Personal Data Protection
The French School of Athens pays particular attention to the protection of the personal data of users of its application platform.
Information collected through this platform is used exclusively for managing applications to programmes offered by the French School of Athens, including scientific grants, internships, doctoral training programmes, resident researchers, scientific members, doctoral mobility programmes and other calls for applications.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable data-protection legislation.
Data controller
The French School of Athens
6 Didotou Street
10680 Athens
Greece
For any question concerning your personal data or to exercise your rights: rgpd@efa.gr
Data collected
| Category | Examples of data |
|---|---|
| Identity | Surname, first name, title, nationality |
| Contact information | Email address, telephone number, postal address |
| User account | Identifier, account creation date, last login date |
| Professional situation | Status, institution or affiliated organisation |
| Academic background | University, degree, level of study, discipline |
| Application information | Programme applied for, project, dates, location, duration |
| Submitted documents | CV, motivation letter, diplomas, certificates, research project and other requested documents |
| Administrative data | Information required to process and manage the application |
| Technical data | Connection logs and technical information required for platform security |
Purposes of processing
- Create and manage applicant accounts
- Allow applicants to prepare and submit applications
- Verify that application files are complete
- Review and assess applications
- Organise selection procedures
- Communicate with applicants
- Maintain the administrative history required to manage applications
- Ensure the security, maintenance and proper operation of the platform
- Comply with applicable legal, regulatory and archival obligations
Personal data is not used for commercial purposes.
Legal basis
Depending on the type of procedure concerned, processing may in particular be based on the performance of a task carried out in the public interest, pre-contractual measures taken at the request of the applicant, compliance with a legal or regulatory obligation, or the legitimate interests of the French School of Athens, particularly with regard to IT security and technical administration of the platform.
Retention periods
| Data | Retention period | Action at the end of the period |
|---|---|---|
| User account without an application | 2 years after the last activity | Account and associated data deleted |
| Unsubmitted draft application | 2 years after the last modification | Deleted |
| Unsuccessful application | 2 years after the end of the procedure or the last contact | Deleted or anonymised |
| Documents relating to an unsuccessful application | Maximum 2 years | Deleted |
| Successful application | For the period required to manage the programme, then according to applicable administrative obligations | Archived or deleted according to applicable rules |
| Administrative or financial documents relating to a successful application | According to applicable legal, accounting and archival obligations | Regulatory archiving followed by deletion or transfer to archives |
| Technical connection and security logs | Maximum 12 months, unless required longer in connection with a security incident | Deleted |
| Requests relating to GDPR rights | 2 years after closure of the request | Deleted or subject to limited archiving |
| Technical backups | According to the backup rotation cycle | Automatically overwritten |
Recipients of the data
- Relevant administrative departments of the French School of Athens
- Scientific managers responsible for calls for applications
- Members of selection committees or juries
- The IT department where necessary for administration, maintenance or platform security
- Authorities or organisations to which data must be disclosed under a legal obligation
Security
The French School of Athens implements technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure, accidental destruction or unlawful destruction.
Your rights
In accordance with the GDPR, and subject to the conditions applicable to the processing concerned, you may exercise your rights of access, rectification, erasure, restriction, objection and, where applicable, data portability.
To exercise your rights: rgpd@efa.gr
In order to protect your data, proof of identity may be requested where necessary.
Account deletion
You may request the deletion of your account and associated data by contacting rgpd@efa.gr. Certain information may nevertheless be retained where required by legal, regulatory, accounting, litigation or archival obligations.
Cookies
The platform may use cookies that are strictly necessary for its operation, particularly to maintain user sessions, provide authentication, secure access to the platform and remember certain technical preferences. These cookies are not used for advertising purposes.
Last updated: September 2026