Privacy policy: GDPR

The controller of personal data is:
MY STORY (trading as MYSTORY FORMATION), SASU, SIREN 913 423 083, registered office 14 Rue Bichat, 75010 Paris. Reception branches in Gagny, Sarcelles and Rosny-sous-Bois; exams in Rosny-sous-Bois.
Contact: contact@mystoryformation.fr / 06 81 43 16 54.
Director: Arudhan NATKUNASINGAM.

As part of our training and exam activities, we collect the following data:

• Identification data: surname, first name, date of birth, nationality, address, phone, email
• Identity data: copy of identity document, photo
• Educational data: placement tests, results, assessments, attendance sheets
• Browsing data: cookies, pages visited, length of visit (via the website)
• Payment data: payment method, CPF / OPCO file number

Data is collected for the following purposes:

• Managing registrations and educational follow-up
• Organising and holding exams (TEF IRN, civic)
• Sending results and certificates to CCI Paris Île-de-France
• Invoicing and management of funding (CPF, OPCO)
• Compliance with Qualiopi obligations (traceability of courses)
• Marketing communication (with consent)
• Improving our services and the website

• Performance of the training contract (art. 6.1.b GDPR)
• Legal obligations (Qualiopi, Labour Code, Education Code)
• Legitimate interest (improving services)
• Consent (marketing communication, cookies)

• Educational data (files, attendance sheets, assessments): 5 years after the end of the training (Qualiopi obligation)
• Accounting and invoicing data: 10 years (tax obligation)
• Browsing data (cookies): 13 months maximum
• Commercial prospecting data: 3 years after the last contact

Your data may be passed on to:

• The CCI Paris Île-de-France: Le Français des Affaires (for exams)
• The OPCO (for funding training)
• The Caisse des Dépôts (for CPF via Mon Compte Formation)
• State services (in the event of an inspection or a legal obligation)
• Our payment providers : Mollie, and Lenbox or Klarna if you choose them
• Our providers ofhosting and electronic signature
• Meta Platforms Ireland, Google Ireland and TikTok Technology Limited (measurement of our ads, only if you accept cookies)

Your data is never sold to third parties.

In accordance with the GDPR (EU Regulation 2016/679) and the French Data Protection Act, you have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw your consent at any time (where it is the legal basis)

To exercise your rights: contact@mystoryformation.fr or by post to MYSTORY FORMATION, 46 bis rue d’Estienne d’Orves, 93110 Rosny-sous-Bois. Reply within 30 days.

In the event of a dispute, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris.

On your first visit, a banner asks for your consent. You can accept or refuse, then change your mind at any time with the “Manage my cookies” link at the bottom of every page. Your choice is kept for 6 months.

• Necessary cookies: the mystory_consent cookie stores your choice. It is shared by the website and our payment area, so that you are not asked twice. It cannot be refused.
• Advertising measurement cookies (Meta, Google Ads and TikTok): they tell us which ads led a visitor to call us, write to us, start the level test or place an order. They are only set if you click “Accept all”. No data entered in our forms (name, phone number, e-mail) is passed on to them.
• Origin of your visit: if you arrive through an ad or a partner's link, this origin goes along with your order, so that we know which ad led to your registration. It is only kept on your device (30 days) if you click “Accept all”.

MYSTORY implements the technical and organisational measures needed to protect your personal data against any unauthorised access, loss, alteration or disclosure.