This policy is appropriate for all applicants regardless of the contract type.

1. Controller

Controller for processing of your personal data as described in this Data Protection Statement is Alter Solutions Group.

2. How is your personal data collected?

We process your personal data when you apply for a job or want to be part of Alter Solutions Community. If you create a profile on our dedicated platform, we will collect the following data:

• Personal information (first name, last name etc.),
• Contact information (address, telephone number and email address etc.),
• Employment and education history (information about previous and current employer(s), school(s), education level achieved etc.).

Data collected comes from your application during the recruitment process or when you express your consent to be part of our community for future position. Also, we may process your data from public professional platforms such as LinkedIn to contact you for the job position.

Automated decision-making

A fully automated decision is a decision made about you, by means of algorithms applied to your personal data, without any human being intervening in the process.

No personal data processing carried out by Alter Solutions Group involves fully automated decision-making. Indeed, although in the context of recruitment algorithms, such as Smart AI and/or LinkedIn AI, may be applied to your data to facilitate decision-making, Alter Solutions Group systematically reviews the decision made to ensure that it is fair, equitable and objective.

However, if such a decision-making process should be implemented, Alter Solutions Group undertakes to inform you, at the time of collection of your data and at any time upon your request, of the existence of such a decision, its underlying logic and the anticipated consequences. In this case, you will also have the right to human intervention to express your point of view and contest the decision.

3. Personal data processing and legal basis

3.1 Information obligation for the job applicant

We collect your personal data for the following purposes:

• Organisation and management of recruitment operations: intake, review, and processing of applications.
• Organisation of job interviews: in person and/or remotely (by phone or video).
• Collection of information relating to the identity and contact information of references; provided by the candidate; to the extent necessary to assess the candidate's skills accordingly.

Your personal data will be processed on the basis of your consent (Art. 6(1)(a) of the General Data Protection Regulation 2016/679 (GDPR)) in connection with its entry into the database of job/co-operation candidates, which the Alter Solutions Group will use in connection with future recruitment procedures. The provision of personal data is voluntary.

Your personal data will be processed until you withdraw your consent, for a maximum of 2 years after collection.

3.2 Information obligation for candidates whose data will be collected in the database for future recruitment purposes

We collect your personal data for the following purposes:

• Creation of a profile for Alter Solutions Community to be contacted in the future for job positions if you expressed the wish to stay in contact with us.
• Sharing information about Alter Solutions Group such as job opportunities or corporate identity and activities.

Your personal data will be processed on the basis of your consent (Art. 6(1)(a) of the General Data Protection Regulation 2016/679 (GDPR)) in connection with its entry into the database of job/co-operation candidates, which the Alter Solutions Group will use in connection with future recruitment procedures. The provision of personal data is voluntary.

Your personal data will be processed until you withdraw your consent, for a maximum of 2 years after collection.

3.3 Disclosure under the contact form

We collect your personal data for the following purposes:

• Identifying data (first name, last name ect.),
• Contact details (e-mail addresses, company’s name ect.).

Your personal data will be processed for the purpose of correspondence, insofar as this is necessary to fulfil the purposes arising therefrom - the legal basis for the processing is the legitimate interest of Alter Solutions Group (Article 6(1)(f) of the General Data Protection Regulation 2016/679 (GDPR)), which consists in conducting correspondence addressed and responding to enquiries addressed. The provision of personal data is voluntary.

Your personal data will be processed for a period which enables Alter Solutions Group to pursue its interest or until you raise an effective objection to the processing of your data, but for no longer than 1 year from the moment of sending your request.

4. Transfer of your personal data to third parties

Your personal data may be transferred to our entities providing services to Alter Solutions Group in connection with the recruitment processes, such as recruitment agencies, as well as providers of IT systems and services.

Your data may be transferred outside the European Economic Area due to the location of the entities whose services we use for our recruitment processes. The controller ensures that the providers guarantee a high level of data protection in particular by implementing contractual safeguards such as standard contractual clauses for data transfer approved by the European Commission.

5. Privacy rights

Alter Solutions Group shall ensure that data subjects have the ability to exercise their rights in connection with their personal data.

Right to information

The right to have clear, precise, and complete information on the use of Personal Data by Alter Solutions Group.

Right of access

This right is intended to ensure that the Data Subject has access to all data and details of the processing that concerns them in order to determine the information held by Alter Solutions Group or to verify the accuracy of the same.

Right to rectification

This right allows a Data Subject to request the correction of any inaccurate, obsolete and/or incomplete personal data.

Right to erasure / right to be forgotten

This right allows a Data Subject to request the erasure or deletion of personal data held by Alter Solutions Group, unless Alter Solutions Group has a legitimate interest in keeping it.

Right to restriction of processing

This right allows a Data Subject, under certain conditions, to request that Alter Solutions Group restrict the processing of personal data processed by the company.

Right to data portability

This right allows a Data Subject to retrieve personal data in order to store or transmit said data from one information system to another.

Right to object

This right allows a Data Subject to object to the processing of any personal data for reasons related to the particular situation of the Data Subject (under conditions).

Right to withdraw consent

The right at any time to withdraw consent where processing is based on consent.

Right not to be subject to an automated processing decision

The Data Subject shall have the right not to be subject to a decision which may include a measure involving the assessment of certain personal aspects relating to them which is taken solely on the basis of automated processing and which produces legal effects concerning them or which similarly significantly affects them, including profiling.

Right to define post-mortem directives

The right for the applicant to define directives concerning the fate of Personal Data after his/her death.

Any consent given may be withdrawn at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal. For evidentiary purposes, Alter Solutions Group requests the withdrawal of consents by written or electronic means.

The above rights can be exercised at any time:

• Sending an e-mail to the following address: privacy@alter-solutions.com
• Or by writing to: ALTER SOLUTIONS - Data Protection Officer (DPO) – 6 Avenue du Général de Gaulle – 78 000 Versailles - FRANCE
• You also have the right to file a complaint with the competent Data Protection Authority (DPA) of any member state of the European Union. For a complete list of these authorities and their direct contacts, please access this website: https://edpb.europa.eu/about-edpb/about-edpb/members_en