Privacy policy

Data Protection Last updated: June 2025

Identity and contact details of the data controller

The data controller is the company that defines how and for what purpose your personal data is used.

Personal data collected on the career site or during your recruitment process is processed by GROUPE COURIR SAS, registered under no. 843 726 704 R.C.S PARIS, whose registered office is located at 91 avenue Ledru Rollin - 75011 Paris, telephone: 01 75 64 32 01, hereinafter referred to as "COURIR".

Our commitment to protecting your personal data

At COURIR, we are committed to ensuring the confidentiality and security of candidates' personal data, in accordance with current regulations, in particular the European Union's General Data Protection Regulation (GDPR), which has been in force since 25 May 2018. We ensure total transparency on how your data is collected, used and protected throughout the recruitment process.

Our main commitments:

• Protect your data with the utmost rigour and guarantee its confidentiality;
• Use your data only for the purposes for which it was collected and never without your knowledge;
• Only work with service providers recognised for their professionalism and compliance with safety standards;
• Integrate IT security and data protection at the heart of all our projects;
• To facilitate the exercise of your rights by responding to your requests within the limits of our legal and operational obligations;
• Be transparent and open about how we handle your personal data.

This policy aims to inform and reassure you: applying to COURIR means that your personal data is in safe hands.

The people concerned by this policy

This policy applies to all persons applying for a job, internship or apprenticeship with COURIR, whether via the official recruitment website, via colleagues (in the context of co-optation), job sites or social networks (such as Linkedin) or any other useful means of finding candidates.

The personal data collected

When such data is collected, we undertake to ask you for only the personal data that is strictly necessary for the purpose of the processing concerned (principle of minimisation).

As part of your visit to our career site

We invite you to consult our cookies policy.

As part of the process of examining your application

During the recruitment process, we collect several types of personal data. This data includes :

• Identity details: surname, first name ;
• Contact details: e-mail address, telephone number, postal address;
• Professional information: background, training, diplomas, skills, portfolio and qualifications mentioned in the CV or covering letter;
• Data from recruitment tools: results of personality tests, pre-recorded videos for pre-selection, Linkedin profiles, etc. ;
• Declarative data: additional information provided voluntarily by the candidate, in particular financial or economic data (such as desired remuneration), and information provided during interviews.

As part of the recruitment process if your application is successful

When your application is accepted, we collect information in order to prepare your employment contract and monitor your employment:

• Information needed to draw up your employment contract: for example, a copy of your national identity card, a copy of your health insurance card, your bank details and proof of address;
• Data required for your declaration of employment to public and social bodies;
• Information required for your integration into COURIR
• Data required to meet legal, regulatory or compliance obligations to which we may be subject.

Sensitive data

We may need to collect sensitive data about you if you voluntarily provide this data to us or if we are required to collect this data by legal, regulatory or contractual requirements and, in particular, by virtue of agreements or undertakings given to regulators or in the context of legal proceedings of any kind.

The purposes for which your personal data is processed and the associated retention periods

Your personal data is collected for the following purposes:

Recipients of your personal data

As part of the recruitment process, Courir ensures that your personal data is treated confidentially and is only accessible to authorised persons. The recipients of this data are grouped into two main categories: internal and external recipients.

Internal recipients

The personal data you send us is shared with internal teams strictly necessary for the organisation and management of recruitment. These teams include :

• The people responsible for recruiting for the position you are applying for, in particular the members of the HR teams in charge of your application;
• Managers directly involved in the selection process;
• Human Resources (HR) managers;
• If necessary, other members of staff can help to assess your profile or organise your induction.

External recipients

Courir may also pass your personal data to external service providers where specialist expertise is required to complete the recruitment process. These service providers may include:

• Suppliers of recruitment management and communication tools;
• Service providers offering assessment or video interview platforms for candidates;
• IT hosting and security services to guarantee the protection of your data.

In addition, your data may, exceptionally, be transmitted to third parties in the context of legal obligations or to guarantee the defence of a right in a legal context, for example. Such third parties may include regulatory authorities, legal advisors or parties involved in litigation.

Courir ensures that all data transfers are limited to the strict operational necessities and accompanied by appropriate safeguards to protect your information.

Your rights regarding your personal data

We implement the necessary measures to ensure the protection of personal data from the moment it is conceived and by default, as well as throughout its use.

In accordance with Article 35 of the General Data Protection Regulation (GDPR), an impact assessment has been carried out to evaluate the risks associated with the processing of personal data in our recruitment process. The aim of this approach is to guarantee an appropriate level of security and to protect the rights and freedoms of candidates.

Personal data collected as part of our recruitment process is hosted and processed within the European Union. Should it be necessary to transfer data to a country outside the European Union, we undertake to take all appropriate measures to guarantee a level of protection equivalent to that required by the RGPD. These transfers are regulated in accordance with the provisions of articles 44 to 49 of the GDPR, in particular through the use of standard contractual clauses, adequacy decisions or appropriate safeguards recognised by the European Commission.

Your rights regarding your personal data

As part of the processing of personal data, you have a number of rights under the RGPD.

Right of access

You can ask to know whether your data is used, what it is used for, why it is used and by whom. You also have the right to obtain a copy.

Right of rectification

You can rectify your personal details at any time in your candidate area.

Right to erasure

You can request the deletion of your personal data in your candidate area. Personal data may only be deleted if it is no longer required for the purposes for which it was collected or processed.

Right to restrict processing

You may request a temporary restriction on processing, while maintaining the retention of your personal data.

Right to portability

You can ask to receive your data in a readable format and forward it to another organisation if you wish.

Right to withdraw your consent

If you have given your consent to processing, you can withdraw it at any time, without giving any reason, in your candidate area.

Exercising your rights

You can exercise your right to rectification, right to erasure and right to withdraw your consent directly in your candidate area.

For other rights, you can submit your request using this form. https://api.dastra.eu/v1/client/data-subject-request/page?id=389&key=rkKC96QJvVGdTFoDqnz03XACOk81uUnrw6dP2kubk9o

If you feel that your rights with regard to your personal data have not been respected, you have the right to lodge a complaint with the competent supervisory authority in France: the Commission Nationale de l'Informatique et des Libertés (CNIL). For more information, please visit their website: www.cnil.fr.

Contact details for the Data Protection Officer

If you have any questions about your personal data, you can contact our Data Protection Officer (DPO) at the following address: dpo@courir.com

This policy may change or be amended from time to time. We therefore invite you to consult it regularly.