Data privacy policy

Politique de confidentialité image

Updated on: mars 2024

Purpose

This Privacy Policy (hereinafter the "Privacy Policy") demonstrates the commitment of the company T-T Consulting, a simplified joint stock company with a share capital of €120,000, registered with the Nanterre Trade and Companies Register under number SIRET 42360901500049 and whose registered office is located at 20 rue Troyon, 92310 SEVRES (hereinafter the "Company"), with regard to respecting your privacy and protecting your personal data on the following website: https://www.t-tconsulting.com (hereinafter the "Website").

The Website allows you to:

  • Obtain information about the Company and the services it offers;
  • Contact the Company;
  • Submit spontaneous job applications to join the Company's teams.

Description of the Processing of Your Personal Data

In accordance with applicable laws and regulations, the Company, acting as data controller, collects certain personal data when you visit the Website. In order to respond to your contact requests, the Company collects the following personal data, which varies depending on the nature of your request and the relationship we have with you:

Collected data includes:

  • your name; 
  • your email address;
  • the content of your message;
  • and other information you may provide to us, for example via surveys or the “contact us” section on our website.

If you submit a job application, the Company collects the following personal data:

  • First and last name;
  • Email address;
  • Content of your message;
  • Employment history and completed education history;
  • Proficiency in foreign languages and other job-related abilities and skills;
  • Date of birth;
  • Gender;
  • Citizenship and work permit status;
  • Information provided by referees (third-party references);
  • Information contained in your CV or cover letter;
  • Information you provide about your professional interests, and other details on your skills, abilities, and qualifications;
  • Any document attached to your application.*

*The company disclaims any responsibility regarding the content of attached files. Processing will be limited to information strictly necessary for the evaluation of your application.

When you connect to the Website, the Company also collects the following personal data:

  • your connection logs;
  • your connection data;
  • your IP address.

The Company uses your personal data for the following purposes:

Purpose

Legal Basis

Retention Period

Receiving and managing contact requests

Based on your consent

Until withdrawal of your consent or for three years from the last contact

Managing access, portability, deletion, restriction, rectification, and objection rights requests

Necessary to fulfill your rights requests

Up to one year after your rights request

Managing requests to object to marketing communications

Necessary to respond to the exercise of your right to object

Up to three years after you exercise this right

Managing job applications and employment mediation

Based on pre-contractual measures

Immediate deletion if not selected, and up to two years after last contact if consent is given for data retention

Information and participation in special events, programs, and offers

Based on your consent

Until consent is withdrawn or for three years from the last contact

Responding to questions and requests

Necessary to respond to your requests

Until consent is withdrawn or for three years from the last contact

Management, assessment, and improvement of our business

Necessary for the continuous improvement of our services

Until consent is withdrawn or for three years from the last contact

Protection, identification, and prevention of fraud and other illegal activities

Necessary to comply with legal obligations

Data retained for five years from collection

 

Recipients / Transfers of Your Personal Data

Access to your personal data is restricted to authorized personnel only, for purposes strictly related to the processing, namely communication, HR, commercial departments, and IT/technical service providers supporting the Company's operations.

Your personal data may also be shared by the Company with third parties:

  • if required by law or legal process;
  • in response to a public or judicial authority's request (including court orders);
  • when the Company believes it is necessary or appropriate to transmit your personal data for the safety of individuals or to protect the public.

Your personal data is transmitted to SWAN Landererova 12, 811 09 Bratislava, which hosts the Website in Slovakia.

Your personal data may be transferred outside the European Economic Area, particularly to our recruitment officers and teams in our subsidiaries in North Africa (Tunisia and Morocco) and Sub-Saharan Africa (Benin and Togo).

T&T Consulting is committed to protecting your data and implementing strong security measures for these transfers, in accordance with GDPR.
To secure these personal data transfers outside the EEA, we use mechanisms such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring that all parties adhere to high personal data protection standards;
  • Rigorous adequacy assessments of the protection levels offered by third countries, in line with GDPR criteria;
  • Additional technical and organizational safeguards, including data encryption and the use of secure networks.

We commit to carrying out no transfers of your personal data outside the EEA without appropriate safeguards ensuring the security and confidentiality of your data.
For further information or to exercise your rights, please contact our Data Protection Officer by email at: dpo@t-tconsulting.fr or by postal mail: Data Protection Officer, T&T Consulting, 20 rue Troyon, 92310 SEVRES, France.

You can access social media pages by clicking on the available share buttons. Information collected by these social media share buttons is subject to the privacy policies of those third parties. We invite you to review those policies to understand how your personal data is handled.

Security of Your Personal Data

The Group ensures the security of your personal data by implementing a series of appropriate technical and organizational measures to guarantee a security level adapted to the risk, including (to be confirmed):

  • mechanical security systems;
  • technical security systems;
  • physical security of the environment;
  • encryption of data in transit;
  • protection against unauthorized access;
  • fire protection;
  • strong user authentication controls;
  • protection of communication with the website;
  • and any means ensuring the confidentiality, integrity, availability, and resilience of processing systems and services.

Retention of Your Personal Data

Your personal data is kept only for as long as necessary to fulfill the purpose for which the Company holds your data, to meet your needs, comply with legal or regulatory obligations, enable the Company to exercise its rights, and/or for statistical or historical purposes.

At the end of the periods mentioned above, your personal data will be deleted, or the Company will anonymize it.

Your Rights Over Your Personal Data

You have the following rights concerning your personal data:

Right of Access and Rectification

You can request access to your personal data.
You may also request correction of inaccurate personal data or completion of incomplete data.
You also have the right to know the origin of your personal data.

Right to Erasure

You can request the deletion of your personal data when:

  • the data is no longer necessary for the purposes for which it was collected;
  • you have withdrawn your consent (where consent was the legal basis);
  • you object to the processing;
  • your data was processed unlawfully;
  • it must be erased to comply with a legal obligation;
  • or deletion is required to comply with current legislation, especially regarding retention periods.

Right to Object

You may object to the processing of your personal data, subject to the legal obligations incumbent on the Company.

Right to Restriction

You can also request the restriction of your personal data processing if:

  • you dispute the accuracy of your data;
  • the Company no longer needs it for processing;
  • or you have objected to the processing.

Right Not to Be Subject to a Decision Based Solely on Automated Processing

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects on you.

Right to Data Portability

You can request that the Company provide your personal data in a structured, commonly used, machine-readable format, or have it "ported" directly to another controller, under these conditions:

  • the processing is based on your consent;
  • and it is carried out by automated means.

Right to Set Guidelines for Personal Data After Death

Under Article 85, I of the amended French Data Protection Act of January 6, 1978, you can set guidelines regarding the use of your personal data after your death, including storage, deletion, or disclosure, and designate a person to carry out these instructions.

In the absence of such instructions, the Company will respond to your heirs' requests, as specifically outlined in Article 85, II of the Data Protection Act.

Right to Withdraw Consent

You can withdraw your consent for the processing of your personal data at any time.
Withdrawal applies to future processing and does not affect the lawfulness of processing based on consent before its withdrawal, nor does it affect processing based on other legal grounds, such as contract performance.

Right to Lodge a Complaint with a Supervisory Authority

If you have concerns or complaints regarding the protection of your personal data, you may lodge a complaint with the CNIL (French Data Protection Authority) via the following link: Online Complaints | CNIL.
The CNIL can also be reached at: 3 Place de Fontenoy, 75007 Paris - phone: +33 (0)1 53 73 22 22.

We invite you to contact the Company's Data Protection Officer first so that they can process your request and try to find an amicable solution.

 

You can exercise your rights or send any questions related to your personal data processing to the Company's Data Protection Officer by email at: dpo@t-tconsulting.fr or by mail to:
T&T Consulting SAS, Groupe NORDWAND, 20 rue Troyon, 92310 SEVRES, France.

To allow the Company to process your request as quickly as possible, you may specify its subject and the context in which your personal data was processed.

In case of reasonable doubt regarding your identity, the Company may ask you to provide a copy of a valid identity document (both sides). This will be deleted once your request has been processed.

The Company may retain a copy of your identity document solely for evidentiary purposes in the event of a dispute with you.

Links to Third-Party Sites

To improve the Website's quality, the Company may include links to third-party sites. These sites have separate and independent privacy policies. You are invited to review the privacy policies of any third-party sites you visit.

Language

This Privacy Policy is written in French.
In the event it is translated into one or more foreign languages, only the French version shall prevail in case of a dispute.

Cookies

Provisions relating to the use of cookies on the Website can be found in the cookie policy available on the Website.

Changes to the Privacy Policy

The Company reserves the right to make changes to this Privacy Policy at any time.
We recommend that you regularly review this page, referring to the date of its last update.
In the event of significant changes to the Privacy Policy, the Company will inform you of these changes.