eSchool Connect eSchool Connect

Privacy Policy

Updated in October 21, 2025

Introduction

Collège Notre Dame de Louaizé (CNDL) (“the School,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information submitted through our website. This Privacy Policy explains how we collect, use, store, share, and protect personal data in compliance with Lebanese Law No. 81/2018 on Electronic Transactions and Personal Data Protection and international data protection standards.​
School Contact Information:

 

Scope and Applicability

This Privacy Policy applies to all individuals who submit personal information through our website, including:

  • Prospective students and their parents/guardians
  • Current students and parents/guardians
  • Job applicants and employment candidates
  • Staff members and faculty
  • Any other visitors who provide personal information through our online forms

 

Types of Personal Information We Collect

Through our website forms, we collect the following categories of personal information:​

For Student Registration and Admissions:

  • Full name, date of birth, and place of birth
  • Gender and nationality
  • Home address and contact information
  • Parent/guardian names and contact details
  • Previous educational records and academic transcripts
  • National identification documents
  • Photographs
  • Medical information (if required for enrollment)
  • Emergency contact information

For Employment Applications:

  • Full name, date of birth, and contact information
  • Curriculum Vitae (CV) and employment history
  • Educational qualifications and certifications
  • Professional references
  • National identification documents
  • Work permits or residency documentation
  • Any other information voluntarily provided in application materials

Legal Basis and Consent

We collect and process personal data based on the following legal grounds under Lebanese Law No. 81/2018:​

  • Consent: By submitting information through our website forms, you provide explicit consent for us to process your personal data for the stated purposes
  • Contractual Necessity: Processing is necessary for enrollment, admissions, or employment contract fulfillment
  • Legitimate Interest: Processing is necessary for the school’s educational and administrative operations
  • Legal Obligations: Processing may be required to comply with Lebanese educational regulations and government requirements
  • Minors: For individuals under 18 years of age, we require consent from a parent or legal guardian before collecting and processing personal data.​

 

 

How We Use Your Personal Information

We use the personal information collected through our website for the following specific and legitimate purposes:​

  • Student Registration: Processing enrollment applications, maintaining student records, and managing admissions
  • Employment Processing: Evaluating job applications, conducting recruitment procedures, and managing hiring decisions
  • Communication: Contacting applicants, parents, and candidates regarding applications, admissions decisions, and employment opportunities
  • Administrative Operations: Maintaining school records, fulfilling educational and administrative requirements
  • Legal Compliance: Meeting obligations under Lebanese law and educational regulations
  • School Operations: Supporting the School’s educational mission and operational needs

We do not use personal data for purposes beyond those stated at the time of collection without obtaining additional consent

Data Sharing and Disclosure

CNDL may share personal information with the following parties under limited circumstances:​

Internal Sharing:

  • School administrators and admissions staff (on a need-to-know basis)
  • Recruitment and human resources personnel (for employment applications)
  • Educational staff (for enrolled students, as necessary for educational purposes)

External Sharing:

  • Lebanese Ministry of Education and Higher Education (MEHE) when legally required​
  • Accreditation bodies (AEFE, Cognia) for institutional accreditation purposes​
  • Government authorities upon valid legal request or court order
  • Trusted service providers (e.g., cloud hosting, IT services) who are contractually bound to protect data

We do not sell, rent, or trade personal information to third parties for commercial purposes.

International Data Transfers

If personal data is transferred outside of Lebanon (e.g., to cloud service providers), we ensure adequate safeguards are in place to protect your information in accordance with Lebanese Law No. 81/2018 and international standards. Any such transfers will be conducted securely and with appropriate data protection agreements.​

For EU residents or if processing involves EU data subjects, we comply with the General Data Protection Regulation (GDPR) requirements, including ensuring adequate protection mechanisms for international data transfers.

Data Security Measures

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, loss, alteration, disclosure, or destruction:​

  • Encryption: Data transmitted through our website is protected using HTTPS/SSL encryption
  • Access Controls: Personal data is accessible only to authorized personnel who require it for legitimate purposes
  • Secure Storage: Data is stored on secure servers with restricted access
  • Regular Audits: We conduct periodic security reviews and assessments
  • Staff Training: Personnel handling personal data receive training on data protection principles and procedures

Despite our security measures, no system is completely secure. We cannot guarantee absolute security but commit to maintaining industry-standard protections.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law:​

  • Student Application Records: Retained for 2 years after application decision
  • Enrolled Student Records: Retained during enrollment and for 7 years after graduation or departure
  • Employment Application Records: Retained for 2 years after application closure
  • Hired Employee Records: Retained during employment and as required by Lebanese labor law

After the retention period expires, personal data is securely deleted or anonymized in accordance with data protection principles.

Your Rights as a Data Subject

Under Lebanese Law No. 81/2018, you have the following rights regarding your personal data:​

  • Right to Access: You may request access to the personal data we hold about you
  • Right to Rectification: You may request correction of inaccurate or incomplete personal information
  • Right to Erasure: You may request deletion of your personal data under certain circumstances (subject to legal and contractual obligations)
  • Right to Object: You may object to the processing of your personal data for direct marketing or other purposes
  • Right to Restrict Processing: You may request limitation of data processing in specific situations
  • Right to Data Portability: You may request to receive your personal data in a structured, commonly used format or request transfer to another entity
  • Right to Withdraw Consent: You may withdraw consent at any time, though this may affect your application or enrollment status

To exercise any of these rights, please contact us using the information provided in Section 13 below. We will respond to your request within a reasonable timeframe as required by law.

Cookies and Website Technologies

Our website may use cookies and similar technologies to enhance user experience. Cookies are small text files stored on your device that help us understand website usage and improve functionality. You can control cookie settings through your browser preferences. For detailed information about our cookie practices, please refer to our Cookie Policy (if applicable).

Third-Party Websites

Our website may contain links to third-party websites or services. CNDL is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Data Breach Notification

In the event of a data breach that may pose a risk to your rights and privacy, we will notify affected individuals and the Ministry of Economy and Trade within the timeframe required by Lebanese law (within 72 hours of discovery).​​

Updates to This Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. The “Last Updated” date at the top of this policy indicates when the most recent changes were made. We encourage you to review this policy regularly. Material changes will be communicated through our website or direct notification where appropriate.

Contact Information and Data Protection Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

CNDL Data Protection Contact
Collège Notre Dame de Louaizé
Zouk Mosbeh, Keserwan, Lebanon
Phone: +961 9 219 258 / 59 / 60 / 61
Email: info@cndl.edu.lb

Supervisory Authority

The Ministry of Economy and Trade oversees data protection compliance in Lebanon. If you have concerns about how we handle your personal data, you may contact:​

Ministry of Economy and Trade
Beirut, Lebanon
Website: www.economy.gov.lb

EN