Recruitment Privacy Policy
INTRODUCTION
The Data Controller is Betclic Everest Group (the “Company”) registered in Paris with company registration number 501 420 939 and having its registered office at 5 rue François 1er 75008 Paris France, as well as its affiliates and sub-affiliates.
This Policy covers all personal data processing performed in the context of your application for a position, its study and / or in the context of recruitment and provides you with certain information that must be provided under the General Data Protection Regulation (EU) 2016/679) (GDPR).
Please take the time to read our Privacy Policy carefully. Should you require further information or if you have any questions regarding privacy or confidentiality issues, please contact our Data protection Officer (DPO) at the following email address : privacy.team@betclicgroup.com.
1. What personal data is collected ?
This is the personal data you provide us to apply for a job :
o Surname, first name, date and place of birth, e-mail address, postal address, other contact details including mobile phone number, employment history and qualifications (academic and professional), gender, nationality and work permit or the place where you apply. We may check your criminal record if it is necessary for the position concerned ; and
o Other information that you provide in support of your application, including (but not limited to) the information contained in your resume and / or your e-mail application, as well as the reasons for your application to the Company.
2. For what purposes and on what basis do we collect your personal data ?
Your personal data is processed for specific purposes and in accordance with regulation and applicable laws. We process your data for the following purposes :
To review your application and assess your abilities, skills and suitability for the position (Performance of a contract)
When necessary, to communicate with you on the recruitment process (Performance of a contract)
To carry out checks of the information that you communicate to us, directly or through authorized third parties (Legitimate interest)
To keep records of your recruitment process (Legal obligation & Legitimate interest)
To carry out statistical studies (Legitimate interest)
3. Recipients of your data
The data collected are strictly necessary for the purposes above and are then sent to the relevant departments of the Company as well as its service providers and subcontractors.
3.1 Within the Company and Group companies of the Company
When personal data is disclosed within the Company or to other companies in the Company Group, we take the necessary measures to ensure that such personal data is accessible only to those employees who need it.
Where applicable, we transmit your personal data to the authorized personnel of the Company, in particular the employees in charge of recruitment.
3.2 Outside the Company
In the context of our activity or for the fulfillment of the purposes mentioned above, we may share your data with the following third parties, subcontractors or authorized agents:
- The recruitment platform;
- Representatives of the law enforcement agencies, judicial or administrative authorities or other authorized third parties in response to a request for information from a competent authority, if the Company considers that the communication of such information is lawful or required by a law, an applicable regulation or in the context of a judicial proceeding;
- Our legal advisers and / or lawyers;
You can obtain further information on these recipients by contacting the Company or its Data Protection Officer.
4. Security of your personal data
The Company uses its best endeavors to assure the security and confidentiality of the data that you communicate.
We make sure to implement appropriate technical, physical and organizational control measures to ensure the security and confidentiality of your data.
This Policy is reflected in a specific framework for the use of data by our employees, as well as the selection of subcontractors conforming to the standards laid down by the regulations in force.
In this regard, Betclic makes sure to:
- Securing access to its premises and to its IT platforms;
- Securing access, sharing and transfer of data;
- The implementation of an IT security policy;
- Ensure employee awareness of confidentiality and data protection requirements;
- The strict selection of its partners and service providers.
5. **Retention of your personal data**
In the event of a negative response to your application, we will inform you of our wish to keep your personal data.
Except if you request deletion, your personal data will be kept by the Company for a period of two (2) years from our last contact.
Beyond this period your data will be erased regularly unless it is necessary to keep them longer (i) to ensure compliance with legal, accounting and tax retention requirements (ii) for the retention of evidence during applicable limitation periods, (iii) for the exercise of the rights of the Company in the event of contentious or judicial action during the entire period of the proceedings or the investigation.
6. Your personal data rights
6.1 What are your rights ?
In accordance with the applicable data protection legislation, you have the following rights concerning your personal data :
The right to be informed about the collection and use of your personal data: You have the right to demand clear, transparent, and easily understandable information about how we use your personal data and about your rights.
The right of access : You have the right to obtain a copy of your personal data.
The right to the portability of personal data: You have the right, under certain circumstances, to receive personal data about you that you have provided us in a structured, commonly used and machine readable format and to transmit it to another controller.
The right of rectification : You have the right to obtain the rectification of your personal data if they are inaccurate or incomplete.
The right to object to the processing of your personal data :
You have the right to oppose certain types of processing (for example, when the processing is based on our legitimate interests).
The right to withdraw your consent: If you have given your consent to a processing of your personal data that we carry out, you have the right to withdraw it at any time.
The right to erasure (the "right to be forgotten"): You have the right to obtain the erasure of your personal data. However, the right to erasure (or the "right to be forgotten") is not absolute and is subject to special conditions. We may retain your personal data to the extent permitted by applicable law, and in particular where the processing of such personal data is still necessary for the fulfillment of a legal obligation to which we are subject or for the purpose of ascertaining, exercising or defending of a right to justice.
The right to the limitation of the processing: You have the right to obtain the limitation of the processing in certain circumstances (for example when we no longer need your personal data but that these are still necessary for the observation, exercising or defending a right to justice).
The right to set guidelines on the fate of your data after your death : You can set guidelines for the retention, erasure and disclosure of your personal data after your death.
6.2 How to exercise your rights ?
Please send us any request regarding your rights in relation to your personal data by email at privacy.team@betclicgroup.com.
We will respond to your request as soon as possible and always within the deadlines provided by the applicable data protection legislation.
You will find more information about your rights on the CNIL website: https://www.cnil.fr/.
You also have the right to file a complaint with the Commission Nationale Informatique et Libertés (CNIL https://www.cnil.fr/ - 3 Place Fontenoy - TSA 80715 - 75334 Paris - Cedex 07 France) or the data protection regulator of the country in which you live or reside.