INFORMATION NOTICE FOR JOB APPLICANTS AT EFRONT

As part of its recruitment process, eFront collects and processes personal data relating to job applicants.

In light of the General Data Protection Regulation (“GDPR”), we are providing you below with information on the collection and processing of your personal data.

Who collects your personal data?

The eFront entity which collects and processes your personal data is eFront SAS, an affiliate of the eFront group, French simplified joint stock company with a share capital of € 477,277.65 €, registered with the Paris Commercial Registry under number 403 913 700, having its registered offices located at 2-4 rue Louis David, 75116 Paris, France (“eFront”), whose Data Protection Officer (DPO) can be contacted at dpo@efront.com.

How is your personal data collected?

Data provided by the candidate

eFront collects your personal data directly from you when you are applying for a job offer on our career website or when you fill a form on our website. Indeed, if you are not ready to apply or if you do not find the right job opportunity, you can also fill a form and leave your personal data to be contacted back by eFront.

Data collected indirectly

Your personal data may also be collected by eFront indirectly from other sources, including social media, your company, or publicly available websites, for job sourcing. In such cases, we typically collect the following categories of data: first name, last name, personal or professional email address, personal or professional phone number, work authorization permit, company, job title, country, city.

Why does eFront collect your personal data?

eFront collects your personal data to send you job opportunities and/or to process your application for the purposes of pursuing our legitimate interests (recruitment process) and in order to take steps at your request prior to entering into an employment contract.

Is your personal data transferred outside the European Union?

Your personal data may be transferred outside the European Union for hosting purposes so that we can have your information available to process your application. eFront has implemented appropriate safeguards to secure these transfers to our service providers, typically through the execution of standard contractual clauses, binding corporate rules or a European Commission adequacy decision. A copy of the documents proving the security of the transfers of your personal data is available upon request to the DPO.

Who has access to your personal data?

Only authorized employees working in the Human Resources department at eFront (including its affiliates) and Managers of the department you applied at may access your personal data. Our employees are informed of the personal nature of your data, have received appropriate training regarding the processing and protection of your personal data and have committed themselves to confidentiality. Your personal data is also shared with our service providers, such as hosting service providers, applicant tracking system providers and their own hosting service providers, such as AWS or Microsoft. Relevant contractual safeguards, such as data processing agreements, are put in place to secure the confidentiality of your personal data by third parties.

How long is your personal data kept?

If you receive a negative answer on your application, your personal data will be kept in our system for a future job opportunity. If you do not ask for the deletion of your records, your personal data will be automatically deleted two (2) years after the last contact unless we are legally required to keep it.

What are your rights?

You have the right to access your personal data and request its rectification. You are also entitled to restrict or object to the processing of such personal data and request its erasure, if applicable and in compliance with the GDPR. If applicable and depending on the type of personal data concerned, you also have a right to obtain a copy or your personal data that we collected from you in a machine-readable format in order to transmit it to another third-party service provider (right to portability). You can exercise your rights by writing to privacy@efront.com or dpo@efront.com.

How can you contact us?

You can contact us at any time at privacy@efront.com. For any information or question relating to the protection of your personal data, you can also contact our DPO at dpo@efront.com.

Finally, in the event of a dispute with eFront concerning the collection and processing of your personal data, and after having previously asserted your rights internally, you have the option to lodge a complaint with the French data protection authority, the “Commission Nationale Informatique et Libertés” (CNIL) or the appropriate supervisory authority in your country of residence.

Sincerely,

The eFront Team