1. FOREWORD
Ardian France S.A. firmly believes that trust is key for developing successful and lasting relationships. In this respect, the protection of your personal data and privacy is no exception.
This is the reason why Ardian France S.A. puts great emphasis on collecting and processing your personal data with utmost care and in compliance with the applicable legal framework.
In order to inform you in the most transparent manner, Ardian France S.A. has prepared the privacy policy below, which explains in detail why and how your personal data are processed where you browse this website.
2. SCOPE AND PURPOSE OF THIS PRIVACY POLICY
This privacy policy (hereinafter the “Privacy Policy”) is intended to inform you, as an applicant using the Ardian website www.ardian.com (hereinafter the “Website”), about the way Ardian France S.A. (hereinafter “Ardian”) processes, as controller, information enabling to identify you either directly or indirectly (hereinafter “Personal Data”) in the context of your application through the Website.
CATEGORIES OF PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING
Where you submit your application thanks to the Website, Ardian processes your Personal Data for various purposes, each of them being duly legitimated by a valid legal basis.
First, Ardian collects and processes your Personal Data, as part of its recruitment process, for managing your application submitted through the Website.
This processing requires that Ardian collect and process the following categories of Personal Data: (i) identification data (i.e. your first name, your last name, your contact details, and your photograph on your résumé as the case may be); (ii) data related to professional life (i.e. your résumé and the information available on your LinkedIn profile, the information obtained from the references you provided); (iii) data related to personal life (as may appear on your résumé and/or LinkedIn profile, such as your hobbies or your marital status); and (iv) the content of the application message submitted through the Website.
While processing your Personal Data for this purpose, Ardian relies on its legitimate interest, which consists in the performance and management of its recruitment operations.
Second, in case your application is unsuccessful, Ardian may be willing to retain your application file to recontact you in the event a subsequent job opportunity matches your profile. For this purpose, Ardian needs to process your Personal Data for setting up, managing and using its applicant pool.
In this context, Ardian needs to process the following categories of Personal Data: (i) identification data (i.e. your first name, your last name, your contact details, and your photograph on your résumé as the case may be); (ii) data related to professional life (i.e. your résumé and the information available on your LinkedIn profile, the information obtained from the references you provided); (iii) data related to personal life (as may appear on your résumé and/or LinkedIn profile, such as your hobbies or your marital status); (iv) the content of the application message submitted through the Website; and (v) the content of your application file.
Please note that the legal basis of this processing varies over the course of time.
Indeed, as such, the legitimate interest of Ardian is the legal basis of the processing and consists in the performance and management of Ardian’ s recruitment operations. Nevertheless, should Ardian be willing to retain your application file more than two years following the last contact with you, then, after this two-year period, the legal basis of this processing will be your consent, which Ardian will then seek to obtain.
Please note that your Personal Data are obtained from you but also from the following other sources:
(A) your LinkedIn profile to the extent it is publicly accessible; and
(B) as the case may be, from references you shared with Ardian (e.g. you provide Ardian with the contact details of a former employer which you believe can support your application).
In any event, and disregarding the processing purpose at stake, please note that Ardian will comply with a strict data minimisation principle and will thus only collect and process Personal Data which is necessary for the above purposes.
Should your application be unsuccessful, Ardian will inform you if it intends to retain your application file as part of its applicant pool for subsequent potential job opportunities likely to be relevant for you. You will thus have the possibility to request the deletion of your application file.
Besides, please note that the provision of your Personal Data is a requirement necessary to enter into a contract. In this respect, sharing your Personal Data with Ardian is thus mandatory for your application to be considered by Ardian.
Should you decide not to provide Ardian with your mandatory Personal Data, Ardian would then not be able to let you take part in its recruitment process and your application would automatically be refused.
3. DATA RECIPIENTS
Ardian shares your Personal Data with third-party service providers and suppliers which assist Ardian in fulfilling the purposes specified in this Privacy Policy.
To the extent this is necessary, Ardian also communicates your Personal Data to other entities of the Ardian group (e.g. your open application is received by Ardian but another entity of the Ardian group is actually offering a job opportunity fitting your expectations).
Furthermore, as the case may be, Ardian shares your Personal Data with competent courts and any other governmental and/or public authorities requesting access to your Personal Data, within the extent legally permitted.
In any event, Ardian communicates your Personal Data to the above recipients on a strict need-to-know basis and only as necessary for fulfilling duly identified processing purposes.
4. TRANSFERS OUTSIDE THE EUROPEAN UNION
As indicated above, Ardian may need to transfer your Personal Data to other entities of the Ardian Group. Please note that some of these are located outside the European Union, in countries which are not regarded by the European Commission as providing an adequate level of protection to personal data (e.g. China, Singapore).
However, the Ardian group has implemented Binding Corporate Rules (“BCR”) to ensure that personal data transferred between the various entities of the Ardian group still benefit from an adequate level of data protection.
You can access the BCR by clicking here or by writing to our data protection officer by using the contact details specified below, in Section 7 (Contact details) of this Privacy Policy.
5. DATA RETENTION PERIODS
Ardian only retains your Personal Data for a retention period not exceeding what is necessary in light of the processing purpose at stake.
As a result, the data retention period implemented by Ardian depends upon the processing purpose as detailed below.
First, for managing your application made through the Website, Ardian will retain your Personal Data until the end of the recruitment process. Please note that, if you made an open application, this period corresponds to the timeframe necessary for Ardian to check whether your application can match Ardian’s recruitment needs or not.
Second, to set up, manage and use its applicant pool, Ardian will inform you that it intends to retain your unsuccessful application file. Thus, you will have the possibility to request the deletion of your application file. Should you request such deletion, then Ardian will delete your Personal Data as soon as technically feasible following your request.
If you do not request the deletion of your application file, Ardian will retain it for two years following the last contact with you. Once this two-year period expires and should Ardian be willing to retain your application file longer, then Ardian would seek your express consent to this end and would then inform you about the intended retention period.
Where the applicable retention period expires, Ardian either deletes your Personal Data or irrevocably anonymises it so that you can no longer be identified.
Where Ardian considers it does not need to retain your Personal Data in its active database, it will archive it and will ensure that access thereto is restricted to a limited number of persons who have an actual need to access your Personal Data.
6. YOUR RIGHTS AND OBLIGATIONS AS DATA SUBJECT
As a data subject, you benefit from various rights regarding the processing of your Personal Data. These are as follows:
- right to request from Ardian access to and rectification or erasure of your Personal Data;
- right to request from Ardian restriction of the processing concerning you;
- right to object to the processing of your Personal Data;
- right to portability of your Personal Data;
- right to specify guidelines regarding the use of your Personal Data after your death;
- where you consented that Ardian retain your application file for more than two years following the last contact with you, right to withdraw the consent you gave, at any time and without affecting the lawfulness of processing based on your consent before withdrawal thereof; and
- right to lodge a complaint with the French Data Protection Authority (CNIL).
Ardian is committed to utmost care when it comes to protecting your Personal Data and complying with the applicable data protection legal framework.
This is the reason why Ardian requires your assistance to this end. Thus, you commit to inform Ardian in case the Personal Data you shared with Ardian would become obsolete or inaccurate.
In addition, in the event you would provide Ardian with information enabling to identify directly or indirectly any other natural persons (e.g. you share the contact details of your former manager for references purposes), you represent and warrant that, prior to sharing this information with Ardian, such other natural persons have been provided with this Privacy Policy and, to the extent applicable, have consented to the processing of their data.
7. CONTACT DETAILS
Should you have any questions or requests regarding the processing of your Personal Data by Ardian, including the exercise of your rights specified in Section 6 (Your rights and obligations as data subject) above, please feel free to contact Ardian’ s data protection officer (DPO) by using the following contact details: Ardian, Data Protection, 20 Place Vendôme, 75001 Paris - dataprivacyofficer@ardian.com