Privacy Policy for Job Applicants
What is the purpose of our Privacy Policy?
The confidentiality of personal data belonging to candidates applying for a position at Akoya Consulting SAS represents, for us, a mark of seriousness and trust.
In this regard, our Personal Data Privacy Policy reflects our commitment to upholding, within Akoya Consulting SAS, the applicable rules on personal data protection and, more specifically, those set out in the General Data Protection Regulation (“GDPR”).
In particular, our Privacy Policy aims to inform you of the manner in which, and the reasons for which, we process your personal data when you apply for a position at Akoya Consulting SAS.
Who is our Privacy Policy addressed to?
This Privacy Policy is addressed to you, as a candidate applying for a position at Akoya Consulting SAS, throughout the entire recruitment process (e.g. application in response to a job posting, unsolicited application, recruitment via an external agency, etc.), regardless of the duration or nature of the contract offered (e.g. permanent employee, temporary worker, intern, etc.).
Why do we process your personal data, and on what legal basis?
As a recruiting organisation, we necessarily process your data in order to manage recruitment activities (e.g. interviews, application processing, salary negotiation, etc.), any travel that may be required in connection with the recruitment process, and the security of our premises.
Processing is carried out on the basis of the discussions held with you during the recruitment process and our legitimate interest in recruiting and selecting candidates.
How did we obtain your personal data?
Your data is collected directly from you through your application and CV. We are committed to processing your data solely for the purposes described above.
However, we may also obtain your personal data indirectly from recruitment agencies, where you have previously given your consent to those agencies.
What personal data do we process, and for how long?
- Any personal and professional identification data provided in the candidate’s CV and cover letter (e.g. surname, first name, date of birth, nationality, etc.), retained for the duration of the recruitment process and for a maximum period of 2 years following your application.
- Any contact details provided in the candidate’s CV and cover letter (e.g. email address, telephone number, LinkedIn profile, etc.), retained for the duration of the recruitment process and for a maximum period of 2 years following your application.
- Any data relating to personal and professional background provided in the candidate’s CV and cover letter (e.g. qualifications, interests, certificates, age, marital status, driving licence, etc.), retained for the duration of the recruitment process and for a maximum period of 2 years following your application.
- Any financial and economic data (e.g. salary expectations, bonuses, etc.) provided during job interviews, retained for the duration of the recruitment process and for a maximum period of 2 years following your application.
- Any specific data (e.g. residence permit, etc.) provided by the candidate in the context of recruitment, retained until the end of the employment relationship in the event of hiring, and deleted following the recruitment process in the event of rejection.
- Any relevant and required sensitive data (e.g. disability status) provided in the candidate’s CV and cover letter, retained for the duration of the recruitment process and deleted upon its conclusion.
- Any identity document (e.g. passport or national identity card) provided during the recruitment process, deleted following the outcome of the recruitment process.
- Where you have applied via our website, connection data (e.g. IP address and logs), retained for a maximum period of 12 months.
Upon expiry of the applicable retention periods, the deletion of your personal data is irreversible and we will no longer be able to communicate it to you thereafter. At most, we may retain anonymised data for statistical purposes only.
In the event of hiring, however, your data collected during the recruitment process will be automatically transferred to your personnel file and will become subject to the Employee Personal Data Privacy Policy.
Please also note that in the event of a dispute, we are required to retain all personal data concerning you for the entire duration of the proceedings, even after the expiry of the retention periods described above.
What rights do you have to control the use of your personal data?
Applicable data protection regulations grant you specific rights that you may exercise, at any time and free of charge, in order to control the use we make of your data.
- Right of access and copy of your personal data, provided that such a request does not conflict with business confidentiality, professional secrecy, or the confidentiality of correspondence.
- Right of rectification of personal data that is inaccurate, outdated, or incomplete.
- Right to object to the processing of your personal data carried out for commercial prospecting purposes, as well as to processing based on our legitimate interest, unless compelling and legitimate grounds for such processing override your interests, rights, and freedoms.
- Right to erasure (“right to be forgotten”) of your personal data that is not essential to the proper functioning of our services.
- Right to restriction of processing, which allows you to freeze the use of your data where the legitimacy of a processing operation is contested.
- Right to data portability, which allows you to retrieve a portion of your personal data in order to store it or transfer it easily from one information system to another.
- Right to issue instructions regarding the fate of your data in the event of death, either directly or through a trusted third party or legal heir.
For a request to be considered, it must be submitted directly by you, or your representative, to the following address: dpo@akoyaconsulting.com.
Requests may not be submitted by any person other than yourself or your authorised representative. We may therefore ask you to provide a proof of identity where there is any doubt as to the identity of the applicant, as well as evidence of representation where applicable.
We will respond to your request as promptly as possible, within a maximum period of one month from receipt, unless the request is technically complex or we are simultaneously handling a large number of requests. In such cases, the response period may be extended to a maximum of three months.
Please note that we reserve the right to refuse to respond to any excessive or unfounded request, particularly where it is repetitive in nature.
Who may have access to your personal data?
Your personal data is processed by our teams and by our technical service providers solely for the purpose of operating our service.
May your personal data be transferred outside the European Union?
Personal data processed in the context of recruitment is hosted exclusively within the European Union.
How do we protect your personal data?
We implement all required technical and organisational measures to ensure the security of your data on a day-to-day basis — in particular, to guard against any risk of destruction, loss, alteration, or unauthorised disclosure of your data (e.g. secure access controls, antivirus protection, etc.).
Who can you contact for further information?
Our Data Protection Officer (“DPO”) is available at all times to provide further details on the way in which we process your data and to answer any questions you may have on this subject, at the following address: dpo@akoyaconsulting.com.
How can you contact the CNIL?
You may contact the French data protection authority, the “Commission Nationale de l’Informatique et des Libertés” or “CNIL”, at any time using the following contact details: Service des plaintes de la CNIL, 3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07, or by telephone on +33 1 53 73 22 22.
May this Privacy Policy be amended?
We may amend our Privacy Policy at any time in order to adapt it to new legal requirements and to any new processing activities we may implement in the future.