SUBJECT
This policy is addressed to candidates for employment or to any person wishing to obtain information or make requests to Consort Group and/or its subsidiaries.
Its purpose is to give details of the purposes/reasons for which we collect your data, how we use it and the rights you have.
This Policy may be amended, supplemented or updated in order to comply with any legal, regulatory, case law or technical developments. We invite you to consult it regularly to keep up to date with the current version.
The Employee Personal Data Privacy Policy sets out the Group’s commitments with regard to the processing of personal data in terms of purpose, transparency, security and individual rights.
CHALLENGES
In a constantly changing world, our duty is to bring the best of digital technology to as many people as possible, with the ambition of making our Consort Group, Consortis and Corsortia brands and our subsidiaries well-known and recognised contributors to this development.
Compliance with international regulations on the protection and respect of privacy, such as the RGPD (General Data Protection Regulation), is one of the fundamental principles of our administrative and operational processes.
The Confidentiality Policy for employees’ personal data sets out the Group’s commitments in terms of purpose, transparency, security and personal rights.
DEFINITIONS
PERSONAL DATA
Personal data – Article 4 of the GDPR defines personal data as “any information relating to an identified or identifiable natural person; an ‘identifiable natural person’ is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.”
Whether confidential or public, private or professional, any information that corresponds to this definition is considered to be personal data.
PROCESSING
Article 4 of the RGPD defines it as “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
It is therefore a very broad concept: any handling of data, including simple consultation, is “processing of personal data”. The processing of personal data is not necessarily computerised: paper files are also concerned and must be protected under the same conditions.
PURPOSE
The purpose indicates what the data will be used for and for what purpose. This purpose must be compatible with the organisation’s missions and must be clear and understandable.
Examples of purposes: recruitment management, customer management, satisfaction surveys, protection of property and individuals, etc.
Information collected and purposes
What information is collected?
The personal data likely to be collected by Consort Group and/or its subsidiaries as data controller is as follows:
- Your curriculum vitae, covering letter, educational background, work placements and professional experience,
- Tests carried out on our suppliers’ platform (e-testing and coding game),
- All the data resulting from your exchanges with the people involved in the management of your application (interpersonal skills, know-how).
As part of the recruitment process, other personal data will be requested:
- Your gender and nationality details, a copy of your identity documents, proof of address and copies of documents proving your right to work (residence permits, visas, work permits) if applicable, your bank details.
- Your health insurance card (social security number, etc.)
For what purposes?
Your personal data will be collected and processed for the following purposes:
- To respond to a request from any person wishing to obtain information or make a request to Consort Group and its subsidiaries;
- To respond to a request for an application as part of the recruitment process.
- As part of the recruitment process, we will draw up your employment contract.
Legal basis for processing
The legal basis is the individual’s consent to the collection of his or her personal data.
You may withdraw your consent at any time by writing to the DPO, whose contact details are given below.
In the context of a recruitment process, it will become a “contract or pre-contractual measures”.
COMMUNICATION, STOCK & TRANSFER
COMMUNICATION
Your data may be sent to :
- The staff of the Communications Department and the staff directly concerned by any questions or comments submitted via the contact questionnaire,
- Persons involved in the recruitment process,
- Our clients, after anonymisation, if your application is successful,
- Our service providers who assist us in co-opting candidates and recruitment agencies.
Please note that your personal data, when entrusted/sub-processed to a service provider, remains under the responsibility of the data controller, which is Consort Group and/or its subsidiaries.
STORAGE
Your information is stored securely on servers located in the European Union (France in particular).
TRANSFER OUTSIDE THE EU
In order to offer a quality service, Consort France, like its sister companies, subcontracts part of its recruitment and employment contract preparation activities to its subsidiary Consort Morocco, based in Rabat. This transfer is carried out in accordance with legal requirements.
RETENTION AND USE OF YOUR DATA
You agree that by sending us personal data, we may process it automatically and store it for the period necessary for processing.
Your personal data will not be further processed in a way that is incompatible with the purposes described above. It will only be kept for as long as is necessary for the fulfilment of these purposes.
Without a request from you, your data from your recruitment request will be automatically deleted from the website database and our internal tools after 2 years.
Data from the website contact form is systematically destroyed as soon as the request has been processed.
As part of the recruitment process, the data collected will be re-used for personnel management purposes and kept for 5 years after you leave the company.
YOUR RIGHTS AND REMEDIES
Use of your rights
In accordance with current regulations, you have the right to access, rectify and delete your Personal Data, as well as the right to limit processing, the right to portability and the right to object.
Procedure:
You may exercise these rights at any time by contacting the DPO either via e-mail at dpo@consort-group.com or by sending a letter to the following address:
Data Protection Officer
Consort Group
58 Boulevard Gouvion Saint Cyr
75017 Paris, France
The DPO will respond to your request within one month of receipt. He may inform you of a longer deadline if he can prove that your request is particularly complex.
In the absence of a response from the DPO department within the aforementioned time limit, or in the event of an unsatisfactory response, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), notably via its website www.cnil.fr or by post at the following address:
CNIL – 3 Place Fontenoy – TSA 80715 – 75334 Paris Cedex 07.données