Privacy policy

Version 2 — in force as of 15/09/2026. Last updated: 15/09/2026. This policy applies to the websites visa-j1.fr, visa-uk.fr and workntravel.fr. This is a courtesy translation of our French privacy policy; in the event of any discrepancy, the French version prevails.

1. Who are we?

GROUPE PÉRIPLEA supports students, recent graduates and professionals in their international mobility procedures. We act as the local representative of approved sponsor organisations, for three distinct programmes:

• J-1 visa (Intern, Trainee, Specialist) — United States, visa-j1.fr, in partnership with InterExchange, Intrax and Cultural Vistas.
• UK visa — GAE (Government Authorised Exchange) — United Kingdom, visa-uk.fr, in partnership with BUNAC/JENZA.
• Work & Travel USA — United States, workntravel.fr, in partnership with InterExchange.

This policy applies to these three websites and to all data processing carried out as part of our services.

Data controller: GROUPE PERIPLEA, a simplified joint-stock company (SAS) with share capital of €1,667.00, registered with the Aix-en-Provence trade and companies register under number 895 131 456, SIRET 895 131 456 00017, APE code 85.69Y (educational support activities n.e.c.), intra-Community VAT number FR14 895 131 456, whose registered office is at 152 chemin de la Petite Bastide, 13770 Venelles, France.

Contact: contact@visa-j1.fr, contact@visa-uk.fr or contact@workntravel.fr, depending on the programme concerned.

Data protection contact: by email at yves@periplea.com, or by post to the registered office, for the attention of the Legal Department.

2. What data do we collect?

We collect only the data needed to check your eligibility, build your file and follow your programme. The detail varies according to the stage you have reached.

2.1 Data you provide to us

We do not collect sensitive data within the meaning of Article 9 of the GDPR (health, opinions, sexual orientation and so on). If a document you send us incidentally contains any, we invite you to redact it before sending.

2.2 Data generated by our exchanges

• Recordings of telephone calls and notes taken during qualification and follow-up interviews. You are informed orally at the start of the call and you may ask for a call not to be recorded.
• Email correspondence archived as part of the follow-up of your file.
• The history of your file in our customer relationship management tool: steps completed, exchanges, documents received.
• Proof of consent: boxes ticked, date, time, IP address, exact wording displayed at the time of collection.

2.3 Browsing data

Our websites place cookies and trackers. The detail is set out in section 8.

2.4 Automated decision-making

The online eligibility test is a tool to help qualify your request; it produces no automated decision having a legal effect or significantly affecting you within the meaning of Article 22 of the GDPR. Every decision concerning your file is checked by a member of our team.

3. Why do we use this data?

Each processing operation rests on a specific legal basis, in accordance with Article 6 of the GDPR.

Once these periods expire, your data is deleted or irreversibly anonymised. Some data may be archived separately, with restricted access, where its retention is necessary to defend our rights.

4. Who has access to your data?

4.1 Internally

Only those employees of GROUPE PÉRIPLEA whose duties justify it have access to your file: the qualification team, the advisers in charge of follow-up, the accounts department and the legal department in the event of a complaint. Every access is under a named account.

4.2 The sponsor organisations

Sending your file to the sponsor is essential to obtaining your visa. It is limited to the strictly necessary information.

Each sponsor acts as an independent data controller for the processing it carries out. We invite you to consult its own privacy policy.

4.3 Our service providers

We use processors acting on our instructions, bound by contract in accordance with Article 28 of the GDPR:

• hosting of our websites and our data;
• customer relationship management tool (CRM);
• online payment provider;
• business email and telephony solutions;
• chartered accountant and, where applicable, legal counsel.

The list of our processors by name, together with their location, is available on request from our data protection contact.

4.4 Other recipients

• The host company or organisation, for the information needed for your placement;
• The international mobility officer of your institution, to check your certificate of enrolment, with your agreement;
• The administrative or judicial authorities, upon legal requisition.

We never sell your data and never pass it on to any third party for advertising purposes.

5. Transfers outside the European Union

By their very nature, our programmes involve transfers of data to third countries.

5.1 United Kingdom

The data sent to BUNAC/JENZA benefits from the adequacy decision adopted by the European Commission in respect of the United Kingdom. This transfer offers a level of protection recognised as equivalent to that of the European Union.

5.2 United States

The data sent to InterExchange and Cultural Vistas is framed by one of the following mechanisms provided for in Chapter V of the GDPR, according to the recipient’s certification status:

• If the recipient is certified under the EU-US Data Privacy Framework (DPF): the transfer rests on the adequacy decision adopted by the European Commission on 10 July 2023 (Art. 45 GDPR). The recipient’s certification can be checked at dataprivacyframework.gov.
• In the absence of DPF certification: the transfer rests on the standard contractual clauses adopted by the European Commission (implementing decision (EU) 2021/914), supplemented where appropriate by additional measures.

A copy of the applicable safeguards can be provided to you on request from our data protection contact. We follow developments in the legal framework applicable to transfers to the United States, currently the subject of litigation before the courts of the European Union, and will adapt the basis relied upon if necessary.

These transfers are necessary for the performance of the contract you enter into with us and for completing the visa procedures with the American authorities.

6. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your data:

How to exercise your rights. Send your request to our data protection contact, by email at yves@periplea.com or by post to GROUPE PERIPLEA, Service Juridique, 152 chemin de la Petite Bastide, 13770 Venelles, France. We may ask you for proof of identity in the event of reasonable doubt as to who you are.

We reply within one month of receiving your request. That period may be extended by two months if the request is complex; we then inform you within the first month.

The particular case of call recordings. You may obtain a copy. Where a recording contains personal data concerning third parties, we may redact it before disclosure, in accordance with Article 15.4 of the GDPR.

Complaints. If you consider that your rights are not being respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — or online at www.cnil.fr.

7. Consent to being called

Since 11 August 2026, telephone canvassing of private individuals requires your prior consent, under Article L. 223-1 of the French Consumer Code.

When you fill in our eligibility test, we ask whether you agree to be called about your request. This consent:

• covers only the programme for which you contacted us and our related support services;
• is valid for twelve (12) months from the time it is given, after which we will ask you for a new one;
• can be withdrawn at any time, with no formality, including orally during a call;
• is never a condition for using our services: you may refuse to be called and deal with us by email only.

We keep proof of this consent (date, time, exact wording displayed, any time slots given) for three (3) years. You may obtain a copy on request.

8. Cookies and trackers

On your first visit to one of our websites, a banner lets you accept, refuse or configure cookies. Refusing is as easy as accepting.

The detailed list of the cookies placed is available from the cookie management banner, at the bottom of every page of each site. You can change your choices at any time from that same banner. Traffic data is kept for no more than 25 months.

9. Security of your data

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure:

• encryption of exchanges (HTTPS) across all our sites;
• access to files limited to authorised staff, through named accounts;
• hosting with providers offering appropriate security safeguards;
• regular backups and access logging;
• data protection awareness training for our teams.

In the event of a data breach likely to result in a high risk to your rights and freedoms, we will inform you as soon as possible, in accordance with Article 34 of the GDPR.

10. Minors

Our programmes are aimed at adults. We do not knowingly collect data concerning people under 18. If you believe a minor has sent us data, contact us: it will be deleted.

11. Changes to this policy

We may update this policy, in particular to take account of legal changes or changes to our services. The applicable version is the one published on our sites on the date of your visit. In the event of a substantial change, we will inform you by email or through a banner on our sites.

Date of last update: 15/09/2026.