Privacy Policy for Candidates
This personal data protection policy aims to inform you about the processing activities carried out by Shine when collecting your personal data on our recruitment website "careers.shine.fr" and, more generally, in the context of reviewing your application for roles offered by Shine. It is in accordance with the European regulations on personal data protection, particularly the Regulation of April 27, 2016 (GDPR), which came into effect on May 25, 2018, across the European Union.
In line with GDPR principles, we take all necessary measures to ensure that your personal data is:
- processed lawfully, fairly, and transparently;
- collected for specific, explicit, and legitimate purposes;
- relevant and limited to what is necessary for those purposes;
- stored only for the time required, in accordance with our data retention policies;
- handled in a way that ensures appropriate security and confidentiality, protecting it from loss, accidental destruction, alteration, or unauthorized access.
Who is this policy for?
This policy applies to candidates applying for job opportunities at Shine, whether directly via our recruitment site or through recruitment agencies, job boards, social networks (such as LinkedIn), or any other useful channels in the recruitment process.
What personal data do we collect and for what purposes?
Recruitment operations and matching
We collect data to process your application and suggest roles that may match your profile.
This data is either provided directly by you or shared with us by third parties (such as recruiters, job boards, or professional social networks). In such cases, Shine is not responsible for how those third parties handle your data, as you have a separate relationship with them.
We may update your profile using publicly available information from platforms like LinkedIn, via our data processor Hiresweet. Only relevant data is collected.
1) Application review
This includes contacting you about roles or future opportunities, arranging interviews, sending job alerts, managing legal or compliance obligations, and handling complaints or appeals.
We may collect:
- Your contact and identification information
- Any personal information included in your CV
- Professional and declarative data gathered during interviews or from relevant external sources
- Information from any trial immersion (if applicable and with your consent, especially if recorded)
- Publicly available professional profile data (e.g., LinkedIn)
2) Hiring process
When your application is successful, we collect the necessary data to prepare your employment contract, handle legal and administrative obligations (such as social declarations), and ensure Shine’s compliance obligations are met.
In some cases, this may involve screening against international sanctions lists.
We may collect sensitive data only if required by legal, regulatory, or compliance obligations, or if you provide it voluntarily.
How to ensure your personal data is accurate
You are responsible for ensuring that the data you share with us is accurate, complete, and up to date. Please inform us of any changes during our collaboration.
Legal basis for processing your data
Your personal data is processed based on pre-contractual or contractual steps.
Some recruitment-related processing is based on our legitimate interest or legal/regulatory obligations. In some rare cases, your consent may be required.
Are your data transferred outside the EU?
We may share your data with partners or processors located inside or outside the EU.
When such transfers occur, we implement appropriate safeguards to ensure your data is protected—such as adequacy decisions or standard contractual clauses.
Who can access your data?
Your data may be accessed only by authorized Shine employees and recruitment-related processors.
How long do we keep your data?
Unless you request otherwise, we retain your data for up to two (2) years from your last contact with Shine, so we can consider you for future roles that match your profile.
How to exercise your rights
Subject to legal conditions, you may exercise your rights of access, rectification, deletion, objection, limitation, or data portability.
To access or delete your data, you can use [this link].
For any other requests, contact us at dpo@shine.fr.
You also have the right to lodge a complaint with a supervisory authority.
This policy may change over time, so we invite you to check our recruitment site regularly for updates.
