PRIVACY POLICY

This privacy policy explains how Keolis SA as Data Controller stores and uses the information you provide on the SuccessFactors Website https://careers.keolis.com/?locale=en_US (“the Website”), when you register on and sign in to the Website, in accordance with the French Act of Parliament no. 78-17 dated 6 January 1978 on information technology, data files and civil liberties, amended, and with the Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (“GDPR”).

The Keolis SA Company (“Keolis SA”, “we”, “our”, “us”) makes every effort to protect your personal data, in compliance with applicable European and French legislation. This privacy policy (“the Privacy Policy”) aims to inform you as to the purposes and conditions in which we process personal data that we may collect on the Website.


1. GENERAL PROVISIONS

The information that you provide when filling in / completing account information on the Website is your own personal responsibility. Consequently, you acknowledge that all information provided is in all respects accurate, up to date and not intended to mislead.

Personal data is collected and processed by Keolis SA for the purposes set out in this privacy policy.

Data Controller

The data controller of your personal data collected and processed on the Website is Keolis SA.

Terms of Use

The Privacy Policy is an integral part of the Terms of Use of our Website and should be read in conjunction with them.

The General Terms and Conditions of Use of our Platform are accessible on your candidate account under the "My profile" tab at the following link: hhttps://careers.keolis.com/content/legal-notice/?locale=en_US.

Applicable law and competent administrative authority

The Privacy Policy is governed by the General Data Protection Regulation n°2016/679 (“GDPR”) and by the French Data Protection Act no.78-17 of 6 January 1978 subsequently amended, under the regulatory supervision of the French data protection authority CNIL (Commission Nationale de l’Informatique et des Libertés – www.cnil.fr).

Data storage

Your personal data are stored in the European Union.


2. INFORMATION RELATING TO YOUR USER ACCOUNT

Your account is protected by a password. You are responsible for maintaining the confidentiality of this password. You agree to immediately notify Keolis SA of any unauthorised use of your password.

The data required to create your account is processed by Keolis SA solely for account management and recruitment purposes. Personal data will be received by the Human Resources departments and Keolis SA’s suppliers who manage the Website or host the data.

 

3. THE PERSONAL DATA THAT WE COLLECT

The Privacy Policy applies to the personal data that we may collect from you or about you (see below) from the following sources:

  • Website browsing ;
  • Creation and management of your account;
  • Receipt of your information/contact requests sent to support on the Career Website, as well as by email.
  • Receipt and management of your application sent on the Website or by another channel, including by email;
  • Receipt and management of your requests to exercise your rights;

 

4. USE OF YOUR PERSONAL DATA AND STORAGE PERIODS

We collect and store your personal data for the main purposes and storage periods described below:
Purposes:

1. Management your user account on the Website

2. Management of your information/contact requests

3. Recruitment:

  • Application and interview management
  • Creation of a CV library

4. Cookies management

5. Management of your requests to exercise your rights

6. Pre-litigation and litigation management, evidence gathering

 

Collected data:

1. Management your user account on the Website:

  • Login data
  • Identification data

2. Management of your information/contact requests:

  • Purpose of request
  • Identification data

3. Recruitment:

  • Identification data
  • Data on your professional life (cover letter, CV, interview)

4. Cookies management:

  • Cookies

5. Management of your requests to exercise your rights:

  • Identification data, including identity documents/proofs
  • Requests received
  • Answers given

6. Pre-litigation and litigation management, evidence gathering:

  • Data required for the procedure in progress

 

Storage periods:

1. Management your user account on the Website:

  • 30 days in case of non-acceptance of the General Terms and Conditions of Use (CGU).
  • 1 year from your last connection (inactivity).
  • You can delete your account at any time.

2. Management of your information/contact requests:

  • The time of demand management.

3. Recruitment:

  • The time of analysis of the applications then 2 years from the date the reply is sent if you are not selected to contact you for new opportunities.
  • If you do not want your application data to be stored, you can request its deletion.

4. Cookies management:

  • To know the retention periods of your data related to the management of cookies, we invite you to consult our cookie management policy.

5. Management of your requests to exercise your rights:

  • 5 years from receipt of the complete request

6. Pre-litigation and litigation management, evidence gathering:

  • Duration of the procedure

 

5. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

In accordance with the applicable regulations, we process your data when we have a legal basis for doing so. This may be for the performance of a contract, legitimate interest, a legal obligation or your consent.

Purposes of processing based on contractual (or pre-contractual) performance

  • Management of recruitment;
  • Management of your user account on the Website.

Purposes of processing based on legitimate interest

  • The constitution of a CV database in order to contact you if we have opportunities ;
  • Management of your information/contact requests ;
  • Management of pre-litigation and litigation, the constitution of evidence.

Purposes of processing based on legal obligation

  • Management of your requests to exercise your rights (access, rectification, opposition, etc.) pursuant to the GDPR.

Purposes of processing based on your consent

  • In order to ensure the management of cookies, with the exception of strictly necessary cookies: to learn more about your data collected in this context, we invite you to consult our cookie management policy.

 

6. DATA TRANSMISSION

Keolis S.A may disclose your personal data:

In-house

Your personal data processed to manage your requests, your application and the CV database are intended for the Human Resources department and the department(s) concerned by your application. Your requests for rights will be transmitted to the DPO of Keolis SA for processing. In order to manage litigation and pre-litigation, your data may be transmitted to the authorised departments of the Human Resources Department and the Legal Department.

Within the Keolis Group

Your application data may be transmitted to the Keolis subsidiary concerned by the offer for which you have applied.

When you respond to a job offer from a Keolis subsidiary, this subsidiary will process your application data as a separate data controller. Your data is then processed in accordance with the privacy policy of the Keolis subsidiary concerned, which you can consult by contacting it directly.

With third-party providers

We may transfer your personal data to trusted third parties, service providers of Keolis SA, located within the European Union (“EU”), in particular to ensure the correct functioning of our Website.

Your personal data processed to manage your application may also be communicated to service providers (managers of the Website, service providers who simplify the process of searching for offers and/or submitting CVs), as well as to external organizations if they are employed by Keolis SA as part of recruitment processes (recruitment agencies).

***

In all events, we always require that these recipients provide sufficient privacy and security guarantees and that they take the necessary physical, organisational and technical measures to protect and safeguard your personal data in accordance with current legislation.

Your data is hosted and processed within the EU. However, when you respond to an offer for a Keolis subsidiary located outside the European Union, your data is transferred outside the EU so that your application can be sent to the subsidiary concerned.

Any transfer of your data outside the EU is carried out with appropriate guarantees that comply with the applicable regulations, either because the recipient countries benefit from an adequacy decision, or because these transfers are framed by the implementation of Standard Contractual Clauses validated by the European Commission. For more information on the framework of these transfers you can contact us at the contact addresses indicated in article 10.

 

7. DATA SECURITY

Keolis SA safeguards your personal data by implementing the adequate physical, organisational and technical measures to prevent any unauthorised access, use, disclosure, modification or destruction, in accordance with current legislation.

These measures specifically include: 

  • Storing data on secure servers in the European Union;
  • Limiting access to your data on a “need to know” basis;
  • Implementation of organisational measures internally to protect your data.

While Keolis SA takes every possible measure to protect your personal data, we cannot guarantee the security of the information transmitted to our website when your terminal or browser is affected by a security breach.

 

8. YOUR RIGHTS ON YOUR PERSONAL DATA

Pursuant to the GDPR and the French Data Protection Act, you are entitled to several rights, including:

Access, modification, updating and deletion of your personal data

You may ask to be granted access to your personal data which are held and processed by Keolis S.A.; you may consult them, obtain a printed or electronic copy of them and ask for them to be corrected, updated or deleted.

Objection

You may at any time ask that some of your data be no longer processed.

Portability

You may request to have your processed data sent to you in an open and machine-readable format, whether it be for your personal use or to transfer them to another controller.

Restriction of processing

In certain cases, you may request that the processing of your personal data be restricted.

Claims to a Supervisory Authority

Without prejudice to any other legal remedy, you are entitled to lodge a complaint with the supervisory authority of the European Union country in which you reside, work or in which you deem that your rights might have been infringed upon.

***

You may exercise all of these rights by sending a written request together with a copy of proof of identity to the contacts set out in Article 10.  “How to contact us”.

We will try to deal with your request at our earliest opportunity and in accordance with the conditions provided for by the applicable legislation. Notwithstanding, it may occur that due to our binding legal or contractual obligations, we are unable to grant your request.

 

9. CHANGES TO THE PRIVACY POLICY

Keolis S.A. reserves the right to make changes to the Privacy Policy of the career site.

We invite you to regularly consult this page to learn of any changes and stay up to date on the measures we take to protect your personal data.

For more information on all personal data processing carried out by Keolis SA, please read Keolis SA's Global Privacy Policy available at the following link Privacy Policy Keolis SA | Keolis.com.

 

10. HOW TO CONTACT US

To exercise your rights or for any queries relating to the Privacy Policy, please contact our Data Protection officer by clicking here or by post at:

Keolis SA

Data Protection Officer

34 Avenue Léonard de Vinci,

92400 Courbevoie, France

 

This Privacy Policy was last updated on 11/29/2022.