Privacy
policy
Privacy
policy
At 2PACE, the protection of your personal data is a priority. When you use the site https://www.2pace.fr/en/ (the “Site“) and as part of the management of our contractual relationships with our customers, we are required to collect personal data about you. The purpose of this policy is to inform you about the terms and conditions under which we process this data in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the “GDPR“) and Law No. 78-17 of 6 January 1978 on information technology, files and freedoms (together the “Applicable Regulations“).
ARTICLE 1 – Who is the data controller?
When you browse our Site or when managing our contractual relationships with our customers, the data controller is the company 2PACE, a simplified joint-stock company, registered with the Paris Trade and Companies Register under number 888 969 193 and whose head office is located at 3 rue Buzelin, 75018, Paris (“We”).
ARTICLE 2 – What data do we collect?
Personal data is data that can identify an individual directly or by cross-referencing with other data.
We collect personal data that falls into the following categories:
• Identification data (last name, first name, email address, telephone number, postal address, photo, personal website link or Twitter account);
• Data relating to your professional life (company name, position, professional email, CV, LinkedIn account);
• Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID);
• Any information that you wish to send us as part of your contact request.
Mandatory data is indicated when you provide us with your data. It is indicated by all means.
ARTICLE 3 – On what legal basis, for what purposes and for how long do we keep your personal data?
The site is accessible from any location, 7 days a week, 24 hours a day, except in cases of force majeure, scheduled or unscheduled interruptions that may result from a need for maintenance. In the event of modification, interruption or suspension of services, the site www.2pace.fr cannot be held responsible.
| Objectives | Legal bases | Retention periods |
|---|---|---|
| Improving our services | Our legitimate interest in improving our services | Cookies to improve the user experience. Personal data is retained for 12 months. |
| Create a file of customers and prospects | Our legitimate interest in developing and promoting our business | For customers: the data is retained for the entire duration of the contractual relationship. For prospects: the data is retained for a period of 3 years from your last contact. |
| Send newsletters, solicitations and promotional messages by email | For customers: our legitimate interest in retaining and informing our customers of our latest news For prospects: your consent |
The data is retained until you withdraw your consent. |
| Responding to your requests for information | Our legitimate interest in responding to your requests | The data is kept for a period of 3 years from your last contact. |
| Processing applications and managing interviews (pre-selection of candidates, contact to assess the candidate’s ability to fill the position, finalization of the recruitment process) | Execution of pre-contractual measures taken at your request | Your data is kept in an active database throughout the recruitment process until the hiring decision. In the event of your application being rejected, your data may be kept for 3 months after the end of the recruitment process in order to be able to provide you with explanations on the reasons that led to the rejection of your application. Your data may be kept in intermediate archiving for evidentiary purposes for 5 years from the date of the hiring decision. |
| Creation of a CV library | Your consent | The data is kept for two years from the last contact with the person concerned. |
| Develop statistics (navigation, Site audience, etc.) and improve the Site’s functionalities by depositing audience measurement cookies | Our legitimate interest in analyzing the composition of our customer base and improving our services | The data is kept for 2 years. |
| Distribute personalized advertising through the deposit of advertising cookies | Your consent | The data is kept for 6 months. |
| Manage requests to exercise rights | Comply with our legal and regulatory obligations | If we ask you for proof of identity: we keep it only for the time necessary to verify your identity. Once the verification is carried out, the proof is deleted. If you exercise your right to object to receiving prospecting: we keep this information for 3 years.. |
ARTICLE 4 : Who are the recipients of your data?
The following will have access to your personal data:
- Our company’s staff;
- Our subcontractors: hosting provider, newsletter sending provider, audience measurement and analysis provider, email provider, secure payment provider, billing tool, cookie management tool;
- Where applicable: public and private bodies, exclusively to meet our legal obligations.
ARTICLE 5 : Is your data likely to be transferred outside the EU?
Your data is retained and stored for the entire duration of the processing on the servers of the company OVH, located in France. As part of the tools we use (see article on recipients concerning our subcontractors), your data may be transferred outside the European Union. The transfer of your data in this context is secured using the following tools:
- either the data is transferred to a country that has been the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, this country ensures a level of protection deemed sufficient and adequate to the provisions of the GDPR;
- either the data is transferred to a country whose level of data protection has not been recognized as adequate to the GDPR: in this case these transfers are based on appropriate guarantees indicated in Article 46 of the GDPR, adapted to each service provider, including but not limited to the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or by virtue of an approved certification mechanism;
- or the data is transferred on the basis of one of the appropriate guarantees described in Chapter V of the GDPR.
You can obtain a copy of the tools allowing the transfer of your data outside the European Union by contacting us using the contact details indicated in the article “Contact point to exercise your rights” below.
ARTICLE 6 : What are your rights over your data?
You have the following rights with respect to your personal data:
- Right to information: this is precisely why we have drawn up this policy. This right is provided for in Articles 13 and 14 of the GDPR.
- Right of access: you have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR
- Right of rectification: you have the right to rectify your inaccurate, incomplete or obsolete personal data at any time in accordance with Article 16 of the GDPR.
- Right to restriction: you have the right to obtain the restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
- Right to erasure: you have the right to require that your personal data be erased, and to prohibit any future collection of your personal data for the reasons set out in Article 17 of the GDPR.
- Right to lodge a complaint with a competent supervisory authority (in France, the CNIL), if you consider that the processing of your personal data constitutes a violation of the applicable texts, in accordance with Article 77 of the GDPR.
- Right to define guidelines for the retention, erasure and communication of your personal data after your death.
- Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR indicates that you can withdraw your consent at any time. This withdrawal will not affect the legality of the processing carried out before the withdrawal.
- Right to portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard, machine-readable format and to request their transfer to the recipient of your choice.
- Right to object: under Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process them despite this opposition, for legitimate reasons or to defend legal rights.
You can exercise these rights by writing to us at the contact details below. We may ask you to provide us with additional information or documents to prove your identity.
ARTICLE 7 : What cookies do we use?
To find out more about cookie management, we invite you to consult our Privacy policy.
ARTICLE 8 : Contact point to exercise your rights
Contact email : DPO@2PACE.fr
Contact address: 3 rue Buzelin, 75018, Paris
ARTICLE 9 : Contact point to exercise your rights
We may modify this policy at any time, in particular to comply with any regulatory, jurisprudential, editorial or technical developments. These modifications will apply on the date the modified version comes into force. You are therefore invited to regularly consult the latest version of this policy. However, we will keep you informed of any significant changes to this privacy policy.
Effective date: 01/06/2024
