Privacy policy and GDPR

The Sorbonne Cluster for Artificial Intelligence, part of the Sorbonne Université, is referred to as "SCAI" throughout this document.

Updated on 13/03/2026

Data controller

This website is operated by SCAI as part of Sorbonne Université. For the processing activities described in this policy, SCAI acts on behalf of Sorbonne Université.

Requests relating to personal data may be sent to: [email protected]

Data Protection Officer

Sorbonne Université has appointed a Data Protection Officer (DPO).

Requests relating to personal data may be sent to [email protected]. Where appropriate, they will be forwarded to the relevant department or to the Data Protection Officer.

Purpose of the processing

Personal data may be processed for the following purposes:

  • operation and security of the website
  • access to restricted administration areas
  • management of newsletter subscriptions
  • audience measurement on public pages (subject to user consent)

Personal data is processed on the following legal bases, depending on the purpose concerned:

  • the legitimate interests of SCAI and Sorbonne Université in ensuring the proper operation, security, maintenance, and protection of the website and its administration areas
  • the user's consent for optional audience-measurement cookies and for newsletter subscription
  • where applicable, compliance with legal obligations or the establishment, exercise, or defence of legal claims

Certain cookies are mandatory because they are required for the internal functioning of the site, security features, search functions, and access to administration areas.

Other cookies used by third-party services for audience measurement on public pages are subject to the user's prior consent.

Recorded data

The website mainly processes technical data necessary for its operation (such as cookies or connection information) and the data voluntarily provided by users through the newsletter subscription form.

Depending on the user's interactions with the website, the following categories of data may be processed:

  • technical data necessary for the operation of the site, such as cookies, connection data, and browser-related information
  • security and diagnostic logs, such as IP address, date and time of access, and requested resources
  • data voluntarily provided through the newsletter subscription form

Newsletter form

Only the email address is collected through the newsletter form on a voluntary basis.

Recipients of the data

Personal data is accessible only to persons who need it for the purposes described above, in particular the agents and authorised staff responsible for the administration, communication, security, and maintenance of this website.

The data provided through the newsletter form is transmitted to the relevant agents of the SCAI Communication Department in charge of managing subscriptions.

The newsletter data is stored on the servers of the email marketing service Mailchimp. As Mailchimp may involve processing outside the European Union, any such transfer is carried out subject to the safeguards required by applicable data-protection law.

Personal data collected through this website are hosted on servers located in the European Union by the hosting provider OVHcloud.

Duration of data retention

Personal data is retained only for the period necessary for the relevant purpose and in accordance with applicable legal requirements.

  • data collected through the newsletter form is retained for a maximum period of two years
  • technical logs are retained for a limited period justified by security, maintenance, and diagnostic needs
  • cookies and similar trackers are retained for the duration indicated in the cookie-management interface or, where applicable, for the duration of the user session

Rights of the data subjects

In accordance with applicable regulations, including the French Data Protection Act and the General Data Protection Regulation, you have the following rights:

  • the right of access to the personal data concerning you
  • the right to rectification of inaccurate or incomplete data
  • the right to erasure, where applicable
  • the right to restriction of processing, where applicable
  • the right to object, on grounds relating to your particular situation, to processing based on legitimate interests
  • the right to data portability, where the legal conditions are met
  • where processing is based on consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal

These rights may be exercised by email at [email protected].

Right to file a complaint

If you believe, after having contacted us, that your rights with regard to information technology and civil liberties are not being respected, you have the possibility of lodging a complaint with the French supervisory authority, the Commission nationale de l’informatique et des libertés (CNIL).

Cookies and Log Files

The website uses cookies and similar technologies that are either:

  • strictly necessary for the operation, security, and administration of the site
  • optional and subject to the user's prior consent, in particular for audience measurement on public pages

Technical log files may also be generated in order to ensure security, diagnose incidents, and maintain the service.

Additional information about cookies, their purposes, and their retention period is available through the cookie-management interface and, where applicable, on the dedicated Cookies page.

Statistics

Audience-measurement services may be used on public pages through third-party analytics services. These services are activated only after the user's consent through the cookie-management interface.