1. IDENTITY OF THE PROCESSING CONTROLLERS
The single-member simplified joint stock company SUCRALLIANCE SERVICE (2S) with capital of 10.000 euros, registered with the RCS of Perpignan under number 844 185 710, domiciled Allées de Barcelona, 66350 Toulouges, (FRANCE), acting as publisher of the website www.sucroalliance.com is committed to protecting and respecting your privacy.
The group SUCRALLIANCE publishes and operates a website accessible at the URL www.sucralliance.com or any other url that could replace it (hereinafter the “ Site ").
The Site is intended to serve all of the companies making up the Group SUCRALLIANCE, namely, to date, the companies Confiserie du Nord, Dolis and Dupont d’Isigny (hereinafter individually referred to as “ Company of the SUCRALLIANCE Group » and collectively « SUCRALLIANCE " or " WE ").
The group SUCRALLIANCE is a French family group specializing in the manufacture of confectionery made up of four production sites specializing in sugar confectionery, particularly in private labels.
- IDENTITY OF THE PROCESSING RESPONSIBLE FOR JOB AND INTERNSHIP OFFERS TO BE FILLED
Within the meaning of the applicable Regulations, the data controller is the legal person (company, etc.) or natural person who determines the purposes and means of data processing, i.e. the objective and manner of processing. realize.
The processing of personal data arising from applications for job and internship offers to be filled within the Sucralliance Group is implemented by two data controllers:
- The processing of personal data implemented by the HELLOWORK company
To carry out our activities, when YOU wish to apply for a job and internship offer from the Sucralliance Group, the Candidate is redirected to the platform of our partner, the company HELLOWORK, a single-member simplified joint stock company with share capital of 168.672 euros, whose head office is located at 2 RUE DE LA MABILAIS 35000 RENNES (France), registered in the Rennes Trade and Companies Register under number 428 843 130.
Thus, applications for our job offers are submitted directly on the Hellowork platform or in the “recruitment” area of the Site linking directly to the Hellowork platform.
When you use the services of the HELLOWORK platform (CVTHEQUE, responses to job offers, etc.), the HELLOWORK company collects your Personal Data and implements data processing.
In this context, the HELLOWOK company acts as Data Controller for the creation and management of accounts allowing the submission of candidate CVs and access to the services offered by HELLOWORK. This processing of personal data is subject to the HELLOWORK company’s Data Protection Policy available on the site https://www.hellowork.com.
- The processing of Personal Data implemented by the SUCRALLIANCE Group
When YOU apply for a job/internship offer from the Sucralliance Group by means of the HELLOWORK platform and as soon as the Sucralliance Group Company concerned by the offer retrieves Your application to integrate it into its own internal databases, the latter becomes Data Controller within the meaning of the applicable Regulations.
- IDENTITY OF THE PROCESSING RESPONSIBLE FOR THE SUBMITTING AND PROCESSING OF SPONTANEOUS APPLICATIONS
When YOU submit a spontaneous application from the Site (dedicated form on the Site), only the Sucralliance Group Company concerned by the spontaneous application acts as Data Controller.
Also, this Policy only covers the Processing of Personal Data implemented by the Sucralliance Group and for which it acts as Data Controller.
2. OBJECT
This personal data confidentiality policy (hereinafter the “Policy”) aims to describe in a clear and concise manner the conditions under which personal data are processed (hereinafter “Personal data)”) of any natural person who has applied for job and internship offers from the SUCRALLIANCE group (“ Candidate(s) " Where "YOU”) through the functionality of the Site. Sucralliance allows Candidates to respond to a job or internship offer or to submit a spontaneous application on the Site (“ Services) "). The Parties are hereinafter individually referred to as “ the part » and collectively referred to as “ the Parties ».
The purpose of this Policy is to inform candidates any notice required by the applicable Regulations regarding the processing of Your Personal Data by SUCRALLIANCE.
Indeed, when the candidate entrusts his Personal Data to SUCRALLIANCE following online submission of an application, the latter is subject to the regulations in force relating to the protection of personal data.
Are thus applicable to SUCRALLIANCE, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“general regulation on data protection,” says “ GDPR "), the Data Protection Act of January 6, 1978 as amended, the recommendations and doctrines of the National Commission for Information Technology and Liberties (CNIL) as well as the guidelines of the European Data Protection Board (EDPB) and finally any other legal or regulatory provision which may be added and/or substituted.
(Hereinafter together, the “ Applicable regulations").
For the purposes hereof, terms beginning with a capital letter in this Privacy Policy have the meaning expressly defined therein or assigned to them by the applicable Regulations.
3. WHICH CATDATA WILL BE COLLECTED AND PROCESSED
3.1. SUCRALLIANCE applies, by default, the principles of minimization and protection of Personal Data in the execution of its Services (“privacy by design” et “privacy by default”). Consequently, only personal data that is relevant, adequate and limited to what is necessary for the purposes for which YOUR Data is processed is collected.
In order to benefit from our Services, WE We collect and process Your Personal Data. The collection of Your Personal Data may be carried out initially using the Site or any other useful medium. The collection of Your Personal Data takes place during navigation and use of our Services on the Site.
The personal data that WE we collect and process may vary depending on our Services and the purpose of the Data processing implemented.
3.2 Depending on the features used, SUCRALLIANCE collects and processes the following categories of Personal Data YOU regarding :
SUCRALLIANCE reminds that no information concerning a Candidate personally can be collected by a device which has not been brought to their attention beforehand.
- a) Direct collection of Personal Data from the Candidate:
Generally, WE collect any information that YOU provide us when YOU use our application forms. Please note that only fields marked with an asterisk (*) are mandatory, other information or Personal Data that YOU we share are at your sole discretion.
We only keep Personal Data that is relevant, adequate and limited to what is necessary for the purposes for which Your Data is processed, namely:
– identity data: title, surname, first name, date and place of birth.
– contact data: email address, postal address, telephone number.
– profile data: username.
– data of a professional nature: the data contained in your CV and cover letter, namely the details of your training, diplomas and experience obtained, etc.
– Browsing history on the Site when YOU have consented to the storage of cookies and trackers on your browser (See our Cookies policy).
Failure to provide this data makes it impossible for you to participate in the recruitment process..
When your application seems to match the desired profile, You are entering a recruitment process led by the Sucralliance Group Company in charge of the announcement.
In this context, the following Personal Data may be collected in addition to the previous ones:
– where applicable and depending on the nature of the position envisaged, the results of tests and any other method used in the context of recruitment making it possible to measure the candidate's abilities for the position offered. The test results are mainly expressed in the form of a score. The Candidate is informed before the test takes place of the scoring methods as well as its importance in the recruitment decision. These methods and techniques are relevant to the intended purpose.
– all personal information strictly necessary to assess your ability to occupy the job offered or to measure your professional skills YOU will be requested during the selection phase. This Personal Data presents a direct and necessary link with the employment offered or with the evaluation of professional skills. To this end, Join will ask you for data relating to the diplomas that YOU have obtained, your professional experience, your professional skills and abilities related to the position offered.
In the event that Your application is selected for the conclusion of a contract, We will ask you for information and supporting documents necessary to complete the mandatory formalities.
The transmission of this information conditions the conclusion of the employment contract for the selected Candidates.
In addition, the communication of certain categories of information and supporting documents (marital status, address, social security registration number, legality of stay, etc.) has a regulatory nature for the selected applications. Consequently, failure to provide this data will make it impossible to conclude the employment contract.
- b) Indirect collection of Personal Data concerning You:
When You enter a recruitment process, the Sucralliance Group Company concerned may possibly collect Personal Data about you from a third party, such as:
- Obtaining references from a former employer (colleague, client, etc.) of the candidate;
- Transmission of information concerning the career path of an employee from a parent company to one of the group's subsidiaries to offer this employee a new job more suited to their professional development;
- information obtained on professional social networks;
- information obtained via a recruitment agency.
The indirect collection of Data is subject to the provisions of the applicable Regulations, particularly in terms of information to the Candidate.
4. WHAT ARE THE OBJECTIVES PURSUED BY THIS PROCESSING OF PERSONAL DATA AS WELL AS THEIR DURABILITYCONSERVATION AND LEGAL BASIS?
5. WHO ACCESSES THE DATA RETAINED DURING THE EXAMINATION OF YOUR APPLICATION?
Your file is treated confidentially. Only those responsible for the departments interested in your application (recruitment officers, managers, etc.) have access to the personal data contained therein. In the event of a positive outcome of the recruitment process, in order to finalize the recruitment, the human resources department will be required to transmit some of the information collected to the organizations informed of your hiring (in particular unemployment insurance, health insurance, retirement, mutual insurance) .
5.1. Data Accessors
Accessors designate the people who, within the Data Controller, will be called upon to carry out the various processing operations; these are the internal services of the Sucralliance Group.
During the recruitment process, the following categories of employees can usually obtain the transmission of Personal Data from YOUR applications: recruitment managers, human resources managers, managers supervising the future candidate.
Upon completion of the recruitment process, different services can access Your personal data of the candidate useful for the exercise of Your missions either to prepare Your hiring or manage Our obligations in terms of human resources (department in charge of payroll, training, service in charge of creation a badge, IT service to provide you with work equipment and/or determine the IT authorizations necessary for the exercise of professional activity, etc.).
5.2. Recipients of your Personal Data
The recipient is defined as any person or organization that receives communication of personal data, whether or not a third party.
Subject to the following and the applicable Regulations, SUCRALLIANCE is not authorized to disclose to a third party the content of the exchanges and information that YOU communicate to him.
As part of the finalization of the recruitment process with the hiring of the candidate, the information necessary for unemployment insurance, health insurance, retirement insurance, company mutual insurance, etc., can be transmitted to the organizations managing these benefits, who act as recipients.
Thus, the prior declaration of employment that SUCRALLIANCE must complete entails the transmission to social protection organizations in particular of the candidate's last name, first names, gender, date and place of birth, social security number (if already registered) .
5.3. SUCRALLIANCE subcontractors
SUCRALLIANCE may be required to subcontract to third-party companies the performance of certain services necessary for recruitment.
Your Personal Data may, within the strict framework of the purposes mentioned in point 4, be transmitted to our subcontractors for processing and only following the precise instructions of SUCRALLIANCE. In such a situation, our partners act as subcontractors (“ Subcontracting ), within the meaning of the provisions of the European Regulation known as “GDPR”.
- The HelloWork company, a single-member simplified joint stock company with share capital of 168.672 euros, whose head office is located at 2 RUE DE LA MABILAIS 35000 RENNES (France), registered in the Rennes Trade and Companies Register under number 428 843 130 can access Your Personal Data, as a Subcontractor and only acts on the precise instructions and under the control of SUCRALLIANCE.
Thus, the company HelloWork ensures the management and hosting of the Personal Data that YOU WE submit using the application forms hosted on the HelloWork platform and on specific instructions from SUCRALLIANCE.
– the BWAT company, cooperative SARL with share capital of €2000, whose head office is located at 10 AV DE L'ENTREPRISE 95800 CERGY, registered in the Pontoise Trade and Companies Register under number 523 736 957, acting in its capacity as sub-contractor processing and responsible for maintaining the Site (only for Personal Data arising from spontaneous applications).
In accordance with the applicable Regulations, these partners have formalized a written agreement with SUCRALLIANCE for the purposes of guaranteeing the security, confidentiality, conservation and processing of your Personal Data according to our exclusive instructions and under the conditions provided for by the applicable Regulations.
Thus, a Subcontractor is not authorized:
- To retain Your Data beyond the completion of the entrusted service;
- To process Your Personal Data in a different framework than that defined by SUCRALLIANCE.
5.4. Transfer of Your Personal Data outside the European Economic Area (EEA)
SUCRALLIANCE does not transfer any of YOUR Personal Data to a service provider located outside the European Economic Area (EEA).
6. WHAT RIGHTS DO YOU HAVE OVER YOUR DATA?PERSONAL ESSAYS
6.1. List of your rights
YOU have the following rights regarding your Personal Data, these can be exercised in WE contacting by one of the means referred to in this section.
Candidates have rights of access, rectification, deletion and portability of data concerning them, as well as rights of opposition or limitation of the processing of their data.
Depending on the legal bases retained for each of the Processing of Personal Data and in accordance with the applicable Regulations, YOU do not have access to all of the following Rights.
YOU find below the list of rights which YOU may have access to it depending on the legal basis used for each Processing of Personal Data.
(Table Source CNIL)
Permission to access
The right of access allows the Candidate to obtain from any data controller:
- Confirmation of whether or not the data controller has data concerning him or her as well as the data on which the recruiter relied to make a decision concerning him or her and their sources;
- The copy of this data;
- Certain information relating to the characteristics of the processing (purposes pursued, projected retention periods, identity of recipients or categories of recipients, etc.).
The right of access only applies to data concerning the Candidate, collected directly from YOU and to data possibly collected from third parties (former employers, etc.). However, the communication of this data must not infringe the rights of third parties (business secrets, intellectual property, right to privacy, secrecy of correspondence).
Right of rectification
The right of rectification allows the Candidate to:
- Correct inaccurate data;
- Complete data related to the purpose of the processing.
Right to erasure
The right to erasure allows the Candidate to request the erasure of their data if:
- They are no longer necessary with regard to the objective pursued;
- They were the subject of illicit processing;
- They must be erased to comply with the legal obligation provided for by Union law or the law of the Member State to which the controller is subject;
- Consent constitutes the legal basis and is withdrawn;
- The data subject has objected to the processing and there are no overriding legitimate grounds for the processing or where the data is processed for direct marketing purposes.
This right can be waived in a limited number of cases. Indeed, it must not go against in particular:
– the exercise of the right to freedom of expression and information;
– compliance with a legal obligation;
– the use of data if they concern a public interest in the field of health;
– their use for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes;
– the establishment, exercise or defense of legal rights.
Right of opposition
If the processing is based on the legal basis of legitimate interest, the Candidate has the right to object to further processing of his data for reasons relating to his particular situation.
The data controller must then stop processing their data unless there are legitimate and compelling reasons to process the data concerned or they are necessary for the establishment, exercise or defense of legal rights.
Although the right to object may, in certain cases, lead to the deletion of data relating to the candidate, this is neither automatic nor systematic.
Right to restriction of processing
The right to limit processing complements the exercise of other rights: when a Candidate exercises his right of opposition or his right of rectification, the data controller has a period of time to respond.
During this period, the Candidate may request that Sucralliance freezes the data concerned and does not use it during this period.
Right to portability
The right to portability allows the Candidate to request:
- Recovery of your data;
- The transfer of their data to an organization of their choice subject to two conditions:
- the data is subject to automated processing;
- the processing is based on the legal basis of the consent of the data subject or on the performance of a contract.
6.2 Conditions for exercising your rights
These rights can be exercised upon simple request from the Candidate, subject to proof of Your identity by any means. You can use the contact form available on the Site.
When there is reasonable doubt about the identity of the person concerned, SUCRALLIANCE may ask to attach any document enabling Your identity to be proven, for example to avoid identity theft.
The exercise of all of these rights is free. However, reasonable fees may exceptionally be requested in certain cases of exercising the right of access (for example in the event of a request for an additional copy).
To exercise your rights or in case of questions relating to the Processing of Your Personal Data, YOU can contact the Sucralliance Group Data Controller as follows:
By email : dpo.2s@sucroalliance.fr By post: SUCRALLIANCE SERVICE (2S), TO THE ATTENTION OF THE DATA PROTECTION DELEGATE (DPO) – 50 RUE DE L'EPIDEME 59200 TOURCOING (FRANCE). |
The Data Controller undertakes to YOU respond as soon as possible, and at the latest, within one month of receipt of your request. If necessary, this period may be extended by two months, taking into account the complexity and number of requests addressed to the Data Controller. In this case, YOU will be informed of this extension and the reasons for the postponement.
7. SECURITYÉ AND CONFIDENTIALITYÉ OF YOUR PERSONAL DATA
In accordance with the applicable Regulations, the Data Controller implements appropriate technical and organizational measures in order to guarantee a level of security appropriate to the risk. These measures are defined by each person, taking into account the state of knowledge, the costs of implementation and the nature of the scope, context and purposes of the processing as well as the risks, including the degree of probability and severity varies, for the rights and freedoms of natural persons.
SUCRALLIANCE applies strict data confidentiality measures, to prevent it from being distorted, damaged, destroyed or disclosed to unauthorized third parties.
For example, within human resources, only employees in charge of the recruitment processes and, where applicable, managers concerned by the offer to be filled are authorized to access the CVs and cover letters that we receive.
The following measures can be taken to guarantee the security of Your Data:
– pseudonymization and data encryption
– means to ensure the continued confidentiality, integrity, availability and resilience of processing systems and services
– means to restore the availability of data and access to them within appropriate time frames in the event of a physical or technical incident
– a procedure aimed at regularly testing, analyzing and evaluating the effectiveness of technical and organizational measures to ensure the security of the processing
– the use of the SSL (Secure Sockets Layer) protocol.
In practice, this can materialize through the following measures:
– Authentication of people with access to your Personal Data;
– Scrupulous management of authorizations (only personnel whose mission requires access to information must be authorized to access it);
– Trace access and manage incidents (fraudulent or illegitimate access);
– Protect the internal computer network and servers using firewalls;
– Back up the Data regularly;
– Secure, where applicable, the subcontracting of Data;
– Encrypt, guarantee the integrity of the Data;
- Etc. ; …
8. MODIFICATION OF THE PRIVACY POLICYÉ
This Personal Data Confidentiality Policy may be modified or supplemented at any time by SUCRALLIANCE, in particular with a view to complying with any legislative, regulatory, jurisprudential developments, interpretations of supervisory authorities or developments regarding the processing of personal data implemented by SUCRALLIANCE. In the event of modifications, these will be applicable as soon as the updated Policy is posted online and under the conditions provided for by the applicable Regulations.
9. APPLICABLE LAW AND DISPUTE
This Privacy Policy is subject to French law.
If despite the efforts of SUCRALLIANCE to preserve the confidentiality of your data and protect your privacy, YOU feel that your rights are not respected, YOU then benefit from the option of submitting a complaint to the National Commission for Information Technology and Liberties (CNIL), www.cnil.fr.
Data Privacy Policy last updated: October 23, 2023
