This is an English translation provided for convenience. The French version is the legally binding text.
Data controller
The controller of the personal data collected through centrezenith.com is:
Centre Zenith (SASU) — SIRET 832 566 038 00036
50, rue de Pontoise — 95870 Bezons — France
Represented by Sourav Choudhury, editorial director.
Contact: formation@centrezenith.com
Data we collect
Enrolling on a French course
- Title, surname, first name
- Email address, phone number, WhatsApp number
- Nationality, mother tongue
- Postal address (to issue certificates and invoices)
- Occupation and employer (where relevant, for OPCO funding)
- Current French level and target level
- Passport-style photo (where relevant, for the school-attendance certificate)
Quote requests
- Number of hours wanted, funding method (self-funded, CPF, employer/OPCO)
- Chosen exam, if any (DCL, DELF, DALF, or none)
- For CPF requests: the status of your Identité Numérique La Poste and the validity period of your residence permit (where relevant)
- Details of the entity the quote is addressed to (name, address) if different from the requester
Level test
- Contact details (name, phone, WhatsApp)
- Target level, written answer to the prompt given
- Any free-text comments
DELF/DALF exam preparation (where relevant)
- Identity document (both sides, or passport) — to verify identity on the exam day
- Passport-style photo
- Chosen exam level, session, centre
Payment
- Amount, date, method (CPF, bank transfer, OPCO funding, employer)
- No bank details are stored on our servers.
Contact and problem-report forms
- Name (optional for a report), email, phone, message
Purposes and legal bases
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Course enrolment, teaching and administrative management, issuing training certificates and attestations. | Performance of the contract (art. 6.1.b) |
| DELF/DALF/DCL exam registration, identity verification, transmission of results. | Legal obligation of the accredited exam centre (art. 6.1.c) |
| Invoicing, accounting, Qualiopi obligations. | Legal obligation (art. 6.1.c) |
| Quote requests and sales follow-up. | Pre-contractual steps (art. 6.1.b) |
| Sending information about upcoming sessions to already-enrolled students. | Legitimate interest (art. 6.1.f) |
| Responding to contact requests and reports. | Legitimate interest (art. 6.1.f) |
| Anonymised site traffic measurement (Google Analytics with truncated IP). | Legitimate interest (art. 6.1.f) |
Retention periods
- Training records (enrolment, certificates, results): 10 years (Qualiopi and tax obligation).
- DELF/DALF exam registration data: 10 years (obligation on centres accredited by France Éducation International).
- Identity documents collected for an exam: destroyed within 180 days of the end of the session.
- Invoicing data: 10 years (art. L.123-22 of the French Commercial Code).
- Quote requests that did not convert: 3 years from the last exchange.
- Contact requests and reports: 3 years from the last exchange.
- Inactive student account: anonymised after 3 years without activity, following a warning email 30 days beforehand.
Who receives your data
Your data is accessible to:
- Authorised Centre Zenith staff (coordination, teachers, administration).
- France Éducation International and its GAEL system, to issue DELF/DALF diplomas and manage the session — only for candidates registered for an exam.
- The French Ministry of Education, to track DCL candidates.
- Our public funding bodies (France Travail, OPCO, CPF administrators) when you apply for funding — only the data strictly necessary to process the application.
- Our technical providers (host A2 Hosting, transactional email service) under a processing agreement compliant with article 28 of the GDPR.
No data is sold or transferred to third parties for commercial purposes.
Transfers outside the European Union
Our host A2 Hosting is based in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by the Data Privacy Framework.
Security
Data is hosted on secure servers: end-to-end HTTPS/TLS encryption, hashed passwords (bcrypt), a database not exposed to the internet, and administrator access protected by strong passwords. Backups are encrypted.
Your rights
Under articles 15 to 22 of the GDPR, you have the right:
- to access your data
- to rectify inaccurate data
- to erasure (the "right to be forgotten"), subject to statutory retention periods
- to restrict processing
- to object on legitimate grounds
- to data portability
To exercise these rights, write to formation@centrezenith.com from the email address linked to your file, or by post to the registered office. You will receive a reply within one month at most.
If you disagree with our reply, you may lodge a complaint with the CNIL — 3 Place de Fontenoy, 75007 Paris — www.cnil.fr.
Cookies
See the cookie policy.