Last updated: May 17, 2026
The purpose of this privacy policy is to inform users of the cube-educ.com website about how Cube Education collects, uses, stores, protects, and shares personal data processed as part of the website’s use.
It is established in accordance with Regulation (EU) 2016/679 of April 27, 2016, known as the General Data Protection Regulation or GDPR, with Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms, as amended, and with the recommendations of the French National Commission on Informatics and Liberty, the CNIL.
Cube Education attaches particular importance to the protection of the personal data of website visitors, parents, legal guardians, children concerned by a request, families, candidates, newsletter subscribers, and any person coming into contact with Cube Education via the website.
This policy applies to the processing of personal data carried out within the framework of the cube-educ.com website. It does not replace information that may be communicated separately by the establishments of the Cube Education network in the context of an actual enrollment, academic monitoring, or the administrative, pedagogical, or contractual life of a student.
The controller for personal data collected via the website is:
CUBE EDUCATION
Simplified joint-stock company (SAS)
Share capital: €950,462
Registered office: 14 rue Humblot, 75015 Paris, France
SIREN: 824 522 213
SIRET of the registered office: 824 522 213 00027
RCS: 824 522 213 R.C.S. Paris
Email address: contact@cube-educ.com
Within the meaning of the GDPR, Cube Education determines the purposes and means of the personal data processing carried out via the website.
For any questions regarding the protection of personal data or to exercise your rights, you may contact Cube Education at the following address:
contact@cube-educ.com
This address constitutes Cube Education’s point of contact for requests relating to personal data processed via the website.
In accordance with Article 5 of the GDPR, Cube Education ensures that personal data are:
Cube Education undertakes to implement reasonable measures to respect these principles and to be able to demonstrate compliance, in accordance with the principle of accountability provided for by the GDPR.
This policy concerns, in particular:
The website is not intended to collect personal data directly from children. Information concerning a child must be transmitted by a parent or legal guardian.
Cube Education ensures that it only collects data strictly necessary for the intended purposes.
Depending on the forms used, the pages consulted, and the requests made, Cube Education may collect the following categories of data.
When the parent or legal guardian submits a request for a visit, pre-enrollment, enrollment, or extracurricular activity, Cube Education may collect:
These data are collected solely to process the request submitted by the parent or legal guardian, for example to identify the school concerned, verify the child’s age in relation to the requested level or activity, organize a visit, or follow up on an enrollment request.
When the website features recruitment offers or allows for the submission of an application, Cube Education may process:
Cube Education may collect or process certain technical and browsing data, including:
These data may be processed using tools such as Google Tag Manager, Google Analytics 4, Google Ads, Google Consent Mode, Conversion Linker, Meta / Facebook Pixel, Sirdata / ABConsent, or equivalent tools, depending on the consent choices expressed by the user.
Certain forms may use validation fields, hidden fields, anti-spam devices, or CAPTCHA systems to secure forms and prevent automated or fraudulent submissions.
The website may notably use tools such as Google reCAPTCHA, Gravity Forms, or equivalent tools.
These devices may involve the collection of technical data necessary for the operation, security, and protection of the website.
Cube Education does not ask users to transmit sensitive data via the website’s forms.
Users are requested not to communicate sensitive or unnecessary information in the free-text fields of the forms, including detailed medical information, health information, information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, or any other sensitive data within the meaning of the GDPR.
If certain specific information were to be necessary in the context of a subsequent exchange with a school, it would be requested in an appropriate, proportionate, and secure framework, directly by the establishment concerned or according to a specific procedure.
The personal data collected via the website come mainly from:
When data concerning a child are communicated via the website, they are provided by the parent or legal guardian making the request.
In accordance with Article 6 of the GDPR, each processing of personal data is based on a specific legal basis.
The table below presents the main processing purposes implemented via the website, the categories of data concerned, the applicable legal bases, and indicative retention periods.
Processing Purpose | Data Concerned | Legal Basis | Indicative Retention Period |
Responding to contact or information requests | Identity, contact details, message, school or subject concerned | Legitimate interest of Cube Education in responding to requests; pre-contractual measures when the request concerns a visit, enrollment, or activity | Duration necessary to process the request, then up to 3 years from the last exchange |
Organizing a school visit | Contact details of the parent or legal guardian, desired school, necessary information about the child | Pre-contractual measures taken at the request of the parent or legal guardian; legitimate interest in organizing the follow-up of the request | Duration necessary to process the request, then up to 2 years in the absence of actual enrollment |
Managing a pre-enrollment or enrollment request | Data of the parent or legal guardian, necessary data about the child, desired school, message | Pre-contractual measures taken at the request of the parent or legal guardian | Duration necessary to process the request; in the event of actual enrollment, retention according to the rules applicable to the administrative, contractual, and academic relationship |
Managing requests related to extracurricular activities | Data of the parent or legal guardian, necessary data about the child, desired activity | Pre-contractual measures or performance of a contract when the activity is confirmed | Duration necessary to process the request; in the event of a confirmed activity, duration of the relationship then applicable legal periods |
Forwarding the request to the establishment concerned | Data necessary to process the request | Pre-contractual measures; legitimate interest of Cube Education and the establishment concerned in processing the request | Duration necessary for the follow-up of the request |
Sending the newsletter | Email address, proof of consent, subscription status | Consent | Until unsubscription or withdrawal of consent; deletion or anonymization possible after 3 years of inactivity |
Managing applications | Identity, contact details, CV, cover letter, background, experience | Pre-contractual measures; legitimate interest in managing recruitment; legal obligations where applicable | Duration of the recruitment process; up to 2 years after the last contact to build a talent pool, unless opposed; probationary archiving possible according to applicable deadlines |
Ensuring website security and fighting spam | Technical data, IP, logs, anti-spam data, CAPTCHA | Legitimate interest of Cube Education in securing the website | Duration limited and proportionate to the purpose; in principle up to 12 months, except for incidents requiring longer retention |
Measuring audience and improving the website | Browsing data, pages viewed, traffic source, events, statistical data | Consent when non-strictly necessary cookies or trackers are used; legitimate interest only when processing is strictly technical, anonymized, or exempted under the conditions provided for by the regulations | According to the tool configuration; audience measurement trackers must have a limited duration |
Tracking browsing and interaction events | Viewing school pages, CTA clicks, phone clicks, email clicks, downloads, forms sent, lead-type events | Consent when non-strictly necessary cookies, pixels, or trackers are used | According to the settings of the tools used and the user’s consent choices |
Managing advertising campaigns and measuring conversions | Browsing data, traffic source, pages visited, conversion events, tracker identifiers | Consent when advertising cookies, pixels, or trackers are used | According to the settings of the advertising tools and the user’s consent choices |
Optimizing Google Ads or Meta campaigns | Conversion events, pages viewed, forms sent, email or phone clicks, campaign data | Consent when advertising cookies, pixels, or trackers are used | According to the settings of the advertising tools and the user’s consent choices |
Analyzing SEO visibility and technical performance | Technical data, aggregated visibility data, data from SEO or performance tools | Legitimate interest of Cube Education in monitoring the visibility, technical quality, and performance of the website; consent if non-necessary trackers are used | Duration necessary for analysis and reporting, according to the settings of the tools used |
Managing cookie consent choices | Consent or refusal preferences, date, consent identifier | Obligation to prove consent; legitimate interest in keeping proof of choices | In principle 6 months, unless a different duration is justified |
Complying with legal obligations and defending Cube Education’s rights | Data necessary according to the request, dispute, or obligation concerned | Legal obligation; legitimate interest in defending the rights and interests of Cube Education | Duration provided for by law or applicable limitation period |
The durations indicated above are indicative maximum durations. Cube Education may delete or anonymize data earlier when they are no longer necessary.
Fields marked with an asterisk in the forms are mandatory.
In the absence of mandatory information, Cube Education might not be able to process the request, contact the user, organize a visit, study a pre-enrollment, respond to an activity request, or process an application.
Other fields are optional.
The user is invited to communicate only the information necessary to process their request.
Personal data collected via the website may be accessible, within the limits of their respective duties, to the following recipients:
Cube Education does not sell personal data collected via the website.
Cube Education may use service providers acting as processors within the meaning of the GDPR.
These providers intervene only for the purposes defined by Cube Education and within the framework of Cube Education’s instructions.
Cube Education ensures that its service providers present sufficient guarantees in terms of personal data protection, confidentiality, and security.
Service providers may notably intervene for hosting, maintenance, website editing, form management, emailing, audience analysis, SEO, advertising, security, consent management, or technical support.
Certain service providers used by Cube Education, notably certain Google services, Meta / Facebook, advertising platforms, analysis tools, SEO tools, newsletter tools, or digital services, may involve a transfer of personal data to countries located outside the European Union or the European Economic Area.
When such transfers take place, Cube Education ensures that they are governed by appropriate safeguards in accordance with the GDPR, such as:
Users are informed that certain audience measurement, advertising, social network, or analysis tools may involve processing carried out by service providers located outside the European Union or the European Economic Area.
When non-strictly necessary cookies, pixels, or trackers are used, these tools are only activated after obtaining the user’s consent, when such consent is required.
The Cube Education website is primarily intended for parents, legal guardians, and adults seeking information about schools, visits, enrollments, activities, or the Cube Education network.
The website is not intended to collect data directly from children.
Data relating to children are collected only when the parent or legal guardian communicates them as part of a request related to a visit, pre-enrollment, enrollment, or extracurricular activity.
The parent or legal guardian who transmits data concerning a child guarantees that they have the necessary authority to do so.
Cube Education processes data relating to children with particular care and limits their collection to information necessary to process the request.
Cube Education recommends that parents and legal guardians do not transmit sensitive or unnecessary information concerning the child via the website’s forms, including detailed medical information. If such information were to be necessary later, it would be requested in an appropriate, proportionate, and secure framework.
Cube Education may send communications by email to individuals who have expressly agreed to receive the newsletter.
Subscription to the newsletter is based on the user’s consent.
The user may withdraw their consent at any time:
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Email addresses collected for the newsletter are not used to send commercial communications without prior consent, except in cases authorized by the applicable regulations.
The website uses cookies, pixels, beacons, tags, and other trackers.
Certain trackers are necessary for the website’s operation. Others may be used, subject to the user’s consent when required, to measure audience, improve the website, track advertising conversions, optimize campaigns, or offer remarketing actions.
The website may notably use:
Non-strictly necessary cookies and trackers are only placed or read after obtaining the user’s consent, when such consent is required, in accordance notably with Article 82 of the French Data Protection Act.
The user can modify their preferences at any time via the “Manage my cookies” link available on the website.
For more information, the user is invited to consult the website’s Cookie Policy.
Cube Education may use Google Tag Manager to manage the tags and scripts present on the website.
Google Tag Manager notably allows for the centralized triggering of certain tools, such as audience measurement tools, conversion tags, advertising pixels, or events related to user interactions.
Cube Education may also use Google Analytics 4, Google Ads, Conversion Linker, Google Consent Mode, Meta / Facebook Pixel or other equivalent tools to measure website traffic, analyze traffic sources, understand browsing paths, measure conversions, optimize campaigns, and improve content.
Tracked events may notably concern viewing school pages, clicks on call-to-action buttons, clicks on an email address or phone number, downloads, pre-enrollment requests, requests related to extracurricular activities, or forms sent.
When these tools involve non-strictly necessary cookies, identifiers, pixels, or trackers, they are only activated after the user’s consent when required.
Cube Education may use SEO analysis, visibility, and technical performance tools, notably SEMrush, Google Search Console or equivalent tools.
These tools notably allow for monitoring website visibility, indexing, technical errors, SEO performance, rankings, links, technical quality of the website, and improvement opportunities.
When these tools rely on aggregated data, crawl analysis, or performance data not directly linked to an identified website user, they are not used for individual advertising tracking purposes.
If an SEO, performance, or technical monitoring tool involves the placement or reading of cookies, pixels, beacons, or other trackers on the user’s device, it is subject to the applicable consent rules and can be managed from the “Manage my cookies” module.
The website may contain links to social networks or third-party platforms, notably Facebook, Instagram, LinkedIn, or other platforms.
When the user clicks on these links or interacts with content from third-party platforms, data may be processed directly by these platforms according to their own privacy policies.
Cube Education is not responsible for processing carried out independently by these third-party platforms.
The user is invited to consult the privacy policies of the services concerned.
The website may load certain external resources necessary for its display or operation, notably technical files, libraries, web fonts, scripts, or content from third-party providers.
These resources may lead to the transmission of technical data, such as the IP address, browser type, device, or information necessary to display the requested content.
Cube Education ensures that the use of external resources is limited to the website’s needs and that they are governed when necessary.
In accordance with Article 32 of the GDPR, Cube Education implements appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
These measures may notably include:
As no method of electronic transmission or storage can guarantee absolute security, Cube Education undertakes to take appropriate measures in the event of an incident affecting personal data.
In accordance with Articles 15 to 22 of the GDPR and the French Data Protection Act, data subjects have the following rights:
Where processing is based on consent, consent may be withdrawn at any time.
Where processing is based on Cube Education’s legitimate interest, the data subject may object to the processing on grounds relating to their particular situation, unless Cube Education demonstrates compelling legitimate grounds overriding the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Where data are processed for marketing purposes, the data subject may object at any time.
Rights may be exercised by contacting Cube Education at the following address:
contact@cube-educ.com
The request must specify the right being exercised, the identity of the applicant and the data concerned.
In the event of reasonable doubt as to the identity of the applicant, Cube Education may request additional information strictly necessary to verify their identity.
Cube Education will respond as soon as possible and, in any event, within the time limits provided for by the applicable regulations.
If the user considers, after contacting Cube Education, that their rights are not being respected or that the processing of their personal data is not compliant with the applicable regulations, they may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés, the CNIL.
Data collected via the site are not subject to a fully automated decision producing legal effects concerning the user or similarly significantly affecting them.
However, analytics, audience measurement, advertising, conversion or remarketing tools may be used, subject to the user’s consent where required, in order to measure the performance of the site or campaigns, analyse traffic sources and optimise Cube Education’s communications.
These processing operations may make it possible to compile statistics, measure browsing events, improve campaign attribution or optimise communication actions, but they are not used by Cube Education to make an automated decision having a legal effect on the user.
Cube Education may amend this privacy policy to take account of legal, regulatory, technical, organisational or functional developments of the site.
The update date indicated at the top of this policy enables users to identify the latest applicable version
