POLICY ON

PERSONAL DATA

INTRODUCTION AND COMMITMENT

The protection of your personal data is of great importance to Arnest. Arnest takes all necessary precautions to ensure that your personal data is processed securely and in compliance with applicable regulations.

Below you will find information on the processing of your personal data if you are an applicant, employee, supplier, prospect or customer, or in connection with the use of our website.

We undertake to process such data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the amended French Data Protection Act (Loi Informatique et Libertés).

ARTICLE 1: DATA CONTROLLER

The party responsible for processing your personal data is: Arnest SAS located at 129 avenue Charles de Gaulle – 92200 Neuilly Sur Seine.

If you have any questions about this policy or wish to exercise your rights, you can contact us by email: dpo@arnest-engineering.com

ARTICLE 2: PROCESSING OF YOUR PERSONAL DATA BY CATEGORY

In accordance with the General Data Protection Regulation (GDPR) and the applicable French law known as “Informatique et Libertés”, Arnest implements personal data processing with respect to its stakeholders:

  • The candidates
  • Employees
  • Customers and prospects
  • Suppliers and service providers
  • Website users

A. You are a candidate at Arnest

Arnest uses personal data to manage recruitment:

  • Based on its legitimate interest, as a company with a large number of recruitments, to consult and analyze the data you have made public (in particular on LinkedIn) in order to assess the possibility of offering you a job;
  • When you have applied directly for a position at Arnest, as this is a pre-contractual measure necessary in the early stages of recruitment.

In the first case, your data is used to search for and identify relevant profiles, enabling us to gather applications for job vacancies. In both cases, we have determined that your professional skills and aptitudes are suitable for the position(s) in question.

Your data is processed by Arnest recruitment managers and communicated to line managers. It is also accessible to our recruitment software editors for maintenance and IT security purposes, subject to our authorization.

The data collected is essential to this processing and is intended for Arnest’s authorized departments. It will be kept for 4 years from the date of our last contact.

B. You are an Arnest collaborator

Arnest processes personal data for the purposes of personnel administration, payroll, careers, training, work organization, organization of consultants’ assignments and projects, supply of resources and provision of IT tools, management of internal and external communications and security of goods and persons.

  • Such processing is based on Arnest’s legitimate interests, its legal obligations and the performance of the employment contract.
  • The data collected is essential to this processing and is intended for Arnest’s authorized departments depending on the type of processing, in particular Human Resources, Communications, etc.
  • They are kept for up to 5 years after your departure, except in special cases requiring a shorter or longer retention period.

C. You are a Contact within a Customer or Prospect company

Arnest processes personal data for the purpose of managing commercial relations with its customers and prospects.

  • This processing is based on Arnest’s legitimate interests and on the performance of a contractual obligation.
  • The data collected is essential to this processing and is intended for Arnest’s authorized departments.
  • They are kept for up to 4 years from the date of our last contact with you, or for up to 5 years from the end of our contractual relationship. Data required for accounting purposes is kept for 10 years in accordance with the French Commercial Code.

D. You are a supplier or service provider

Arnest uses personal data to manage its suppliers and service providers.

  • Such processing is based on Arnest’s legitimate interests and on the performance of pre-contractual and contractual measures.
  • The data collected is essential to this processing and is intended for Arnest’s authorized departments.
  • They are kept for up to 5 years from the end of our contractual relationship and 10 years for accounting data.

E. You are a user of our website

Arnest uses your data for the following purposes:

  • Answer and process your messages for any questions or requests for information;
  • To compile statistics relating to the requests received in order to optimize the management of our website and to analyze commercial efficiency;
  • Guarantee the security of our website;
  • Manage the recruitment process when you apply for jobs on our dedicated websites.
  • They are kept for up to 2 years for statistical purposes relating to commercial solicitations.

The above-mentioned processing purposes meet Arnest’s legitimate interests, with the exception of the submission of your application, which Arnest processes in the context of the execution of pre-contractual measures.

ARTICLE 3: DATA RECIPIENTS

Your personal data is treated confidentially and is only accessible to authorized Arnest personnel (Recruitment, HR, Sales, Communication, Managers, IT Support) according to the purposes for which it is to be used.

We may share certain data with subcontractors (service providers acting on our behalf: web host, ATS provider, CRM tool, emailing solution, etc.) in compliance with the RGPD and with contractual guarantees.

Your data will not be passed on to third parties for commercial purposes without your consent.

ARTICLE 4: DATA SECURITY

Arnest implements all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, in order to protect it against loss, accidental destruction, alteration, unauthorized access or disclosure. This includes in particular:

  • Logical and physical access controls.
  • Safeguard measures.
  • Securing workstations and the network.
  • Training and awareness-raising for authorized personnel.

ARTICLE 5: YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Whatever your status (applicant, customer, prospect, visitor), you have the following rights: Access, Rectification, Deletion, Limitation, Portability (if applicable), Opposition, Withdrawal of consent, Post-mortem directives.

To exercise these rights, please contact us at the address given inarticle 1.

You also have the right to lodge a complaint with the CNIL(www.cnil.fr).

ARTICLE 6: COOKIE MANAGEMENT

For more information on the use of cookies on our website and how to manage your preferences, please consult our legal notice.

ARTICLE 7: UPDATING THE POLICY

This policy was updated on 14/05/2025