Privacy Policy
The Sofinord group, of which ARMONIA is a division, aims to build a relationship of trust with its clients, partners, and employees. As such, the Sofinord group is committed to ensuring the highest level of protection for your Personal Data.
This policy demonstrates ARMONIA's commitment to complying with the French Data Protection Act of January 6, 1978, as well as the General Data Protection Regulation (GDPR: no. 2016-679). It will allow you to learn more about the collection and processing of your personal data, as well as your rights.
Definitions
“Personal data”: Personal data is any information relating to an identified or identifiable natural person. Since they concern individuals, they must retain control over them. An individual can be identified:
- directly (for example: last name and first name);
- indirectly (for example: by a phone number or license plate, an identifier such as a social security number, a postal or e-mail address, but also voice or image).
“Processing”: Processing of personal data refers to any operation, or set of operations, carried out on personal data, regardless of the process used (collection, recording, organisation, storage, adaptation, modification, extraction, consultation, use, communication by transmission or dissemination or any other form of provision, matching).
“Controller”: The controller is the legal entity or individual who determines the purposes and means of processing, i.e. the objective and the way to achieve it.
“Purpose of processing”: The purpose of processing is the main goal of using personal data. Data is collected for a specific and legitimate purpose and must not be further processed in a manner incompatible with the initial objective.
“We”: refers to the Sofinord group entity that carries out personal data processing activities.
Who is the controller of your data?
For Personal Data collected as part of browsing the Site, the controller of the Personal Data is: ARMONIA, a division of the Sofinord group.
As the controller of the data we collect, we are committed to complying with the applicable legal provisions. In particular, we are responsible for establishing the purposes of data processing, providing our prospects and customers, as well as our employees, candidates, or website visitors, with comprehensive information on the processing of their personal data, and maintaining a register of processing activities that is accurate.
What data do we collect?
When you browse the site, we may collect the following data:
- The information you provide by filling out contact forms or by contacting us via an email address (name, first name, email address, and any other information you share with us)
- The information you provide when applying to ARMONIA: your name(s), first name(s), email address, curriculum vitae, and any other optional elements you wish to share with us.
- Cookies, when you accept their collection. Some cookies are mandatory and necessary for the proper functioning of the site, others are optional and require your consent. You may withdraw your consent and choose which cookies you accept to be collected at any time by clicking on the cookie settings.
- Social media: on our site, you can click on icons to access our dedicated pages on social networks (for example, Facebook, Instagram, Twitter, or LinkedIn). When you click on these icons and choose to follow us on one of these platforms, we may access the personal data you have chosen to make accessible on your profiles.
- IP addresses: these are identifiers that certain electronic devices use to identify themselves and communicate with each other over the Internet. When you visit our site, we may use the IP address of the device you use to connect. We use this information to determine the device’s approximate physical location and to understand the geographical region from which site visitors come.
- Statistics: our site may use Google Analytics to generate statistical reports, which allow us to know how many users have visited the site, which pages have been viewed, and from which geographical area users come. The information collected using statistics may include your IP address, the website you visited before coming to our site, and the type of device you are using. We do not use any of this information to identify visitors and do not share it with third parties.
In any event, we do not sell any of the personal data we collect.
Purpose of the data collected
We may process your personal data for the following purposes:
Purpose of processing
Management of recruitment and hiring
Legal basis of processing
- Our legitimate interest in recruiting profiles suited to our needs
- Your consent to send us your application
- Compliance with legal obligations
- Performance of the contractual relationship, when you are employed at ARMONIA
Data retention period
- If you are recruited: for the duration of the contractual relationship
- If you are not recruited and future recruitment is possible: 2 years from submission of your application
- If no recruitment is considered: only for the duration of the recruitment process
Purpose of processing
Responding to your information, quote, or contact requests
Legal basis of processing
- Our legitimate interest in responding to your requests, to provide you with the best quality of service
- Where applicable, performance of the contractual relationship we have with you
Data retention period
Up to 3 years from the last contact or data collection
Purpose of processing
Improving your browsing experience on our site
Legal basis of processing
- Our legitimate interest in providing you with the best quality of service
Data retention period
Up to 12 months after the last contact or data collection
What are your rights?
In accordance with current regulations, you have the following rights regarding your personal data:
- Right of access and rectification, updating, completion of your personal data. Right to block or erase your personal data when they are inaccurate, incomplete, ambiguous, outdated, or if their collection, use, communication, or retention is prohibited
- Right to withdraw your consent at any time
- Right to restriction of processing of your data
- Right to object to the processing of your data
- Right to data portability for data you have provided, where such data are processed by automated means based on your consent or a contract
- Right to define the fate of your data after your death and to designate a third party to whom we should communicate your data.
As soon as we become aware of the death of a user and in the absence of any instructions from them, we are committed to destroying their data, unless their retention proves necessary for evidentiary purposes or to respond to a legal obligation.
If you wish to know how we use your personal data, request rectification, or exercise any other right over your personal data, you can contact our DPO at the following address: dpo@sofinord.com
In this case, you should specify your request. If your request concerns correction, updating, or deletion, please indicate the personal data you would like us to correct, update, or remove. If we have doubts about your identity, we may ask you for a copy of an identity document (identity card or passport or any other equivalent document).
Requests for deletion of Personal Data will be subject to legal obligations, in particular regarding data retention or archiving. Finally, you can lodge a complaint with the supervisory authorities, especially the CNIL.
Transfers of data outside the EU
As a rule, we do not transfer any personal data about you to a country outside the European Union. However, in the event of a transfer of your personal data outside the European Union, we undertake to inform you in advance. We also undertake to take all necessary measures to ensure a sufficient and appropriate level of data protection.
Security
We are committed to taking all necessary precautions to preserve the security of your data, and to take all reasonable measures to protect it against any loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, if an incident affecting the integrity or confidentiality of your personal data comes to our attention, we will inform you as soon as possible and communicate the corrective measures taken.
To ensure the security and confidentiality of Personal Data, our website uses networks protected by standard security devices such as firewalls, pseudonymization, encryption, and passwords.
Incident notification
Despite all efforts, no method of transmission over the Internet and no method of electronic storage is completely secure. Therefore, we cannot guarantee absolute security. If we become aware of a security breach, we will notify affected users so that they can take appropriate measures. Our incident notification procedures take into account our legal obligations, whether at the national or European level. We are committed to fully informing you of all matters relating to the security of your data.
Applicable law and jurisdiction
Any dispute relating to the use of the site is subject to French law. Except where the law does not permit, exclusive jurisdiction is given to the competent courts of Paris.
Updating our policy
If the regulations or personal data processing activities carried out on this site change, we may update or modify this policy.
Contact
For any question regarding this policy, the processing of your personal data, or to exercise your rights, you can contact the Sofinord group Data Protection Officer at the following address: dpo@sofinord.com