This English version is provided for convenience; the French version prevails.
Your data controller: Ucc Experts
When your data is collected and processed in connection with your collaboration within Ucc Experts or during a recruitment campaign, the company Ucc Experts – registered with the Trade and Companies Register (RCS) under number 539 049 775 and whose registered office is located at 150 rue Legendre 75 017 Paris – is considered to be the data controller. You may contact the Data Protection Officer (DPO) for any question relating to the protection of your data at the email address rgpd@ucc-experts.fr.
Your personal data and its collection by Ucc Experts
In the context of our collaboration or our recruitment campaigns, we may collect, process and retain personal data concerning you such as: Data relating to your identity: such as your surname, first name, sex, date and place of birth, nationality, contact details (address, personal telephone number, emails), identity photograph, and, where applicable, passport number and driving licence number; Data relating to your social identity: such as your social security number and, where applicable, disability rate/disability-related data; Data relating to your family circumstances: such as identification data of your children and, where applicable, spouse, cohabiting partner or civil partner; Data relating to your business travel and access to premises: such as business travel and means of transport to your place of work (in particular for the purposes of personnel management and reimbursement of travel expenses); Data relating to your HR status within the company: such as contractual status (permanent contract, fixed-term contract, date of hire, weekly working hours, position/role, salaries and bonuses, professional contact data (email, telephone number, etc.), working hours, absences (for whatever reason), paid leave and days off in lieu, annual appraisal report where applicable; Data relating to your employee representative mandates (where applicable): such as a mandate on the works council or as a union representative; Data relating to your education and professional experience: such as the data provided on your CV, diplomas and training certificates, language level, hobbies and interests, mobility, motivation, career objectives; Banking, financial and tax data: such as bank details (payment of remuneration), remuneration (salaries, bonuses, stock options/subscription warrants, etc.), contributions to a pension fund; Data relating to the security of and access to premises and equipment (where applicable): such as CCTV data, personal access codes to premises or equipment, and other data necessary for secure access to premises;
Data relating to your legal/judicial situation: we may be required to collect special categories of personal data in the event of an attachment of earnings by third parties, or to collect your criminal record where your position so warrants;
We may, where applicable, collect other data with your consent, but we do not collect any sensitive data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or sexual orientation. Any sensitive data that you provide on your own initiative will not be retained. We do not collect any data that is not necessary for the processing purpose indicated at the time of collection and for which your consent has been obtained. Our policy is not to transfer your data outside the European Union; should we exceptionally do so, such transfer may only take place to a country or organisation covered by an adequacy decision (Article 45 GDPR) or providing appropriate sufficient safeguards (Article 46 GDPR). You are informed of the data that is mandatory for the processing to which you consent at the time it is collected.
Your personal data is collected by various means:
During our recruitment campaigns: upon receipt of your CV with your consent, during interviews (in person, by video or by telephone), through email exchanges with our recruitment staff, through service providers engaged by us for recruitment campaigns where applicable; During your collaboration: through your exchanges with Human Resources, through collection forms, through your appraisals, through any information provided by you to your operational departments that is of relevance to human resources, through your transport receipts (expenses), information generated by your HR status (e.g. salary increase, various employee benefits, etc.), where applicable via the intranet; When you access premises or are provided with secure equipment: through security tools and through your exchanges with the IT security managers.
Our processing of your personal data
We may process your personal data for purposes described to you at the time of collection; your personal data is collected principally for the following purposes: Your personal data is collected, processed and retained in particular for the following purposes: To ensure the selection of candidates during recruitment and to draw up the employment contract; For the management of our legal obligations arising in particular from employment law and our obligations arising from your employment contract (such as: management of schedules and working hours, leave (paid leave, sick leave, maternity/paternity leave), preparation and holding of staff representative elections, management of remuneration and payslips (preparation of payslips, calculation and determination of remuneration (salaries, bonuses, benefits in kind), payment of remuneration); For the management and monitoring of your career (in particular: changes in position and responsibility, salary, place of work (mobility), training, etc.); For the management of benefits granted to our employees (where applicable, for example: luncheon vouchers, reimbursement of travel expenses); For the management of the company and of work (headcount, budget, reorganisation and restructuring, directories, etc.); For the management of security and access to premises and equipment (where applicable and depending on the security measures we may implement: checking of your access codes, your badges, checking of CCTV recordings); For accounting, tax and social security management, or for judicial requirements; For the management of the accessibility of premises and workstations for employees with disabilities (where applicable).
The legal basis for the processing of your personal data by Ucc Experts
In accordance with the applicable regulations, the processing of your personal data by Ucc Experts is lawful where it is based on one of the following grounds: Your consent to the processing of your personal data. You may withdraw this consent at any time; or The existence of an employment contract: the processing of personal data is then justified by the requirements of performance of the contract; or A legitimate interest in the processing of your personal data, provided that such proportionate interest respects your fundamental rights and your private life; or The law or applicable regulations.
Arrangements for and duration of retention of your personal data
Your personal data within Ucc Experts is managed according to three phases: an active phase, in which data is retained for the time necessary for its operational processing in an "active" database: your personal data is then accessible only to persons with an operational need to access it in order to carry out the authorised processing. An archiving phase (for an additional period beyond retention in the "active" database) where a legitimate reason so justifies: your personal data is then archived with restricted access and for a limited period. A deletion or anonymisation phase: at the end of the additional archiving within the periods set out below, your personal data is deleted or anonymised (such that it can no longer constitute personal data identifying you). Your personal data is retained only for the time necessary for the purposes set out above, and in particular for the duration of your collaboration; we may archive such data for the period applicable under tax, accounting or judicial limitation periods.
Withdrawal of your consent to the collection or processing of your personal data
Consent given by you to the collection of your personal data may be withdrawn by writing to our DPO by email or by post to the addresses set out in the following article, stating your surname, first name, email and address, together with the precise nature and subject matter of your withdrawal request. You may also send us any comments regarding your personal data, Ucc Experts paying particular attention to the respect of your rights.
Exercising your rights over your personal data
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by email to: rgpd@ucc-experts.fr or by letter to the following address: Anna OLEJNIK, DPO of Ucc Experts, 150 rue Legendre 75 017 Paris, stating your surname, first name, address and email, as well as the subject matter of your request, in clear and intelligible terms. Ucc Experts undertakes to respond to your verified request within one month of receipt. Should any difficulty arise, you may contact our Data Protection Officer directly by email. You may also refer the matter to the French data protection authority (CNIL).
The processors and partners of Ucc Experts
Ucc Experts may transmit or give access to your personal data to service providers who may process it in connection with their services and in compliance with the purposes for which such data was collected; such service providers must afford your personal data the same level of confidentiality as Ucc Experts and have undertaken to Ucc Experts to be in full compliance with the regulations on personal data, in particular the GDPR. The service providers who may have access to your personal data include in particular: service providers who may manage outsourced HR services, such as providers ensuring the payment of salaries and the generation of payslips, pension bodies, social security funds, recruitment agencies; statutory auditors, chartered accountants, consultants, lawyers, audit firms, IT and managed-services providers, security providers, travel agencies; investors and acquirers.