Privacy Policy

1. Who is Yposkesi?

Yposkesi, a SAS with a capital of 37 569 982,00 euros whose registered office is at 26, rue Auguste Henri Desbrueres, 91100 Corbeil Essonnes – France, registered in the Trade and Companies Register under number 815 409 503 R.C.S. EVRY (« Yposkesi ») processes Your personal data as a controller.

Concerned about Your data, Yposkesi wishes to inform You, in all transparency, about the treatment of Your personal data.

2. Definitions and scope

Terms used in this document (hereinafter the “Privacy Policy”) such as “Personal Data” or “Processing” shall have the meanings given to them by the General Data Protection Regulation (Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, or “GDPR”) or the applicable local regulation, if any.

The persons concerned by the processing of Data are Yposkesi’s candidates, prospects and clients, including in particular Internet users browsing the Site (the “Users” or “You”).

The Privacy Policy also applies to the Personal Data of the persons listed below:

– Employees and representatives of companies with which Yposkesi enters or may enter into a transaction or business relationship;
– External consultants, external trainers, auditors;
– Employees and representatives of Yposkesi’s suppliers and service providers;
– Shareholders and members of the administrative, management and supervisory bodies;
– Visitors to Yposkesi premises.

The Privacy Policy does not apply to Yposkesi’s employees which may refer to the employees privacy charter (“Charte de protection des données des salariés”).

The Privacy Policy describes how Yposkesi collects and uses Your Personal Data in the course and after Your relationship with Yposkesi, in accordance with applicable privacy regulations.

The Privacy Policy may be updated by Yposkesi at any time. Yposkesi may also inform You from time to time about the processing of Your Personal Data by means of information materials separate from this Privacy Policy.

3. Personal data processed

In the course of its business, Yposkesi processes the following personal data:

– Identity and identification data (e.g. name, first name) and contact information (e.g. company, function, visa n°, approval number, postal address, e-mail address, telephone number);
– Data collected in the context of Your relationship with Yposkesi, including data contained in the reports of meetings or inspections;
– Economic and financial information (e.g. tax status, bank details);
– Data relating to the use of the Yposkesi information system (e.g. IP address, connection data);
– The history of exchanges with our teams (by email or via social networks);
– Data from video surveillance and access control to the premises;
– Yposkesi may also collect, in accordance with applicable laws and regulations, Personal Data of temporary workers and employees of suppliers and partners such as: Social and financial information (e.g., social security number, work permit, salary, disability information), job, training and career information (e.g. employment contract, date of hire, identification number, positions held, working hours number, job functions, work hours, diplomas, curriculum vitae) and any other information required by applicable law;
– When You give them to us voluntarily, particularly in the context of an online application (CV, surname, first name, contact details, talents, etc.);
– Any other Personal Data collected or provided by You in the course of Your relationship with Yposkesi.

4. Purposes and legal basis

Personal Data is processed for one or more defined, specific and legitimate purposes.

The processing of Personal Data is necessary to accomplish the following purposes:

Purpose of the processing	Legal basis for the processing
Respect the applicable legislation and regulations. For example – Comply with tax and financial regulations – Respond to requests from judicial or administrative authorities in the event of an inspection, control or investigation, under the conditions defined by the applicable legal provisions.	Processing necessary to comply with a legal obligation.
Administrative management notably for the following purposes: – Clients and suppliers’ contracts – Purchase orders – Invoices – Payments – Management of client and supplier accounts – Financial statistics and annual turnover by supplier – Selection of partners and suppliers – Creation and updates of the clients suppliers and partners database – Follow-up of the relationship with clients suppliers and partners.	Processing necessary for the performance of the contract to which the data subject is party. Processing necessary for the pursuit of the legitimate interest of Yposkesi in managing relationships with suppliers and partners. Processing necessary to comply with a legal obligation.
Check qualifications and other documents during the integration process for temporary workers.	Processing necessary for the pursuit of the legitimate interest of Yposkesi in organizing the integration of temporary workers. Processing necessary to comply with a legal obligation.
Ensure security, particularly in the context of: – Access to premises (e.g. video surveillance recordings, badges)	Processing necessary for the pursuit of the legitimate interest of Yposkesi in ensuring the security of the premises and infrastructure. Processing necessary to comply with a legal obligation.
Management and follow-up of contact for communication purposes.	Processing necessary for the pursuit of the legitimate interest of Yposkesi in ensuring the management of its relationships with its prospects.
Quality management (i.e. supplier traceability).	Processing necessary for the pursuit of the legitimate interest of Yposkesi to manage its quality system. Performance of a contract between You and Yposkesi.
Management and follow-up of orders and deliveries.	Performance of a contract between You and Yposkesi.
Management of online applications.	Processing necessary for the pursuit of the legitimate interest of Yposkesi in handling candidates’ applications and responding to said applications.
Website management.	Processing necessary for the pursuit of the legitimate interest of Yposkesi to operate and manage its website.
Direct communication between You and Yposkesi.	Your consent.

When it is mandatory to provide Yposkesi with personal data in order for You to access or benefit from the services You have subscribed to, we indicate this in the form provided for this purpose.

5. Origin of the data

In principle, Yposkesi collects all Personal Data processed directly from You when You contact it through its website or in the course of Your business relations.

Yposkesi makes every effort to ensure that the Personal Data it holds is accurate at all times.

Yposkesi therefore encourages You to update Your data in case any changes occur and may also ask You to update Your data from time to time.

6. Data recipients and transfers

Yposkesi may transfer the Personal Data it has collected to internal or external recipients if this is necessary for the purposes mentioned in Section 4.

The Personal Data is transmitted to the members of Yposkesi employers authorized to receive it and may also be transmitted to external Recipients such as:
– The competent authorities or jurisdictions ;
– Yposkesi’s service providers and subcontractors, as appropriate.

Yposkesi ensures that only authorized persons have access to this data. Yposkesi applies a strict authorization policy which ensures that the data it processes is only transmitted to persons authorized to have access to it.

In addition, most of Yposkesi’s first-level subcontractors are located within the European Union. For this reason, Yposkesi does not directly transfer Your Personal Data outside the European Economic Area in the context of data subcontracting (IT development and support/Hosting and the performance of marketing and economic studies and marketing campaigns/Customer service/Payment service).

However, some categories of Personal Data may be transferred outside the European Union, particularly to the United States for commercial purposes. The United States are not recognized as provider of sufficient protection for personal data according to the European Commission. Accordingly, Yposkesi will ensure that appropriate safeguards are implemented to govern such transfer (e.g. through the adoption of standard contractual clauses).

For more information on this topic please contact Yposkesi via this link.

7. Data retention

In a general way, Personal Data may be kept for the time necessary to achieve the purposes for which it was processed.

More particularly:
– Yposkesi keeps the Personal Data of its customers/suppliers for the time strictly necessary to manage our business relationship. The personal data of our customers is then archived for the duration of the legal prescription in force, which is in principle five (5) years from the end of our contractual relationship;

– Yposkesi keeps the personal data of its prospects and web contacts for three (3) years from the date of collection of the data. The Personal Data of Yposkesi prospects is then archived for the duration of the legal prescription in force;

– Yposkesi keeps the personal data of its candidates for two (2) years from the date of collection of the data. Unless updated by the candidate, the Personal Data of the candidate is then archived for the duration of the legal prescription in force;

– Yposkesi keeps CCTV images no more than for thirty (30) days;

– Finally, all accounting data is retained for ten (10) years, in accordance with applicable law.

Personal Data may then be retained for legal purposes and to enforce Yposkesi’s rights and interests until the expiration of the applicable statute of limitations.
Once the retention period has expired, Personal Data is destroyed or anonymized. Anonymization ensures that Personal Data can no longer be associated with the data subject.

8. Rights of the data subjects

Under the conditions provided for by the applicable regulations, You may:
– Request access to Your Personal Data;
– Request the rectification of Your Personal Data;
– Request the erasure of Your Personal Data;
– Request a restriction of the Processing of Your Personal Data;
– Request the portability of Your Personal Data;
– Object to the Processing of Your Personal Data;
– Withdraw the consent You have given for the Processing of Your Personal Data, if any;
– Arrange for the destiny of Your personal data post-mortem.

If You have any queries about Your rights or for any information about the protection of Your Personal Data, please contact us at privacy@yposkesi.com .

You also have the right to lodge a complaint with a supervisory authority. For the CNIL, You can, go to the following address: www.cnil.fr/fr/plaintes

For our Legal Mentions, click here.

For our Cookie Policy, click here.

Date of update: 02/02/2022