1) PREAMBLE

Adsearch is a recruitment consultancy specialized in the hiring of expert profiles, executives, and managers on permanent contracts (CDI), fixed-term contracts (CDD), temporary work, freelancing, interim management, and IT service provision. Adsearch is a brand of the Adéquat Group.

In the course of its activities, Adsearch collects and processes personal data relating to users of its website, candidates, and representatives of its clients and prospects, acting as the data controller within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR).

This document aims to present the personal data processing policy implemented by Adsearch.

The Data Protection Policy (hereinafter the “Policy”) is intended to inform you of the rights and freedoms you may exercise regarding the use of your personal data and to describe the measures we implement to protect them.

2) IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

Adsearch is the “data controller” of personal data relating to website management and data relating to its employees and candidates. These processing activities are carried out in accordance with applicable regulations.

Adsearch is a simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 833 816 978, with its registered office located at 63 boulevard Haussmann, 75008 Paris, represented by Mr. Arnaud Brun in his capacity as Director.

Adsearch can be contacted:
• by email: contact@adsearch.fr
• by phone:

3) CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Adsearch has appointed a Data Protection Officer whose electronic contact details are: dpo@groupeadequat.fr or by postal mail at the following address: DPO – 115 avenue du Maréchal de Saxe, CS 43315, 69003 LYON.

Adsearch’s DPO is shared at the Adéquat Group level, in accordance with Article 37 (2) of the GDPR.

4) SCOPE OF THE POLICY

Adsearch collects personal data and may use it in the context of various automated processing operations.

This Policy applies to any processing of personal data as defined by the General Data Protection Regulation (GDPR) of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and to the free movement of such data.

A natural person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Processing means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

The Adsearch Group websites operated in other jurisdictions are subject to separate policies, accessible from each of those websites.

5) PURPOSES, LAWFULNESS AND RETENTION PERIODS

The purpose of processing refers to the objective pursued, i.e., the need it addresses for the data controller.

By using the website, you may provide us with a number of personal data concerning you, such as identity information, personal or professional contact details, and economic and financial information.

Each personal data processing operation carried out by Adsearch is based on a specific legal basis.

Your personal data will not be further processed in a manner incompatible with the purposes described in this policy or in the collection forms.

At the end of the retention periods described below, your personal data will be deleted, except for those that we are legally required to retain or that are necessary for the protection of your rights. These data will be archived and retained for an additional period corresponding to the duration specified in the table below. At the end of this period, your personal data will be deleted.

The legal bases and retention periods associated with each processing purpose are described below:

Website users:
Purpose Description Legal basis Retention period
Access

Provision of the website, products, and services offered on the site

Legitimate interest (providing a functional website)

3 years from your last activity on the site

Communication

Sending communications when you have indicated that you wish to receive such information or have purchased our products or services

Consent (opt-in)

3 years from each communication

Cookies

Setting and reading cookies not subject to consent

Legitimate interest

13 months

 

Candidates:

Purpose
Description Legal basis Retention period
Personal account

Creation of a personal account allowing you to track your applications on our website

Performance of a contract or pre-contractual measures

Data retained as long as your account remains active, never exceeding 3 years from your last activity

Application management

Allowing you to submit your CV, apply for specific positions, or subscribe to job alerts so that we can inform you of vacancies matching your profile

Performance of a contract or pre-contractual measures

2 years

Skills management

Management of the CV database

Legitimate interest

 2 years

Non-automated job matching

Algorithmic matching between candidate profiles and current job offers to suggest opportunities

Legitimate interest

Duration of registration in the CV database

Respeto de nuestras obligaciones legales y reglamentarias y defensa de sus derechos:
Purpose
Description Legal basis Retention period
Accounting and tax

Retention of invoices and mandatory documents for accounting and tax obligations

Legal obligation

10 years from the end of the fiscal year

Exercise of rights

Management of your rights requests

Legal obligation

5 years. Identity documents, when collected, are deleted after verification

Public and judicial authorities

Management of requests from public or judicial authorities

Legitimate interest

Duration of the relevant procedure

6) SHARING OF PERSONAL DATA

To achieve the purposes described above and strictly to the extent necessary, personal data collected by Adsearch may be shared, in whole or in part, with:

• Any company within the Adéquat Group;
• Our clients in their capacity as employers or potential recruiters;
• Recruitment intermediaries, including job boards (such as LinkedIn, Indeed, Hellowork…);
• Your former employers and former educational institutions;
• Potential third-party service providers with whom Adsearch collaborates.

We do not authorize our third-party service providers to use your personal data for their own purposes and only allow them to process your data for specific purposes and in accordance with our instructions, which includes compliance with this policy.

7) SECURITY AND CONFIDENTIALITY OF YOUR DATA

The data controller implements appropriate measures to preserve the security and confidentiality of your personal data and, in particular, to prevent it from being altered, damaged, or accessed by unauthorized third parties.

8) RESPONSE IN CASE OF DATA BREACH

Any identified personal data breach is reported without delay to the IT Services Department and the Data Protection Officer (DPO).

All appropriate measures are implemented as soon as possible, including informing the data subject in case of high risk, notifying the supervisory authority, and taking corrective actions.

9) RIGHTS OF INDIVIDUALS IN THE CONTEXT OF PERSONAL DATA PROCESSING

Right of access

All data undergoing processing grant a right of access.

Exercising the right of access allows individuals to obtain and verify the data held by an organisation, to check its accuracy, and to request its rectification or deletion.

This right of access may be exercised by electronic means or by postal mail.

Access is free of charge in principle.
However, reasonable fees may be charged in the case of manifestly unfounded or excessive requests.

Right to rectification and updating

Allows you to rectify, complete, or update inaccurate, incomplete, or outdated data concerning you, including data published on Adsearch’s digital platforms.

Right to erasure and right to be forgotten

Allows you to obtain the deletion of your data in the cases provided for by the GDPR, as well as the removal or delisting of information concerning you published on the Internet by Adsearch where such information is inadequate, inaccurate, or excessive, subject to legal retention obligations.

The right to erasure may be exercised in the following cases:
• When the data are no longer necessary for the purposes for which they were collected or processed;
• When consent previously given is withdrawn;
• When you object to the processing and there are no overriding legitimate grounds;
• When the processing does not comply with applicable regulations.

Right to restriction of processing

The right to restriction of processing is determined in accordance with applicable laws and regulations.

Right to object

The right to object may be exercised at any time on grounds relating to your particular situation where the processing is based on the controller’s legitimate interest.

This right includes the right to object to direct marketing.

Right to data portability

This right allows you to receive part of your data in a structured, commonly used, and machine-readable format.

It applies when the following conditions are met:
• The personal data have been provided by the data subject and relate to the performance of a contract;
• The data are processed by automated means and based on consent or on a contract;
• The exercise of this right does not adversely affect the rights and freedoms of others.

Right to withdraw consent

Where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Right to lodge a complaint with the AEPD

The right to lodge a complaint with the Spanish Data Protection Authority (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, or via its website www.aepd.es, is available to everyone, without prejudice to any other administrative or judicial remedy.

Right to define post-mortem instructions

You have the possibility to define specific instructions regarding the retention, deletion, or communication of your personal data after death.

These instructions apply only to processing carried out by the data controller and within this scope.

10) PROCEDURES FOR EXERCISING RIGHTS

All the rights mentioned above may be exercised at the following email address: dpo@groupeadequat.fr or by postal mail to: DPO – Adéquat, 115 avenue du Maréchal de Saxe – CS 43315 – 69003 LYON CEDEX.

When exercising their rights, the requester must prove their identity by any means.

In case of doubt regarding the identity of the requester, Adsearch reserves the right to request additional information necessary for verification.

11) POLICY AMENDMENTS

Adsearch reserves the right to modify this Policy at any time, particularly to reflect legal, regulatory, case law, or technical changes.

Substantial changes will be communicated to the individuals concerned by appropriate means (website notification, email) before they take effect.

12) DATE OF UPDATE

This Policy was last updated on: ___

Job saved
Find it in the "Candidate Area > Your Favorites" section"