We are responsible for managing the personal data you entrust to us.
For the sake of clarity, "personal data" means any information relating to an identified natural person or a natural person who can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to that person.
Processing of personal data" means any operation or set of operations which relates to such data, whatever the process used, and in particular collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.
When you use the www.cofrac.fr, https://recrutement.cofrac.fr, https://experience-evaluateur.cofrac.fr/ and http://support.cofrac.fr/ websites, hereinafter referred to as the "Site", we collect the following data, depending on the type of form you fill in:
- Data communicated directly by you: depending on the case, your surname, first name, e-mail address, telephone number and the various elements contained in your CV and covering letter (postal address, duties, qualifications, etc.);
- Data about you that we collect passively, such as the use of "cookies" for monitoring and statistical purposes in relation to the use of the various services offered on the Site (see our dedicated page https://www.cofrac.fr/cookies/).
In accordance with the applicable regulations on the protection of personal data, we would like to inform you of the following points, which are dealt with in specific paragraphs:
- The identity and contact details of the Data Controller;
- The purposes of the processing for which your data is intended and the legal basis for such processing;
- How long your data will be kept;
- The recipients of your data;
- The confidentiality and security of your data;
- Exercising your rights with regard to your data;
- Your right to lodge a complaint with a supervisory authority.
Cofrac processes your personal data for the following purposes:
- Management of contact requests: To contact you, either by telephone or e-mail, or to answer questions or requests for information, quotes, etc. that you send us via our Site. Your data will only be used to process your request, in particular the information provided when you fill in the contact forms via our Site, in our "FAQ / CONTACT" section, "Ask Cofrac a question", or in the "How to become accredited" - "Our fields of application" section.
- Newsletter subscription management: To subscribe free of charge to Cofrac's online information, including news and publications on accreditation activities, developments and events. You can cancel your subscription at any time, simply by selecting the option "I wish to unsubscribe from the newsletter", then entering your e-mail address. Alternatively, you can use the unsubscribe link included in each e-newsletter.
- Application management: To process your application for a position as a Cofrac employee or assessor, for which the advertisement has been published on our Site, and for which you have sent us your CV and, if applicable, your covering letter.
- Management of requests relating to the communication of new job offers: So that we can send you new job offers corresponding to a position as a Cofrac employee, in accordance with your request.
- Managing event registration requests: So that we can register you for our events (forums, events, information meetings, etc.).
Accuracy of information provided: As a User of the Site, you are solely responsible for the accuracy of the data you submit to us. You will in any event be held responsible for the accuracy, validity and authenticity of the personal data provided and you undertake to keep it up to date.
Consent: The User guarantees that he/she has been informed of all the conditions relating to the protection of personal data and consents to the processing of his/her data by Cofrac in the manner and for the purposes set out in this Policy and in the forms or channels by which they are collected.
If you are a Cofrac Client or Assessor, the legal basis for processing your personal data is our contractual relationship or, if you are a User of our Site, it is your consent when it is necessary to obtain it in order to provide you with the services of our Site.
Withdrawal: The consent you have given for the processing of your personal data may be withdrawn at any time by informing Cofrac under the conditions set out in this Policy for the exercise of rights.
We will only keep your personal data for as long as is strictly necessary for the purposes set out above, to comply with our legal obligations and, if necessary, to enable us to assert our rights or defend ourselves in legal proceedings, until the end of the limitation period or until the proceedings are closed.
If you are a Cofrac Client or Assessor, your data will be kept for the duration of the contractual relationship. At the end of the contract, Cofrac will keep your personal data in accordance with the applicable legal or regulatory time limits, in particular the statute of limitations.
If your data has been provided for complaint or information purposes, it will be kept for the time necessary for its proper management. At the end of this period, Cofrac will keep your personal data for the statutory or contractual limitation periods. We will destroy your data at the end of this period.
If your data has been collected for subscription purposes, it will be kept until you end your subscription or the service is terminated.
In the case of an unsuccessful application, whether for a position as a Cofrac employee or to become an assessor, your data will be automatically destroyed two years after the last contact with Cofrac, unless you expressly agree to your data being kept after this period.
Your personal data may be communicated to :
- To Cofrac's internal departments responsible for carrying out the purposes defined above;
- For external processing purposes: we may transmit your personal data to our service providers acting as subcontractors (IT suppliers, hosts, etc.). The latter will process your data according to our instructions, in compliance with the RGPD, in strict compliance with the confidentiality and security obligations to which they are bound. They will only have access to personal data for the purposes of carrying out the processing mentioned above;
- To the competent authorities in accordance with a legal obligation or a legal request from a public authority;
- In any case, the information collected through our Site is only used and communicated externally for the purposes detailed above or to meet legal and regulatory obligations.
Furthermore, we inform you that our Site may give access to other websites, in particular to the Cofrac official profile web pages on Twitter, YouTube and LinkedIn (in order to create an alternative communication channel with people interested in our organisation). Please note that the owners of these sites, which are independent of Cofrac, may collect, use or transfer your personal data in accordance with terms and conditions that differ from ours. We therefore recommend that you read their privacy policy, terms and conditions of use or the way in which they use cookies, as we cannot control the way in which these websites use the personal information you disclose.
Cofrac undertakes to use and process your personal data in a manner that respects its confidentiality and the purpose for which it was provided, adopting all necessary measures to prevent its alteration, loss, processing or unauthorised access, in accordance with the applicable Personal Data Protection Regulations.
Cofrac will ensure that any person authorised to process your personal data (our service providers and/or subcontractors) is also subject to this confidentiality obligation (whether contractual or legal) and these security principles.
In accordance with the Regulations applicable to the protection of Personal Data, and subject to the application of the conditions set out therein, you may exercise your rights:
- Right to request access to your personal data;
- Right to request rectification or deletion of your data;
- Right to request the restriction of the processing of your data;
- Right to object to processing;
- The right to portability of your data.
You also have the right to withdraw your consent at any time and request, for example, unsubscription from our newsletters or events.
You can exercise all these rights by sending us your request by post to the following address Cofrac, 52 rue Jacques Hillairet - 75012 Paris, or by e-mail: contact.rgpd(à)cofrac.fr. Your request must include your surname, first name(s), details of your request and your address for notification purposes.
You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés via its website (www.cnil.fr) or by post: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
If you have any questions about how Cofrac processes your personal data, you can contact us at the following e-mail address contact.rgpd[at]cofrac.fr, or by post at the following address: Cofrac, 52 rue Jacques Hillairet - 75012 Paris.