Global Data Privacy Statement

Dear candidates,

We are pleased to present our personal data policy regarding the personal information we process when you access and use the COLAS Group recruitment portal as a candidate for job offers posted by various COLAS Group entities or when you submit a spontaneous application.

The entities of the Colas Group attach the utmost importance to the protection of your personal data and undertake to comply with the provisions of the regulations applicable to them in terms of personal data protection and, in particular, in Europe, the General Data Protection Regulation (2016/679) of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

This policy is presented in a question-and-answer format.

It concisely details the personal data we hold about you and how we use it.

It also reminds you of your specific rights regarding personal data and explains how to exercise them.

1. Data controller for your personal data

The data controller is the legal entity ("the Entity") of the Colas Group that is recruiting and is responsible for determining the means and purposes of the processing of personal data implemented for the job offer to which you are applying.

The identity and registered office address of the Entity can be found on our website: COLAS Entities worldwide

2. Categories of Personal Data that we collect and process

Personal data is any information relating to an identified or identifiable natural person.

In order to process your application and complete the recruitment process, only personal information strictly necessary for assessing your ability to fill the position offered or your professional skills will be requested during the selection phase.

The personal data we process about you is:

  • Information that you have provided to us when creating or modifying your user account, and information that you may be required to provide to us as part of your application or during interviews with the departments involved in the recruitment process;
  • Technical data relating to your use of the website (IP address, cookies, etc.).

 

We process the following categories of data:

  • Civil status (last name, first name, etc.);
  • Personal information (telephone number, address, email address, telephone number, etc.);
  • Education (degree, title, dates of graduation, etc.);
  • Professional experience (position/job held, etc.);
  • Other information contained in your resume (if provided);
  • Results of any tests carried out as part of the recruitment process (technical skills assessment, language test, etc.);
  • Sensitive data, where this type of information is required by law (see paragraph 8).

 

3. Purpose (objective) of the processing of your Personal Data

The human resources department of the legal entity concerned has implemented this data processing for the following purposes:

  • To enable you, as a candidate, to create an account and complete your profile;
  • To enable you, as a candidate, to apply for a job offer published by an Entity or as part of a spontaneous application;
  • To enable the analysis of applications and the evaluation of candidates;
  • To enable recruiters to manage your applications: transmission and storage of your resume and application documents, organization of exchanges with recruiters, job interviews, etc.;
  • Allow you, as a candidate, with your consent (checkbox) and according to your preferences described below (and listed in the "make my profile visible" section), to be included in a database such as a "talent pool" or "CV library" of COLAS candidates used by the BOUYGUES group to promote its job offers;
  • Allow you to subscribe to similar job offers;
  • Ensure the security of the site.

Some of this data also allows us to communicate with you when you wish to exercise your rights.

 

4. Who can access your Personal Data?

Your personal data (PD) will first be used by the administrative and recruitment departments of the relevant Entity.
Your PD may also be accessible to our IT service providers, strictly within the scope of their duties related to application management and maintenance, and solely for that purpose.

When creating your account on the recruitment portal, you will have the option to choose the visibility level of your DCP from the following two options:

  • Option 1: Only recruiters from the COLAS group managing the job postings you are applying for (recruiters from the Entity(ies) can only view your profile when they are responsible for the job posting(s) you have applied for and cannot approach you for other job offers).
  • Option 2: All recruiters managing job postings for all companies in the BOUYGUES group worldwide (since the COLAS group is part of the BOUYGUES Group). By choosing this option, I understand that my data may be transferred to all countries where the companies of the Bouygues group are established. In this case, the personal data protection policy available on the Bouygues Group recruitment website will apply.

You can modify this consent at any time by changing the visibility option of your profile. This can be done in the profile settings on the COLAS recruitment portal or, if applicable, on the BOUYGUES Group portal.

If you choose Option 2 and the Entity you are applying to is subject to the GDPR, this processing involves a transfer of personal data to other Entities located outside the European Economic Area.
The countries where these Entities are located may have privacy protection standards different from those of the European Economic Area (see HERE) or your country of residence.

 

5. On what basis is your personal data processed?

Your personal data is collected by the Bouygues group entities offering the position to which you have applied on the following legal bases:

  • The execution of pre-contractual measures for the management of your applications by recruiters (transmission and storage of your resume and application documents, organization of exchanges with recruiters, job interviews, etc.), the analysis of applications, and the evaluation of candidates.  
  • Your specific consent to allow you to join a candidate CV database and, if you choose option 2 above, to allow us to transfer your data outside your country of residence, to be contacted about job offers based on your visibility preferences, and to subscribe to other job offers from the BOUYGUES group.

 

6. Retention of your personal data

  1. If your application is not successful.

    The personal data processed in connection with your application will be retained for a country specific retention period based on the last contact.

    15 days before the end of this period, you will be offered the option of keeping your personal data for a reasonable period of time, up to a maximum of one year, in order to keep you informed of potential opportunities that may be of interest to you. To do so, you will be invited to log back into your profile. If you do not want us to keep your data or if you do not respond, your data will be destroyed.

  2. If your application results in your hiring, your data will be automatically transferred to the employee onboarding tool managed by the human resources department of the entity concerned, for the purposes of drawing up your employment contract and administrative management of personnel, under the conditions described in the employee personal data protection policy, which will be communicated to you in advance.

7. Where is my data stored?

Your data is stored in the European Union.

8. Do you have any sensitive data about me[1] ?

The Entity to which you are applying may carry out background and criminal record checks within the limits permitted by law. It may process other sensitive personal data, such as data relating to citizenship, nationality, or health, where this is relevant to a position or where it is permitted by law or required by local regulations.

9. Is my personal data transferred outside the European Union?

Yes. The COLAS Group operates in more than 50 countries and the Bouygues Group in more than 80 countries. As a result, candidate data may be transferred and processed in several countries, some of which do not provide the same level of data protection as your country of origin.

The COLAS Group applies and maintains employment data protection standards that correspond to those set out in this policy.

The transfer of your personal data is carried out on the basis of the following safeguards:

  a. Adequacy decision: to one or more countries considered by the European Union to provide adequate safeguards for your rights and freedoms;

  b. For countries not considered by the European Union to provide adequate safeguards for your rights and freedoms: these transfers are carried out on the basis of standard contractual clauses whereby the recipient(s) of your personal data offer(s) specific safeguards for your privacy, freedoms, and fundamental rights. These clauses also provide for means to enable you to exercise your rights.

10. Will my data be used for automated decision-making or profiling[2] ?

No, not by the COLAS Group.

If you check Option 2 above: we invite you to read the BOUYGUES Group's personal data protection policy available on their career site.

11. Your rights

As a natural person, you have the following rights:

  1. Right to access your data

    This means that you can ask us directly:

    Whether we hold any personal information about you; and

    That we provide you with all of this personal data.

    This right of access allows you to check the accuracy of the data and, if necessary, ask us to correct or delete it if it is inaccurate or out of date.
     

  2. Right to modify your data

    You can ask us to correct inaccurate information about you. This right allows you to prevent us from disseminating or processing incorrect information about you.

  3. Right to delete your data

    You may request the deletion of your application data and your CV from our database. 

  4. Right to object to the processing of your data

    This right applies only to the execution of legitimate interests of the legal entity concerned. Thus, you may object, on legitimate grounds, to the dissemination, transmission, or storage of data concerning you.

  5. Right to restrict the processing of your data

    This right allows you to request that only the data necessary for the data controller be processed.

  6. Right to data portability

    You have the option, solely in the context of the execution of pre-contractual measures or your agreement to the integration of the candidate CV database, to retrieve some of your data in an open and machine-readable format (electronic format). Your data can thus be easily stored or transmitted from one information system to another for reuse.

  7. Right not to be subject to automated decision-making

    The right not to be subject to a decision based solely on automated processing includes profiling and, in general, any processing that produces legal effects concerning you or similarly significantly affects you.

    However, your right does not apply when the decision is taken following the automated decision:

    It is necessary for the conclusion or performance of a contract between you and a data controller,

    It is authorized by European Union law or French law, which also provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests,

    It is based on your explicit consent.

  8. Right to withdraw your consent to the processing of your data at any time (if your data is processed on the basis of your consent)
  9. Post-mortem rights

 

You have the option of defining guidelines regarding the fate of your personal data after your death.

NB: These rights are not absolute. You may exercise them within the legal framework provided for and within the limits of these rights. In certain cases, we will not be able to respond favorably to your request (legal obligation, compliance with our commitments to you, etc.). If this is the case, we will inform you of the reason(s) for our refusal.

For more information on your rights, visit the CNIL website: https://www.cnil.fr/fr/comprendre-vos-droits

12. Contact

You can ask us questions about the protection of your personal data and exercise your rights by contacting the DPO of the entity responsible for processing at the following email address: dataprivacy@colas.com or by mail: Colas - Attention: DPO - 1 rue du Colonel Pierre Avia - 75015 Paris, France.

In order to ensure that your rights are properly taken into account, the data controller may ask you to provide proof of identity (such as a copy of your ID card) with your request and, depending on the circumstances, justification for your request.  

Colas undertakes to respond to your requests within one (1) month, except in special cases.

If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the locally competent supervisory authority (for France,  Lodge a complaint with the CNIL | CNIL).

 

 

 

[1] Sensitive or special categories of data are:

Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health; or data concerning a natural person's sex life or sexual orientation; and

Personal data relating to criminal convictions and offenses.

[2] Profiling refers to: any form of automated processing of personal data consisting of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.