Lilu application terms and conditions

Lilu Application - Effective 1 September 2023

1. Legal notice

View the legal notice of the University of Lille

2. Accessing the Lilu application

The Lilu application gives users free access to the following services: viewing campus maps, news, viewing loans and opening hours for certain university libraries, timetables (depending on the member school/faculty/institute), grades, and more, depending on the institution attended and the services it offers.
The Lilu application is intended exclusively for all students registered at the University of Lille and its member institutions. It can be accessed from a smartphone (Android and iOS).

To use the service, users (students) must authenticate themselves using their university user ID (login + password). Passwords are not stored in the application. Those who don’t (or don’t yet) have their user ID can access the maps and 360° presentation of the campuses in offline mode.

3. Personal data protection

The personal data of Lilu users (hereinafter referred to as ‘users’) is processed by the University of Lille (42 rue Paul Duez, Lille), the data controller, for the following purpose: Providing mobile access to digital information and services.

3.1. Legal bases

This data processing is based primarily on the University’s legitimate interest in meeting the new needs of its users and keeping pace with technical innovations (principle of mutability of public service). The processing of geolocation data is based on the user’s consent, which can be revoked at any time.

3.2. Purposes

Accessing content Accessing services
Viewing a news feed Using your university mailbox
Viewing your results Signing in
Viewing the CROUS menus Geolocating
Checking your Izly account Taking a virtual tour
Viewing your timetable Reserving a workspace
Using a Moodle course

Use of Lilu is not compulsory, and access to the information or services concerned remains possible via other channels (websites, digital workspace (ENT) in particular).

3.3. Data recipients

Processed data may be communicated to University of Lille departments authorised to process them. Some of this data will be passed on to the publishers of the mobile operating systems concerned, and as such may be transferred to the USA (see below).

3.4. Data storage1

Personal data generated by installing, configurating or connecting to Lilu is kept for the time strictly necessary to achieve the above-mentioned purposes.

Data Categories Storage media Storage duration
User ID (login and password) Phone Logging out of
or uninstalling
the application
Photo Phone Uninstalling
the application
Individual access token (no need to re-enter login details) Phone
and university servers

Logging out of
or uninstalling
the application
Personal telephone ID generated by FCM University servers

Stored until:

  1. the application is uninstalled;
  2. the ID is reset;
  3. or after three notifications have been returned in error
Personal telephone ID generated by FCM Operating system publishers’ servers Stored until:
the application is uninstalled or the ID is reset
Notification token (sending information) Operating system publishers’ servers Stored until:
the application is uninstalled or the ID is reset
Izly balance Phone Logging out of
or uninstalling
the application
Log data for requests generated by the application University server 1 year
(Cached) data on
timetables and information notifications		 Phone

Stored until:

  1. the next request is generated;
  2. the application is uninstalled;
  3. the cache is cleared.

No personal data is stored under the responsibility of the University of Lille in offline mode.

3.5. User rights

For data generated by installing, setting up or connecting to Lilu, users have the following rights:

  • right to be informed;
  • right of access;
  • right to rectification;
  • right to erasure within the limits set by Article 17 of the GDPR.
  • right to restriction of processing;
  • right to object within the limits set by Article 21 of the GDPR;
  • right to issue instructions regarding the storage, erasure and disclosure of your personal data after your death.

Users are informed that no automated individual decisions are made as a result of using this application.

Questions and requests to exercise rights may be addressed (in this case providing proof of identity) to the Data Protection Officer, who can be contacted:

  • electronically at dpo@univ-lille.fr;
  • by post at
    Délégué à la Protection des Données
    Université de Lille
    42 rue Paul Duez 59000 LILLE

If you do not receive a response to your request within a maximum period of one month, you may lodge a complaint with CNIL (French Data Protection Authority) (Art. 13 GDPR) at the following address:
Cnil – Service des plaintes
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Phone: 33 (0)1 53 73 22 22

 

1 No data relating to access to the services or content offered is stored on users’ telephones or on the servers of operating system publishers. This data is subject to the data protection rules established for their initial environment.