Policies and complience
PRIVACY POLICY AND PERSONAL DATA PROTECTION Last updated: January 8, 2026 PREAMBLE JobUnity SASU (hereinafter “JobUnity” or “We”) places major importance on the protection of privacy and personal data of its users (Candidates and Companies). This Privacy Policy aims to inform you transparently about how we collect, use, and protect your data when using our website and mobile application, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). ARTICLE 1: DATA CONTROLLER The data controller is the company JobUnity SASU, whose registered office is located at 3 rue de la treille, 11600 Malves en Minervois. For any questions relating to your data, our Data Protection Officer (DPO) can be contacted at: [email protected]. ARTICLE 2: DATA COLLECTED We collect only the data strictly necessary for the proper functioning of the matching platform. 2.1 For Candidates ● Identity and Civil Status: Last name, first name, date of birth, nationality, copy of identity document (ID card/Passport/Residence permit). ● Professional Life: CV, skills, work experience, diplomas, supporting documents for absences (in case of dispute). ● Financial Data: Bank account details (IBAN) for salary payments (via our partner Stripe). ● Geolocation Data: Precise location (GPS) when using the application to offer nearby missions (only with your explicit consent). ● Behavioral Data: "Poker Score" (reliability, punctuality), reviews and ratings left by recruiters. 2.2 For Companies / Recruiters ● Representative Identity: Last name, first name, position. ● Legal Information: Company registration extract (K-BIS), SIRET number, registered office address. ● Financial Data: Bank details or payment card information for billing purposes (via Stripe). 2.3 Technical and Browsing Data ● IP address, connection logs, device type, operating system. ● Cookies and trackers (see Article 9). ARTICLE 3: PURPOSES OF PROCESSING We process your data for the following purposes: 1. Service Execution (Legal basis: Contract): ○ - Creation and management of your account. ○ - "Matching" algorithm to connect Candidates and Companies. ○ - Generation and electronic signature of contracts (fixed-term contracts, placement agreements) via DocuSign. ○ - Payment processing and billing management. 2. Security and Trust (Legal basis: Legitimate Interest): ○ - Identity and document verification (fraud prevention). ○ - Calculation of the reliability score ("Poker Score") to ensure service quality. 3. Service Improvement (Legal basis: Consent): ○ - Usage statistics via Firebase Analytics. ○ - Sending newsletters or promotional offers (opt-in). 4. Legal Obligations: ○ - Retention of accounting and legal documents (employment contracts). ○ - Cooperation with authorities in the event of a judicial request. ARTICLE 4: DATA RECIPIENTS Your data is strictly confidential. It is only shared with the following recipients: ● Internally: Authorized JobUnity staff (customer support, technical, administrative). ● Concerned Users: ○ - The Company receives the Candidate’s data (CV, Identity) once a validated match is established. ○ - The Candidate receives the Company’s contact details to reach the mission location. ● Our Technical Subcontractors (Trusted Third Parties): ○ - Stripe: Secure payment processing and electronic wallets. ○ - DocuSign: Certified electronic contract signing. ○ - Supabase / Vercel: Hosting of databases and website. ○ - Firebase (Google): Push notifications and audience analytics. JobUnity will never sell your personal data to third parties for commercial purposes. ARTICLE 5: DATA RETENTION PERIOD JobUnity applies a strict data retention policy: ● Active account: Data retained for the entire duration of the registration. ● After account deletion: ○ - Identification data is immediately deleted or anonymized. ○ - Evidence and supporting documents related to a dispute or suspension are retained for a maximum of 6 months (see Placement Agreement). ● Legal and accounting documents: Contracts, invoices, and transaction data are archived for 5 to 10 years in accordance with French legal obligations (Commercial Code). ARTICLE 6: DATA SECURITY We implement robust technical and organizational measures to protect your data: ● Encryption of communications (SSL/TLS). ● Secure password storage (hashing). ● Restricted access to databases. ● Banking data is never transmitted in plain text on our servers (handled exclusively by Stripe, PCI-DSS certified). ARTICLE 7: YOUR RIGHTS (GDPR) In accordance with applicable regulations, you have the following rights: ● Right of access and rectification: You can view and update your information from your profile. ● Right to erasure ("Right to be forgotten"): You may request the deletion of your account and personal data (subject to legal retention obligations). ● Right to data portability: You may retrieve your data in a structured format. ● Right to object: You may object to the processing of your data for marketing purposes. To exercise these rights, contact us at: [email protected]. We commit to responding within 30 days. ARTICLE 8: DATA TRANSFER OUTSIDE THE EU Some of our subcontractors (e.g., Stripe, Google, DocuSign) may transfer data to the United States. These transfers are governed by Standard Contractual Clauses (SCCs) of the European Commission or adequacy mechanisms, ensuring a level of protection equivalent to the GDPR. ARTICLE 9: COOKIES During your navigation, cookies may be placed in order to: ● Ensure proper website operation (session, authentication). ● Measure audience analytics (Google Analytics, anonymized). You can manage your cookie preferences via the dedicated banner during your first visit. ARTICLE 10: CONTACT For any request regarding this policy, or to report unlawful content or a data breach: Email: [email protected] Address: JobUnity SASU, Legal Department, 3 rue de la treille 11600, Malves en Minervois
