Data privacy policy

PERSONAL DATA PROTECTION POLICY



Your privacy is important to us, and we take great care to protect the confidentiality of the personal data you send us.


We would like to explain to you in this Personal Data Protection Policy (hereinafter "Policy"), the nature of the personal data we collect, how we process it, the measures we take to ensure its security and the nature of your rights.  

Our Policy may be updated by us at any time and such changes will take effect immediately. We therefore invite you to refer to it regularly in order to be aware about the latest available version.


By using the website https://recrutement.nuxe.com/fr (hereinafter referred to as the "Site") to post job vacancies, collect applications and manage them, you declare that you accept the terms of this Policy and consent to us collecting, using and disclosing your personal data in accordance with the Policy. This Policy applies to all personal data that you provide to us directly or indirectly. If you do not agree with the terms of the Policy, we request you not to use the Site. 


For further information, please contact us at https://fr.nuxe.com/formulaire-de-contact.list and select “Personal data/GDPR”.


  1. Who collects your personal data? 


Your personal data collected in the context of our activity is essentially processed by: 


LABORATOIRE NUXE, in its capacity as the data controller; 

Registered office: 127 rue d'Aguesseau 92100 BOULOGNE-BILLANCOURT

R.C.S. NANTERRE 642.060.123 


To facilitate external and internal recruitment, we use the Digital Recruiters software, published by BANKESS:


BANKESS, in its capacity as a data processor

Registered office: 40 rue Madeline Michelis 92200 NEUILLY-SUR-SEINE

R.C.S. PARIS 501 895 817

In its capacity as a data processor, BANKESS is authorised to access your personal data where necessary, in particular as part of its duties to administer and maintain the Site and the job application management tool. 


Your personal data may be processed by the following companies: 


NUXE SPA

Registered office: 127 rue d’Aguesseau 92100 BOULOGNE-BILLANCOURT

R.C.S. NANTERRE 497.883.587


LABORATOIRE COSMETIQUE DE LECOUSSE

Registered office:  127 rue d’Aguesseau 92100 BOULOGNE-BILLANCOURT

R.C.S NANTERRE 400 838 876


  1. When do we collect your data?


We collect personal data from you directly or indirectly through our service-providers, particularly when: 

  • You browse the Site or use our services on the Site,

  • You make an unsolicited application on the Site or respond to a job offer on the Site or via professional networks, 

  • You subscribe to our newsletter to receive job offers,  

  • You contact us through various channels, including contact forms, by post, by telephone or in person,

  • You have given your consent to third-parties to transmit your personal data to us,


We only collect your personal data when it is legal and strictly necessary for the management of your application. We undertake to collect only the minimum amount of personal information necessary for the purposes covered by this Policy.


Should we need to use your personal data for purposes not covered by this Policy, you will be asked for additional consent. Such consent is not compulsory but will sometimes be necessary for us to be able to respond to your needs/requests. 


Please note, however, that your consent will not be required if our processing of your personal data is justified by a legitimate reason or for the performance of pre-contractual measures, provided that such use does not adversely affect your own rights and interests.


  1. How do we collect your data?


We may collect personal information about you from a number of sources, mainly:

  • Directly collected personal data that you provide to us voluntarily (e.g. surname, first name, contact details, CV, experience, skills, letter of recommendation, etc.);

  • Personal data collected indirectly, automatically or with your express consent when you use the Site; 

  • Personal data that you choose to share when using third-party sites, which we have collected from other sources;

  • Personal data about you from other legitimate sources, including commercially available sources, such as public databases, data aggregators, etc. 


  1. What personal data do we collect? 


In this Policy, "your personal data" means information or data elements that allow you to be identified directly or indirectly. This generally includes information such as your name, address, e-mail address and telephone number, CV, covering letter, RQTH (recognition of disabled worker status), residence permit, but may also include other information such as your IP address.  

Although the precise details of the personal data we collect vary according to specific needs, we generally collect the following data:


When? 

What data? 

When you browse the Site 

your surname, first name, e-mail address, connection data, technical data including your IP address, browsing information relating to your terminal

When you submit an unsolicited application or an application in response to a job offer on the Site, by post or via our Outlook messaging service

your surname, first name, email address, mobile phone number, desired mobility, desired country, residence permit and date of permit if applicable, level of foreign languages spoken, Recognition of Disabled Worker Status (RQTH), salary expectations, CV, covering letter, photograph if affixed to CV and/or any other document   

When managing your application and assessing your suitability for the job on offer

your surname, first name, email address, mobile phone number, desired mobility, desired country, residence permit and date of permit if applicable, level of foreign languages spoken, Recognition of Disabled Worker Status (RQTH), salary expectations, CV, covering letter, photograph if affixed to the CV and/or any other document, your training, professional experience, skills, recommendations, interview reports

When you subscribe to our newsletter 

your e-mail address  

When you contact our Human Resources Department

your surname, first name, e-mail address, postal address, date of birth, telephone number, the contents of your CV, your experience and your salary expectations  

When you authorise third parties to transmit data to us

the content of the data you provided to them 


This data is collected fairly; no collection is made without the knowledge of the persons concerned.


Given the purpose, which consists of processing the personal data of candidates responding to job offers and the integration of data on candidates within our CV database, the processing of your personal data is necessary for the pursuit of our legitimate interests, namely the management of our recruitment processes, as well as the performance of pre-contractual measures that may exist between our company and candidates responding to our job offers.  


  1. For what purposes and on what legal grounds do we collect your data?


The data we process is used for an explicit, legitimate and specific purpose and has an identified legal basis. 

Any processing of your personal data for purposes other than those set out below will require your consent if it is not justified by a legitimate interest. 

For our part, the processing of your personal data enables us to make the Site's services available to you, to ensure their improvement and the maintenance of a secure environment and in particular to:

  • Manage the operation and optimisation of the Site and our services (legitimate interest of Nuxe to manage its Site);

  • Help speed up your future activities and experiences on the Site (Nuxe's legitimate interest in improving the experience on its Site); 

  • Manage and respond to your applications, assess the suitability of applicants for the job (qualifications, experience, etc.) (execution of pre-contractual measures);

  • Anonymously and globally evaluate the activity of the Site and other platforms (in particular, we take into account the time you visited it, whether you have already visited it and which site referred you to it) (legitimate interest or consent depending on the nature of the cookies); 

  • Make the Site easier to use and better tailor the Site and our services to your interests and needs (Nuxe's legitimate interest in making its Site easier to use); 

  • Verify, identify and authenticate the personal data you have sent us (execution of pre-contractual measures); 

  • Prevent and detect fraud, malware (malicious software) and manage security incidents (Nuxe's legitimate interest in ensuring the security of its Site).


We are committed to minimising the data we collect, keeping it accurate and up to date and facilitating the rights of the data subjects.


  1. For how long do we keep your data?


In accordance with current legislation and regulations, we do not store your data for any longer than is strictly necessary for the purposes set out above.


TYPE OF DATA

RETENTION PERIOD

> The personal data you have entered in your profile 


 

Duration of two (2) years from your last activity on the Site. Only your formal agreement will allow longer retention. 

> Data relating to internal applications

Duration corresponds to the employee's period of presence in the Nuxe Group, without prejudice to the legal retention period from the date of the employee's departure. 

> Data concerning your browsing and use of the Site

For more information, please consult our page on cookie management. 

> Data relating to a job application 

Duration of two (2) years from the date of your application 

> Audience measurement statistics and your raw Site traffic data

For more information, please consult our page on cookie management. 

> Data used to establish proof of a right or contract, or stored to comply with a legal obligation 

Archiving in accordance with current legislation


However, in order to meet our administrative, legal, accounting and tax obligations, your data may be archived and kept beyond the above-mentioned periods, in accordance with current legislation. 


  1. What is our cookie policy?


For more information, please consult our page on cookie management. 


  1. Who will receive your data? 


We are the sole recipients of your personal data and we do not sell it. 


However, where necessary, we may pass on your personal data to authorised and specified recipients, namely: 

  • recruitment officers, managers involved in applications from Nuxe Group companies and the finance department, 

  • third-party service providers, such as web hosting service providers,

  • our service-providers and/or business partners where sharing is necessary to meet the above-mentioned purposes,

  • administrative or judicial authorities when they ask us to disclose your information to them,


We require these recipients to implement all necessary and appropriate technical and organisational measures to ensure the confidentiality and optimum security of your data against misuse and to use it only in accordance with our instructions and the laws and regulations in force, mainly the signing of a personal data protection agreement.  


  1. What is our policy for transfer outside the EU? 


We inform you that we may transmit personal data concerning you for the purposes set out above to another company in the Nuxe Group, or to trusted partners located outside the European Economic Area, whose legislation on the protection of personal data differs from that of the European Union and which do not have an adequacy decision. 


Where these partners are located outside the European Union, we will, as far as possible, take all appropriate measures to ensure the security of such transfers by means of one of the following measures: 

  • Either by obtaining your express and unequivocal consent to share your personal data with these third parties, 

  • Or by signing data transfer contracts that include the European Commission's standard clauses,


We require our partners to implement all technical and organisational measures to ensure the confidentiality and security of your data. 


  1. How do we protect your data? 


As data controller, we take all reasonable precautions to maintain the security and confidentiality of your personal data by implementing organisational, technical, software and physical measures and require our partners to do the same.  


Access to your personal data is restricted to prevent unauthorised access, modification, interference, loss and/or misuse. However, despite our best efforts, we cannot guarantee the perfect security of the transmission or storage of your personal data on the Internet, as the Internet is not a sufficiently safe and secure environment.


  1. How can you exercise your rights? 


In accordance with the French Data Protection Act of 6 January 1978 as amended, and the General Data Protection Regulation (GDPR) no. 2016/679 dated 27 April 2016, you have:

  • The right to access and copy your personal data, 

  • The right to rectify your personal data, 

  • The right to object to the processing of your personal data on legitimate grounds,

  • The right to have your personal data deleted, subject to legitimate grounds, 

  • A right to portability of your personal data, 

A right to "digital death", in accordance with the law for a digital Republic, by providing us with instructions on the retention, deletion and communication of your personal data after your death. These directives can be registered with a "trusted digital third-party" certified by the CNIL. If no one is designated to ensure the execution of these instructions, your heirs will be designated.

If you do not give instructions during your lifetime, your heirs will be able to exercise certain rights, in particular:

  • the right of access, if necessary "for the settlement of the estate of the deceased", 

  • the right of objection to close your user accounts and object to the processing of their data.


To exercise these rights, simply send a written request to the Consumer Department using the contact form at the following address  https://fr.nuxe.com/nous-ecrire and select "Personal data/GDPR". 


A reply will be sent to you within one (1) month from the date of receipt of your request. However, we reserve the right to refuse any request that is clearly unfounded. 


  1.  How can you unsubscribe from our newsletter lists?

You can unsubscribe from our newsletter lists using the unsubscribe link at the bottom of all our newsletters.  


  1. Data Protection Officer (DPO)


We have appointed a Data Protection Officer.


The contact details of the Data Protection Officer are as follows:

- Name: Mr Eric Barbry;

- E-mail address: dpo-nuxe@racine.eu;

- Tel.: 01 44 82 43 00. 


If you wish to obtain information or ask a specific question, you can contact the Data Protection Officer who will give you an answer within a reasonable timeframe with regard to the question asked or the information required.


  1. Right to lodge a complaint with the CNIL


We inform you of your right to lodge a complaint with a supervisory authority, namely the CNIL in France, if you consider that the processing of personal data concerning you does not comply with the European data protection regulations, at the following address: 

CNIL - Complaints Department

3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 

Tel.: 01 53 73 22 22


  1. Links


As a service to our visitors, the Site may contain hypertext links to other websites which are neither operated nor controlled by LABORATOIRE NUXE. 


LABORATOIRE NUXE shall therefore not be held responsible for the content of such websites, nor for the data protection practices of the third parties that operate them. Please note that the data protection practices of third parties may differ from those set out in this Policy. We urge you to check and understand their practices in this area before entrusting them with your personal data.