Privacy policy

Who is responsible for your data

The data controller is the Digital Disruption Chair at ESSEC Business School (Association Groupe ESSEC), 3 avenue Bernard Hirsch, CS 50105, 95021 Cergy-Pontoise Cedex, France.

What we collect and why

When you ask us to send you the report through the download form, we collect the information you enter:

• Name, company, position and email address.

We use this information only to send you the Digital Disruption Matrix report and occasional updates directly related to it. The legal basis for this processing is your consent, which you give by submitting the form. You can withdraw it at any time (see Your rights below).

We do not use your data for advertising, and we do not sell it.

If you accept analytics cookies, we also collect audience measurement data, as described in the Cookies section below.

Where your data is stored

The information from the form is stored in a Google Workspace spreadsheet operated by the Digital Disruption Chair. Google acts as our processor and may process the data on servers located outside the European Union, under the safeguards provided by its data processing terms and the European Commission’s standard contractual clauses.

Our hosting provider, Netlify, may also process technical connection data (such as your IP address) in its server logs for the sole purpose of delivering and securing the website.

How long we keep it

We keep the information from the form for as long as needed to send you the report and related updates, and for up to three years after our last contact with you, unless you ask us to delete it sooner.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to:

• access the personal data we hold about you;
• have it corrected if it is inaccurate;
• have it erased;
• restrict or object to its processing;
• withdraw your consent at any time;
• receive your data in a portable format.

To exercise any of these rights, email us at digitaldisruption@essec.edu or ESSEC’s data protection officer at dpd@essec.edu. If you believe your rights have not been respected, you may lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).

Cookies

Strictly necessary storage

By default, the only items this website stores in your browser are a technical flag that remembers you have entered the site during its preview phase, and, once you have answered the cookie banner, a record of your choice. Neither is used to track you and neither is shared with anyone.

Audience measurement (Google Analytics)

With your consent, we use Google Analytics 4, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how the site is used: pages viewed, how you arrived on the site, approximate location (country or city level), and device and browser type. We use this only to improve the Matrix and its content; it is never used for advertising.

Google Analytics runs only after you accept it in the cookie banner. If you decline, or make no choice at all, no analytics cookies are set and no analytics data is sent to Google. The legal basis for this processing is your consent. Google may process this data on servers outside the European Union, including in the United States, under the safeguards of the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. Analytics data is retained for up to 14 months. For more detail, see Google’s privacy policy.

Your choice

You can accept or decline analytics cookies at any time using the buttons below. Your choice is remembered for six months, after which we ask again. Withdrawing consent is as easy as giving it: measurement stops immediately, the Google Analytics cookies are deleted from your browser, and your use of the site is not affected.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed.