PRIVACY POLICY

Our privacy policy

 

New personal data protection legislation came into force on 25 May 2018.

 

Ensuring that we collect and process your personal data in accordance with the applicable legislation is a priority for us.

 

In the document below, “You” and “Your” relate to anyone affected by the processing of the personal data referred to in this privacy policy.

 

To find out :

  • Why your data is processed and what data we collect,
  • A qui vos données sont transmises,
  • Who receives your data,
  • and what RIGHTS (access, rectification, etc.) you have over it,

 

please read the information below :

 

 

Applicants

WHY DO WE PROCESS YOUR DATA ?

 

We process your data in order to assess your application and then to create your file, update it as necessary when your situation changes, and analyse it in order to offer you assignments that match your skills.

 

The data comes from information that you have entered in your account or on a forum, or supplied to your branch, or which has been published on a job board.

 

The lawful basis for the processing is your consent, which you gave us clearly and specifically when we collected your data.

 

We limit the collection of personal data to that which is sufficient, relevant and strictly necessary to the processing we carry out. If you opt not to supply data that we request, we may be unable to offer you an assignment.

 

TO WHOM DO WE COMMUNICATE YOUR PERSONAL DATA ?

 

Your personal data may be communicated to Partnaire Group branches and to our clients and potential clients.
Please be aware that we use hosting services - a full list of these is available on request.

 

HOW LONG DO WE KEEP YOUR DATA ?

 

We will store your data for a maximum of three years from your last contact with us, if you do not sign an assignment contract with us during that time.

 

As an exception to this, we may keep your data for longer for the purposes of managing claims or disputes.

 

QUELS SONT VOS DROITS ?

 

You have the right to request access to your personnal data, and to have inaccurate data rectified.

 

Right to access

Right to rectification

 

Exercising your right to access enables you to find out whether we have processed data about you, and to have it communicated to you in a comprehensible format.

 

It also allows you to check the accuracy of the data and have it rectified or deleted if necessary.

 

Any organisation you contact about your “right to access” must be able to provide you with a copy of the data they hold about you and give you information on:

 

- the use they make of this data,

 

- the categories of data they collect,

 

- the recipients or categories of recipients who have been able to access this data,

 

- the retention period for storing the data or the criteria for determining how long it is to be stored,

 

- the existence of other rights (right to rectification, erasure or restriction or to object to processing),

 

- the right to lodge a complaint with CNIL,

 

- any information relating to the source of the data collected, if it was not collected from you directly,

 

- whether they use automated decision-making, including profiling, and the logic behind this, its importance and the consequences for you of such a decision,

 

- whether the information is transferred to a third-party country (outside the EU) or an international organisation.

 

To find out more :

https://www.cnil.fr/fr/le-droit-dacces-connaitre-les-donnees-quun-organisme-detient-sur-vous

GDPR Article 15

Articles 39 and 40.1 to 43 of the French Data Protection Law

 

Under the right to rectification, you can have inaccurate data about you corrected (e.g., a mistake in your age or address) or have missing information added (e.g., address missing the apartment number), in relation to the purpose of the processing.

 

To find out more :

https://www.cnil.fr/fr/le-droit-de-rectification-corriger-vos-informations

GDPR Article 16

Articles 40 to 42 of the French Data Protection Law

 

YOU CAN WITHDRAW THE CONSENT YOU HAVE GIVEN US TO PROCESS YOUR APPLICATION AT ANY TIME, by emailing dpo@partnaire.fr.

 

You can ask us to erase your data once you have withdrawn your consent to process your application. In this case, the only data we will retain about you is that recorded elsewhere in connection with an assignment.

 

Right to erasure, or the right to be forgotten

Individuals have the right to demand that the data controller erase their personal data as quickly as possible, and the data controller is obliged to erase this personal data as quickly as possible, when one of the following reasons applies:

a) the personal data is no longer required for the purpose for which it was collected or otherwise processed;

b) the individual withdraws their consent which was the lawful basis for the data processing, in accordance with article 6, paragraph 1, point a) or article 9, paragraph 2, point a) and there is no other legal basis for processing the data;

c) the individual objects to the processing of their data under article 21, paragraph 1 and there is no overriding legitimate reason for continuing with the processing, or else the individual objects to the processing under article 21, paragraph 2;

d) the personal data has been processed unlawfully;

e) the personal data has to be erased to comply with a legal obligation under European Union law or under the law of a Member State to which the data controller is subject;

f) the personal data has been collected for the purposes of offering information society services as described in article 8, paragraph 1.

 

To find out more : GDPR Article 17


You can ask for processing to be restricted, in the cases and circumstances provided for by the relevant legislation.

 

Right to restrict processing

 

1.The individual has the right to require the data controller to restrict processing if one of the following circumstances applies:

a) the individual contests the accuracy of the personal data, in which case processing will be restricted for the time it takes the data controller to check the accuracy of the personal data;

b) the data has been processed unlawfully and the individual does not require it to be erased but wants limitations placed on its use;

c) the data controller no longer needs the personal data for the purposes for which it was processed but the individual still requires it in order to establish, exercise or defend a legal claim;

d) the individual has objected to processing under article 21, paragraph 1, while checks are made to determine whether the data controller’s legitimate grounds take precedence over those of the individual in question.

To find out more : RGPD Article 18

 

 

You have the right to data portability as regards the personal data that you have provided us with, under the conditions set out by the relevant legislation.

 

Right to data portability

 

Individuals have the right to obtain their personal data that they have supplied to a data controller in a structured, commonly used and machine-readable format. They also have the right to transfer this data to another data controller without the data controller to whom the data was communicated objecting, when:

-          a) lthe processing is based on consent, in application of article 6, paragraph 1, point a), or article 9, paragraph 2, point a), or on a contract in application of article 6, paragraph 1, point b);

-          and b) the processing is carried out using automated processes.

 

To find out more: GDPR Article 20

 

 

You have the right to give instructions regarding the storage, erasure and communication of your personal data after your death, in application of the relevant legislation and regulations.

 

The right to give instructions for after your death

 

To find out more : Article 40.1 of the French Data Protection Law
The application of this right is subject to a decree which has yet to be published.

 

 

You have the right not to be subject to a decision based solely on automated processing, in the circumstances and within the limits set out in the relevant legislation.

 

The right not to be subject to a decision based on automated processing

 

1.Individuals have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

2.Paragraph 1 does not apply if the decision:

a) is required to enter into or perform a contract between the individual and the data controller;

b) is authorised by European Union law or the law of a Member State to which the data controller is subject, and also provides for appropriate measures for safeguarding the rights, freedoms and legitimate interests of the individual; or

c) is based on the individual’s explicit consent.

 

To find out more :

GDPR Article 22
Article 10 of the French Data Protection Law

 

 


Partnaire temps

WHY DO WE PROCESS YOUR DATA ?

 

Your data is processed for the purposes of administering and organising your job and managing your career progression and work-related moves.

Administering your job includes a number of different processing operations based on your assignment contract, the company rules and our obligations as an employer: calculating and paying wages; managing working time, holiday and sick leave; liaising with social welfare and insurance organisations and other relevant authorities; communicating with occupational health; and reimbursing expenses.

 

We will also use your telephone number and/or your email address to send you information that may interest you, in line with the terms of use for your personal account, if you have one.

 

If you do not have a personal account, your telephone number and email address are used based on your consent, which you gave clearly and precisely when you created your file.

 

We limit the collection of personal data to that which is sufficient, relevant and strictly necessary to the processing we carry out. If you opt not to supply us with data, it may be impossible for us to sign an assignment contract with you or to meet our obligations as an employer.

 

TO WHOM DO WE COMMUNICATE YOUR PERSONAL DATA ?

 

Your personal data can be accessed by Partnaire Group’s in-house services and by Partnaire branches, according to each individual staff member’s level of accreditation. The information required for your assignment (such as your name, address and telephone number) is communicated to our user businesses.

 

Your personal data is communicated to social welfare and insurance organisations, the relevant authorities and occupational health, in accordance with the relevant legislation.

 

Please be aware that we use hosting services. A full list of these is available on request.

 

HOW LONG DO WE KEEP YOUR DATA ?

 

Your personal data will be kept for a duration equal to your period of employment plus the limitation period (five years, unless interrupted), without prejudice to any legal or regulatory provisions that may apply to certain categories of data requiring them to be kept for a specific duration or deleted.

 

Data relating to specific constraints which entitle you to special leave or to paid hours for trade union activities will be kept only for as long as the constraint continues to exist.

 

Your payslips will be kept for five years after your employment period ends.

 

WHAT RIGHTS DO YOU HAVE ?

 

You have the right to request access to your personal data, and to have inaccurate data rectified.

 

Right to access

Right to rectification

 

Exercising your right to access enables you to find out whether we have processed data about you, and to have it communicated to you in a comprehensible format.

 

It also allows you to check the accuracy of the data and have it rectified or deleted if necessary.

 

Any organisation you contact about your “right to access” must be able to provide you with a copy of the data they hold about you and give you information on:

 

- the use they make of this data,

- the categories of data they collect,

- the recipients or categories of recipients who have been able to access this data,

- the retention period for storing the data or the criteria for determining how long it is to be stored,

- the existence of other rights (right to rectification, erasure or restriction or to object to processing),

- the right to lodge a complaint with CNIL,

- any information relating to the source of the data collected, if it was not collected from you directly,

- whether they use automated decision-making, including profiling, and the logic behind this, its importance and the consequences for you of such a decision,

- whether the information is transferred to a third-party country (outside the EU) or an international organisation.

 

To find out more :

https://www.cnil.fr/fr/le-droit-dacces-connaitre-les-donnees-quun-organisme-detient-sur-vous

GDPR Article 15
Articles 39 and 40.1 to 43 of the French Data Protection Law

 

Under the right to rectification, you can have inaccurate data about you corrected (e.g., a mistake in your age or address) or have missing information added (e.g., address missing the apartment number), in relation to the purpose of the processing.

 

To find out more :

https://www.cnil.fr/fr/le-droit-de-rectification-corriger-vos-informations

GDPR Article 16
Articles 40 to 42 of the French Data Protection Law

YOU CAN AT ANY TIME WITHDRAW THE CONSENT YOU HAVE GIVEN US TO SEND YOU EMAILS FOR INFORMATION PURPOSES, by emailing dpo@partnaire.fr.

 

You can also ask for your data to be erased, if the legal conditions enabling you to exercise this right have been met.

 

Right to erasure, or the right to be forgotten

 

Individuals have the right to demand that the data controller erase their personal data as quickly as possible, and the data controller is obliged to erase this personal data as quickly as possible, when one of the following reasons applies:

 

a) the personal data is no longer required for the purpose for which it was collected or otherwise processed;
b) the individual withdraws their consent which was the lawful basis for the data processing, in accordance with article 6, paragraph 1, point a) or article 9, paragraph 2, point a) and there is no other legal basis for processing the data;
c) the individual objects to the processing of their data under article 21, paragraph 1 and there is no overriding legitimate reason for continuing with the processing, or else the individual objects to the processing under article 21, paragraph 2;
d) the personal data has been processed unlawfully;
e) the personal data has to be erased to comply with a legal obligation under European Union law or under the law of a Member State to which the data controller is subject;
f) the personal data has been collected for the purposes of offering information society services as described in article 8, paragraph 1.

 

To find out more: GDPR Article 17

 


You can ask for processing to be restricted, in the cases and circumstances provided for by the relevant legislation.

 

Right to restrict processing

 

1.The individual has the right to require the data controller to restrict processing if one of the following circumstances applies:

a) the individual contests the accuracy of the personal data, in which case processing will be restricted for the time it takes the data controller to check the accuracy of the personal data;
b) the data has been processed unlawfully and the individual does not require it to be erased but wants limitations placed on its use;
c) the data controller no longer needs the personal data for the purposes for which it was processed but the individual still requires it in order to establish, exercise or defend a legal claim;
d) the individual has objected to processing under article 21, paragraph 1, while checks are made to determine whether the data controller’s legitimate grounds take precedence over those of the individual in question.

 

To find out more: GDPR Article 18

 

 

You have the right to data portability as regards the personal data that you have provided us with, under the conditions set out by the relevant legislation.

 

 

Right to data portability

 

Individuals have the right to obtain their personal data that they have supplied to a data controller in a structured, commonly used and machine-readable format. They also have the right to transfer this data to another data controller without the data controller to whom the data was communicated objecting, when:

-          a) he processing is based on consent, in application of article 6, paragraph 1, point a), or article 9, paragraph 2, point a), or on a contract in application of article 6, paragraph 1, point b);

-          and b) the processing is carried out using automated processes.

 

To find out more: GDPR Article 20

 

 

You have the right to give instructions regarding the storage, erasure and communication of your personal data after your death, in application of the relevant legislation and regulations.

 

The right to give instructions for after your death

 

To find out more : Article 40.1 of the French Data Protection Law

The application of this right is subject to a decree which has yet to be published.

 

 

You hage the right not to be subject to a decision based solely on automated processing, in the circumstances and within the limits set out in the relevant legislation.

 

The right not to be subject to a decision based on automated processing

 

1.Individuals have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

2.Paragraph 1 does not apply if the decision:

a) is required to enter into or perform a contract between the individual and the data controller;
b) is authorised by European Union law or the law of a Member State to which the data controller is subject, and also provides for appropriate measures for safeguarding the rights, freedoms and legitimate interests of the individual; or
c) is based on the individual’s explicit consent.

 

To find out more :

GDPR Article 22

Article 10 of the French Data Protection Law

 

 

 

Prospective clients or contacts at Partnaire Group client or partner companies

WHY DO WE PROCESS YOUR DATA ?

 

We process your personal data in order to :

 

  • Manage the administrative and commercial relationship between us and the company for which you are working. The legal basis for this processing is our legitimate interests, to enable us to communicate with our business partners. These interests are not detrimental to your personal interests, because they involve the purely commercial relations between us and the company for which you are working.
  • We offer products and services that are likely to interest the company for which you are working. The legal basis for this processing is our legitimate interests, to enable us to promote our products and services. These interests are not detrimental to your personal interests because you can at any time refuse to receive our proposals.

 

In this context, we limit the personal data that we collect to that which is sufficient, relevant and strictly necessary to the commercial relationship; i.e.: your name, your work email address and your work telephone number.

 

If you opt not to supply this data, we will be unable to maintain a commercial relationship with your company through you.

 

TO WHOM DO WE COMMUNICATE YOUR PERSONAL DATA ?

 

If you are a Partnaire Group client, your personal data will only be communicated to third parties in so far as this is strictly necessary in the context of the commercial relationship.

 

If you are a prospective client, your personal data will never be communicated to third parties in any form whatsoever.

 

HOW LONG DO WE KEEP YOUR DATA ?

 

The period during which we will keep your personal data will be as follows :

 

  • If you are a client, for the period required to manage the commercial relationship plus the limitation period (five years, unless interrupted);
  • If you are a prospective client, for a maximum of three years after we were last in contact with you.

 

As an exception to this, we may keep your data for longer for the purposes of managing claims or disputes, or to meet our legal and/or regulatory obligations.

 

WHAT RIGHTS DO YOU HAVE ?

 

You have the right to request access to your personal data, and to have inaccurate data rectified.

 

Right to access

Right to rectification

 

Exercising your right to access enables you to find out whether we have processed data about you, and to have it communicated to you in a comprehensible format.

 

It also allows you to check the accuracy of the data and have it rectified or deleted if necessary.

 

Any organisation you contact about your “right to access” must be able to provide you with a copy of the data they hold about you and give you information on :

-          the use they make of this data,

-          the categories of data they collect,

-          the recipients or categories of recipients who have been able to access this data,

-          the retention period for storing the data or the criteria for determining how long it is to be stored,

-         the existence of other rights (right to rectification, erasure or restriction or to object to processing),

-          the right to lodge a complaint with CNIL,,

-          any information relating to the source of the data collected, if it was not collected from you directly,

-          whether they use automated decision-making, including profiling, and the logic behind this, its importance and the consequences for you of such a decision,

-          whether the information is transferred to a third-party country (outside the EU) or an international organisation

 

To find out more :

https://www.cnil.fr/fr/le-droit-dacces-connaitre-les-donnees-quun-organisme-detient-sur-vous

GDPR Article 15
Articles 39 and 40.1 to 43 of the French Data Protection Law

 

Under the right to rectification, you can have inaccurate data about you corrected (e.g., a mistake in your age or address) or have missing information added (e.g., address missing the apartment number), in relation to the purpose of the processing.

 

To find out more :

https://www.cnil.fr/fr/le-droit-de-rectification-corriger-vos-informations

GDPR Article 16
Articles 40 to 42 of the French Data Protection Law

 

YOU CAN WITHDRAW YOUR CONSENT TO RECEIVE SALES CANVASSING EMAILS AT ANY TIME, by clicking the unsubscribe link in the email

 

You can also ask for your data to be erased, if the legal conditions enabling you to exercise this right have been met.

 

Right to erasure, or the right to be forgotten

Individuals have the right to demand that the data controller erase their personal data as quickly as possible, and the data controller is obliged to erase this personal data as quickly as possible, when one of the following reasons applies:

  a) the personal data is no longer required for the purpose for which it was collected or otherwise processed;
b) the individual withdraws their consent which was the lawful basis for the data processing, in accordance with article 6, paragraph 1, point a) or article 9, paragraph 2, point a) and there is no other legal basis for processing the data;
c) the individual objects to the processing of their data under article 21, paragraph 1 and there is no overriding legitimate reason for continuing with the processing, or else the individual objects to the processing under article 21, paragraph 2;
d) the personal data has been processed unlawfully;
e) the personal data has to be erased to comply with a legal obligation under European Union law or under the law of a Member State to which the data controller is subject;
f) the personal data has been collected for the purposes of offering information society services as described in article 8, paragraph 1.

 

To find out more : GDPR Article 17

 

 

You can ask for processing to be restricted, in the cases and circumstances provided for by the relevant legislation.

 

Right to restrict processing

 

1.The individual has the right to require the data controller to restrict processing if one of the following circumstances applies:

a) the individual contests the accuracy of the personal data, in which case processing will be restricted for the time it takes the data controller to check the accuracy of the personal data;
b) the data has been processed unlawfully and the individual does not require it to be erased but wants limitations placed on its use;
c) the data controller no longer needs the personal data for the purposes for which it was processed but the individual still requires it in order to establish, exercise or defend a legal claim;
d) the individual has objected to processing under article 21, paragraph 1, while checks are made to determine whether the data controller’s legitimate grounds take precedence over those of the individual in question.

To find out more: GDPR Article 18

 

 

You have the right to give instructions regarding the storage, erasure and communication of your personal data after your death, in application of the relevant legislation and regulations.

 

Le droit à définir des directives après son décès

 

To find out more: Article 40.1 of the French Data Protection Law
The application of this right is subject to a decree which has yet to be published.

 

 

You have the right not to be subject to a decision based solely on automated processing.

 

 

The right not to be subject to a decision based on automated processing

 

1. Individuals have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
2. Paragraph 1 does not apply if the decision:
a) is required to enter into or perform a contract between the individual and the data controller;
b) is authorised by European Union law or the law of a Member State to which the data controller is subject, and also provides for appropriate measures for safeguarding the rights, freedoms and legitimate interests of the individual; or
c) is based on the individual’s explicit consent.

 

To find out more:
GDPR Article 22
Article 10 of the French Data Protection Law

 

 

 

UNDER WHAT CONDITIONS CAN DATA BE TRANSFERRED OUTSIDE THE EUROPEAN UNION?

 

Certain personal data may be transferred, or accessed from, outside the European Union, through our partners or sub-contractors. These transfers shall be made in strict compliance with the relevant legislation either to countries recognised as offering “adequate protection” by the European Commission, or in the framework of standard contract clauses adopted by the European Commission, or as covered by binding corporate rules, or, for the USA, under the Privacy Shield.

 

 

HOW TO CONTACT US

 

You can exercise your rights :

S.2.F. GROUPE PARTNAIRE SA

Protection des données personnelles

1, rue Michel Royer– 45100 ORLEANS

 

Your request will be dealt with promptly, provided that you include proof of your identity in the form of a copy of your official identity document with your email or letter.

 

OUR DATA PROTECTION OFFICER

 

Nous avons désigné un délégué externe à la protection des données:

ON-X Groupe

Isabelle Thomas

15 Quai de Dion Bouton, 92800 Puteaux

 

 

You can contact the officer via the email and postal addresses given above.

 

LODGING A COMPLAINT WITH THE FRENCH DATA PROTECTION AGENCY (CNIL)

 

You can lodge a complaint concerning the processing of your personal data by contacting the French Data Protection Agency, CNIL – www.cnil.fr – 3 place de Fontenoy 75007 Paris.

For more information (in French) about how to lodge a complaint, visit : https://www.cnil.fr/fr/cnil-direct/question/844.