Privacy policy concerning the processing of data for the purpose of recruiting staff
For what purposes are your personal data processed?
emlyon business school* processes your data for the purposes of recruiting the School’s administrative staff. Your data is processed when you submit an unsolicited application or in response to the School’s recruitment offers. This includes applications from emlyon employees for internal mobility.
This data is only processed for the purpose of managing responses to these applications and building up a resume database.
What is the basis for this data processing?
Processing of applications (resumes and cover letters) and management of interviews are based on pre-contractual measures. The constitution of its resume database by the School is carried out on the basis of its legitimate interest in constituting such a database.
Who are the people concerned by this data processing?
The data subjects are candidates who respond to job offers on the emlyon business school dedicated recruitment site (https://hr.em-lyon.com), or on job search and offer platforms (“jobboards”: LinkedIn Jobs, APEC, Indeed, Jobteaser for example, which may refer the candidate to the School’s dedicated recruitment site or to their own recruitment platform).
This also applies to people who send unsolicited applications to emlyon business school employees, and to employees applying for internal mobility.
What data is required for this processing?
The nature of the operations carried out on the data concerns the collection of candidate data, communication with candidates, hosting and data extraction.
The categories of data concerned by these processing operations are:
- Identification data (name, email address, telephone number, postal address, date of birth, etc.)
- Personal life (information potentially contained in your resume or covering letter, such as your interests, for example)
- Training/qualifications Professional life (resume, professional experience, skills, objectives, etc.)
- Economic and financial information (income)
- Geographical mobility
- Availability
Additional information may be requested by default by certain job boards and by the recruitment agencies responsible for finding candidates for emlyon business school.
Shortlisted candidates are interviewed by videoconference; notes are taken of these interviews.
Personality tests may also be carried out as part of the recruitment process. Under no circumstances may these tests lead to an automated decision on the outcome of an application.
Who has access to your data?
The Human Resources Department recruitment team receives all applications.
Information relating to applicants is also communicated to the managers involved in recruitment, via temporary access to the application storage platform.
Service providers also have access to the data, for the sole purpose of fulfilling the purposes set out in this information notice:
- Our service provider Eolia sofware, whose servers are based in Roubaix (France) and Amsterdam (Netherlands).
- Our service providers involved in the processing are : OVH, TextKernel, AWS, MICROSOFT AZURE in particular.
- Job boards
- Recruitment agencies
- Candidates for internal mobility apply via the intranet.
The files of successful candidates are transferred to the human resources department dedicated to personnel management for contractualisation.
emlyon business school may also transfer candidate data to other campuses as part of international recruitment management.
How long will your data be stored?
Data relating to applications is only accessible to the managers concerned for the duration of the recruitment; access is purged every two months.
All data relating to an application is kept for 2 years.
Informations and rights
*The person in charge of this processing is the company Early Makers Group, represented by Prof. Isabelle HUAULT, President of the Board of Directors.
The persons whose personal data are the object of a treatment have rights:
- Right of access to the processed data, in order to be communicated all the personal data collected on the applicant
- Right to rectify processed data when they are incomplete, inaccurate, ambiguous or outdated
- Right to erasure of processed data, when the deletion of such data is based on legitimate grounds
- Right to limit the processing, in order to temporarily suspend the use of certain data
- Right to object to the processing, when this request is based on legitimate grounds.
- The right to define directives concerning the fate of personal data after death.
Persons whose personal data are being processed may request to exercise these rights from the Data Protection Officer, who will respond to the request within one month, at the following address: dataprivacy@em-lyon.com.
It is also possible for any person whose personal data is being processed to submit a complaint to the National Commission for Information Technology and Liberties (CNIL), the competent national supervisory authority.
