Last updated: 25 September 2026
1. Data controller and contact
The Dascali website (dascali.com) is published by Conservatoire Augmenté, a French simplified joint-stock company (société par actions simplifiée) with a share capital of 10,000 Euros, registered with the Paris Trade and Companies Register (RCS) under number 981 985 641, whose registered office is at 209 avenue Jean Jaurès, 75019 Paris, France, represented by François Gerber, General Manager (Directeur Général).
For any question about your data or to exercise your rights, you can contact the Data Protection Officer (DPO) by email at dpo@conservatoireaugmente.com or by post to Conservatoire Augmenté, 8 avenue du Nouveau Conservatoire, 75019 Paris, France, for the attention of the DPO.
2. Applicable law
We process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés). If you reside in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply. If you reside in Switzerland, the Federal Act on Data Protection (FADP) also applies. If you reside in another country, we also comply with the mandatory data protection law of that country to the extent it applies to us.
3. Data processed, purposes and retention periods
We process your data only for the following purposes:
- To operate our service: as long as you are registered on the Site, until you close your account, and data relating to a course for as long as your access to that course is valid. They are then archived for three years to meet legal obligations and deal with any claims.
- To manage your access to Dascali, with your identity (first name, surname), contact details (postal address, telephone number, email address), login details and password (stored in hashed, non-reversible form), in order to perform the registration or training contract.
- To track your course progress, we analyse your login history, the modules you have viewed, your assessment results and the time you spend on the Site, to perform the training contract and comply with the traceability obligations applicable to professional training.
- To improve pedagogy. Course data are used in aggregated form to improve the pedagogical content, in our legitimate interest. These aggregates do not allow you to be identified.
- To administer educational partnerships. When you follow a joint programme with a partner institution (educational institution, cultural institution, conservatoire), your first name, surname, email address, home institution and programme followed are shared with that institution in order to perform the partnership agreement.
- To measure our audience. In our legitimate interest, we analyse traffic on Dascali.com (pages viewed, visit duration, device type) in order to improve the website. These data are kept for thirteen months.
4. Recipients of your data
Your data are accessible only to Conservatoire Augmenté staff authorised by virtue of their duties, who are bound by a duty of confidentiality.
We use the following service providers, which access your data only as needed to provide their service:
- Scaleway, which hosts the Site and your data on servers located in the European Union, acting as a processor within the meaning of the GDPR;
- Stripe, which processes payments. Stripe collects your payment card details directly, Conservatoire Augmenté neither receives nor stores them. Stripe processes these data as a controller under its own privacy policy;
- Zendesk, which manages requests sent to our support service, acting as a processor within the meaning of the GDPR.
In connection with the educational partnerships described in section 3, your data may be transmitted to the partner institutions concerned.
We do not sell, rent, trade or otherwise share your data with third parties for commercial purposes.
5. International data transfers
Your data are hosted in the European Union. If you reside outside the European Union, using Dascali involves transferring your data to the European Union, where they are protected by the GDPR. If you reside in another country, you acknowledge that your data are transferred to and processed in the European Union, where they benefit from the protections described in this Policy.
Some of the service providers listed in section 4 (Stripe, Zendesk) may transfer the data they process to the United States or other third countries. These transfers are covered by the safeguards required by Articles 44 to 50 of the GDPR and, where applicable, the equivalent provisions of the UK GDPR and the FADP.
6. Security
We implement appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access: encryption of communications (HTTPS), password hashing, access control, regular backups and system monitoring.
In accordance with Articles 33 and 34 of the GDPR and the equivalent provisions applicable in the United Kingdom and Switzerland, any personal data breach likely to result in a risk to your rights and freedoms is notified to the competent supervisory authority within 72 hours.
7. Cookies
The Site uses two categories of cookies.
Strictly necessary cookies ensure that the Site works: keeping your session open, remembering your preferences, securing your login. They do not require your consent and are deleted when you close your browser or after a limited period.
Audience measurement is carried out with Matomo, hosted by Conservatoire Augmenté and configured in accordance with the recommendations of the French supervisory authority (CNIL): anonymised IP address, no data shared with third parties, no cross-site tracking. In this configuration, the tool is exempt from prior consent under French law (CNIL deliberation no. 2020-091 of 17 September 2020). Where the law of your country of residence requires your consent for audience measurement, we ask for it before enabling it. You can object to this measurement at any time by enabling the “Do Not Track” option in your browser.
8. Your rights
You have the following rights over your personal data: access to and a copy of your data, rectification and erasure of your data, except where retention is necessary to comply with a legal obligation, exercise or defend legal claims, restriction of processing in the cases provided for by the applicable law or based on legitimate interest, without affecting the obligations made before withdrawal, portability of the data you have provided to us.
To exercise these rights, send your request to the DPO. Proof of identity may be requested where there is reasonable doubt. You will receive a reply within one month.
If you consider that the processing of your data does not comply with the applicable law, you may lodge a complaint with a supervisory authority:
- for residents of the European Union and the European Economic Area, with the CNIL (www.cnil.fr, or 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the supervisory authority of the country where you reside;
- for residents of the United Kingdom, with the Information Commissioner’s Office (ICO, ico.org.uk);
- for residents of Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch);
- for residents of any other country, with the data protection authority of your country, where one exists.
9. Changes to this Policy
This Policy may be amended to reflect changes in the law or in the services offered. The date of the last update appears at the top of the document. In the event of a substantial change, you will be informed by email or by a notice on the Site.