1) PREAMBLE
Adsearch is a recruitment consultancy specialized in the hiring of expert profiles, executives, and managers on permanent contracts (CDI), fixed-term contracts (CDD), temporary work, freelancing, interim management, and IT service provision. Adsearch is a brand of the Adéquat Group.
In the course of its activities, Adsearch collects and processes personal data relating to users of its website, candidates, and representatives of its clients and prospects, acting as the data controller within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR).
This document aims to present the personal data processing policy implemented by Adsearch.
The Data Protection Policy (hereinafter the “Policy”) is intended to inform you of the rights and freedoms you may exercise regarding the use of your personal data and to describe the measures we implement to protect them.
2) IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
Adsearch is the “data controller” of personal data relating to website management and data relating to its employees and candidates. These processing activities are carried out in accordance with applicable regulations.
Adsearch is a simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 833 816 978, with its registered office located at 63 boulevard Haussmann, 75008 Paris, represented by Mr. Arnaud Brun in his capacity as Director.
Adsearch can be contacted:
• by email: contact@adsearch.fr
• by phone:
3) CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Adsearch has appointed a Data Protection Officer whose electronic contact details are: dpo@groupeadequat.fr or by postal mail at the following address: DPO – 115 avenue du Maréchal de Saxe, CS 43315, 69003 LYON.
Adsearch’s DPO is shared at the Adéquat Group level, in accordance with Article 37 (2) of the GDPR.
4) SCOPE OF THE POLICY
Adsearch collects personal data and may use it in the context of various automated processing operations.
This Policy applies to any processing of personal data as defined by the General Data Protection Regulation (GDPR) of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and to the free movement of such data.
A natural person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Processing means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
The Adsearch Group websites operated in other jurisdictions are subject to separate policies, accessible from each of those websites.
5) PURPOSES, LAWFULNESS AND RETENTION PERIODS
The purpose of processing refers to the objective pursued, i.e., the need it addresses for the data controller.
By using the website, you may provide us with a number of personal data concerning you, such as identity information, personal or professional contact details, and economic and financial information.
Each personal data processing operation carried out by Adsearch is based on a specific legal basis.
Your personal data will not be further processed in a manner incompatible with the purposes described in this policy or in the collection forms.
At the end of the retention periods described below, your personal data will be deleted, except for those that we are legally required to retain or that are necessary for the protection of your rights. These data will be archived and retained for an additional period corresponding to the duration specified in the table below. At the end of this period, your personal data will be deleted.
The legal bases and retention periods associated with each processing purpose are described below:
Website users:
| Purpose | Description | Legal basis | Retention period |
| Access |
Provision of the website, products, and services offered on the site |
Legitimate interest (providing a functional website) |
3 years from your last activity on the site |
| Communication |
Sending communications when you have indicated that you wish to receive such information or have purchased our products or services |
Consent (opt-in) |
3 years from each communication |
| Cookies |
Setting and reading cookies not subject to consent |
Legitimate interest |
13 months |
Candidates:
|
Description | Legal basis | Retention period | |
| Personal account |
Creation of a personal account allowing you to track your applications on our website |
Performance of a contract or pre-contractual measures |
Data retained as long as your account remains active, never exceeding 3 years from your last activity |
|
| Application management |
Allowing you to submit your CV, apply for specific positions, or subscribe to job alerts so that we can inform you of vacancies matching your profile |
Performance of a contract or pre-contractual measures |
2 years |
|
| Skills management |
Management of the CV database |
Legitimate interest |
2 years |
| Non-automated job matching |
Algorithmic matching between candidate profiles and current job offers to suggest opportunities |
Legitimate interest |
Duration of registration in the CV database |
|
Description | Legal basis | Retention period | |
| Accounting and tax |
Retention of invoices and mandatory documents for accounting and tax obligations |
Legal obligation |
10 years from the end of the fiscal year |
|
| Exercise of rights |
Management of your rights requests |
Legal obligation |
5 years. Identity documents, when collected, are deleted after verification |
|
| Public and judicial authorities |
Management of requests from public or judicial authorities |
Legitimate interest |
Duration of the relevant procedure |
6) SHARING OF PERSONAL DATA
To achieve the purposes described above and strictly to the extent necessary, personal data collected by Adsearch may be shared, in whole or in part, with:
• Any company within the Adéquat Group;
• Our clients in their capacity as employers or potential recruiters;
• Recruitment intermediaries, including job boards (such as LinkedIn, Indeed, Hellowork…);
• Your former employers and former educational institutions;
• Potential third-party service providers with whom Adsearch collaborates.
We do not authorize our third-party service providers to use your personal data for their own purposes and only allow them to process your data for specific purposes and in accordance with our instructions, which includes compliance with this policy.
7) SECURITY AND CONFIDENTIALITY OF YOUR DATA
The data controller implements appropriate measures to preserve the security and confidentiality of your personal data and, in particular, to prevent it from being altered, damaged, or accessed by unauthorized third parties.
8) RESPONSE IN CASE OF DATA BREACH
Any identified personal data breach is reported without delay to the IT Services Department and the Data Protection Officer (DPO).
All appropriate measures are implemented as soon as possible, including informing the data subject in case of high risk, notifying the supervisory authority, and taking corrective actions.