Privacy Policy of the platform Teamtailor
Version March 2021
Please read carefully the policy below (hereinafter the “Policy”).
The Policy is applicable to the platform SaaS Teamtailor (hereinafter “Teamtailor”).
The Policy may be modified at any time by Keyrus which will inform you by any means.
To learn more about the processing activity of the Human Resources, we invite you to read the HR Data Processing Charter available here : https://keyrus.com/uk/en/about-us/data-protection
Object of the processing and category of personal data concerned
In application of the GPDR, Keyrus as data controller, informs you in complete transparency, that while using Teamtailor, your personal data will be used in the context of management of the recruitment. The platform Teamtailor allows us to get to know you better through profiling.
The purposes and the legal basis are the following:
- Processing of applications (CV, cover letter) and interview management.
The legal basis is the need to carry out pre-contractual measures with the intention of concluding an employment contract.
- Constitution of a CV data base
The legal basis is the legitimate interest of insuring the development of Keyrus Group.
- The production of statistical reports or lists of candidates to meet recruitment management needs
The legal basis is the legitimate interest of insuring the development of Keyrus Group and replacement of staff.
- Identifying candidates’ needs
The legal basis is the legitimate interest to mobilise human resources in support of Keyrus Group’s strategy.
In the context of those purposes, the following personal data are processed:
- Your identifying data (name, surname, personal postal address, professional email address, personal email address, professional or personal phone number, picture (optional), video (optional), country, information from LinkedIn account);
- Your data about your professional life (seniority, position, grade, BU, department, office, experience (skills, functions, information about the company, employee’s tasks), training (last year of training, name of the training course, name of the training organization), certification (year of the certification, name of the certification, type of certification) and skills, languages, manager, availability date)
- Personal life (hobbies indicated in your CV)
- ID and password
- Answers to questions asked during the recruitment
In the context of the recruitment procedure, some personal data can be obtain by an third source beside the data subject, including jobs sites such as Monster, HelloWork or APED, but also on social media like LinkedIn or by co-opting.
If some of your personal data are processed by such companies, we invite you to refer to their privacy policy. Keyrus Group would not be held responsible for any infringement of the regulation by one of those companies.
Cookies
Cookies are small text files saved to your computer or device whenever you browse a website.
- Purpose and retention period
By default, strictly necessary cookies are activated because they are essential for the proper functioning of Teamtailor.
Others analytics cookies (statistics) are activated only if you accept them. You can withdraw your consent at any time by clicking on “Data and confidentiality”.
To know more about cookies, you can read the Cookie Policy : https://jobs.keyrus.fr/cookie-policy.
Recipient
KEYRUS is committed to preserving the confidentiality and security of your personal data in accordance with the regulations in force. The recipients who can receive your data are the authorized personnel of Keyrus, the administrators of Teamtailor, as well as the subcontractors of Teamtailor. For more information, you can read the privacy policy of Teamtailor (https://www.teamtailor.com/en/privacy-policy/).
Transfers of data to third countries
In case of transfers of your personal data to a recipient located in a third country outside of the European Union, appropriate guarantees will be put in place in accordance with the GDPR and Keyrus will inform you by any means.
Transfers of personal data within Keyrus group entities which are not covered by an adequacy decision from the European Commission are covered by the signing of standard contractual clauses.
In the context of the use of Teamtailor, transfers of personal data outside the European Union to the United States are covered by the signing of standard contractual clauses. For more information, you can read the privacy policy of Teamtailor (https://www.teamtailor.com/en/privacy-policy/).
Retention period
The data registered on the Platform are erase (i) two years after the last contact with the candidate (ii) after the request of the candidate. At the end of those two years, only the candidate’s formal agreement allows a longer retention period.
Rights of data subjects
Under current regulations on personal data processing, you have a right of access to your data and a right to rectify it. You can also place limits on how your data is processed, request its erasure or object to Keyrus processing it and where appropriate a right to portability.
You can exercise your rights or make an enquiry on the processing of your personal data by sending your request to our Data Protection Officer (DPO) by:
- Post to KEYRUS LIFE SCIENCE -1240 Ave Beaumont, suite 204, Mont-Royal, QC, Canada, H3P 3E5 ‘”Personal Data”
You can also exercise your right to access and your right to erasure of your personal data directly in Teamtailor, by the tab “Data and confidentiality”.
You also have the right to make a complaint to the French Data Protection Agency (CNIL).
Appendix Teamtailors’s subcontractors
- Amazon Web Services, Inc.
- Type of service : infrastructure as a service
- URL : https://aws.amazon.com
- Address : 410 Terry Avenue North Seattle, WA 98109-5210 (Attention: General Counsel)
- Head office : USA
- Data Center’s location : Ireland
- Processed data : data base
- Heroku, salesforces.com inc.
- Type of services : Platform as service
- URL : https://www.heroku.com
- Address : The Landmark @ One Market Street, San Francisco, CA 94105, USA
- Head office : USA
- Data Center’s location : Ireland
- Processed data : data base
- Cloudconvert, Lunaweb Ltd
- Type of services : Document conversion
- URL : https://cloudconvert.com/
- Address : Mühlfeldweg 8, 85739 Garching
- Head office : Germany
- Data Center’s location : Germany
- Processed data : CV, documents
- Postmark, Wildbit, LLC
- Type of services : Email service provinder
- URL : https://postmarkapp.com
- Address : Attn: Chris Nagele, 225 Chestnut Street, Philadelphia, PA 19106
- Head office : USA
- Data Center’s location : Chicago / USA USA (Standard Contractual Clauses) (“SCC”))
- Processed data : All email communication
- Amazon Web Services, Inc. S3
- Type of services : File hosting
- URL : https://aws.amazon.com/s3/
- Address : 410 Terry Avenue North Seattle, WA 98109-5210, Attention: General Counsel
- Head office : USA
- Data Center’s location : Ireland
- Processed data : CV, documents
- Elastic, Elasticsearch Inc.
- Type of services : Database/seach
- URL : https://www.elastic.co/
- Address : European Headquarters: Rijnsburgstraat 9-11 1059 AT, Amsterdam
- Head office : USA
- Data Center’s location : Ireland
- Processed data : candidate’s data (index only)
- Google Analytics Google Inc. (Alphabet Inc.)
- Type of services : Analytics
- URL : https://analytics.google.com/
- Address : 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Head office : USA
- Data Center’s location : Island/USA (SCC)
- Processed data : candidate’s data
- OptiDash
- Type of services : Image Processing
- URL : https://optidash.ai/legal/privacy
- Address : Akazienstr. 3A, 10823 Berlin, Germany
- Head office : Germany
- Data Center’s location : Germany
- Processed data : employees and candidate’s photos
- Sentry, Functional Software, Inc
- Type of services : Error tracking
- URL : https://sentry.io/
- Address : Mailing Address: 132 Hawthorne St San Francisco, CA 94107
- Head office : USA
- Data Center’s location : USA (SCC)
- Processed data : Logs and emails
- Cronofy Limited
- Type of services : Calendar integration,
- URL : https://www.cronofy.com/
- Address : 9a Beck Street, Nottingham, NG1 1EQ, England and Wales
- Head office : England et Wales
- Data Center’s location : Germany
- Processed data : meetings, meeting with tasks
- Twilio
- Type of services : send SMS to services
- URL : https://www.twilio.com/
- Address : 375 Beale St Suite 300, San Francisco, CA 94105, USA
- Head office : USA
- Data Center’s location : USA (SCC)
- Processed data : SMS
- Ziggeo
- Type of services : Video recording
- URL : https://ziggeo.com/privacy
- Address : Ziggeo, Inc., 950 Broadway, 12th Floor, New York, New York 10010
- Head office : USA
- Data Center’s location : Ireland
- Processed data : candidates videos
- Data Dog, Inc.
- Type of services : Log management
- URL : https://www.datadoghq.com/
- Address : 620 8th Avenue, Floor 45, New York, NY 10018
- Head office : USA
- Data Center’s location : Germany
- Processed data : Server logs
- Pusher
- Type of services : Sockets
- URL : https://pusher.com/
- Address : Pusher Limited at 160 Old Street, London, EC1V 9BW
- Head office : UK
- Data Center’s location : Ireland
- Processed data : Realtime Sockets
