked to them. Only the contact details you choose to leave, to be contacted again, identify you.
Purpose: choosing and improving the school's tools based on everyone's experience. Legal basis: the school's legitimate interest in improving how it works; answering is optional. Read only by the head of school and ExoGroupe.
Schooling and school life (Constellation)
For enrolled families: parents' identity and contact details, children's first name, surname, date of birth and class, emergency contacts, absences and late arrivals, homework, assessments, canteen and after-school care, dietary requirements, messages with the school, signed forms, re-enrolment, invoices.
Purpose: providing schooling, keeping children safe and communicating between school and families. Legal basis: the schooling contract and the school's duties towards the children in its care. Invoices are also subject to accounting obligations.
Health
Allergies, an individual care plan (PAI) or a support plan (PAP) are health data. They are provided by the family for the child's safety (canteen, outings, care), based on its explicit consent.
They are only visible to the head of school, the school office and the child's class teachers. Every change is logged.
Photos and image rights
In the class journal, faces are blurred on the teacher's device before sending, and photos are only visible to the families of the class.
A child's portrait (staff-only photo board), and photos on the school's website or social media, are only used with a parent's consent, given use by use. It can be given or withdrawn at any time in "My account".
Artificial intelligence assistance
If the school turns these features on, an artificial intelligence service may translate messages, announcements and articles between French, English and Spanish, and help teachers write the class journal note from their dictation. Pupils' first names are removed before the note is sent, and the dictation is not kept.
[To be completed before activation: providers (for example Anthropic, OpenRouter), country of processing, safeguards for transfers outside the European Union (standard contractual clauses), no-retention and no-training commitments.]
Accounts and security
Everyone has their own account. Passwords are never stored in clear text; the head of school and the school office also use a one-time code (two-factor authentication). Sign-ins and sensitive actions (exports, health changes, consents) are recorded in an audit log.
Traffic is encrypted (HTTPS), and backups are encrypted and kept in the European Union.
Who has access
Each person according to their role: teachers for their class, the school office and the head of school for the school, each parent for their family. And, for technical needs:
- ExoGroupe, which builds and maintains the website and Constellation (processor)
- OVHcloud, hosting provider, in France
- [To be completed: the email sending service (for example Brevo, in France, or the school's mail server)]
- [To be completed if AI is turned on: its providers]
Retention periods
Proposed to the school, applied automatically every night:
- family enquiries: 3 years after the enquiry
- a family leaving the school: its data is anonymised one year after leaving
- class journal (notes and blurred photos): 18 months
- messages: 3 years after the last message of a conversation
- sent emails and audit log: 1 year
- answers to the questionnaires about the school's tools: 2 years
- invoices: 10 years (accounting obligation), without the family name once its data is anonymised
Your rights
You can access your data, have it corrected or erased, ask for its processing to be restricted, object to it, ask for its portability, and withdraw your consent at any time.
A signed-in parent can download all of their family's data from "My account". For anything else, write to the school (below). If you feel your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Cookies
No advertising cookies and no audience measurement. Only essential technical cookies: the chosen language, a signed-in user's session, the account remembered on this device for the next sign-in ("Not you?" clears it), the child a parent is viewing, the sign-in step. No consent is therefore requested.
Contact us
By post to École Internationale Eridan, 2429 avenue de Maurin, 34070 Montpellier, France, or by phone on +33 4 67 17 09 47. A signed-in parent can also write to the school office through Constellation's messages.
[To be completed: email address dedicated to personal data.]