Information notice on candidate data protection

Sopra Steria Group S.A., with capital of € 20,547,701, whose registered office is located at Pae des Glaisins, 3 rue du Pre Faucon, BP 238, 74940 Annecy, (hereinafter "Sopra Steria" or "we") attaches great importance to respecting the privacy of its Candidates (hereinafter "you").The purpose of this Candidate Data Protection Notice (hereinafter referred to as "Notice") is to provide Candidates (whether responding to job offers published by Sopra Steria or unsolicited candidates) with information on the processing of their personal data during the recruitment process, which may take place by any available means (website, e-mail, recruitment tools, professional social media such as LinkedIn, etc.).Please note that this Notice may be updated at any time by Sopra Steria. The date of the most recent update will appear on this page. We therefore invite you to consult it regularly.

What categories of data are collected and processed?

We only process personal data that is strictly necessary to assess your suitability for the job offered and to measure your professional skills.We therefore process the following categories of personal data about you:

Candidate identification data (surname, first name, contact details);
Data relating to your educational and professional background (training, qualifications, professional experience, references);
Data relating to your salary expectations (the salary you received in your previous positions and your current salary);
Data resulting from interviews and assessments (in particular, your written and oral answers to tests or interviews, interview reports drawn up by Sopra Steria and reproducing your answers, assessments of your foreign language skills);
Data about you collected from third parties (in particular, information obtained on professional social networks, information collected from a former employer or colleague, etc.).

We also collect the personal data you wish to communicate to us when you send us your application (covering letter and curriculum vitae in electronic or paper format), or when you apply for our vacancies indirectly, for example through a recruitment agency or firm. Failure to provide the data required to assess your suitability for the position and your professional skills will make it impossible for you to participate in the recruitment process.

In the case of your application being accepted for the conclusion of a contract, we will ask you for the information and supporting documents required to complete the compulsory formalities. The provision of this information is a precondition for the conclusion of an employment contract for successful candidates. In addition, the provision of certain categories of information and supporting documents is mandatory for successful candidates. Consequently, failure to provide this information will make it impossible to conclude the employment contract.

Why do we need to process your personal data?

The data collected during the examination of your application is processed for the purposes described below. For each of these purposes, we have also specified the legal basis for processing your personal data.

Purposes of processing	Legal basis
The search for relevant profiles also involves the provision and use of a platform allowing applications to be submitted (unsolicited or in response to a job offer).	Legitimate interest of Sopra Steria.
Receiving applications and pre-selecting candidates: sorting, recording and classifying CVs and covering letters.	Execution of the contract (pre-contractual measures).
Contacting candidates to assess their suitability for the position for which they have applied or another position in the event that a similar position becomes vacant and to measure their professional skills: processing of information collected during telephone interviews, face-to-face interviews, etc.	Performance of the contract (pre-contractual measures).
If the application is successful, proceed with the recruitment of the candidate and formalise the employment contract.	Execution of the employment contract.
To ensure the security of the premises (for example, by creating temporary name badges to manage access to our premises in the event of an on-site job interview).	Sopra Steria's legitimate interest in evaluating the performance of the measures in place to ensure the effectiveness of its recruitment resources.
To ensure the security of the premises (for example, by creating temporary name badges to manage access to our premises in the event of an on-site job interview).	Sopra Steria's legitimate interest in ensuring the security of its premises.
To propose other job offers that may correspond to candidates' searches via the constitution of a "candidate pool" or CV database.	The explicit consent of the candidate provided by a positive and clear act.
To assert our rights against possible legal action.	Sopra Steria has a legitimate interest in processing personal data to defend its rights and interests in the event of legal action.

Who are the recipients of your personal data?

Your personal data is accessible only to those who need to know it within the recruitment process. Access by authorized persons is limited to their duties and responsibilities and is subject to a confidentiality obligation. Specifically, the categories of recipients of the personal data processed by Sopra Steria are as follows:

Internally :

Members of Sopra Steria's HR and Recruitment Department;
The IT department for maintenance and technical support needs;
The relevant members of the Management or Agency within which the post is to be filled.

Externally :

HR services of Sopra Steria Group subsidiaries, depending on the nature of the position (in case of transfer of application from one subsidiary to another that may be interested in your profile);
Sopra Steria's service providers assisting it in managing Human Resources, such as:
Recruitment platforms;
External staff within Sopra Steria;
Recruitment agencies.

If your application is successful, some of your data may be transmitted to organizations informed of your hiring (such as unemployment insurance, health insurance, pension, mutual insurance, etc.) to finalize the recruitment. Furthermore, Sopra Steria may disclose information if required by law, including by court order or to defend its rights if such measures are necessary to prevent fraud or cybercrime or to ensure the security of Sopra Steria or any other person, as required or permitted by applicable legal provisions.

Given the international dimension of the Sopra Steria group, your personal data may be transferred outside the European Union and the European Economic Area (EEA: EU Member States, Iceland, Liechtenstein, and Norway) to subsidiaries based in countries that do not offer a level of personal data protection equivalent to that of the European Economic Area (third countries not having received an adequacy decision from the European Commission). International personal data transfers may be necessary for Sopra Steria's business activities and internal administrative management. Sopra Steria ensures that data transfers outside the EEA are carried out legally, using transfer tools provided by data protection regulations and providing appropriate safeguards and protection measures.

You can obtain a copy of these safeguards by sending an email to the following address: support.privacy@soprasteria.com or acces-cnil@soprasteria.com.

How long do we keep your personal data?

We only retain your personal data for as long as is necessary to complete the recruitment process. If you are successful, your data will be integrated into your administrative file and will be retained for up to five years after the end of the employment relationship, in accordance with the legislation in force.

At the end of the recruitment process and in the event of the rejection of your application, your data will be retained in the active database for three months so that you can obtain explanations for the reasons for this decision.

Subsequently, and only with your consent, Sopra Steria may retain your data for up to 24 months after the last contact between Sopra Steria and you. This period allows us to reassess your profile if a similar position becomes vacant and Sopra Steria believes it may be of interest to you.

Some of your data may be retained in an intermediate archive database with restricted access for evidential purposes to assert our rights against potential legal actions. This period will not exceed five years from the date of the hiring decision.

Once personal data is no longer necessary for these purposes or for archiving purposes, we ensure that it is completely destroyed or anonymized.

What rights do you have?

Sopra Steria recognizes the importance of data subject rights and allows individuals to exercise them in the simplest and most effective way. Consequently, we are open to your questions about how your personal data is processed and to your requests to exercise the following rights:

Access your data and obtain a copy, as well as information on how personal data is processed and its legal basis.
Rectify your personal data when it is incorrect and complete if it is incomplete.
Delete your personal data when it is no longer necessary for the purposes for which it was collected or processed.
Object to the further processing of your personal data for reasons related to your particular situation if the processing is based on Sopra Steria's legitimate interest unless Sopra Steria has compelling legitimate grounds that may prevail or if the data is necessary to establish, exercise, or defend legal claims.
Restrict the processing of your personal data when you have exercised your right to object or rectify it during Sopra Steria's response period.
Request the portability of your personal data in a readable format if your data is subject to automated processing and the processing is based on your consent or the performance of a contract you have concluded with us.
Withdraw your consent to the processing of your personal data if this processing is based on your consent.

When applying through our recruitment platforms, you have the option to exercise some of your rights directly, such as:

Check the status of your application.
Modify your CV or responses to pre-selection questions.
Add or delete your attachments.
Delete or anonymize your profile at any time.

Who to contact to exercise your rights or if you have questions?

If you have questions about this Notice or would like to exercise any of your rights, you can contact our Data Protection Officer (DPO) at the following email address: support.privacy@soprasteria.com or acces-cnil@soprasteria.com.

Last modified: 06/19/2023