ARVENTIS
Section 01
Who we are
This website ([website URL]) is operated by [Arventis legal entity name], a [legal form, e.g. SRL/BV] registered in [country] under company number [company number], with its registered office at [registered address] ("Arventis", "we", "us").
We are the data controller for the personal data described in this policy. This means we decide why and how your data is processed.
Contact for privacy questions: [privacy@domain]
Postal address: [address]
[Data Protection Officer: [name / contact], if one is appointed.]
Section 02
What this policy covers
This policy explains how we handle personal data when you:
- visit and browse our public job board;
- create a candidate account and profile;
- apply for job opportunities;
- subscribe to job alert emails;
- contact us.
It also explains the cookies this website uses (see section 10).
It does not cover the websites of client companies or other third parties that you may reach from our site.
Section 03
What data we collect
3.1 Data you give us
| Category | Examples |
|---|---|
| Account data | Email address and password. We store your password only in a securely hashed form, so we never know your actual password. |
| Profile data | First name, last name. |
| CV / résumé | The file you upload and everything it contains (for example work history, education, skills, and contact details). |
| Application data | The jobs you apply for, the date you applied, and the status of your application (for example submitted, shortlisted, hired, rejected, or archived). |
| Preferences | Whether you want to receive job alert emails. |
| Communications | Messages you send us, such as a request to delete your account. |
Please don't include sensitive information in your CV that we don't need. This includes information about your health, religion, ethnic origin, political opinions, trade-union membership, sexual orientation, or criminal record, as well as ID or passport numbers. A photo is also optional and not required.
3.2 Data collected automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type, date and time of access, and pages requested. These are recorded in server logs for security and troubleshooting. |
| Cookies | Only strictly necessary cookies. See section 10. |
We do not use advertising trackers or third-party analytics on this website.
Section 04
Why we use your data, and on what legal basis
Under the General Data Protection Regulation (GDPR), we need a legal basis for each use of your data.
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and running your candidate account (login, password reset, and changing your email or password) | Account data, profile data | Contract. This is necessary to provide the service you signed up for (Art. 6(1)(b) GDPR). |
| Processing your job applications and assessing your fit for roles | Profile data, CV, application data | Steps taken at your request before entering into a contract (Art. 6(1)(b)), and our legitimate interest in running a recruitment service (Art. 6(1)(f)). |
| Presenting your profile and CV to a client company for a specific role | Profile data, CV, application data | [Your consent (Art. 6(1)(a)) / legitimate interest (Art. 6(1)(f)).] |
| Sending you job alert emails about newly published opportunities | Email address, first name | Your consent (Art. 6(1)(a)). You can withdraw it at any time. |
| Sending service emails (registration confirmation, password reset, and confirmation of account deletion) | Email address | Contract (Art. 6(1)(b)). |
| Keeping the website secure and preventing misuse | Technical data, strictly necessary cookies | Our legitimate interest in protecting our systems and users (Art. 6(1)(f)). |
| Complying with legal obligations and defending legal claims | Relevant records | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)). |
We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects. Arventis staff review all applications.
Section 06
International transfers
[Option A: We store and process your data within the European Economic Area (EEA).] / [Option B: Some of our service providers are located outside the EEA, in [countries]. Where this happens, we protect your data with appropriate safeguards, such as an adequacy decision by the European Commission or the European Commission's Standard Contractual Clauses. You can request a copy of these safeguards by contacting us.]
Section 07
How long we keep your data
| Data | Retention period |
|---|---|
| Account, profile, and CV | While your account is active, and for [X months] after your last activity. After that, we delete it. |
| Application records | [X months/years] after the application is closed, so we can handle any follow-up questions or legal claims. |
| Job alert preference | Until you unsubscribe or delete your account. |
| Server logs | [X days/months]. |
| Emails and correspondence | [X months/years]. |
| Cookies | See the durations in section 10. |
If you ask us to delete your account, we delete your data as described in section 8. We may keep limited information where the law requires us to or where it is needed for legal claims, and we tell you if this applies.
Section 08
Your rights
You have the following rights over your personal data.
- Access. You can get a copy of the personal data we hold about you.
- Rectification. You can correct inaccurate or incomplete data. You can edit most of your profile yourself in your account area.
- Erasure ("right to be forgotten"). You can ask us to delete your data. To do this, use "Request account deletion" in your account area, or email us.
- Restriction. You can ask us to limit how we use your data in certain situations.
- Portability. You can receive the data you provided to us in a structured, commonly used, machine-readable format.
- Objection. You can object to processing based on our legitimate interests.
- Withdrawal of consent. Where we rely on your consent, you can withdraw it at any time. This does not affect processing that happened before you withdrew. For job alerts, use the unsubscribe link in any alert email, or change the setting in your account.
How to exercise your rights: email [privacy@domain]. We may ask you to confirm your identity. We will respond within one month. In complex cases this can be extended by up to two further months, and we will tell you if that happens. Exercising your rights is free of charge.
Right to complain: you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. For Arventis, the lead authority is [name of supervisory authority, website, address]. We would appreciate the chance to address your concern first, so please contact us.
Section 09
How we protect your data
We use appropriate technical and organisational measures to protect your data, including:
- encrypted connections (HTTPS);
- hashed passwords;
- access to candidate data restricted to authorised Arventis staff;
- secure hosting;
- [backups, access logging, and other measures].
No system is completely secure. If a personal data breach occurs that is likely to put you at high risk, we will inform you as required by law.
Section 11
Minimum age
Our services are intended for people aged [16 / 18] and over. We do not knowingly collect data from anyone younger. If you believe a minor has registered, please contact us and we will delete the account.
Section 12
Links to other websites
Our site may contain links to third-party websites. We are not responsible for their privacy practices. Please read their privacy policies.
Section 13
Changes to this policy
We may update this policy from time to time, including when the cookies we use change. The "Last updated" date at the top shows when it was last changed. If we make significant changes, we will notify registered users by email or through a notice on the website before the changes take effect.
Section 14
Contact us
[Arventis legal entity name]
[Registered address]
Email: [privacy@domain]