What is the purpose of our Candidates Privacy Policy?
The confidentiality of the personal data of candidates for a position with Nexway SASU is, for us, a guarantee of reliability and trust.
As such, our Candidates Privacy Policy is a clear demonstration of our willingness to ensure compliance, within Nexway SASU, with the applicable rules on the protection of personal data and, more specifically, those of the General Data Protection Regulation (« GDPR »).
In particular, our Candidates Privacy Policy aims to inform you about how and why we process your personal data as part of the services we provide to you.
Who should read our Candidates Privacy Policy?
The Candidates Privacy Policy is addressed to you, who are a candidate for a position within Nexway SASU, throughout the recruitment process (e.g. application to a vacancy, unsolicited application, recruitment via an external firm, etc.), whatever the duration or nature of the proposed contract (e.g. salaried position, temporary worker, trainee, etc.).
Why do we process your personal data and on what basis?
As a recruiter, we necessarily need to process your data in order to manage recruitment (e.g. interviews, processing of applications, salary negotiations, etc.), any displacement that may occur in the context of such recruitment and security of our premises.
Processing is carried out on the basis of discussions we have with you during the recruitment process and our legitimate interest in recruiting and selecting candidates.
How did we obtain your personal data?
Your data is collected directly from you via your application and CV and we undertake to process your data only for the reasons described above.
However, we may also obtain your personal data indirectly from recruitment agencies if you have given your prior consent to such agencies.
What personal data do we process and for how long?
- Any personal and professional identification data provided in the candidate's CV and covering letter (e.g. surname, first name, date of birth, nationality, etc.) retained for the duration of the recruitment process and for a maximum of 2 years after your application.
- Any details provided in the candidate's CV and covering letter (e.g. email address, telephone number, Linkedin link, etc.) will be kept for the duration of the recruitment process and for a maximum of 2 years after your application.
- Any data relating to personal and professional life provided in the candidate's CV and covering letter (e.g. diplomas, hobbies, certificates, age, marital status, driving licence, etc.) will be kept for the duration of the recruitment process and for a maximum of 2 years after your application.
- All economic and financial data (e.g. salaries, bonuses, etc.) provided during job interviews will be kept for the duration of the recruitment process and for a maximum of 2 years after your application.
- Any specific data (e.g. residence permit, etc.) provided by the candidate as part of the recruitment process will be kept until the end of the employment relationship if the candidate is recruited and will be deleted after the recruitment process if the candidate is refused.
- Any specific relevant and required data (e.g. disability status) provided in the candidate's CV and covering letter will be retained for the duration of the recruitment process and deleted after the end of the recruitment process.
- Any identity document (e.g. passport or ID card) provided as part of the recruitment process deleted after the candidate has been recruited or not.
- If you have applied for a job via our website, connection data (e.g. IP address and logs) will be retained for a maximum of 12 months.
Once the applicable retention periods have expired, the deletion of your personal data is irreversible and we will no longer be able to communicate it to you after this period. At most, we may only retain anonymous data for statistical purposes.
On the other hand, in the event of recruitment, your data collected during the recruitment process is automatically transferred to your personal file and becomes subject to the Employees Privacy Policy.
Please also note that in the event of litigation, we are obliged to retain all of your personal data throughout the processing of the case, even after the expiry of the retention periods described above.
What rights do you have to control the use of your personal data?
The applicable data protection regulations give you specific rights which you may exercise, at any time and free of charge, in order to control the use we make of your data.
- The right to access and copy your personal data, provided that this request does not conflict with business secrecy, confidentiality or the confidentiality of correspondence.
- Right of rectification of personal data that is erroneous, obsolete or incomplete.
- Right to oppose the processing of your personal data carried out for the purposes of commercial canvassing, as well as processing based on our legitimate interests unless there are legitimate and compelling grounds for such processing which override your interests, rights and freedoms.
- The right to request the deletion ("right to be forgotten") of personal data that is not essential to the proper functioning of our services.
- Right to limitation of your personal data which allows you to photograph the use of your data in the event of a dispute over the legitimacy of processing.
- Right to portability of your data which allows you to retrieve part of your personal data so that it can be easily stored or transmitted from one information system to another.
- The right to give directives on the fate of your data in the event of your death either through you or through a trusted third-party or successor in title.
In order for a request to be considered, it must be made directly by you, or your representative to the address [email protected].
Requests cannot come from anyone other than you or your representative. We may therefore ask you to provide proof of identity if there is any doubt about the identity of the applicant, as well as proof of representation.
We will respond to your request as quickly as possible, with a maximum response time of one month from receipt, unless the request is technically complex or we receive many requests at the same time. In this case, the response time may be up to three months.
Please note that we can always refuse to respond to any excessive or unfounded request, particularly if it is repetitive.
Who can access your personal data?
Your personal data is processed by our teams and by our technical service providers for the sole purpose of operating our service.
Can your personal data be transferred outside the European Union?
Personal data processed by us for recruitment purposes is hosted exclusively within the European Union.
How do we protect your personal data?
We implement all the technical and organisational measures required to guarantee the security of your data on a day-to-day basis and, in particular, to combat any risk of unauthorised destruction, loss, alteration or disclosure of your data (e.g. secure access, antivirus, etc.).
Who can you contact for more information?
Our Data Protection Officer ("DPO") is always available to explain in more detail how we process your data and to answer any questions you may have on the subject at the following address: [email protected].
How can you contact the CNIL (French Data Protection Authority)?
You may at any time contact the "Commission nationale de l'informatique et des libertés" or "CNIL (French Data Protection Authority)" at the following contact details: CNIL (French Data Protection Authority) complaints department, 3 place de Fontenoy - TSA 80751, 75334 Paris Cedex 07 or by telephone on 01.53.73.22.22.
Can the Candidates Privacy Policy be modified?
We may modify our Candidates Privacy Policy at any time to adapt it to new legal requirements as well as to new processing that we may implement in the future.
