Privacy policy

Who is responsible for your data

The data controller is Cours at Home, S.àr.l., 11 Avenue de la Gare, L-1611 Luxembourg, registered with the Luxembourg Trade and Companies Register under number B122136.

For any question relating to your data, write to Cours at Home S.àr.l., 11 Avenue de la Gare, L-1611 Luxembourg.

The data we process

We collect nothing “just in case”: each item of information has a purpose, stated below.

You request information or a quote

• Data: title, surname, first name, email address, telephone number, the name of your company where applicable, and the details of your request – level, type and format of lessons, as well as any free-text message you choose to add.
• Why: to call you back, assess your needs and propose a teacher.
• Legal basis: steps taken at your request prior to entering into a contract.
• Where: the form on the Contact us page records your request in this website’s database, hosted in the European Union, notifies our advisers by email and sends you an acknowledgement of receipt. Submitting it does not use any external service – in particular no captcha, and therefore no Google server. If you have accepted Google advertising in the banner, your email address and telephone number are then sent to Google, in encrypted form, to measure our adverts (see “You accept audience and advertising measurement”).
• Retention: three years from the last exchange if the request does not proceed.

You enrol a pupil and the lessons begin

• Data: contact details of the pupil and of the legal guardian, address where the lessons take place, subjects and levels, lesson schedule, progress reports, invoicing and payment details.
• Why: to organise the lessons, provide educational follow-up and handle invoicing.
• Legal basis: performance of the contract, and our accounting and tax obligations.
• Retention: for the entire duration of the relationship, then ten years for accounting records, as required by law.

You use the client area

• Data: login credentials, lesson history, shared documents.
• Why: to give you access to your schedule, your invoices and the follow-up of lessons.
• Legal basis: performance of the contract.
• Retention: for as long as the account remains active. The client area is operated by Platforme Easy (see below).

You apply as a teacher

• Data: title, surname, first name, email address, telephone, postcode and town, right to work in Luxembourg, subjects, audiences and teaching locations, experience, weekly availability, languages spoken, highest qualification, and your curriculum vitae if you attach one. We do not ask for your date of birth, your nationality or your full address: there is no reason for this information before a contract.
• Why: to review your application and, where appropriate, assign pupils to you.
• Legal basis: steps taken at your request prior to entering into a contract.
• Where: the form on the Become a teacher page records your application in this website’s database and sends you an acknowledgement of receipt by email. The curriculum vitae is stored outside the public part of the server: no web address leads to it, and it can only be opened from the website’s administration area, by a logged-in person. It is deleted from the server at the same time as the application.
• Retention: two years after the last exchange if the application does not proceed. You may request its immediate deletion.

You ask to be called back

• Data: name, telephone number, preferred time slot.
• Why: to call you back at the time you have chosen.
• Legal basis: your consent, which you may withdraw at any time.
• Retention: for the time needed to handle the request, then three months.

Reviews published on the website

The reviews displayed come from Cours at Home’s public Google Business profile. We reproduce them as their authors published them, with the name that they themselves chose to display on Google. How we select them is described in the legal notice. If you are the author of a review and would like it no longer to appear on this website, simply write to us: we will remove it.

Simply visiting the website

• Data: the server’s technical logs – IP address, date and time, page requested, browser type.
• Why: to ensure the website works properly and to detect intrusion attempts.
• Legal basis: our legitimate interest in protecting the service.
• Retention: six months at most.

You accept audience and advertising measurement

• Data: pages viewed and length of the visit, where you came from (search engine, advert, social network), clicks on our telephone number, submission of a request or an application – the fact that you sent it, not its content, with the exception described in the next point –, device and browser type, IP address, and a random identifier stored in a cookie.
• Quote request: your email address and telephone number are sent to Google in an irreversibly encrypted form (hashing), so that Google can recognise whether your request follows one of our adverts (Google Ads “enhanced conversions”). They are not used to contact you or to show you advertising. Nothing is sent if you have not accepted Google advertising, nor when you apply as a teacher.
• Why: to know which pages are useful and which to improve; to know which adverts actually bring us requests, so that we stop paying for those that do not.
• Legal basis: your consent, requested by the banner shown on your first visit. You may withdraw it at any time (see “Cookies and trackers” below).
• Recipients: Google, Meta and LinkedIn, described further down.
• Retention: Google Analytics’ detailed statistics are deleted after fourteen months at the latest; the information received by Google, Meta and LinkedIn for their advertising services is kept according to their own rules.

Cookies and trackers

On your first visit, a banner asks whether you accept audience measurement and advertising cookies. Until you have answered, and if you refuse, none of these cookies is set. Refusing is as easy as accepting, and makes no difference to how you can use the website.

You can change your mind at any time, from any page, using the cookie settings button shown at the bottom of the screen.

Necessary cookies, set without consent

• pll_language – remembers the language in which you are viewing the website, so that you are not asked again on every page. It contains only the code for that language (“fr” or “en”), cannot be used to identify you, and expires after one year.
• axeptio_cookies, axeptio_authorized_vendors, axeptio_all_vendors – record the choices you made in the banner, so that you are not asked again on every page. They contain only those choices and are kept for thirteen months at most, after which you are asked again.

These cookies are strictly necessary for the service you request: the regulations do not make them subject to your prior consent.

Cookies set only with your consent

• Audience measurement – Google Analytics (Google Ireland Limited): _ga and _ga_C50LXBNKS1, which tell visitors and their visits apart; up to two years.
• Google advertising – Google Ads (Google Ireland Limited): in particular _gcl_au and _gcl_aw, which link a request to the advert that brought it; 90 days.
• Meta – Facebook and Instagram (Meta Platforms Ireland Limited): _fbp and, if you arrive through one of our adverts, _fbc; 90 days.
• LinkedIn (LinkedIn Ireland Unlimited Company): in particular li_fat_id (30 days) and li_sugr (90 days). LinkedIn also sets cookies on its own domain, such as bcookie (one year).

These names and durations are set by each of these providers, who may change them. Part of this measurement passes through a server under our own domain, sgtm.coursathome.lu, hosted in France, which forwards it to these tools.

WordPress, which runs the website, sets no other cookies except for people who log in to its administration area – in other words the Cours at Home team, not visitors.

The client area is hosted on app.coursathome.lu by Platforme Easy: the cookies set while you browse that domain are a matter for its own operation and its own terms.

Who else has access to your data

We do not sell, rent or exchange any personal data with anyone. Nothing is passed on for advertising purposes without your consent.

Your data is accessible to the Cours at Home staff who need it – advisers, administration – and to the teacher responsible for the lessons, insofar as it concerns them. The following are also involved, as processors and acting solely on our instructions:

• Platforme Easy – management of enrolments, scheduling and the client area. OGUSTINE, 15 rue des Halles, 75001 Paris, France. Quote requests and teacher applications, however, are collected and stored by this website, without going through this provider.
• Google Ireland Limited – business email (Google Workspace).
• Brevo (Sendinblue SAS, France) – sending of the website’s automatic emails, including the notice of your request to our advisers, and online appointment booking. When we offer you to book a call, the booking calendar is hosted by Brevo, which receives the information you enter in it.
• OVH SAS – hosting of the website, on a server located in the European Union.
• Adobe Systems Software Ireland Limited – provision of typefaces. Your browser downloads them directly from Adobe’s servers, which receive your IP address in the process.
• Axeptio (France) – cookie consent banner and storage of the proof of your choices.

We also disclose strictly necessary information to our chartered accountant and, upon a lawful request, to the competent authorities.

If you accept measurement and advertising cookies, information about your visit is also received by Google Ireland Limited (Google Analytics, Google Ads), Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company. Meta and LinkedIn act as joint controllers with us for the collection of this information; what they then do with it is governed by their own privacy policies: Google, Meta, LinkedIn.

Transfers outside the European Union

Our providers process your data in the European Union. Where a transfer to a third country is nevertheless necessary – as is the case for certain Google, Adobe, Meta and LinkedIn services, whose parent companies are based in the United States – it relies on the safeguards provided for by the General Data Protection Regulation: the EU–US Data Privacy Framework where the recipient participates in it, otherwise the European Commission’s standard contractual clauses.

The security of your data

The website is served entirely over HTTPS. Access to the administration area and to the client area is restricted and logged. Backups are encrypted, and only those whose duties justify it have access to pupils’ files.

As no system is infallible, we would inform you without delay, as required by law, if a data breach were likely to cause you harm.

Your rights

You may at any time:

• access the data concerning you and obtain a copy of it;
• have rectified any inaccurate or incomplete information;
• request the erasure of your data, where we are not required to retain it;
• request the restriction of processing, while a check is carried out;
• object to processing based on our legitimate interest;
• receive your data in a reusable format, or request its transfer to another provider;
• withdraw your consent, where the processing is based on it, without affecting what has been done previously.

Write to Cours at Home S.àr.l., 11 Avenue de la Gare, L-1611 Luxembourg. We respond within one month; if your request is complex, we will let you know and this period may be extended by two months. We may need to verify your identity before disclosing any information.

Complaints

If you are not satisfied with our response, you may lodge a complaint with the Luxembourg supervisory authority:

Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz
L-4370 Belvaux
cnpd.public.lu

Updates to this page

This policy evolves with the website and with the tools we use. The date of the last update appears at the top of the page. In the event of a significant change, we will inform the persons concerned.