Privacy policy

Compliant with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés) of 6 January 1978 as amended.

Data controller

The controller of the personal data collected via godelf.com is:

Centre Zenith (SASU) — SIRET 832 566 038 00036
50, rue de Pontoise, 95870 Bezons — France
Represented by Sourav Choudhury, publication director.
Contact: examen@godelf.com

Data collected

We collect the following data as part of the GoDELF service:

Registering for an exam

Title, surname, first name, name in use, date and place of birth
E-mail address, telephone number, WhatsApp number
Nationality, country of birth, mother tongue
Postal address
Identity document (front/back or passport) — for identity verification on the day of the exam
Identity photograph
Chosen exam level, session, centre

Payment

Amount, date, method (card, bank transfer, partner school)
No bank data is stored on our servers — card payments are processed by Stripe (see its privacy policy).

Partner schools / associations

Company name, contact (name, e-mail, telephone), address
List of candidates registered by the school

Purposes and legal bases

Purpose	Legal basis (art. 6 GDPR)
Registration for the DELF / DALF exam, sending the exam invitation, running the session, publishing results and diplomas.	Performance of the contract (a. 6.1.b)
Identity verification on the day of the exam (identity document).	Legal obligation of the accredited exam centre (a. 6.1.c)
Invoicing, accounting, tax obligations.	Legal obligation (a. 6.1.c)
Sending information about upcoming sessions to candidates already registered.	Legitimate interest (a. 6.1.f)
Responding to contact requests.	Legitimate interest (a. 6.1.f)

Retention period

Registration data and results: kept for 10 years, the legal period imposed on exam centres accredited by France Éducation International.
Identity documents: destroyed within 180 days following the end of the exam session.
Invoicing data: 10 years (accounting obligation, Article L.123-22 of the French Commercial Code).
Inactive candidate account: anonymised after 3 years without login, following a warning e-mail 30 days beforehand. Exam results are kept under our legal obligations as an accredited exam centre (see above), but the e-mail, telephone and address are erased.

Data recipients

Your data is accessible:

To the authorised staff of Centre Zenith (secretariat, examiners).
To France Éducation International (FEI) and its GAEL system, for issuing diplomas and monitoring the session.
To Stripe for processing card payments.
To our technical providers (hosting provider A2 Hosting, transactional e-mail service) under a data-processing agreement compliant with Article 28 of the GDPR.

No data is sold or transferred to third parties for commercial purposes.

Transfers outside the European Union

Our hosting provider A2 Hosting is based in the United States. Stripe processes certain data in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and the Data Privacy Framework.

Security

The data is hosted on secure servers (end-to-end HTTPS/TLS encryption, hashed passwords, database not exposed to the Internet). Administrator access is protected by a strong password and OTP.

Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the right:

of access to your data
of rectification of inaccurate data
of erasure (the "right to be forgotten"), subject to the legal retention periods
of restriction of processing
of objection on legitimate grounds
to the portability of your data

To exercise these rights, write to examen@godelf.com from the e-mail address associated with your account, or by post to the registered office. A reply will reach you within a maximum period of one month.

If you disagree with the response provided, you may lodge a complaint with the CNIL — 3 Place de Fontenoy, 75007 Paris — www.cnil.fr.

Cookies

See the cookie policy.