Your data
What we do with your data
Running a school means holding everything: who your learners are, their date of birth, their NEPH number, what they have paid, what they can do. Here is what is recorded, for how long, and who can read it.
What is recorded
The list is closed: it is in the contract, and it is the one we keep to.
Identity and contact details
Surname, first name, date and place of birth, address, email, telephone.
Training
NEPH number, teaching progress, assessments, test results and scores.
Staff
Qualifications, teaching authorisations, staff management records.
Money
Contracts, quotes, invoices, payments and accounting records.
Messages
The content of the emails and text messages sent from your space.
Technical logs
Who signed in, who did what and when. A visitor's address is never written down as it stands: it is replaced by a fingerprint the moment it arrives.
The service asks for no health data and for none of the categories the European regulation protects separately.
How long it is kept
Nineteen categories, each with its own period, its starting point and the text it rests on. The main ones:
Learner file — end of the contract, then 2 years
Once that term is up, the file is not deleted: it is anonymised. The school keeps its statistics, the person disappears.
Training records and lesson routes — 5 years after the end of the contract
A lesson route is location data attached to a person: its period was set before the first record, not after.
Invoices and accounting records — 10 years
This is not a choice: the French Commercial Code requires it, and nothing can erase them sooner.
Enquiries that went nowhere — 3 years after the last contact
Someone who asked for a quote and never came does not stay on file for ever.
Activity log — 6 months
Except for actions that touch the accounts, which follow the 10 years of the records they relate to.
Who can reach it
Each person sees what their role lets them see, and nothing else. A school running several offices does not mix its offices; two neighbouring schools cannot see each other. This partitioning is not an intention: a series of checks replays these cases on every change, and a change that breaks them does not go through.
Sensitive actions leave a time-stamped trace: who, what, when. That is what lets you answer precisely the day someone asks for an account — an inspection, a dispute, an enrolment being challenged.
Your school's data is there to run your school. The list of who receives it fits in a few lines, it is written into the contract, and it holds nothing but technical suppliers.
What you can check yourself
Your record of processing activities
A PDF, pre-filled for a driving school, that the head downloads from their settings: purpose, legal basis, people concerned, recipients, period. To be read over and adapted — it stays yours.
The retention screen
The retention policy in full, and the count of what has passed its term in your school. A period written in a file proves nothing; a screen does.
What your space knows about you
Everyone enrolled has a page that sums up what concerns them, downloads it as a single file, and lets them ask for the account to be closed.
Closing an account erases the identity and cuts off access. The accounting entries stay for as long as the law requires — attached to an identifier that no longer points to anyone.
And on this site
The audience measurement on roddier.pro drops no advertising cookie and follows nobody from one site to the next. Your address is not kept: it is turned into a fingerprint that changes every day, which makes it possible to count visits without recognising a visitor from one day to the next. Your browser's “do not track me” setting is respected, and the banner lets you refuse the measurement.
The questions that remain
Where this data physically lives, and what happens the day it all stops: both answers are written down.