Last update : october 2022
2. Personal Data Protection
2.1. Processing of Candidates' personal data
In accordance with applicable laws and regulations, EASYENCE, acting as data controller, shall collect certain personal data relating to Candidates.
The categories, purpose of the processing and retention periods of collected personal data are specified in the table below:
|Collecting Personal Data
|Legal basis for the data processing operations
Contact with the Candidate
First and last name, date of birth, postal address, phone number, email address, professional background, academic background, current and/or desired salary
The processing is based on a on pre-contractual measures and on the consent of the Candidate
Deletion of the file, if the Candidate is not selected, and up to two (2) years from the last contact with the Candidate, if he/she gave a consent to the retention of his/her file
Competency assessment during recruitment interviews
Professional and academic background check
Professional background, academic background, diplomas, certificates and attestations, foreign languages skills
The processing is based on the User's consent and on the legitimate interests of EASYENCE
|Deletion of the file, if the Candidate is not selected, and up to two (2) years from the last contact with the Candidate, if he/she gave a consent to the retention of his/her file
Response to any questions/complaints from Candidates
|First and last name, postal address, phone number, email address of the Candidate
|The processing is necessary for the legitimate interests pursued by EASYENCE
|Up to one (1) year from the date of the question/complaint issued by the Candidate
|Management of requests for access, erasure, portability of personal data, limitation of processing, rectification and opposition rights
|First and last names, email address of the Candidate
The processing is necessary in order to respond to Candidates demands on the exercise of their rights
Up to one (1) year after the Candidate has exercised his/her right
Up to three (3) years after the Candidate exercise his/her right of objection
EASYENCE may collect personal data from Candidates through other sources such as verification of the Candidate's educational background, previous work experience, referrers and/or references through the third parties’ websites such as LinkedIn or Viadeo.
The Candidate is informed that if he/she does not wish to give a consent to the provision of the requested personal data, EASYENCE will not be able to consider his/her application for the job and/or internship offer.
EASYENCE provides the Candidate with an overview of its activities and job/internship offers accessible on the following website https://www.welcometothejungle.com/fr/companies/easyence.
2.2. Retention of Candidates' personal data
Candidates' personal data shall be retained only for the period indicated above.
EASYENCE may also retain certain data to fulfil its legal or regulatory obligations for archiving purposes, to enable it to exercise its rights and/or for statistical or historical purposes.
At the end of the above-mentioned periods, the personal data will be deleted or EASYENCE will anonymize it.
2.3. Recipients of the Candidate's personal data
andidates' personal data are processed by:
- EASYENCE and its technical and IT service providers acting as subcontractors of EASYENCE;
- the Company CORUSCANT and its service providers.
Candidates' personal data may be transmitted by EASYENCE to social organizations as well as to administrative and judicial authorities in compliance with applicable laws and regulations.
2.4. Hosting of Candidate's personal data
EASYENCE uses the services of the company NIBELIS (116 rue Jules Guesde, 92300 Levallois-Perret, email@example.com) to host Candidates' personal data.
Candidates' personal data is hosted on servers located in France.
Users' personal data is therefore not transferred outside the European Economic Area.
2.5. Data security measures
EASYENCE ensures the security of Users' personal data by implementing appropriate technical and organizational measures in order to guarantee a proper level of security to the risks, such as pseudonymisation and encryption of Candidates' personal data, and implements means to guarantee the confidentiality, integrity, the constant availability and resilience of the processing systems and services, any means to restore availability and access to Users' personal data, as well as a procedure to regularly test, analyze and evaluate the effectiveness of the technical and organizational measures put in place by EASYENCE.
2.6. Candidates' rights over their personal data
Candidates have the following rights:
Right of access
Candidates may request access to their personal data.
They may also request the modification of inaccurate personal data or that incomplete data to be completed.
They also have the right to know the origin of their personal data.
Right to erasure (Right to be Forgotten)
Candidates may request the erasure of their personal data where:
Right to object
Candidates may object to the processing of their personal data in accordance with the legal obligations imposed on EASYENCE.
Right to restriction of processing
Candidates may also request a restriction of processing of their Personal Data if:
Right not to be subjected to a decision exclusively based on the basis of an automated data processing
Candidates shall not be the subject to a decision based exclusively on automated processing that produces legal effects concerning them or significantly affects them.
Right to portability
Candidates may request that EASYENCE provide them with their personal data in a structured, commonly used, machine-readable format, or request to transmit those data directly to another data controller as long as:
|Right to give directives on the processing of their personal data after their death
Pursuant to the Article 85 of French Data Protection Act of 6 January 1978 as amended, Candidates may make directives on the exercise of their rights under this section after their death, (in particular on the duration of the retention of their personal data, their deletion and/or its communication) as well as designate a person responsible for the exercise of these rights.
In the absence of such directives, EASYENCE will grant the requests of their heirs, as set out in article 85, II of the Data Protection Act.
Right to make a complaint to a supervisory authority
If Candidates have any concerns or appeals regarding the protection of their personal data, they have the right to make a complaint to the Commission Nationale de l'Informatique et des Libertés via the following link: Online Complaints | CNIL
The CNIL can also be contacted at the following address: 3 Place de Fontenoy, 75007 Paris - phone: 01 53 73 22 22.
Candidates are invited to inform the DPO of the EASYENCE in advance so that the DPO can process the request and attempt to find an amicable solution.
2.6. How to contact the Data Protection Officer?
For any questions regarding the processing of personal data and in order to exercise the above rights, Candidates may contact the Data Protection Officer of EASYENCE at the following email address: firstname.lastname@example.org or at the following postal address: Délégué à la Protection des Données Personnelles, Société EASYENCE, 89, rue du Faubourg Saint-Denis, 75010, Paris.