Information notice on personal data processing carried out in the context of the use of Talentfinder
- OBJECT
The purpose of this information notice (hereinafter referred to as “Notice”) is to inform you, as an user of the solution Saas Talentfinder used by the Profile Group, about the terms and conditions of the processing of your personal data by Sodexo Luxembourg Group (namely Sodexo Luxembourg S.A., Sodexo Résidences Services A.S.B.L., Sodexo Senior Services S.A., hereinafter referred to as “Sodexo”), as part of your networking via Talentfinder, online recruitment management software to analyze applications, schedule interviews and communicate with candidates (hereinafter referred to as “Processing”)
- SCOPE
Sodexo respects your privacy.
- PERSONAL DATA PROCESSING CATEGORIES
Sodexo will collect the following categories of personal data (hereinafter referred to as “personal data”):
- Information about your civil status and identity: surname, first name, gender, date of birth, picture, personal address, telephone number, work permits (for foreign employees), residence permit, etc.
- Information relating to your diplomas or certificates: CV, information relating to your education, professional experience, distinctions, diplomas, certificates, attestations, languages used, etc.
- Information relating to your family situation: family and marital status, etc.
- Information relating to your professional life: professional telephone number, professional email, positions with your previous employers, etc.
- Information relating to the recruitment process: salary expectations, date of the medical check-ups, professional aptitude, number, date and place of driving license etc.
- Information about your login data and security: IP address; login data, cookies, user name, password etc.
- PURPOSES OF PERSONAL DATA PROCESSING
Sodexo will process personal data for the purposes listed below without this list being exhaustive (hereinafter referred to as “the purposes”):
- Recruitment process:
- Management of spontaneous applications,
- Management of application files following the publication of an open position or the creation of a new position.
- LEGAL BASIS OF PERSONAL DATA PROCESSING
As part of the processing purposes listed above, Sodexo processes your personal data in accordance with the following legal basis:
- in the legitimate interests of the recruitment of the staff,
- the execution of the service contract with our clients,
- to meet the legal and regulatory obligations of Sodexo.
- CATEGORIES OF RECIPIENTS
Within Sodexo, your personal data can only be accessed by those authorized by virtue of their function as specified by the processing purposes listed above and/or to the extent that such access is required on a legal or regulatory basis.
- INTERNATIONAL TRANSFERS OF PERSONAL DATA
Given the international nature of the Sodexo Group, your personal data may be transferred for the above processing purposes to internal or external authorized recipients, which may be located in countries outside the European Union or the European Economic Area, and may not therefore offer an adequate level of personal data protection. In order to guarantee the security and confidentiality of the personal data thus transferred, Sodexo implements the appropriate measures based on the European Commission’s Standard Contractual Clauses or any other equivalent mechanism.
In this case, your Personal Data is processed in Luxembourg by certain members of Sodexo's staff, but also in Belgium by certain members of the staff of our subcontractor supplier of the software, namely company PROFILE GROUP if necessary. Your Personal Data is stored in a data center in Germany managed by our subcontractor PROFILE GROUP.
- DATA SECURITY
Sodexo maintain adequate technical and organizational security measures to protect personal data from destruction, loss, alteration, unauthorized disclosure, or unauthorized access, whether accidental or unlawful.
- DATA RETENTION
Your personal data will be stored or retained only for the period of time necessary to fulfil the purposes of the processing described in this notice and/or, as the case may be, during the periods of applicable legal or regulatory requirements, namely for a maximum of six (6) months from the creation of the Talentfinder account or your agreement to extend the storage of the registered personal data.
- YOUR RIGHTS
In accordance with the conditions provided by law or applicable regulations, you have rights of access, opposition, deletion, limitation, portability and complaint.
Access rights
You may request access to your personal data. You may also request to have inaccurate personal data corrected or incomplete data completed.
You also have the right to know the sources of the relevant personal data, and you are entitled to request and receive the personal data that concerns you.
Right to object
You have the right to object to the processing of your personal data for legitimate reasons, except when the processing is carried out in accordance with the mandatory provisions of applicable law.
Right to delete
Your right to be forgotten entitles you to request the deletion of personal data when:
- The data is no longer necessary for the purposes for which it was collected and processed,
- You choose to withdraw your consent (if your consent has been collected as the legal basis for processing), but this withdrawal does not affect the lawfulness of the processing before it is implemented,
- You object to the processing,
- Your data has been processed unlawfully,
- Your personal data must be erased to fulfil the legal obligation, or,
- Its deletion is required to ensure compliance with current legislation.
Right to limitation
You may also request that the processing of your personal data be limited if :
- You dispute the accuracy of the data,
- Sodexo no longer need the data for the processing purposes, and
- You have objected to the processing of the data, but Sodexo’s legitimate reasons prevail over yours.
Right to portability
You may ask us to provide your personal data in a structured, commonly used, machine-readable format, or you may ask to have it ”ported” directly to another processor provided that :
- The processing is based on your consent or on the fulfilment of the contract concluded with you; and
- That it is realized by automated means.
Right to lodge complaint with a supervisory authority
If you have a complaint against us regarding the protection of your personal data, you may complete and send the Application / Complaint Form or lodge your complaint by e-mail or post in accordance with our Global Claims / Complaints Management Policy. If our response does not satisfy you, you may contact the National Data Protection Commission (CNPD) using the following link : www.cnpd.lu
However, please send your request or complaint to us in advance by e-mail to our local contact at the following address : dataprivacy.oss.lu@sodexo.com
To do this, please complete the form (on our Global Policy on Personal Data Protection) using the following link: Global Data Protection Policy so that we can process your request and find an amicable solution
To exercise these rights or for any questions and/or updates of your personal data, you may get in touch with your local contact and/or to send an e-mail to the following address: dataprivacy.oss.lu@sodexo.com
- CHANGES OF THE NOTICE
If Sodexo decide to modify this notice, Sodexo will publish a revised version of the notice and/or take any other necessary action in accordance with applicable laws and regulations.
- GLOBAL DATA PROTECTION OFFICE
Sodexo has set up a dedicated team at group level, the “Global Data Protection Office” which, if required, you can contact at the following address if you have any questions about the protection of your personal data: dpo.group@sodexo.com
Locally, you can also get in touch with your local contact at the following address: dataprivacy.oss.lu@sodexo.com
You may also refer to our Global Data Protection Policy and our Cookie Policy