This Personal Data Protection Policy outlines Fauve’s commitment—as an executive search firm specialized in recruitment—to protecting the confidentiality and security of personal data processed in the course of its operations. Fauve complies with the General Data Protection Regulation (GDPR) and is committed to managing personal data from candidates, clients, collaborators, and suppliers in a transparent and responsible manner.
1. INTRODUCTION
Fauve recognizes the importance of personal data privacy and security. As a recruitment firm, we collect and process personal information from various stakeholders as part of our search and recruitment services, and in our interactions with clients, employees, and suppliers. This policy sets out the principles we follow to ensure data protection and compliance with applicable laws.
2. CATEGORIES OF PERSONAL DATA PROCESSED
Fauve processes several categories of personal data, including:
Candidates: Personal details, résumés, cover letters, interviews, assessments, references, test results, etc.
Clients: Professional contact details (name, title, contact info), recruitment needs, contracts, and engagement history.
Collaborators: Administrative data (name, contact info), HR, payroll, and leave management data.
Suppliers: Information required to manage business relationships, including contact details, contracts, and billing arrangements.
3. PURPOSES OF DATA PROCESSING
The personal data collected by Fauve is processed for legitimate, specific, and transparent purposes:
Candidates: Identification, selection, and management of applications as part of recruitment projects, including client introductions, process tracking, and job proposals.
Clients: Recruitment contract management, recruitment needs tracking, candidate recommendations, and business relationship management.
Collaborators: HR administration, payroll, employee benefits, career development, and internal growth.
Suppliers: Management of service or product supply contracts, payment tracking, and commercial relationship oversight.
4. LEGAL BASIS FOR DATA PROCESSING
Fauve relies on the following legal grounds to justify the processing of personal data:
Candidates: Consent, pre-contractual measures (e.g., candidate evaluation), and legitimate interest in application management.
Clients: Contract execution and legitimate interest in managing commercial relationships.
Collaborators: Employment contract execution, legal obligations, and legitimate interest in HR management.
Suppliers: Contract execution, legal obligations, and legitimate interest in commercial relations.
5. DATA RETENTION PERIOD
Personal data is retained for limited periods consistent with the purposes for which it was collected, in compliance with legal and regulatory requirements:
Candidates: Up to two years after last contact or completion of a recruitment project.
Clients: Throughout the contract duration and up to five years after termination.
Collaborators: For the duration of employment and subsequently, as required by tax and labor laws.
Suppliers: For the duration of the commercial relationship and up to five years thereafter.
6. RIGHTS OF DATA SUBJECTS
In accordance with the GDPR, individuals whose data is processed by Fauve have several rights, which they may exercise by contacting us:
Right of access: Request a copy of the personal data we hold.
Right to rectification: Request corrections to inaccurate or incomplete data.
Right to erasure: Request deletion of personal data under certain conditions.
Right to restriction of processing: Request that processing of data be limited.
Right to data portability: Request to receive or transmit data in a structured, commonly used format.
Right to object: Object to data processing, particularly for direct marketing purposes.
Right to withdraw consent: Withdraw consent at any time, without affecting the lawfulness of prior processing.
7. DATA SECURITY
Fauve implements appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access, or disclosure. These include data access controls, password management policies, and regular staff training on data security.
8. DATA SHARING WITH THIRD PARTIES
In the course of its activities, Fauve may share personal data with partners, subcontractors, or service providers. Such sharing is governed by agreements that ensure GDPR compliance, and data is only shared when necessary to provide services.
9. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
For certain services or partnerships, personal data may be transferred outside the European Union. Fauve ensures that such transfers comply with GDPR by implementing appropriate safeguards through contractual agreements with data recipients.
10. CHANGES TO THIS POLICY
Fauve reserves the right to update this data protection policy at any time. Any changes will be communicated transparently and will take effect upon publication.
11. CONTACT
For any questions regarding this policy or to exercise your data rights, you may contact our GDPR representative by email at: pd******@***ve.com