You are: Client | Candidate | Student | Collaborator | Journalist

PRIVACY POLICY

Personal Data

The website schiever.com is operated by the Schiever Group (hereinafter “Schiever”).
Schiever is committed to protecting personal data and respecting the rights of individuals. Schiever adheres to Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data (GDPR) and the French Data Protection Act No. 78-17 of 6 January 1978 (“Informatique et Libertés”), as amended.
Schiever collects and processes personal data of visitors (hereinafter “the User”) of the schiever.com website.
Schiever commits to collecting and processing only data strictly necessary for the purposes defined in this policy.
This personal data protection policy aims to inform the User about how Schiever processes collected data and about their rights.
The policy may evolve depending on applicable legal and regulatory requirements.
For any questions regarding data protection, Users may contact Schiever’s Data Protection Officer (DPO) at: dpo@schiever.fr.

Contents

    1. Identity of the Data Controller
    2. Data Processing (Purposes, Legal Basis, and Categories of Data Collected)
    3. Data Retention Periods
    4. Users’ Rights and How to Exercise Them
    5. Recipients of Personal Data
    6. Cookies Management

1. Identity of the Data Controller

The data controller is the legal or natural person who determines the purposes and means of data processing. In practice, it is generally the legal entity represented by its legal representative.
Users of schiever.com are informed that data collected or generated on the site is processed by SA Anciens Etablissements Georges Schiever et Fils, registered with the Auxerre Trade and Companies Register under number 425 920 352, located at Zone Industrielle – rue de l’étang, Avallon (89200), as the Data Controller.

2. Data Processing (Purposes, Legal Basis, and Categories of Data Collected)

Schiever processes Users’ personal data only for the purposes defined below, collecting only the strictly necessary data. Fields marked with an asterisk in forms are mandatory. Users may choose not to provide this data, but failure to do so may prevent the operation.
Purpose of Data Processing:

  • Managing and tracking communications with Users:

The User may contact Schiever for various reasons using the ‘Contact Us’ and ‘Customer Feedback’ forms. Schiever analyses requests and categorises them in order to respond to them more effectively. Schiever therefore stores data relating to the identity and contact details of the person making the request, as well as information relating to the request itself.
The basis for processing is the performance of a contract between the User and Schiever or Schiever’s legitimate interest, depending on the nature of the request.

  • Creating a CV database:

The User may send Schiever a spontaneous application or apply for vacancies advertised on the website. To do so, the User can create an account in the candidate area. Schiever then processes data relating to the candidate’s identity and contact details (email address and telephone number), their LinkedIn profile if provided, the email address of the person who referred them, and the data contained in the candidate’s CV.
The basis for processing this data to create a CV database is Schiever’s legitimate interest.

  • Managing the candidate portal:

The User has the option of creating an account in the candidate area without necessarily responding to a job offer or applying spontaneously. Schiever then processes data relating to the User’s identity and contact details (email address and telephone number) and, if the User provides it, the data contained in their CV and data relating to their preferences.
The basis for processing is the User’s consent, which they may withdraw at any time. Withdrawal of consent will result in the closure of the account and the deletion of personal data.

  • Managing applications:

Users who apply spontaneously or in response to a job offer will have their personal data processed when the documents required for the recruitment process (CV, cover letter) are collected from the candidate, when applications and candidate documents are reviewed in relation to the positions available, and when candidates are contacted to inform them of the outcome of their application. Schiever then processes data relating to the candidate’s identity and contact details (email address and telephone number), their LinkedIn profile if provided, the email address of the person who referred them, and the data contained in the candidate’s CV.
The basis for processing applications is the execution of pre-contractual measures between the User and Schiever.

  • LinkedIn registration and authentication:

The User has the option of registering or logging in using their LinkedIn account. If the User consents, Schiever will retrieve the User’s email address, name and photo that they have provided on their LinkedIn profile. Once the data has been retrieved, it is processed in the same way as data provided directly by the User. To find out more about how their data is processed when using this feature, Users can visit the following page: linkedin.com/help.

The basis for processing is the User’s consent, which they may withdraw at any time. To withdraw their consent, Users must follow the procedure outlined in this article: linkedin.com/help.

  • Email alerts on new job offers:

Users can subscribe by entering their email address on a mailing list that allows them to be notified of new offers added to the site. It is not necessary to create a candidate account to subscribe to this mailing list. Only the User’s email address is stored by Schiever.
The basis for processing is the User’s consent, which they may withdraw at any time via the unsubscribe link in the alert emails.

  • Cookies and other trackers:

When visiting the website, Schiever places cookies on the User’s browser that enable it to collect information about the User, their preferences, location and device. This information does not directly identify the User.
The basis for processing is the performance of a contract between the User and Schiever or the User’s consent, depending on the category of cookies concerned. The categories of cookies are specified in Article 6.

  • Log data retention:

In order to prevent and detect security incidents, Schiever retains log data relating to the actions of access, creation, modification and deletion that the User performs on the website.
The basis for the processing of log data retention is the legitimate interest of Schiever.

  • Managing rights requests:

Schiever peut conserver les données à caractère personnel nécessaires pour établir toute preuve utile à sa défense ou pour exercer ses droits.
La base du traitement à des fins de défense ou d’exercice de ses droits est l’intérêt légitime de Schiever.

  • Legal proceedings:

Schiever may retain personal data necessary for establishing any evidence useful for its defence or for exercising its rights.
The basis for processing for the purposes of defence or exercising its rights is Schiever’s legitimate interest.

3. Data Retention Periods

Schiever has established specific rules regarding the retention period for personal data belonging to users of its website. Data is therefore only retained for the period necessary to fulfil the purposes for which it was collected:

  • Management and monitoring of exchanges with website users: data is retained for one year from the end of the calendar year in which the last contact took place.
  • Creation of a CV database: data relating to applications is kept for two years from the end of the application process, unless consent is withdrawn.
  • Management of the candidate area: The information provided by a candidate in their candidate area is stored for 280 days. The candidate is then contacted by email to request that their data remain available to the recruiter for an additional 280 days. If no response is received within 30 days, the data is no longer available to the recruiter but remains in the candidate area. The candidate space itself, including the candidate’s identification data and contact details, will be deleted after one year if the CV is not linked to any application, if it is no longer available to the recruiter, and if the candidate has not logged into their space.
  • Application management: The data of unsuccessful candidates will be kept in the CV database for two years after the recruitment process has ended, unless consent is withdrawn. The data of successful candidates will be kept for up to five years after the end of their employment contract.
  • Registration and authentication with LinkedIn: data shared by LinkedIn is stored in the same way as data used for managing applications and the candidate area.
  • Sending email alerts about new offers available on the website: Subscriptions to offers must be reactivated every 3 months. People who have signed up to receive alerts will receive an email asking them to take action to continue receiving alerts. Subscriptions that have been inactive for more than 7 days after the reactivation email has been sent will be deleted.
  • Management of cookies and other trackers: cookies have a maximum lifespan of 13 months.
  • Retention of log data: log data is retained for one year.
  • Management of requests to exercise rights: data relating to requests to exercise rights is retained for 6 years when the User exercises their right to object and for 5 years from the end of the calendar year in which the request was made when the User exercises another right.
  • Litigation management: data useful for the defence or exercise of Schiever’s rights is retained for the duration of the applicable statutory limitation periods or for the duration of any litigation.

4. Users’ Rights

4.1. 4.1 Rights:

In accordance with the French Data Protection Act and the GDPR, the User has the following rights:

  • Right of access: the User has the right to access data concerning them and to obtain a copy of it;
  • Right to rectification: the User has the right to have their personal data rectified if it is inaccurate or obsolete and/or to have it completed if it is incomplete;
  • The right to object to the processing of their data: Users may object to the processing of their data at any time.
  • Right to restriction of processing: the User has the right to restrict Schiever’s use of their data while their requests are being processed.
  • Right to erasure of data: the User has the right to have their data erased or deleted. However, this right may be limited by Schiever’s legal obligations to retain the User’s personal data.
  • Right to data portability: Users have the right to request that data be moved, copied or transferred from the Schiever database to another database. This right applies only to data provided by the User, and provided that the processing is based on a contract or consent and is carried out using automated processes.
  • The possibility to withdraw consent at any time: when processing is based on consent, the User has the right to withdraw it at any time and without justification;
  • The User may also issue instructions regarding the storage, deletion and communication of their personal data after their death in accordance with Article 85 of the French Data Protection Act of 6 January 1978. These instructions may be general or specific.

4.2 How to Exercise Rights:

These rights may be exercised:

  • By post to the following address: SA AEG – Personal Data – Zone Industrielle – rue de l’Etang – 89200 Avallon,
  • By email to: dpo@schiever.fr

After verifying the applicant’s identity, a response will be sent within one month of receiving the request. This one-month period may be extended by two months due to the complexity or large number of requests.
Proof of identity may be requested only in cases of reasonable doubt regarding the applicant’s identity. This proof will be kept only for the time necessary for the verification process.

4.3 Recourse to CNIL:

If the request is not processed within the specified time frame or if the processing of the request appears unsatisfactory, the User may lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés) (www.cnil.fr).

5. Recipients of Personal Data

The data collected is intended for Schiever’s departments and staff who are authorised to process it due to their roles (Customer Service, IT Departments).
Depending on the purpose of the processing, different departments may be recipients of the data.
In the context of exchanges via the website forms, the departments or shops concerned by Users’ requests may be recipients of the data.
As part of the recruitment process, the recruitment department and the departments and stores with vacancies are also recipients of the data.
Certain data is also transmitted to Schiever’s partners, who may process the data solely on behalf of and in accordance with Schiever’s instructions (subcontractors).
Schiever therefore uses subcontractors for the following operations:
hosting, development and maintenance of the website and recruitment portal.

6. Cookies Management

6.1. What is a cookie?

When the User visits a website, data may be stored in or retrieved from their browser, usually in the form of cookies. This information may relate to the User, their preferences or their device and is mainly used to ensure that the website functions properly. The information does not usually identify the User directly, but it can enable them to enjoy a personalised web experience. Because Schiever respects the right to privacy, Schiever gives the User the option of not allowing certain types of cookies. However, if the User blocks certain types of cookies, their browsing experience and the services that Schiever is able to offer may be affected.

6.2. The cookies that Schiever uses

6.2.1 Strictly necessary cookies

These cookies are necessary for the website to function and cannot be disabled in Schiever’s systems. They are usually set in response to actions taken by the User that constitute a request for services, such as setting privacy preferences, logging in or filling in forms. The User can configure their browser to block or be notified of the existence of these cookies, but some parts of the website may be affected. These cookies do not store any personally identifiable information.

6.2.2 Performance cookies

These cookies enable Schiever to determine the number of visits and traffic sources in order to measure and improve the performance of its website. They also help to identify the most/least visited pages and assess how visitors navigate the website. All information collected by these cookies is aggregated and therefore anonymised. If the User does not accept these cookies, Schiever will not be informed of their visit to its website.

6.2.3 Advertising cookies

These cookies may be placed on the website by Schiever’s advertising partners. They may be used by these companies to build a profile of the User’s interests and offer them relevant advertisements on other websites. They also enable advertising campaigns to be tracked. They do not directly store personal data, but are based on the unique identification of the User’s browser and device. If the User does not authorise these cookies, advertising will be less targeted.

6.3. Cookie retention period

Cookies placed via the schiever.com website are stored for a maximum period of 13 months on the User’s browser.

6.4. Cookie settings

6.4.1. Cookie information banner and privacy preferences centre

When the User arrives on the website, an information banner relating to cookies appears.
The User then has the choice between:

  • accept all: the User accepts the storage of all cookies;
  • refuse all: the User refuses the storage of all cookies except for strictly necessary cookies, which are not subject to the User’s consent;
  • configure cookies: Users can choose to give or refuse their consent by cookie category.

They can also click on the cross, and cookies will then be refused by default.

6.4.2. Modification or withdrawal of consent

The User may modify or withdraw their consent at any time. To do so, they simply need to click on the floating button at the bottom left of the screen.

This button allows you to access the privacy preferences centre to modify your consents.