Privacy Policy

Personal Data Protection – Spéos

Last updated: July 24, 2026

This personal data protection policy is intended to inform users of the website www.speos-photo.com about how Spéos collects, uses, retains, and protects their personal data, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (the “GDPR”) and French Act No. 78-17 of January 6, 1978, as amended (the “Data Protection Act”).

1. Data Controller

The data controller is:
Spéos, Paris Photographic Institute
8 rue Jules Vallès
75011 Paris – France
SIRET: 380 298 059 00011

For any questions regarding the protection of your personal data, or to exercise your rights, you may contact Spéos by:

  • Email: contact@speos.fr
  • Telephone: +33 (0)1 40 09 18 58
  • Post: Spéos – Paris Photographic Institute, 8 rue Jules Vallès, 75011 Paris, France

The Director of Communications is Spéos’s point of contact for any matters relating to personal data protection.

2. Personal Data Collected

Spéos may collect personal data, in particular when you:

  • use the contact forms;
  • submit an application to a training program;
  • subscribe to the newsletter;
  • use the website.

The data collected may include, in particular:

  • first and last name;
  • email address;
  • telephone number;
  • information relating to your academic or professional background that you provide voluntarily;
  • any information submitted through the forms;
  • certain browsing data, in accordance with our Cookie Management Policy.

Fields marked as mandatory are required in order to process your request or application.
If you do not complete them, Spéos may be unable to process your request.
Users undertake to provide accurate and up-to-date information.

3. Purposes and Legal Bases for Processing

In accordance with Article 6 of the GDPR, each processing activity is carried out on one of the legal bases provided for therein.

PurposeLegal Basis
Responding to requests for informationSpéos’s legitimate interest
Reviewing, validating, and following up on applicationsPre-contractual measures taken at the request of the data subject
Handling the administrative, educational, and financial management of studentsPerformance of the training contract and legal obligations
Providing information about Spéos’s programs, events, and newsLegitimate interest or consent, as applicable
Sending the newsletterConsent
Communicating with AlumniConsent
Improving the operation, security, and performance of the websiteLegitimate interest and, where required by law, consent via cookies
Meeting accounting, tax, or regulatory obligationsLegal obligation

4. Recipients of the Data

Personal data is accessible only to authorized staff within Spéos’s administrative, educational, and communications departments, within the limits of their responsibilities and the needs arising from their duties.

It may also be disclosed to:

  • technical service providers and subprocessors involved in the operation of the website, hosting, electronic communications, or the management of applications, strictly within the limits of their assignments and under contracts compliant with Article 28 of the GDPR;
  • legally authorized administrative or judicial authorities where required by law.

Personal data is neither sold nor transferred to third parties for commercial purposes.

5. Transfers of Data Outside the European Union

Spéos seeks to use service providers established within the European Union or offering data hosting within the European Union. Where it becomes necessary to use a service provider that may process certain data outside the European Economic Area, Spéos ensures that such processing is governed by the appropriate safeguards provided for by the GDPR, in particular through the Standard Contractual Clauses adopted by the European Commission or any other mechanism recognized under European law.

6. Data Retention Period

Personal data is kept only for as long as necessary for the purposes for which it was collected, and is then archived or deleted in accordance with the applicable legal obligations.

In particular:

  • Contact requests and unsuccessful applications are kept for a maximum of three (3) years from the last contact.
  • Student data is kept for the duration of their studies and is then archived in accordance with the applicable legal and regulatory obligations.
  • Alumni data is retained until consent is withdrawn.
  • Data used to send the newsletter is retained until consent is withdrawn or the recipient unsubscribes.
  • Cookies and other trackers are retained for the periods specified in the Cookie Management Policy.

7. Cookies

The website uses cookies and other trackers to ensure that it functions properly, to measure website traffic and, where applicable, to provide certain features. To learn more about the use of cookies and how to manage your preferences, please consult our Cookie Management Policy.

8. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to object;
  • the right to restrict processing;
  • the right to data portability, where applicable;
  • the right to withdraw your consent at any time where processing is based on it, without affecting the lawfulness of processing carried out before its withdrawal;
  • the right to provide instructions regarding the handling of your personal data after your death.

You may exercise these rights by contacting us:

  • By email: contact@speos.fr
  • By post: Spéos – Paris Photographic Institute, 8 rue Jules Vallès, 75011 Paris – France

To protect your privacy, proof of your identity may be requested in the event of reasonable doubt as to the identity of the person making the request. Every request will receive a response within a maximum of one month, except in the specific cases provided for by law.

You may also unsubscribe from the newsletter at any time using the link provided for this purpose in each email.

If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the French Data Protection Authority (Commission nationale de l’informatique et des libertés – CNIL).

9. Data Security

Spéos implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of personal data against loss, destruction, alteration, disclosure, or unauthorized access.

Despite the measures in place, no system for transmitting or storing data over the Internet can guarantee absolute security.

10. Changes to This Policy

This personal data protection policy may be amended at any time to reflect legislative, regulatory, judicial, or technical developments.

The version currently in force is the one published on this website.

The date of the latest update appears at the top of this document.