Candidate Data Privacy Policy

Respecting Your Privacy and Data

The company TSGMB, Thermes de Saint-Gervais Mont Blanc, aims to be a socially responsible organisation. We attach great importance to honesty and transparency, and we are committed to establishing a strong and lasting relationship with our candidates and future employees based on trust and mutual interest. Part of this commitment involves protecting and respecting your privacy and personal data.

It is therefore essential for us to inform you about our commitments and our personal data protection policy concerning you (the “Candidate Policy”).

Our Commitments:

• We respect your personal data and your choices.
• We integrate personal data protection and IT security into all our projects.
• We do not send you advertising messages without your consent.
• We do not sell or share your personal data.
• We are actively committed to protecting the confidentiality and security of your data and only work with carefully selected, professional service providers.
• We pledge to be open and transparent about how we use your personal data.
• We do not use your data without your knowledge.
• We respect your rights and respond to your requests to the extent permitted by our legal and operational responsibilities.

The following policy sets out the different types of personal data we may collect or hold about you, how we may use it, the purposes for which we collect it, the parties with whom we may share it, how we protect and secure it, and the rights you have regarding this data.

Whenever you provide us with personal data, or when we collect or generate personal data about you using our tools, we undertake to use it in accordance with this Policy.

For any questions, please contact us via

our contact form

Who is the Data Controller?

The company TSGMB is responsible for the personal data you provide and for the processing of this data in the context of recruitment or career communications, when TSGMB posts a job offer or initiates a recruitment process.

The terms “TSGMB”, “we” or “our” used herein therefore refer to:

TSGMB, acting as the recruiter for the relevant job offers,
355 Allée du Docteur Lepinay,
74170 Saint-Gervais-Les-Bains,
Represented by Ms Maud Durand.

Who is Concerned?

This policy applies to candidates who submit their application for employment, internships, or apprenticeships with TSGMB.

A “personal data” means any information that can directly identify you (for example, your name) or indirectly identify you (for example, through a unique identifier or cookies).

Cookies are small files stored on your computer during your previous browsing on a website (including, for example, the pages you visited during a previous session, the date and time of the visit, etc.), and which can be read when you access a website.

These cookies help us understand your browsing and how you use our websites and applications.

We place you, candidates or prospective employees, at the heart of our concerns.
Throughout your candidate journey, we use various tools aimed at facilitating and personalising your application, in compliance with all applicable laws and regulations. At each stage, you may provide us with personal data, or we may collect it.

How do we collect, generate, or receive your data?

We collect your personal data either directly from you or via applications or software that you use in your job search.

When we collect your data from you, mandatory fields are indicated with an asterisk. Some of the data we request are essential for:

• Providing you with the service you have opted for.
• Assessing your application for a position.
• Using certain tools as part of the recruitment process.
• Complying with legal obligations.

CONTEXTS IN WHICH YOUR PERSONAL DATA MAY BE COLLECTED

Browsing Online
Collected information: Via cookies or similar technologies during your navigation on our websites (or by third parties acting on our behalf).

Types of personal data we may hold about you:

• Browsing information: pages visited, videos viewed, content clicked, jobs searched, duration of browsing, jobs saved.

• Device information: IP address, your location (depending on your browser settings).

Purpose of processing:

• Compile statistics: prevent visitors from being recorded twice; study user reactions to advertising campaigns.

• Ensure proper functioning of our websites: tailor sites to your profile, language, personal settings, etc.

• Improve our websites: e.g., testing new ideas.

• Ensure site security: protect you from fraud or misuse, including incident detection.

• Provide chosen services: offer job recommendations based on your browsing history; provide content tailored to your profile and interests; enable sharing of content on social media, if applicable.

Legal basis for processing: Legitimate interest, Consent
Data retention period: 12 months

Submitting a Job Application on Our Website
Types of personal data we may hold about you:

• Name, email, address, phone number

• Languages, photo, age

• Work experience, CV

• Education and academic history

• Professional preferences

• Social media profile, if shared

• Cover letter

Purpose of processing:

• Evaluate skills for recruitment purposes

• Manage your application according to your request

• Compile statistics and improve our tools and service offering

Legal basis for processing: Consent, Legitimate interest
Data retention period: Immediate deletion at the end of the process, or up to 2 years if stored in the CV database

Tracking the Recruitment Process, Interviews, and Assessments
Types of personal data we may hold about you:

• Identification data (name, address, phone, email, photo, etc.)

• Professional data (CV, career history and experience, diplomas, volunteer activities, etc.)

• Cover letter

• Optional video

• References

Purpose of processing:

• Organise the recruitment process and interviews

• Evaluate skills for recruitment purposes

• Reimburse expenses related to recruitment

Legal basis for processing: Consent
Data retention period: Immediate deletion at the end of the process, or up to 2 years if stored in the CV database

Internal sharing within THERMES DE SAINT-GERVAIS (limited scope)
Your personal data may be accessed by:

• Persons who need to know it as part of their duties within THERMES DE SAINT-GERVAIS. Internal access rights have been defined for this purpose. Your personal data is therefore shared with the Human Resources department and the department responsible for the relevant job offer.

Commercial purposes

• We may share your data for marketing purposes only with your consent.

• We do not disclose your data to third parties for marketing purposes.

Processing by trusted service providers

• We may share your data with certain service providers who require access to some of your personal data to carry out their assigned tasks, including providers located outside your country. In such cases, THERMES DE SAINT-GERVAIS imposes strict obligations on these contractors regarding the processing, confidentiality, and security of the data they access. We only provide them with the data necessary to perform the service and require that they do not use your data for other purposes.

• Your data may, in particular, be shared with:

  • Third parties assisting us in providing and making digital tools and services available (e.g., a platform for centralising job offers within THERMES DE SAINT-GERVAIS for France).

  • Third parties providing candidate interview solutions and tools using new technologies (e.g., online interviews, video presentations, chatbots).

  • Third parties assisting in IT services, such as platform providers, hosting services, maintenance, and technical support for our databases and software/applications that may contain your data (these services may require access to your data to perform the requested tasks).

  • Third parties helping to ensure the security and monitoring of our premises.

Disclosure to third parties in specific circumstances

• If we carry out or plan to carry out a sale or transfer of a business or assets (by any means, including a sale of the company operating that business or owning those assets), we may disclose your data to the buyer of the business or assets and to potential buyers during an audit, including their advisors.

• If TSGMB or any part of its assets is acquired by a third party, the personal data concerning candidates and linked to these assets will be among the transferred assets. In that case, your data will be processed by the acquirer as the new data controller, and its data protection policy will govern the processing of your data.

• If we are legally required to disclose or share your data, or to enforce or comply with our collaboration contract with you, or in any other circumstances you have accepted; or

• If we have your consent; or

• If the law allows us to do so.

Sale or transfer of data

• We do not sell or give your data to any third party.

Nous conservons vos Données uniquement le temps nécessaire pour atteindre la finalité pour laquelle nous détenons ces données, ou pour faire face à nos obligations légales. Voir tableau ci-dessus.

• A l’issue de ce délai, nous effaçons vos Données de nos systèmes et de nos fichiers ou procédons à leur anonymisation afin qu’elles ne permettent plus de vous identifier.
• En outre, nous sommes susceptibles de conserver certaines Données aux fins de remplir nos obligations légales ou réglementaires, à des fins de protection juridique ou à des fins statistiques ou historiques.

LOCATION OF YOUR DATA

Your data may be transferred to, accessed from, and stored in a country outside the European Economic Area (the “EEA”). They may also be processed by personnel operating outside the EEA who work for us or for one of our service providers.

TSGMB transfers data outside the EEA only in a secure manner and in compliance with applicable legislation. Some countries may not have any laws governing the use and transfer of personal data; in such cases, we undertake all necessary measures to ensure that the relevant third parties comply with the conditions set out in this Policy. These measures may include monitoring the standards applied by these third parties regarding data protection and security and/or the signing of appropriate contracts (e.g., the standard contractual clauses adopted by the European Commission).

SECURITY MEASURES IN PLACE

We take all appropriate and reasonable precautions, considering the nature of the data and the risks associated with its processing, to preserve the security of your data and, in particular, to prevent it from being altered, damaged, or accessed by unauthorised third parties.

Furthermore, we require third-party service providers who have access to your data on our behalf to apply the same measures, through contractual obligations.

However, since data transmission over the Internet is not completely secure, we cannot guarantee the security of your data transmitted via the Internet.

We disclaim all responsibility for any actions taken by third parties regarding the content you post on our social media channels.

The company THERMES DE SAINT-GERVAIS respects your right to privacy, and it is important that you have control over your Personal Data.

You have the following rights:

Right to be informed: You have the right to obtain clear, transparent, understandable, and easily accessible information about how we use your Personal Data and about your rights. This is why we provide you with the information in this Policy.

Right of access and to obtain a copy: You have the right to access the Personal Data we hold about you (subject to certain restrictions) and to obtain a copy of it.

Right to rectification: You have the right to request that your Personal Data be corrected if it is inaccurate or outdated, and/or completed if it is incomplete.

Right to object: You may unsubscribe or object to receiving our job offers or marketing messages at any time by clicking the “unsubscribe” link. You may also object to any decision based solely on automated individual decision-making. You may also contact us using the details below.

Right to erasure / right to be forgotten: In certain cases, you have the right to request the deletion of your Personal Data. This is not an absolute right, as we may be required to retain your Personal Data for legal or legitimate reasons, which is often the case in human resources matters.

Right to withdraw consent at any time for processing based on consent: You may withdraw your consent to the processing of your data if such processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. We invite you to consult the table in the section “What Personal Data do we collect from you and how do we use it?”

Right to lodge a complaint with a supervisory authority: You have the right to contact the data protection authority in your country to challenge the practices of THERMES DE SAINT-GERVAIS regarding the protection of Personal Data and privacy. We invite you to contact us using the details below before submitting any complaint to the relevant supervisory authority.

Right to data portability: You have the right to move, copy, or transfer your Personal Data from our database to another. This applies only to data you have provided, when processing is based on your consent and is carried out using automated means. We invite you to consult the table in the section “What Personal Data do we collect from you and how do we use it?”

Right to restrict processing: You have the right to request the restriction of processing of your Personal Data. This means that the processing of your data is limited, so that we can retain the data but neither use nor process it. This right applies in specific circumstances provided by the General Data Protection Regulation (GDPR), namely:

• The accuracy of the data is contested by the data subject (you) for a period allowing the controller to verify the accuracy of the data.

• The processing is unlawful, and the data subject (you) opposes erasure and requests restriction instead.

• The controller (THERMES DE SAINT-GERVAIS) no longer needs the data for processing purposes, but it is still required by the data subject for the establishment, exercise, or defence of legal claims.

• The data subject (you) has objected to processing based on legitimate interests pursued by the controller while a verification is carried out to determine whether the controller’s legitimate grounds override those of the data subject.

Right to organise the fate of your data after death: You may provide THERMES DE SAINT-GERVAIS with instructions regarding the use and fate of your Personal Data after your death.

For the exercise of any of the rights listed above, please contact us using the details below. We may request proof of identity and complete information regarding your request before processing it.

If you have any questions or comments regarding how we process and use your Personal Data, or if you wish to exercise any of the rights mentioned above, please contact us at the following address, including your name and the reference “contact data privacy”:

Les Thermes de Saint-Gervais Mont Blanc
355 Allée du Docteur Lepinay – 74170 Saint-Gervais-Les-Bains

our contact form