Personal Data Policy

Our commitments in terms of personal data management, placed under the authority of our DPO, are summarised here.

SUBJECT

This policy is addressed to candidates for employment or to any person wishing to obtain information or make requests to Consort Group and/or its subsidiaries.

Its purpose is to give details of the purposes/reasons for which we collect your data, how we use it and the rights you have.

This Policy may be amended, supplemented or updated in order to comply with any legal, regulatory, case law or technical developments. We invite you to consult it regularly to keep up to date with the current version.

The Employee Personal Data Privacy Policy sets out the Group’s commitments with regard to the processing of personal data in terms of purpose, transparency, security and individual rights.

 

CHALLENGES

In a constantly changing world, our duty is to bring the best of digital technology to as many people as possible, with the ambition of making our Consort Group, Consortis and Corsortia brands and our subsidiaries well-known and recognised contributors to this development.

Compliance with international regulations on the protection and respect of privacy, such as the RGPD (General Data Protection Regulation), is one of the fundamental principles of our administrative and operational processes.

The Confidentiality Policy for employees’ personal data sets out the Group’s commitments in terms of purpose, transparency, security and personal rights.

DEFINITIONS

PERSONAL DATA

Personal data – Article 4 of the GDPR defines personal data as “any information relating to an identified or identifiable natural person; an ‘identifiable natural person’ is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.”

Whether confidential or public, private or professional, any information that corresponds to this definition is considered to be personal data.

 

PROCESSING

Article 4 of the RGPD defines it as “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.

It is therefore a very broad concept: any handling of data, including simple consultation, is “processing of personal data”. The processing of personal data is not necessarily computerised: paper files are also concerned and must be protected under the same conditions.

PURPOSE

The purpose indicates what the data will be used for and for what purpose. This purpose must be compatible with the organisation’s missions and must be clear and understandable.

Examples of purposes: recruitment management, customer management, satisfaction surveys, protection of property and individuals, etc.

Information collected and purposes

What information is collected?

The personal data likely to be collected by Consort Group and/or its subsidiaries as data controller is as follows:

  • Your curriculum vitae, covering letter, educational background, work placements and professional experience,
  • Tests carried out on our suppliers’ platform (e-testing and coding game),
  • All the data resulting from your exchanges with the people involved in the management of your application (interpersonal skills, know-how).

As part of the recruitment process, other personal data will be requested:

  • Your gender and nationality details, a copy of your identity documents, proof of address and copies of documents proving your right to work (residence permits, visas, work permits) if applicable, your bank details.
  • Your health insurance card (social security number, etc.)

 

For what purposes?

Your personal data will be collected and processed for the following purposes:

  • To respond to a request from any person wishing to obtain information or make a request to Consort Group and its subsidiaries;
  • To respond to a request for an application as part of the recruitment process.
  • As part of the recruitment process, we will draw up your employment contract.

 

Legal basis for processing

The legal basis is the individual’s consent to the collection of his or her personal data.

You may withdraw your consent at any time by writing to the DPO, whose contact details are given below.

In the context of a recruitment process, it will become a “contract or pre-contractual measures”.

COMMUNICATION, STOCK & TRANSFER

COMMUNICATION

Your data may be sent to :

  • The staff of the Communications Department and the staff directly concerned by any questions or comments submitted via the contact questionnaire,
  • Persons involved in the recruitment process,
  • Our clients, after anonymisation, if your application is successful,
  • Our service providers who assist us in co-opting candidates and recruitment agencies.

Please note that your personal data, when entrusted/sub-processed to a service provider, remains under the responsibility of the data controller, which is Consort Group and/or its subsidiaries.

 

STORAGE

Your information is stored securely on servers located in the European Union (France in particular).

TRANSFER OUTSIDE THE EU

In order to offer a quality service, Consort France, like its sister companies, subcontracts part of its recruitment and employment contract preparation activities to its subsidiary Consort Morocco, based in Rabat. This transfer is carried out in accordance with legal requirements.

RETENTION AND USE OF YOUR DATA

You agree that by sending us personal data, we may process it automatically and store it for the period necessary for processing.

Your personal data will not be further processed in a way that is incompatible with the purposes described above. It will only be kept for as long as is necessary for the fulfilment of these purposes.

Without a request from you, your data from your recruitment request will be automatically deleted from the website database and our internal tools after 2 years.

Data from the website contact form is systematically destroyed as soon as the request has been processed.

As part of the recruitment process, the data collected will be re-used for personnel management purposes and kept for 5 years after you leave the company.

YOUR RIGHTS AND REMEDIES

Use of your rights

In accordance with current regulations, you have the right to access, rectify and delete your Personal Data, as well as the right to limit processing, the right to portability and the right to object.

Procedure:

You may exercise these rights at any time by contacting the DPO either via e-mail at dpo@consort-group.com or by sending a letter to the following address:

Data Protection Officer

Consort Group

58 Boulevard Gouvion Saint Cyr

75017 Paris, France

The DPO will respond to your request within one month of receipt. He may inform you of a longer deadline if he can prove that your request is particularly complex.

In the absence of a response from the DPO department within the aforementioned time limit, or in the event of an unsatisfactory response, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), notably via its website www.cnil.fr or by post at the following address:

CNIL – 3 Place Fontenoy – TSA 80715 – 75334 Paris Cedex 07.données