Protection of Personal Data

Who are we?

Where the processing of personal data requires the consent of the data subject, TROPHY will implement a specific mechanism to obtain such consent.

TROPHY has appointed a Data Protection Officer: this is the law firm Ernst & Young, which can be contacted by email dpo@trophy-group.com or by postal mail at the following address: TROPHY - Délégué à la Protection des Données (DPO) - 1 Avenue Eiffel - 78421 Carrières sur Seine, France.

What data do we process?

TROPHY processes the following categories of personal data: identification data, professional experience, certifications and diplomas, professional qualifications, career wishes, CV elements and interview reports. In the forms, the information collected by TROPHY and which is essential to meet the aforementioned purposes is identified by an asterisk on the collection forms. If you do not complete these mandatory fields, TROPHY may not be able to provide the service in question.

Who has access to your personal data?

Your personal data is mainly communicated/accessible to the Human Resources Department and TROPHY's intended hierarchical superiors. Outside TROPHY, your data will be communicated to TROPHY's IT service providers. Sub-contractors acting on TROPHY's instructions will be required to implement appropriate protection measures. If any of TROPHY's partners are located outside the European Union, we will ensure that transfers are made in accordance with French regulatory requirements (for example, implementation of contractual clauses adopted by the European Commission). You may contact TROPHY's Data Protection Officer to obtain further information on these matters and a copy of the relevant documents.

How long do we keep your personal data?

Personal data is kept for 3 months after the recruitment process has been completed, or for 2 years after the last contact if the candidate has agreed to their CV being kept in the CV library.

• You have the right to request access to your personal data.
• You have the right to request rectification of your personal data.
• You have the right to request the restriction of the processing of your personal data, (i) if you dispute the accuracy of your data for the period of time necessary for us to verify its accuracy, (ii) if you consider that we are processing your data unlawfully and you request a restriction of its use rather than erasure, (iii) if we no longer need your data for the purposes referred to above but it is still necessary for the establishment, exercise or defence of your legal rights, (iv) if you exercise your right to object while we check whether the legitimate reasons we are pursuing prevail over yours.
• You have the right to request the deletion of your personal data.
• You have the right to ask to exercise your right to object to processing carried out for reasons relating to your particular situation.
• You have the right not to be subject to a decision based exclusively on automated processing and producing legal effects concerning you or significantly affecting you.
• You have the right to exercise your right to data portability, which gives you the right to obtain a copy of your data or to have it transferred to a third party in a structured and commonly used machine-readable format.
• You have the right to withdraw your consent at any time where the processing of your data is based on that consent.
• You also have the right to formulate directives concerning the conservation, erasure and communication of your personal data post-mortem.

These rights may be exercised at any time by sending an e-mail to dpo@trophy-group.com or a letter to TROPHY - Délégué à la Protection des Données (DPO) - 1 Avenue Eiffel - 78421 Carrières sur Seine, France.

You may also - if you wish - lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL). Further information is available on its website www.cnil.fr.