This page summarizes how BeCandid Tech SAS acts as Data Controller in regards to the processing of personal data in the BeCandid Mobile App and lite.becandid.tech Web App. Only the version available in the annex of the Terms of Use of the BeCandid Mobile App and lite.becandid.tech Web App will be authentic in the event of a dispute.

**************************************

As part of the provision of our Applications, BeCandid Tech SAS processes your personal data in compliance with the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”) and under the conditions set out below .

Personal data means any information relating to an identified or identifiable natural person. We collect and process personal data in the context of providing our Services or communicating about these Services exclusively, in strict compliance with the GDPR. We only collect personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed. Therefore, you will never be asked to provide personal data considered “sensitive”, such as your racial or ethnic origins, your political, philosophical or religious opinions.

By browsing the Applications, you authorize us to process your personal data in accordance with the Privacy Policy. If you do not agree to the terms of this Privacy Policy, please refrain from using the Applications.

1. In what cases do we collect your personal data and what data is collected?

We may collect and store your personal data, including when you download the Mobile App and browse on your smartphone, when you use the service BeCandid Lite on the Mobile App by inviting a company to share salary feedback, when you use the service BeCandid Lite on the Web App by receiving an invite from a User of the Mobile App to share salary feedback or more generally when a User of the Mobile App sends you an invite, when you use the service BeCandid by receiving an invite from a company to share salary feedback, and when you contact us.

We use your personal data to enable the implementation and management of the Application Services and respond to your specific requests. We also use your personal data for the purpose of operating and improving our Services, our Applications and our approach. This information is used only by us and allows us to better adapt our Services to your expectations.

We minimize the collection of personal data and only collect what is strictly necessary for the execution of our Terms of Use, compliance with current legislation and the execution of the steps prior to the conclusion of contracts. We carry out an impact analysis when developing our Services in order to define the personal data necessary for the proper execution of the Service, the purpose of processing this data and the risks.

1.1 Navigation on the Applications

Each time you access our Applications, we collect personal data such as, in particular, your IP address, date and time of connection, as well as information about the browser you are using.

1.2 Use of the Service

BeCandid Lite: When you use the Mobile App to invite a company to share salary feedback, we collect your email address and the email address of the recipient of the company you invite. The purpose is to make it possible to send email notifications and implement the feedback sharing process by following the cryptographic protocol. You must ask the company for permission to use their professional email address before sending a feedback invite. When you use the Web App when receiving an invite from a candidate to share salary feedback, we collect your email address. The purpose is to make it possible to send email notifications and implement the feedback sharing process by following the cryptographic protocol.

BeCandid:When you use the Mobile App and receive an invite from a company to share salary feedback, we collect your email address. The purpose is to make it possible to send email notifications and implement the feedback sharing process by following the cryptographic protocol.

1.3 Contacts

In order to respond to requests you may reach out to our Customer Service and to confirm information about you, we may use your first and last name, email address and telephone number. The aim is to make communication possible and provide you with the necessary support.

1.4 Autre

When our Users send feedback invites, we use the email address of the invite recipients.

2. How do we protect your personal data?

We have set up and regularly reassess technical and organizational security measures to guarantee the security, integrity and confidentiality of all your personal data, in order to prevent it from being distorted, damaged or from unauthorized third parties. have access. We ensure an appropriate level of security, taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks and their likelihood.

However, it is specified that no security measure is infallible, we are not able to guarantee absolute security of your personal data.

Furthermore, it is your responsibility to ensure the confidentiality of the data presented on the Mobile App. by not giving access to the Mobile App on your smartphone to third parties.

3. When do we share your personal data?

3.1 Sharing of your personal data within the Company

Your personal data may be processed internally at BeCandid Tech. Only people who need to process personal data as part of their duties will have access to it.

3.2 Sharing your personal data with third party companies

When you browse the Applications, your personal data may be transmitted to external service providers. These third parties provide a service on our behalf and in our name with the aim of enabling the proper functioning of the Services.

Our subcontractors are as follows

- Google Workspace Europe (Emails you send to our Support team)

- Infomaniak (Hosting / Infrastructure)

- Mailgun Europe (Emails notifications sent by the solution)

We favor subcontractors who use servers located in the European Economic Area. However, personal data may be transferred to countries outside the European Union. In accordance with the GDPR, all transfers of personal data to a country located outside the European Union and/or not offering a level of protection considered sufficient by the European Commission have been the subject of cross-border flow agreements. comply with the standard contractual clauses issued by the European Commission.

Except in the case where a third party asks you to accept its own confidentiality policy and conditions of use, the third party companies having received communication of your personal data have undertaken to process your personal data only for the implementation of our Services.

We will never share, without obtaining your prior consent, your personal data with third party companies for marketing and/or commercial purposes.

3.3 Sharing with authorities

We may disclose your personal data to administrative or judicial authorities when their disclosure is necessary for the identification, arrest or prosecution of any individual likely to harm our rights, any other user or of a third. Finally, we may be legally required to disclose your personal data and cannot object to this in this case.

4. How long do we keep your personal data?

BeCandid Lite: We will retain your personal data as long as you are active on the Mobile App and up to two years of inactivity. After two years of inactivity, personal data will be deleted and only kept in archive form for the purposes of establishing proof of a right or contract. In any case, we will keep your personal data for a period not exceeding that necessary for the purposes for which they are processed in accordance with the uses set out in this Policy and in compliance with laws and regulations.

BeCandid: When you are invited by a BeCandid company client to provide feedback from the Mobile App, we act as a subcontractor of the client company. The data retention arrangements are governed by the Data Processing Agreement established between the Company and the Client.

5. Cookies: how do we use them?

5.1 What is a Cookie ?

A cookie is a text file that may be placed in a terminal when consulting an online service with browser software. A cookie file notably allows its issuer, during its validity period, to recognize the terminal concerned each time this terminal accesses digital content containing cookies from the same issuer. In any case, cookies placed on your browsing terminal with your consent are destroyed 13 months after their placement on your terminal.

5.2 What are the cookies issued on our Applications used for?

The cookies we issue allow us to provide our Services by making access to the Applications possible, allow us to fight fraud by ensuring that people accessing our Applications are authorized to do so and allow us to adapt the presentation of our Mobile App to the display preferences of your terminal (language used, display resolution, operating system used, etc.) during your visits to our Application, depending on the hardware and viewing or reading software that your terminal includes.

The Company only places cookies on the Applications that are exempt from consent under article 82 of the Data Protection Act. Therefore, you will not see a cookie banner asking for your consent.

5.3 How can you control the cookies used?

You can configure your browser software at any time so that cookies are saved on your terminal or, on the contrary, that they are rejected (either systematically or depending on their issuer). You can also configure your browser software so that you are offered the acceptance or refusal of cookies from time to time, before a cookie can be saved on your terminal. Please note: any settings may modify your Internet browsing and your conditions of access to certain services requiring the use of cookies. We decline all responsibility for the consequences linked to the degraded functioning of our services resulting from the impossibility of recording or consulting the cookies necessary for their functioning and which you have refused or deleted. This would be the case if you tried to access our content or services which require you to identify yourself. This would also be the case when we (or our service providers) could not recognize, for technical compatibility purposes, the type of browser used by your terminal, its language and display settings or the country from which your terminal appears to be connected to the Internet.

5.4 How to configure your navigation software?

For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify your cookie preferences. To obtain more information about cookies, you can consult the CNIL website.

6. What are your rights?

You have rights over your personal data. In accordance with the regulations on the protection of personal data, in particular articles 15 to 22 of the GDPR, and after having proven your identity, you have the right to ask us for access to the personal data concerning you, the rectification or erasure thereof.

In addition, within the limits set by law, you also have the right to object to the processing, to limit it, to decide the postmortem fate of your data, to withdraw your consent at any time and the right to portability of personal data provided.

You can contact our Services to exercise your rights at the following email address: support@becandid.tech or to the following postal address: BeCandid Tech, 400 avenue Roumanille, Green Side Business Village, B.P. 309, 06906 Sophia-Antipolis cedex by attaching a copy of an identity document to your request.

If you have been invited by a BeCandid corporate client to provide feedback from the Mobile App, the controller of your personal data is the company that invited you. We invite you to contact them for any request relating to the exercise of your rights over your personal data.

7. Can we change the Privacy Policy?

We reserve the right to modify the Privacy Policy at any time. It is therefore recommended that you consult it regularly. If we make changes, we will post those changes on this page and in other places we deem appropriate based on the purpose and significance of the changes made. Your use of the Applications after any changes means that you accept those changes. If you do not agree to certain material changes to this Privacy Policy, you should stop using the Applications.

8. The National Commission for Information Technology and Liberties (“CNIL”)

We remind you that you can contact the CNIL directly on the CNIL website or by mail to the following address: Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX 07.