Recruitment Privacy Policy

1. Who we are and why this policy exists

This policy applies to the personal data you provide when you apply to a role listed on the Careers section of this website (zinveo.com), operated by Zinveo("Zinveo," "we," "us," or "our"), a company registered in France under SIRET 947 483 566, with its registered office at 13 Avenue Léon Blum, Décines-Charpieu, 69150, France. Zinveo acts as the data controller for the personal data described in this policy.

This Recruitment Privacy Policy sits alongside, and is separate from, our general website Privacy Policy. It covers the specific information we collect during our hiring process, from the moment you submit an application through to the outcome of that application. It applies whether you are applying for an internship, a freelance or collaboration engagement, or any other role we publish, and regardless of which of our locations, Lyon, Hangzhou, Kuala Lumpur, Ningbo, Shanghai, or Singapore, the role is based in.

For any question about this policy or about how we handle your application data, you can reach us at contact@zinveo.com or by phone at +33 7 69 10 46 42.

2. Personal data we collect

When you submit an application through a job posting on this website, we collect the information you provide directly in the application form, which currently includes:

• Identity and contact details: first name, last name, email address, and phone number.
• Address: street address, city, and country.
• Education: schools attended, degrees, and graduation years, as you choose to describe them.
• Work experience: previous roles, internships, and any other professional background you choose to share.
• Motivation: any optional information you add about why you are interested in the role.
• CV / resume file: the document you upload, which may itself contain further personal data such as your photograph, dates of birth, nationality, employment history, references, or other details you choose to include in it.

If you contact us directly by email regarding a role, for example to ask a question before applying or to follow up on an application, we also collect the personal data contained in that correspondence.

We do not currently ask for a cover letter as a separate document, but if you choose to include one, or additional attachments, in your CV or in correspondence with us, we will process that information under this same policy.

3. Sensitive data

We ask that you do not include any special category of personal data in your application or CV, such as details of your health, religious or philosophical beliefs, political opinions, trade union membership, sexual orientation, or racial or ethnic origin, unless you are specifically asked to and it is necessary, for example, information relevant to a reasonable accommodation you may need during the recruitment process. If you choose to share this kind of information with us, we will only use it for the specific purpose you shared it for, and we will apply heightened protections to it.

4. How we collect your data

We collect the personal data described above directly from you, primarily through the application form on this website, and through any follow-up email or call exchanged as part of the recruitment process. We do not currently source candidate data from third-party job boards, recruitment agencies, or social networks, and we do not purchase candidate data from any external provider. If this changes, we will update this policy accordingly.

5. How we use your data

We use the personal data you provide to:

• Assess your application against the requirements of the role you applied for.
• Contact you about your application, including to schedule and conduct interviews.
• Verify the information provided, where appropriate and proportionate.
• Consider you for other open roles that may reasonably match your profile, where you have not objected to this.
• Prepare and manage an offer, and the onboarding process, if your application is successful.
• Comply with our legal and regulatory obligations relating to hiring, including in the jurisdiction where the role is based.
• Maintain records that allow us to demonstrate a fair and consistent recruitment process.

We do not use your application data for any advertising or marketing purpose, and we do not sell or rent it to any third party.

6. Legal basis for processing

Depending on the specific purpose, we rely on the following legal bases:

• Pre-contractual steps, to take the actions you request when you submit an application, with a view to potentially entering into an employment, internship, or collaboration agreement with you.
• Consent, for optional elements such as being considered for future roles beyond the one you applied for, which you can withdraw at any time.
• Legitimate interest, in running an efficient and fair recruitment process, and in maintaining reasonable records of that process.
• Legal obligation, where processing is required to comply with applicable labor, tax, or immigration law in the jurisdiction of the role.

7. Who within Zinveo has access to your data

Zinveo is a small, lean team. Access to your application is limited to the individuals directly involved in hiring for the role you applied to, and in the function it sits within, which may include team members based in more than one of our locations given the cross-border nature of our work. We do not grant access to your application data to any team member who does not have a legitimate need to review it as part of the hiring decision.

8. Who we share data with outside Zinveo

We do not sell your personal data, and we do not share it with third parties for their own recruitment or marketing purposes. We may share your data with a limited number of service providers who support the technical operation of this website, such as hosting and email-delivery providers, strictly so that your application reaches us and so we can respond to you. These providers only process your data on our instructions, under agreements that include confidentiality and security obligations.

We may also disclose your data where required by law, in response to a valid legal process, or where necessary to establish, exercise, or defend legal claims. If your application is successful, we may need to share limited data with third parties strictly necessary to formalize the engagement, for example, administrative or payroll providers relevant to your specific contract type and location.

9. International transfers

Because our team operates across Lyon, Hangzhou, Kuala Lumpur, Ningbo, Shanghai, and Singapore, your application may be reviewed by team members located outside your own country, and outside the European Economic Area, depending on which role and function you applied to. Where personal data is transferred outside the EEA in this way, we take steps to ensure an adequate level of protection, such as relying on the European Commission's Standard Contractual Clauses, an applicable adequacy decision, or another lawful transfer mechanism recognized under GDPR, and we limit access to what is reasonably necessary for the hiring decision at hand.

10. How long we keep your data

If your application is unsuccessful, we retain your application data, including your CV, for a period of up to 12 months from the date of the decision, so that we can consider you for other suitable roles that may open during that period and, where required, so that we can demonstrate a fair recruitment process. You can ask us to delete your data sooner at any time, and we will do so unless we have a legal obligation or overriding legitimate interest to retain it for a further limited period.

If your application is successful, the data collected during recruitment becomes part of your engagement record with Zinveo, and is retained in accordance with the applicable employment, tax, or contractual record-keeping requirements of the jurisdiction your role is based in, and for the duration of that engagement plus any additional period required by law.

11. Data security

We take reasonable technical and organizational measures to protect your application data against unauthorized access, loss, or misuse, including encryption of data in transit, restricting internal access to those directly involved in the relevant hiring process, and using reputable third-party infrastructure providers for the underlying hosting of this website. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Automated decision-making

We do not make hiring decisions using automated processing or algorithmic screening alone. Every application submitted through this website is reviewed by a member of our team. We do not use your CV or application data to train any artificial intelligence or machine learning model.

13. Minimum age to apply

Our roles are directed at students, graduates, and professionals, and applicants must be at least 18 years old, or the applicable legal working age in their jurisdiction if higher, at the time of application. We do not knowingly collect application data from anyone under this age.

14. Your rights

Depending on where you are located, you may have the right to:

• Access the personal data we hold about your application.
• Request correction of inaccurate or incomplete data.
• Request deletion of your application data, subject to legal exceptions such as the retention periods described above.
• Object to, or request that we restrict, certain processing, including being considered for future roles.
• Request a portable copy of the data you provided, where technically feasible.
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at contact@zinveo.com. We may ask you to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law. Withdrawing consent or requesting deletion of your application data before a hiring decision is made may mean we are no longer able to consider your application.

15. Supervisory authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL). If you are located outside the EEA, for example in China, Malaysia, or Singapore, you may have the right to raise a concern with the equivalent data protection authority in your jurisdiction. We would, however, appreciate the opportunity to address your concern directly first, using the contact details above.

16. Cookies

The Careers section of this website, including the application form, uses only the strictly necessary cookies described in our Cookies Policy. We do not use separate analytics or tracking cookies for recruitment pages beyond what is described there.

17. Changes to this policy

We may update this Recruitment Privacy Policy from time to time to reflect changes in our hiring practices or for legal or regulatory reasons. The "Last updated" date at the top of this page indicates when it was last revised. Any application you submit will be handled under the version of this policy in effect at the time you apply.

18. Contact

For any question about this Recruitment Privacy Policy, or to exercise your rights regarding an application you have submitted, please contact:

Zinveo
13 Avenue Léon Blum, Décines-Charpieu, 69150, France
contact@zinveo.com
+33 7 69 10 46 42