Legal Notice   |   Information on personal data (GDPR)

• Legal Notice

MesServices.etudiant.gouv.fr is the official website of the student life portal of the university and school services network (Cnous/Crous).

Publication Director

Bénédicte Durand, President of Cnous

Editorial Manager

CNOUS Communication Mission

Technical Support

Digital Sub-Directorate and Student Life Sub-Directorate (CNOUS)

Postal Address

Centre National des Œuvres Universitaires et Scolaires - 60 boulevard du lycée - CS30010 - 92170 Vanves

Intellectual property

This website constitutes a work protected in France by the case law of article L112-2 of the Intellectual Property Code. Violation of any of the copyright of this work constitutes an offense of counterfeiting.

The information presented on this site, as well as links to other sites, are provided for informational purposes only. Except for iconography, non-profit reproduction of the pages of this site is authorized, provided that the source and capture date are explicitly mentioned.

However, the content of this site may not be reproduced or used for commercial or advertising purposes. The information used must only be for personal, associative, or professional purposes. Any distribution or use for commercial or advertising purposes is excluded.

No page may be presented as coming from this site if modifications altering its meaning have been made.

The photos from housing offers provided by property owners are not contractual and do not in any way bind the Centre National des Œuvres Universitaires et Scolaires (CNOUS).

Furthermore, the Centre National des Œuvres Universitaires et Scolaires (CNOUS) makes no commitment regarding any other site that may be accessed via its website, and it is expressly stated that a link to another site does not in any way imply that the CNOUS assumes any responsibility for the content or usage of such sites. We do our best to maintain stable page URLs. Any request for updates or corrections should be addressed to: infodoc@cnous.fr.

No authorization is required to place a hyperlink to the CNOUS website, whether on the homepage or an internal page of a website. However, it is recommended to explicitly mention the site of the Centre National des Œuvres Universitaires et Scolaires in the title of the link.

Design, production, hosting

Digital Sub-Directorate (SDN), Cnous
Department: Department: Sub-Directorate of the Student Social Record, Cnous
Hosting: Les Crous
Visuals: Cnous Communication Mission
Writing: Communication Mission, Sub-Directorate of the Student Social Record

• Information on personal data (GDPR) 

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016: Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

This personal data information aims to inform students of the policy adhered to by CNOUS in order to protect their Personal Data.

This charter describes the procedures for managing the processing of Personal Data concerning students, natural persons, obtained during the consultation or registration on the website MesServices.etudiant.gouv.fr, for which Les Crous are responsible.

Purpose of the processing

MesServices.etudiant.gouv.fr is the official website of the student life portal of the university and school services network. It provides access to a range of student life services offered by Les Crous.

Nature of the personal data processing.

Legal basis : This data processing falls under the public service mission entrusted to the Crous network by virtue of Decree No. 2016-1042 of 29 July 2016, relating to the missions and organization of university services.
Article 6-e of the General Data Protection Regulation - GDPR :
(e) the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Purposes : The purpose of the processing is to manage the student profile, allowing the collection, directly or indirectly, of the personal data necessary for the digital services offered by the portal.

This processing allows students to open an account on MesServices and access all the services provided. The student account is pre-created on MesServices for any student registered in PARCOURSUP and must be activated by the student.
Les Crous may use the personal data from active MSE accounts for communication purposes (notably regarding key deadlines) in order to fulfill their public interest mission.

Data controller

Les Crous represented by Bénédicte Durand, President of the CNOUS

CNOUS - Centre national des œuvres universitaire et scolaire
60, bd du Lycée - CS30010
92170 Vanves
http://etudiant.gouv.fr

Data processed

Categories of data processed : See annexed table "Collection of Personal Data”.

Source of data:

This information may come from:

• PARCOURSUP and PARCOURSUP NEW CALEDONIA
• FranceConnect
• By services from Les CROUS based on student requests or updates provided by the student.
• By transmission from the student’s institution (via InfocarteCrous, Service DSE, CVEC interfaces).
• By the student via the profile creation or modification form (data entry and attachement).

Use of INE in MesServices:

• The national student identifier (INE) or national agricultural identifier (INA), assigned via the national directory of student identifiers, is used by the Regional Centers for University and School Services (Les Crous) if individuals have applied on one of the national service applications aimed at students to be admitted to a higher education program.
• The INE used in "MesServices" application can come from PARCOURSUP, INES or AGLAE. 

Mandatory nature of data collection : By virtue of their public interest mission, Les Crous are obligated to collect and process the personal data required for the student profile.

Automated decision making : The student with an INE sees their account automatically validated.

Concerned persons : The data processing concerns natural persons who are students.

Recipients of Personal Data

Categories of recipients:

Depending on their respective needs, the following are recipients of all or part of the data:

• Les Crous
• Digital services managed by Les Crous: housing central system, student social file, Master's mobility aid, Parcoursup mobility aid, €1 meal for non-scholarship students (EPA), emergency aid request (DAE), Izly, Cité U, My rental file (Ebail), Jobaviz, Lokaviz, Bed&Crous, MesRDV, YOOT, CVEC, Student creation contest, API Boursier, Evote.
• Digital services managed by partners: INES, UCPA, Wifirst, MyTroc, BuddySystem.

Data transfer outside the EU

No data is transferred outside the European Union.

Retention of Personal Data

The information collected regarding access traceability is kept for one year. After this period, the collected data will be deleted.

Personal data collected for access to MesServices services is retained as long as the student's account is active.
Inactive accounts are kept for a reasonable period for regulatory and internal control purposes. After this regulatory retention period, the data is deleted..

Security

As the data controller, the CNOUS implements appropriate organizational techniques and solutions to protect personal data. These measures are outlined in our internal network security policy (SSI).

Individuals concerned by our processing benefit from the rights outlined in Chapter III of the GDPR, specifically:

• Right of access: This is done directly through "my profile," allowing students to view their personal data.
• Right of rectification: The "my profile" form allows for the modification of data online when the student is authenticated. Changes are transmitted, if necessary, to the scholarship services or housing reservation services.
• Right to object: This is only considered when legitimate reasons justify its application.
• Right to erasure: An online assistance form allows the student to request this. The right to deletion is subject to the existence of a student social file or rental activity, CVEC, or any other aid within the previous three years. It can only be considered if it does not interfere with the proper execution of the public interest missions of the Crous.
• Right to restrict processing: which must comply with the requirements of the GDPR.

Les Crous reserve the right to assess the request in light of their rights and obligations. The student has the right to contact the CNIL for any complaint.

Exercise your rights with the personal data protection officer

Les Crous have appointed a regional Data Protection Officer (DPO) who acts as the liaison between Cnous and students.
The DPO handles complaints from students concerned by the processing they oversee and ensures students' rights are respected.
The DPO processes these complaints or implements the procedures to ensure proper handling.

For any rights-related requests, students can:

• Make a request through the assistance form by first logging in
• Make a request through the assistance form without logging in
• Make a postal request (see list of Crous)
• Make an electronic request (see list of Data Protection Officers)

The Personal Data provided in the context of exercising your right of access will be communicated personally and confidentially. Therefore, for your access request to be considered, you will need to provide the necessary identification elements (unless the request is made via the MesServices.etudiant.gouv.fr portal in connected mode), namely:

• A written statement under oath certifying that you are the holder of the said Personal Data
• And a copy of an identity document or student card

Commitment of Les Crous in personal data processing

Les Crous commit to ensuring that the student's personal data is:

• Obtained and processed fairly and lawfully
• Collected for specified and legitimate purposes and limited to those purposes
• Adequate, relevant, and not excessive in relation to those purposes
• Accessible and subject to rectification or deletion following a request made by post or electronically to the data controller mentioned above
• Retained in accordance with the purposes pursued. Les Crous commit to implementing the necessary means to ensure the security of the data to prevent it from being damaged, altered, destroyed, or disclosed to unauthorized third parties.

Contact details the DPO (Data Protection Officer)

The DPO only handles requests for exercising rights within the framework of the General Data Protection Regulation (GDPR).
For all other requests please use the assistance form.

Collection of Personal Data

(*) : Mandatory data collection for processing