Legal information
Privacy Policy
Last updated: 21 September 2026
This policy explains how Da Vinci Private School processes the personal data you entrust to us on this site: when you download a resource, submit an application, book a visit or get in touch with us.
The data of families whose child is enrolled is covered by a separate document, the Personal Data Protection Charter, handed over and signed at enrolment.
1. Who is responsible for your data
Association École Internationale de Castelnau-le-Lez (EIC34), which runs Da Vinci Private
School
Non-profit association under the French law of 1901 — SIREN 991 185 224
Registered office: 2 rue des Avelaniers, 34170 Castelnau-le-Lez, France
Email: contact@davinciprivateschool.com
Telephone: +33 4 34 81 09 85
We have not appointed a data protection officer. For any question, please write to the address above.
2. What we collect, why, and for how long
2.1 Downloading a free resource
Educational diagnostic, observation grid, infographic, comparison table, video.
- Data
- First name, email address
- Purpose
- To send you the resource you requested, followed by a short series of informative emails about our educational approach and the school
- Legal basis
- Your consent, confirmed by a validation email (double opt-in)
- Retention
- 3 years from your last contact with us (opening an email, clicking a link, an exchange). Your address is deleted immediately if you unsubscribe
Every email contains an unsubscribe link. You can also withdraw your consent by writing to contact@davinciprivateschool.com.
2.2 Application for admission
- Data
- Surname, first name, email and telephone number of the parent(s); the child's first name, age and school level; your answers to the questions on the form
- Purpose
- To review the application for admission and get back to you
- Legal basis
- Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR)
- Retention
- If the child is enrolled: the data becomes part of their school file, governed by the Charter signed at enrolment. Otherwise: 1 year after the end of the exchange, then deletion
Your child's particular needs. The field about support needs is optional. If you choose to mention health or disability information there, we process it on the basis of your explicit consent, collected through a dedicated tick box, solely to prepare for your child's arrival. Please do not attach any medical document at this stage: we will discuss it during the meeting.
2.3 Booking a visit or a phone conversation
- Data
- Name, email, telephone number, chosen time slot, any message
- Purpose
- To organise the appointment and send you a confirmation
- Legal basis
- Pre-contractual measures taken at your request
- Retention
- Same as for applications (§ 2.2)
2.4 Contact by email or telephone
- Data
- Whatever you send us
- Purpose
- To answer your request
- Legal basis
- Our legitimate interest in replying to people who contact us
- Retention
- 1 year after the last exchange, unless an application or enrolment follows
2.5 Technical logs and third-party resources
The host automatically records connection data (IP address, date and time, page viewed) to keep the site secure and working. These logs are kept for a limited period set by the host.
The site's fonts are hosted on the site itself: no request is sent to a third-party service to display them. The confirmation page shown after requesting the diagnostic may display a YouTube video, embedded in privacy-enhanced mode.
3. Who has access to your data
Your data is never sold or passed on for commercial purposes. It is accessible to:
- The leadership team of Da Vinci Private School;
- Brevo (Sendinblue SAS, France), which manages our forms, our emails and our appointment bookings; data hosted in the European Union;
- Our host: Google Firebase (Google Ireland Limited), which hosts the site and relays forms to Brevo and to our mailbox, without storing them.
4. Transfers outside the European Union
Our host, Google, may process some technical data (connection logs) in the United States. These transfers are governed by the EU–US Data Privacy Framework and by the European Commission's standard contractual clauses.
5. Data about your child
Information about your child is provided by you, as the holder of parental responsibility. We only collect what is needed to review the application. We never ask a child to give us their data themselves.
6. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability regarding your data. Where processing is based on your consent, you can withdraw it at any time, without affecting what was done before.
You can also set instructions for what happens to your data after your death.
To exercise these rights: contact@davinciprivateschool.com. We reply within one month. We may ask you to prove your identity if there is reasonable doubt.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
7. Cookies
This site sets no advertising or audience-measurement cookies that would require your consent.
To understand which pages are visited and which forms are used, we measure traffic with Umami (Umami Software, Inc.). It sets no cookies, does not keep your IP address and does not follow you from one site to another: it only produces anonymous statistics (pages viewed, referring site, device type, button clicks), hosted in the European Union. Nothing you type into a form is sent to it.
8. Security
We restrict access to your data to the people who need it, and our service providers are contractually bound to keep the data they process on our behalf confidential and secure.
9. Changes
We may update this policy. The date of the latest update appears at the top of the page.