Privacy policy

Updated version as of 06/11/2025

Data controller

The company CV.CONSULTANTS, a simplified joint-stock company, registered with the Paris Trade and Companies Register under number 520 323 288, whose registered office is located at 3, Rue des Lilas, 75019 – Paris (hereinafter “CV.CONSULTANTS“), is responsible for the processing of personal data (hereinafter the “Personal Data“) implemented during the browsing and use of the website available at the URL < www.cvconsultants.fr > (hereinafter the “Website“) on the one hand, and in the context of its activities on the other hand.

The website

The Website is published by CV.CONSULTANTS. As part of the user’s browsing on the Website, the user is required to communicate certain Personal Data to CV.CONSULTANTS.

The purpose of this personal data protection policy (hereinafter, the “Privacy Policy“) is to provide information on the way in which CV.CONSULTANTS, in its capacity as data controller, processes Personal Data.

What personal data are collected ?

Personal Data is any information relating to a natural person who can be identified, directly or indirectly. CV.CONSULTANTS collects only information that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

The specific type of Personal Data collected depends on the context of the data subject’s interactions with CV.CONSULTANTS, and, by way of example:

  • Identification information (surname, first name, date and place of birth, nationality, gender, marital status, personal email address, postal address, telephone number);
  • Professional information (place of work, date of entry into the company, seniority, job held, nature of the employment contract, social security number, professional email address);
  • Financial information (data relating to credit card, bank transfer – RIB/IBAN, cheque);
  • Connection information (data relating to the use of the Website, connection data, pages and solutions viewed, advertisements clicked on, products searched for, location, duration of the visit, IP address, data relating to the device used);
  • Demographic data (age, country, preferred language).

When browsing the Website, cookies are also collected. For more information on our cookie policy, please see our cookie policy available here. 

On what basis is personal data collected ?

Personal Data is processed by CV.CONSULTANTS in the cases permitted by the applicable regulations, and in particular under the following conditions:

  • When the data subject has given free, specific, informed and unequivocal consent to the processing of their Personal Data (e.g. request for contact/information, personalization of the experience on the Website);
  • When it is necessary for the performance of a contract or pre-contractual measures taken at the request of the data subject (e.g. request for a demonstration, request for partnership, processing of applications);
  • For compliance with CV.CONSULTANTS’ legal or regulatory obligations (e.g. fight against fraud, etc.);
  • When the legitimate interests of CV.CONSULTANTS may be such as to justify processing by it (e.g. IT security measures, improvement of services, commercial prospecting).

Why is personal data collected ?

Personal Data is collected for specified, explicit and legitimate purposes. Depending on the case, Personal Data may be used for the purposes of:

  • Access to the Website;
  • Browsing the Website;
  • Inquiries and other forms;
  • Improving products and services;
  • Event organization;
  • Commercial prospecting;
  • Application processing;
  • Experience personalization;
  • Subscription to newsletters;
  • Responding to surveys, promotions, and other communications;
  • The management of its customer, supplier and subcontractor files;
  • The management of its “human resources” file.

Recipients of personal data

Personal Data is processed by CV.CONSULTANTS. They will never be sold to third parties.

Personal Data may be transmitted to third party recipients for technical reasons.

These recipients may include:

  • subcontractors or third-party service providers acting for CV.CONSULTANTS in the context of specific processing in accordance with the purposes for which they were initially collected, in the context of activities such as the provision of services, product marketing and marketing, data management, recruitment and/or HR management providers,  : the Website hosting provider, the Website development and maintenance provider, authorized accountant;
  • bodies responsible for a control or inspection mission in accordance with the applicable regulations (e.g. supervisory authorities such as the CNIL).

CV.CONSULTANTS may also be required to communicate Personal Data to third parties when such communication is required by law, a regulatory provision or a judicial decision, or if such communication is necessary to ensure the protection and defense of our rights.

What are the rigths over personal data and how can i exercise them ?

Rights

Right to access, rectify and erase (or “right to be forgotten”) Personal Data

The right of access allows you to obtain from CV.CONSULTANTS the confirmation of whether or not the Personal Data is being processed, and the conditions of such processing, as well as to receive an electronic copy (for any additional copy, CV.CONSULTANTS is entitled to demand the payment of a reasonable fee based on the administrative costs incurred). The data subject also has the right to obtain from CV.CONSULTANTS, as soon as possible, the rectification of his or her Personal Data.

Finally, subject to the exceptions provided for by applicable law (e.g. retention necessary to comply with a legal obligation), the person has the right to request CV.CONSULTANTS to delete, as soon as possible, his or her Personal Data, when one of the following grounds applies:

  • Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • The data subject wishes to withdraw their consent on which the processing of their Personal Data was based and there is no other basis for such processing;
  • The person considers and can establish that his or her Personal Data has been unlawfully processed;
  • Personal Data must be erased pursuant to a legal obligation.

Right to restriction of the processing of Personal Data

The applicable regulations provide that this right may be invoked in certain cases, in particular the following:

  • When the accuracy of the Personal Data is disputed;
  • When it is established that the processing of Personal Data is unlawful and it is requested instead of erasure that the processing be restricted;
  • When CV.CONSULTANTS no longer needs the Personal Data for the purposes of the processing but these are still necessary for the data subject for the establishment, exercise or defense of legal claims;
  • When the data subject objects to processing that would be based on the legitimate interest of the data controller.

Right to the portability of Personal Data

When CV.CONSULTANTS processes Personal Data on the basis of consent, this may be withdrawn at any time by using the means made available to the data subject for this purpose. On the other hand, and in accordance with the applicable law, the withdrawal of consent is valid only for the future and cannot therefore call into question the lawfulness of the processing carried out before this withdrawal.

Right to lodge a complaint with a supervisory authority

If, despite CV.CONSULTANTS’ efforts to preserve the confidentiality of Personal Data, the data subject considers that the latter is not insured, a complaint may be lodged with a supervisory authority. A list of the supervisory authorities is available on the European Commission’s website.

Right to decide the fate of Personal Data in the event of death

Finally, the data subject has the right to organize the fate of his or her Personal Data post-mortem by the adoption of general or specific directives. CV.CONSULTANTS undertakes to comply with its guidelines. In the absence of directives, CV.CONSULTANTS recognizes that the heirs have the possibility of exercising certain rights, in particular the right of access, if it is necessary for the settlement of the deceased’s estate; and the right to object to proceed with the closure of the deceased’s accounts and object to the processing of their Personal Data.

Procedures for exercising rights

For any question relating to this Privacy Policy and/or to exercise their rights as described above, the data subject may contact the Data Protection Officer of CV.CONSULTANTS by electronic or postal means, by sending a letter accompanied by a copy of any identity documents to:

s@cvconsultants.fr

Or

Monsieur Stéphane BERTRAND
Data Protection Officer
CV CONSULTANTS
3, Rue des Lilas, 75019 – Paris

If the request is submitted in electronic form, the information will also be provided electronically where possible, unless the data subject expressly requests otherwise.

If CV.CONSULTANTS does not respond to the data subject’s request, it will inform you of the reasons for its inaction and the data subject has the possibility of lodging a complaint with a supervisory authority and/or filing a legal remedy. The person concerned may lodge a complaint via the online complaint service on the CNIL website, or by post by writing to: CNIL – 3 place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

Retention period of personal data

CV.CONSULTANTS retains Personal Data for the time necessary to achieve the purposes pursued, subject to the legal possibilities of archiving, obligations to retain certain Personal Data, and/or anonymization.

For example :

  • the Personal Data collected via forms (contact, complaint, demonstration) are kept until they have been fully processed;
  • the Personal Data collected in the context of a registration (communication, publication, event) is kept until unsubscribing;
  • the Personal Data collected in the context of an application is kept for two (2) years from the last contact with CV.CONSULTANTS, unless local legislation recommends different retention periods and unless a request is made for the destruction of your file;
  • Connection data (IP address, cookies) are kept for up to thirteen (13) months.

Security and protection of personal data

CV.CONSULTANTS takes care to protect and secure Personal Data in order to ensure its security and prevent it from being distorted, damaged, destroyed or disclosed to unauthorized third parties.

All persons with access to Personal Data are bound by an obligation of confidentiality.

In particular, CV.CONSULTANTS’ service providers and subcontractors are bound by security and confidentiality commitments prohibiting them from using Personal Data for any purpose other than those for which CV.CONSULTANTS shares information with them. In particular, they are not permitted to use the personal information of members and/or delegates for commercial purposes or to disclose it to other third parties.

No transfer of Personal Data outside the European Union is carried out by CV.CONSULTANTS.

When the disclosure of Personal Data to third parties is necessary and/or authorized, CV.CONSULTANTS ensures that these third parties guarantee the Personal Data concerned the same level of protection as that offered to them by CV.CONSULTANTS, and requires contractual guarantees so that, in particular, the Personal Data is exclusively processed for the purposes that you have previously accepted, with the required privacy and security.

CV.CONSULTANTS implements technical and organizational measures to ensure that Personal Data is kept securely for the time necessary to carry out the purposes pursued in accordance with applicable law.

In accordance with the applicable French and European regulations, in the event of a proven breach of Personal Data likely to pose a risk to the rights and freedoms of the persons concerned, CV.CONSULTANTS undertakes to communicate this breach to the competent supervisory authority and, when required by said regulations, to the persons concerned (individually or generally as the case may be).

Transfers of personal data

In principle, CV.CONSULTANTS does not transfer any of your Personal Data outside the European Economic Area (EEA).

However, as an exception, if a transfer of your Personal Data is necessary outside the EEA to a State for which there is no adequacy decision from the European Commission, the transfer will be carried out subject to appropriate guarantees, in particular contractual safeguards, in accordance with the applicable regulations on the protection of Personal Data.

In particular, CV.CONSULTANTS will sign the European Commission’s standard contractual clauses for the transfer of Personal Data to third countries that do not benefit from an adequacy decision.

Changes tot this privacy policy

CV.CONSULTANTS may be required to make changes to this policy. These changes take effect at the time of their publication on the Site. You will be subject to the most current version of the Privacy Policy. Therefore, it is recommended that you read this document regularly to ensure that you have the most up-to-date information possible and that you are aware of any changes that may affect you. In the event of a substantial change to this policy, CV.CONSULTANTS will inform you of this update, either by posting a notice on the Website if this concerns its website, or by an email notification.

Applicable law and jurisdiction

The Privacy Policy is governed by French law.

Any dispute over the Privacy Policy will be brought before the competent courts of Paris, unless otherwise provided by law.

Scroll to Top