Confidentiality policy
This privacy policy describes how ENGINEERING & CONSULTING GROUP, SAS registered with the Nanterre Trade and Companies Register, under number 852 193 069, with a capital of €71,336,180 and whose head office is located 92, Avenue Charles de Gaulle, 92200 Neuilly-sur-Seine, 92200 Neuilly-sur-Seine (hereinafter “ECG”), as a data controller, processes personal data concerning you (hereinafter the “Data”) as part of your use of the website www.vulcain-eng.com.
What data is collected?
ECG limits the collection of “Data” to what is strictly necessary, such as:
- Data relating to your identity and your contact details such as your name, first name, email address, telephone number and address.
- Data relating to your professional profile when you apply, such as your CV, your training, your availability, your skills and expectations.
What are the purposes and legal basis of the treatments?
- When you contact ECG, your “Data” is processed, based on ECG's legitimate interest, for the purposes of managing and processing customer relationships and incidents.
- When you apply to ECG, your “Data” is processed for the purposes of managing and processing applications, based on your request as a candidate, for the purposes of pre-contractual measures. In this context, ECG also has a legitimate interest in creating a CV-library. Only with your consent, ECG may process your “Data” in order to contact you later regarding positions that may be of interest to you if no successful application has been received.
How long is the data stored for?
- The “Data” is kept for the time strictly necessary for the processing of the data.
- They are not kept longer than 5 years from your last contact with ECG when no application has been successful.
Who is your data communicated with?
- The “Data” is communicated, within ECG and its subsidiaries, only to persons whose activity justifies access to the “Data”, for example the Human Resources Department.
- They are only communicated with ECG providers when necessary, for example, for technical hosting needs, only on instructions from ECG and strictly for the purposes set out in this privacy policy.
The transfer of your data outside the European Union
When ECG providers are established outside the European Union or your “Data” is processed outside the European Union, ECG supervises these transfers in strict compliance with the European General Data Protection Regulation (RGPD) by appropriate legal mechanisms, for example to a country covered by a country covered by an adequacy decision, the list of which is available on https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde or in particular by the signing of contractual clauses specific to these transfers.
The security of your data
ECG intends to maintain the confidentiality and security of the personal data it processes and strives to implement all organizational and technical measures aimed at protecting their integrity and confidentiality.
What are your data rights and how can you exercise them?
- You can access the “Data” concerning you, rectify them, request their deletion or exercise your right to limit the processing of your “Data” as well as your right to oppose the processing of Data based on your consent.
- To exercise these rights or for any questions about the processing of your “Data” in this device, you can contact our data protection officer: dpo@vulcain-eng.com
- If you believe that your rights relating to your “Data” are not respected by ECG, you can file a complaint with the CNIL.
- For more information on your rights, ECG invites you to consult the site www.cnil.fr