Data Protection Policy
SII is committed to ensuring that the processing of personal data carried out on its website (sii-group.com/fr-FR and sii-group.com/en-FR) complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Informatique et Libertés”).
This Data Protection Policy aims to describe the measures implemented by SII to safeguard your personal data and to inform you of your rights and freedoms in this regard.
The terms used in this policy—such as “personal data,” “Data Protection Officer,” “processing,” “Controller,” “recipient,” “processor,” and “transfer”—have the meanings assigned to them in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”).
SII acts as the “Data Controller” under the GDPR for the processing operations carried out for the purposes of managing the website.
What is the purpose of the data collected by SII?
SII collects and processes only the personal data provided by visitors to the website, for the following purposes:
Website management (including security)
Handling of contact requests
Management of job applications
Website Management
Website management aims to administer, maintain, and secure the website. This processing is based on SII’s legitimate interest. The personal data retained are connection data, which are legally and strictly necessary to ensure website security.
What personal data are collected?
Your IP address and connection data.
Who receives the data?
Your data are transmitted to the IT services.
How long are the data retained?
Your data are kept for 1 year.
Handling of Contact Requests
The purpose of handling contact requests is to communicate with you, and in particular, to respond to messages you send to us. This processing is based on the consent of the individual. The personal data collected and stored are strictly necessary for the requested service.
What personal data are collected?
Last name
First name
Email address
Telephone number (optional)
Postal code (optional)
Who receives these data?
Your data are transmitted, depending on the type of request, to the communications teams, agency management, or the Data Protection Officer.
How long are the data retained?
When you contact us, your personal data are retained—depending on the nature of the request—as follows:
“Commercial” and “Innovation” requests: kept for up to 2 years after last contact, or until you exercise your right to object.
“GDPR Rights” requests: intermediate archiving, then deletion 5 years after the request (in case of litigation).
“Press” and “Other” requests: kept for up to 2 years after last contact, or until you exercise your right to object.
Management of Job Applications
The management of applications enables us to collect and process applications. This processing is based on SII’s legitimate interest. The personal data collected and retained are those strictly necessary to provide the requested service.
What personal data are collected?
Last name
First name
Email address
Telephone number
CV (optional) and/or LinkedIn URL (optional)
Who receives these data?
Your data are transmitted to recruitment teams.
How long are the data retained?
If the application does not result in an employment contract (permanent, fixed-term, internship, apprenticeship, VIE): retained for 2 years after your last contact with SII.
If the application results in an employment contract: retained for as long as necessary to meet contractual and regulatory obligations.
Transfer of Your Personal Data
Global Group
There is no transfer of personal data between SII subsidiaries in the context of recruitment, except when a candidate explicitly agrees to the transfer of their application to another country.
As part of website management—particularly maintenance and development—staff from SII branches abroad (SII Morocco) may access the application/job offer space, which may contain personal data. These accesses are limited to necessary maintenance or specific troubleshooting actions.
Such transfers outside the EU are secured with Standard Contractual Clauses (SCCs), in compliance with Article 46 of the GDPR.
Additionally, data collected in the application space are transferred through an API to our recruitment software and stored only temporarily in this database. Data subject rights (access, rectification, deletion, etc.) are handled and guaranteed by our entity located in France.
Governmental, Public, and/or Judicial Authorities
We may be legally required by laws, court decisions, or requests from public/governmental authorities inside or outside your country of residence to disclose your personal data.
We may also transfer your personal data if we determine that disclosure is necessary or appropriate for national security, public interest, or compliance with legal obligations.
Security
To protect your personal data, technical and organizational security measures are implemented in accordance with SII’s Information Security Policy (PSI).
Exercising Your Rights
For information or to exercise your rights regarding personal data processing carried out by SII, you may contact the Data Protection Officer (DPO) through the dedicated forms available in the “Contact” section, or by email at: [email protected].
If, after contacting us, you believe your rights have not been respected, you may file a complaint with the competent supervisory authority, the CNIL (Commission Nationale de l’Informatique et des Libertés) in France.
Policy Updates
This Data Protection Policy may be updated at any time based on changes in laws, regulations, or industry standards.