Personal Data Policy

Our commitments in terms of personal data management, placed under the authority of our DPO, are summarised here.

SUBJECT

This policy is addressed to candidates for employment or to any person wishing to obtain information or make requests to Consort Group and/or its subsidiaries.

Its purpose is to give details of the purposes/reasons for which we collect your data, how we use it and the rights you have.

This Policy may be amended, supplemented or updated in order to comply with any legal, regulatory, case law or technical developments. We invite you to consult it regularly to keep up to date with the current version.

The Employee Personal Data Privacy Policy sets out the Group’s commitments with regard to the processing of personal data in terms of purpose, transparency, security and individual rights.

 

CHALLENGES

In a constantly changing world, our duty is to bring the best of digital technology to as many people as possible, with the ambition of making our Consort Group, Consortis and Corsortia brands and our subsidiaries well-known and recognised contributors to this development.

Compliance with international regulations on the protection and respect of privacy, such as the RGPD (General Data Protection Regulation), is one of the fundamental principles of our administrative and operational processes.

The Confidentiality Policy for employees’ personal data sets out the Group’s commitments in terms of purpose, transparency, security and personal rights.

DEFINITIONS

Personal data

Personal data – Article 4 of the GDPR defines personal data as “any information relating to an identified or identifiable natural person; an ‘identifiable natural person’ is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.”

Whether confidential or public, private or professional, any information that corresponds to this definition is considered to be personal data.

 

PROCESSING

Article 4 of the RGPD defines processing as “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.

It is therefore a very broad concept: any handling of data, including simple consultation, is “processing of personal data”. The processing of personal data is not necessarily computerised: paper files are also concerned and must be protected under the same conditions.

RESPONSIBLE OF PROCESSING

Article 4 of the RGPD defines processing as “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.

It is therefore a very broad concept: any handling of data, including simple consultation, is “processing of personal data”. The processing of personal data is not necessarily computerised: paper files are also concerned and must be protected under the same conditions.

 

CONCLUSION

The purpose indicates what the data will be used for and for what purpose. This purpose must be compatible with the organisation’s missions and must be clear and understandable.

Examples of purposes: recruitment management, customer management, satisfaction surveys, protection of property and individuals, etc.

Information collected and purposes

What information is collected?

The personal data likely to be collected by Consort Group and/or its subsidiaries as data controller is as follows:

Your curriculum vitae, covering letter, educational background, work placements and professional experience,
Tests carried out on our suppliers’ platform (e-testing and coding game),
All the data resulting from your exchanges with the people involved in the management of your application (interpersonal skills, know-how).

 

For what purposes?

Your personal data will be collected and processed for the following purposes:

To respond to a request from any person wishing to obtain information or make a request to Consort Group and its subsidiaries;
To respond to a request for an application as part of the recruitment process.

 

Legal basis for processing

The legal basis is the individual’s consent to the collection of his or her personal data.

You may withdraw your consent at any time by writing to the DPO, whose contact details are given below.

 

COMMUNICATION, STOCK & TRANSFER

COMMUNICATION

The staff of the Communications Department and the staff directly concerned by any questions or comments submitted via the contact questionnaire,
Persons involved in the recruitment process,
Our clients, after anonymisation, if your application is successful,
Our service providers who assist us in co-opting candidates (Keycoopt) and recruitment agencies.

Please note that your personal data, when entrusted/sub-processed to a service provider, remains under the responsibility of the data controller, which is Consort Group and/or its subsidiaries.

 

TRANSFER OUTSIDE THE EU

In order to offer a quality service, Consort France subcontracts part of its recruitment activities to its subsidiary Consort Morocco based in Rabat. This transfer is carried out in accordance with legal requirements.

USE OF YOUR DATA

You agree that by sending us personal data, we may process it automatically and store it for the period necessary for processing.

Your personal data will not be further processed in a way that is incompatible with the purposes described above. It will only be kept for as long as is necessary for the fulfilment of these purposes.

Without a request from you, your data from your recruitment request will be automatically deleted from the website database and our internal tools after 2 years.

Data from the website contact form is systematically destroyed as soon as the request has been processed.

YOUR RIGHTS AND REMEDIE

Reminder of your rights

In accordance with current regulations, you have the right to access, rectify and delete your Personal Data, as well as the right to limit processing, the right to portability and the right to object.

Procedure:

You may exercise these rights at any time by contacting the DPO either via an email to dpo@consort-group.com or by sending a letter to the following address:

Data Protection Officer

Consort Group

58 Boulevard Gouvion Saint Cyr

75017 Paris, France

The DPO has one month from receipt of your request to respond. He may inform you of the extension of this period if he can justify the particular complexity of your request.

In the absence of a response from the DPO department within the aforementioned period or if the response is unsatisfactory, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), in particular on its website www.cnil.fr or by post at the following address:

CNIL – 3 Place Fontenoy – TSA 80715 – 75334 Paris Cedex 07.