Data we collect
We only collect the information needed to answer your request. When you fill in one of our forms (an application, a request for information, a resource download, an open day), we may collect:
- Your first and last name, to identify you and personalise our exchanges.
- Your email address, to reply to you and send you the resources you asked for.
- Your phone number, so that we can get back to you about your application.
- Your level of study (secondary diploma, stream, two years of higher education, and so on), to guide you towards the right programme.
No sensitive data (health, opinions, origin and the like) is requested. Optional fields are entirely at your discretion.
Purposes of processing
Your data is only used for clear and legitimate purposes:
- Processing your application and following up your admission file.
- Sending information and teaching resources (worked solutions, guidance handbooks, event invitations).
- Improving our service and the experience offered on the website.
We never sell or rent your data to third parties for commercial purposes.
Legal basis & consent
The processing of your data rests on your consent, given when you submit a form, and on our legitimate interest in handling admission requests and informing our candidates.
That consent is freely given: you may withdraw it at any time, without having to justify yourself, by writing to infos@sup2i.ac. Every information email also carries an unsubscribe link.
Who receives your data
Your information is kept for SUP2I and a small number of technical providers acting on its behalf. It may be consulted by:
- SUP2I teams (admissions, guidance and communications), who are authorised and bound by confidentiality.
- Our CRM and emailing tool (Brevo), which hosts your file and our mailings and acts only on our instructions.
- Google and Meta, for measuring our audience and the effectiveness of our campaigns only, under the conditions described in the “Cookies” chapter.
- Outside Morocco: our measurement and emailing providers are based in Europe and the United States, so your data is hosted and processed there.
Retention period
We keep your data only for as long as the purpose requires. As a guide, a candidate’s data is kept for the duration of the admission cycle, then for up to three years for follow-up and possible re-enrolment. After that it is deleted or anonymised, unless a legal obligation requires otherwise.
Cookies & audience measurement
Two families of cookies coexist on this website. The first are essential: they make the forms work and protect the site from automated submissions. They serve no other purpose and cannot be disabled. The second are used for audience measurement: they tell us how many people visit the site, which pages they arrive on and which forms they submit, so that we can improve the site and steer our campaigns.
The measurement tools are Google Analytics 4 and Google Tag Manager, together with the Meta pixel when you arrive from a Facebook or Instagram ad, and the Google Ads tag when you arrive from a Google ad. We do not sell any data, and no advertising is served on this website.
Your choice depends on where you browse from
If your device is set to a European, UK or Swiss time zone, no measurement cookie is set and no advertising identifier is kept until you have clicked “Accept” in the banner shown on arrival.
From other countries, including Morocco, audience measurement is active by default, in line with Moroccan law 09-08, which rests on prior information and the right to object. You can refuse it at any time: the “Cookies” link at the bottom of every page reopens that choice. Refusing immediately deletes the cookies already set and stops any identification: Google then receives a plain anonymous signal, with no cookie and no data about you.
In both cases your decision is kept in your browser and honoured on every later visit until you change it. Refusing changes nothing to your browsing or to how your application is handled.
What is stored, and for how long
- _ga and _ga_* (Google Analytics): tell visits apart without identifying you. Up to two years.
- _fbp, and _fbc if you arrive from an ad (Meta): link your visit to a campaign. Three months.
- _gcl_au, and _gcl_aw if you arrive from an ad (Google Ads): link your visit to a campaign. Three months.
- Browser local storage: your cookie choice and, for ninety days, the identifier of the ad that brought you, so we know which campaign produced an application.
What is sent when you submit a form
To measure how well our ads perform, your first name, last name, email address and phone number are sent to Google and Meta as a SHA-256 fingerprint, never readable as such, together with the name of the form. They use it to match your submission with an existing account of theirs and tell us which ad worked, under the conditions of their own privacy policies.
The transfer to Meta is also sent from our server, to count applications from browsers that block measurement. It then includes your IP address and the name of your browser, which are not turned into a fingerprint. If you take our guidance test, the recommended programme, your score and your level of study are also sent for measurement, without your contact details.
If you refuse measurement, neither your name, nor your email address, nor your phone number is sent to Google or Meta, neither from your browser nor from our server.
You may also block or delete these cookies from your browser settings.