Privacy Policy on the Processing of Candidates’ Personal Data

 

You may print this Privacy Policy from your browser by pressing CTRL+P on Windows and Linux, or ⌘+P on Mac.

 

1.       What are “personal data”?

“Personal data” means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier (name, contact details, CV, professional information, etc.). We process your personal data (the “Data”) in connection with your application, our recruitment processes and, where applicable, in order to prepare your hiring.

 

2.       Data controller

The data controller is MESSIKA GROUP, a simplified joint-stock company (société par actions simplifiée), whose registered office is located at 44 avenue des Champs Elysées, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 301 293 999 (“MESSIKA” or “we”), acting on its own behalf and, where applicable, on behalf of its subsidiaries for the purposes of recruitment.

We may amend and update this Privacy Policy from time to time by publishing a new version on messika.com.

 

3.       What processing operations are carried out by MESSIKA in connection with your application?

MESSIKA processes your personal data in order to:

• Receive and review your application;
• Organise and conduct recruitment interviews;
• Assess your profile against open positions;
• Communicate with you throughout the recruitment process;
• Where applicable, prepare your hiring.

 

4.       What Data are processed?

In the context of recruitment, MESSIKA may process, in particular:

• Identification and contact data;
• Data relating to your professional and academic background (CV, cover letter, experience);
• Information arising from exchanges and interviews (assessments, comments, decisions);
• In the event of hiring and where required by applicable laws, data necessary for regulatory checks, such as information relating to integrity/background (criminal record extract), without retaining the document beyond what is strictly necessary.

MESSIKA undertakes to collect only data that are relevant, adequate and necessary in light of the purposes pursued.

 

5.       How is your Data collected?

Your Data are collected:

• Directly from you, when you apply or communicate with us;
• Via the Workday platform, used by MESSIKA for the overall management of its recruitment processes;
• Indirectly, when MESSIKA identifies profiles through professional social networks or specialised platforms, such as LinkedIn or FashionJobs, or through recruitment agencies.

 

6.       What are the purposes and legal bases for processing your Data?

The processing operations carried out are mainly based on:

• The performance of pre-contractual measures, when you apply for a position;
• MESSIKA’s legitimate interest in collecting and contacting (through professional social networkds) Data to contact you about job offers that may interest you, and in managing and improving its recruitment processes;
• Compliance with legal and regulatory obligations, in particular with regard to compliance and security;
• Your consent, where required (in particular for retaining your application beyond a specific recruitment process).

 

7.       Who has access to your Data?

Your Data are accessible only to:

• MESSIKA’s Human Resources and Talent Acquisition teams;
• Managers and internal teams concerned by the position;
• Recruitment agencies acting on behalf of MESSIKA;
• Technical service providers involved in recruitment, in particular Workday, acting as a processor.

Access is strictly limited to persons who need to know.

 

8.       For how long are your Data retained?

In the event of hiring, your Data are included in your employee file and retained in accordance with locally applicable law.

In the event you are not hired:

• Your Data are retained for a limited period after the recruitment process is closed;
• Unless you agree that MESSIKA may retain your application for future opportunities, in which case they are retained for up to 2 years from the last contact. You may withdraw your consent at any time.

Data relating to regulatory checks (such as criminal record extracts) are retained only for the period strictly necessary to perform the check and are not subject to systematic retention.

 

9.       Transfers of Data outside their jurisdiction of collection

MESSIKA operates internationally. In this context, your Data may be transferred to countries located outside their jurisdiction of collection, including outside the European Union.

List of MESSIKA entities:

 

MESSIKA implements the appropriate safeguards required by applicable regulations, in particular:

• adequacy decisions; or
• standard contractual clauses approved by the competent authorities.

 

10.       What are your rights in relation to your Data?

Depending on the regulations applicable in your country, you have rights with respect to your personal data, as set out below.

 

a.       Access, rectification and data portability

You may:

• access your personal data;
• request that they be rectified or updated;
• request data portability where this right applies.

 

b.      Right to erasure and restriction of processing of your personal data

You may request:

• the erasure of your data where their retention is no longer justified;
• the restriction of their processing under the conditions provided for by applicable law.

 

c.       France: right to set instructions regarding the handling of your Data after your death

In accordance with French regulations, you may set instructions relating to the retention, erasure and disclosure of your personal data after your death.

 

11.       USA: do not Sale or Share

MESSIKA does not Sell nor Share candidates’ Data within the meaning of applicable United States laws (CCPA / CPRA).

 

12.       How is the security of your Data ensured?

MESSIKA implements the technical and organisational measures we deem necessary to ensure the confidentiality and security of your Data, including:

• State-of-the-art physical and software protection of our IT systems.
• Implementation of physical and electronic data backup procedures, in accordance with applicable French data protection laws and market standards.
• Awareness-raising for MESSIKA employees who, due to their duties, may have access to your Data. These employees are bound by a strict confidentiality obligation.
• Data are accessible only in a secure manner and to authorised persons. Access is limited and controlled (logical IP access management, VPN).
• Implementation of internal audits and audits of IT service providers.
• Security of your payment information. All financial information you provide on the Site is stored on the secure site of the financial institution selected by MESSIKA. All transactions concluded on the Site are protected by SSL encryption.

Although we strive to ensure optimal protection of your Data, we remind you that the transmission of information over the Internet is not completely secure. Please be aware that any information communicated online may potentially be intercepted and used by persons other than the intended recipient.

 

13.       Contact in case of questions and complaints

If you have any questions regarding this policy or wish to exercise your rights, you may contact: dpo@messika.com.

If you consider that your rights have not been respected, you may lodge a complaint with the data protection authority competent in your country of residence.