PREAMBLE: Purpose of this charter
Service Innovation Group France (hereinafter SIG France), as the company responsible and concerned, attaches the greatest importance to respecting the privacy and personal data of persons who communicate with it via its website or by any other means.
Thus, SIG France and the various parties administering its website (host, IT service providers) respect, in terms of personal data protection, the principles laid down in national and Community texts, the amended Data Protection Act of 6 January 1978 and, in particular, the European General Regulation on the Protection of Personal Data No. 2016/679 of 27 April 2016 (known as the "RGPD"), which has been applicable since 25 May 2018.
The present charter materializes the commitments of the SIG France Company in its capacity as data controller towards you and describes the methods according to which it collects and uses your personal data and information collected in particular when you visit its website, as well as the means available to you to control this use and to exercise your rights relating to it.
Thus, in total transparency, SIG France informs you about :
- How we collect and process your personal data,
- Commitments made to ensure the security of your personal data,
- The rights you have to your personal data processed by its obligations but also yours, in order to ensure maximum protection of your data.
SIG France takes into account the principles of data minimisation and data protection by design and by default. Consequently, information is collected that is relevant, adequate and limited to what is necessary for the purposes for which it is processed
Article 1: Identity and contact details of the controller
SIG France processes your personal data as a data controller, which means that it controls the way in which this personal data is processed and decides the purposes for which it is processed.
You can address any question, request for information or complaint to him by referring to article 6 of this charter.
Article 2: What personal data is collected and how?
Within the framework of its activities, SIG France collects personal data from :
- Clients / Companies,
- Service providers,
Article 2.1: The data that SIG France collects directly from you
It is possible for you to visit the SIG France website without disclosing any personal information. However, certain services that you may use require the collection and retention of automatically recognized information: date and time, IP address, domain name, browser software and operating system used (if the browser provides this information), address of the page visited (if the browser provides it), object requested and execution status of the request.
This data is collected by means of cookies, which are used for website visit statistics.
SIG France collects the information necessary and relevant to recruitment from the CV and interviews: surname, first name, personal address - postal and electronic (e-mail) - telephone number, training, professional experience, diplomas.
Declarative personal data is either dematerialised (that which you provide via forms on the websites) or in response to questions put to you by the Company's employees.
SIG France may also enrich its information with that collected from professional social networks or any other public information source, when this information is useful for managing applications.
No information not directly related to the recruitment process will be requested.
The personal data collected from customers, service providers and employees of SIG France, respect the principles of minimisation, lawfulness, fairness, transparency and purpose limitation.
Article 2.2 : Cookie management
A "cookie" or tracer is an electronic file deposited on a terminal (computer, tablet, smartphone, etc.) and read, for example, when consulting a website, reading an e-mail, installing or using software or a mobile application, regardless of the type of terminal used (source https://www.cnil.fr/fr/cookies-traceurs-que-dit-la-loi).
When browsing this site, "cookies" from the company responsible for the site concerned and/or third-party companies may be deposited on your terminal.
When browsing this site for the first time, a banner explaining the use of "cookies" will appear. From then on, by continuing to browse, the client and/or prospect will be deemed to have been informed and to have accepted the use of the said "cookies". The consent given will be valid for a period of six (6) months. The user has the possibility to deactivate the cookies from the settings of his browser.
All information collected will only be used to track the volume, type and pattern of traffic using this site, to develop the design and layout of the site and for other administrative and planning purposes, and generally to improve the service offered. The lifetime of these cookies is six (6) months.
For more information on the use, management and deletion of "cookies", for any type of browser, you can consult the link : https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser
Article 3: Why does SIG France collect and use your personal data?
If you are an applicant, SIG France retains and uses your information for the following purposes
- Processing your application for a job vacancy,
- To offer you other offers and to keep you informed of the progress of your application.
If you are a customer, SIG France retains and uses your information to :
- To provide you with the services for which it has been commissioned,
- Report on its
SIG France processes your personal data on one of these bases:
- Your free, specific, informed and unambiguous consent to the processing of your personal data,
- SIG France's legitimate interest in managing its recruitment processes and in responding to your request via its website, by sending email communications to the address you have provided and possibly to keep you informed of its news,
- The execution of a contract or pre-contractual measures (e.g. application, taking over a mandate...),
- A legal obligation to which SIG France is subject, such as the fight against fraud, the verification of diplomas, etc.
Important: you have the possibility of implementing your specific right of opposition to commercial prospecting, which ensures, once taken into account (under the conditions of article 6 of this charter), that the processing of your data for this purpose is stopped.
Article 4: What security measures does SIG France apply to your personal data?
SIG France implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, accidental loss, alteration, distribution or unauthorised access.
SIG France also monitors the way in which its service providers process your personal data to ensure that they provide sufficient guarantees that appropriate data security measures are in place.
Article 5: How long does SIG France keep your data?
The personal data collected is kept for the period necessary to achieve the purposes described in Article 3 of this charter, plus the duration of the legal requirements.
The main retention periods are, for :
- Customer data: duration of the contractual relationship, increased by 5 years for animation and prospecting purposes,
- Data relating to prospects: 3 years from the date of the company's agreement,
- Candidate data: for the time necessary to process the application and, in the event of a negative outcome, with your consent, 2 years after the last contact, renewable with your consent,
- Accounting documents and records: 10 years, as evidence
Article 6: What are your rights?
You have the following rights with regard to your personal data:
- Right to information and access: to request access to the information SIG France holds about you;
- Right of rectification: to ask to correct any incomplete or inaccurate information that SIG France holds about you;
- Right of withdrawal and deletion (or "right to be forgotten"): to request the deletion or removal of your personal data;
- Right to the portability of personal data: the applicant, the client, the employee must receive, in a readable format, the data that the company holds on
You may exercise your rights at any time by sending an e-mail to the Data Protection Officer (DPO) of SIG France at the following address firstname.lastname@example.org
In the event of non-treatment by SIG France, you may submit a complaint to the competent control authority (in France, the Commission Nationale de l'Informatique et des Libertés, or "CNIL"): https://www.cnil.fr/
Article 7: To whom may SIG France send your data?
The personal data that SIG France collects may be transmitted:
- To authorised personnel of SIG France,
- To technical service providers providing services contributing to the achievement of the purposes as described in article 3 of the present charter, and in particular the service providers in charge of sending prospecting e-mails, invitations to register and any other information e-mail to your
If you do not wish your personal data to be transmitted, you may exercise your rights as set out in Article 6 of this charter.
You agree that SIG France may also be required to disclose any information about you in order to comply with Applicable Regulations, or to respond to any judicial or administrative request.
Article 8: How might your personal data be transferred outside the European Union?
Your personal data will not be transferred to recipients (service providers, partners) located outside the European Economic Area and in particular in the United States.
Article 9: Liability
- In the event that the personal data you have provided is incorrect or not updated by you,
Article 10: Amendments
SIG France reserves the right to modify the provisions of this charter, which is attached to the company's internal regulations. The previous Personal Data Protection Charter will then be automatically replaced by the new version, which will be immediately enforceable against you, subject to compliance with the administrative formalities incumbent on it.