LEGAL NOTICE & TERMS OF USE

This policy informs you of the processing of personal data carried out by the companies SOTHYS INTERNATIONAL, SIMAH, SOTHYS PARIS and SOCIETE FRANCAISE DE COSMETIQUES as part of the operation of the website www.groupesothys.com (hereinafter the “Website”) in their capacity as data controllers within the meaning of EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the “GDPR”.

We attach great importance to the protection of the personal data of the users of the Website and, to this end, we have put in place the following policy:

I / What is personal data?

This refers to any information that is directly (e.g. surname, first name) or indirectly (e.g. username, code) associated with an identified or identifiable natural person.

II / What data do we collect?

We may collect personal data about you when you use our Website.

*This data differs depending on the purpose of your visit.

Job applications:

The personal data collected by SOTHYS INTERNATIONAL are: surname, first name, email address.

In addition, when you apply for a job, you are redirected to the Jobaffinity recruitment software created by Intuition Software (which acts as a subcontractor).

You can communicate your personal data to us in various ways via our Website or via the Jobaffinity recruitment software:

  • Either directly: request for information, unsolicited application (job, work-study, internship), application for an open position;
  • Or indirectly: cookies; collecting references from your professional environment.

 

Your data may also have been communicated to us by a candidate for the purposes of reference checks as part of his/her recruitment process.

We do not collect personal data from third parties, except in the case of reference checks as described above.

Contract Development Manufacturing Organization (CDMO) contact requests:

The personal data collected by SIMAH are: surname, first name, email address.

“Other” contact requests:

The personal data collected by SOTHYS INTERNATIONAL are: surname, first name, email address.

“Sothys Paris” information requests:

The personal data collected by SOTHYS PARIS are: surname, first name, email address.

“Bernard Cassière” information requests:

The personal data collected by SOCIETE FRANCAISE DE COSMETIQUES are: surname, first name, email address.

In all cases, we take care to collect only data that is strictly necessary.

Mandatory fields are marked with an asterisk.

III / How do we process your data? 

Receipt, analysis and processing of job applications:

The data collected when an application is examined is processed by the SOTHYS Group’s human resources department, attached to the company SOTHYS INTERNATIONAL, enabling it to manage the recruitment process for future employees of the SOTHYS Group.

The legal basis and purpose of this processing is:

  • the execution of pre-contractual measures implemented at the request of the candidate following his/her application in order to manage the recruitment process (management of applications: examination of the candidate’s suitability for the position offered and measurement of professional aptitude; use of recruitment agencies; carrying out of personality/professional aptitude tests by service providers; centralization of applications within the Jobaffinity recruitment software; reference checks);
  • the legitimate interest in retaining CVs for our CV database;
  • complying with our legal obligations in order to complete the compulsory formalities and populate the administrative file of the candidates selected.

(The information provided may also be added to our CV database or used to respond to other job postings.

In order to fulfil these purposes, only personal information that is strictly necessary to assess the applicant’s suitability for the job on offer or to measure his/her professional aptitude will be requested during the selection phase. To this end, we will ask for details of the qualifications that applicants have obtained, their professional experience, and their professional skills and aptitudes in relation to the position on offer. Failure to provide this data will make it impossible to participate in the recruitment process.

Processing of “CDMO” contact requests:

The data collected when examining your contact request is processed by the CDMO department of the SOTHYS Group, part of the SIMAH company.

The legal basis for this processing is your consent and the purpose is to respond to your request, either directly or via the relevant department(s) of the SOTHYS Group.

Processing of “Other” contact requests:

The data collected when examining your contact request is processed by the human resources department of the SOTHYS Group, part of the SOTHYS INTERNATIONAL company.

The legal basis for this processing is your consent and the purpose is to respond to your request, either directly or via the relevant department(s) of the SOTHYS Group.

Processing of “Sothys Paris” information requests:

The data collected when examining your request for information is processed by the SOTHYS PARIS sales department.

The legal basis for this processing is your consent and the purpose is to respond to your request.

Processing of “Bernard Cassière” information requests:

The data collected when examining your request for information is processed by the SOCIETE FRANCAISE DE COSMETIQUES sales department.

The legal basis for this processing is your consent and the purpose is to respond to your request.

IV / Who has access to your data?

Receipt, analysis and processing of job applications:

The candidate’s file is treated as confidential.

Only the managers or employees (depending on the nature of the application) of the departments concerned by the application and, where applicable, the subcontractors/consultants responsible for recruitment and/or carrying out personality and/or professional aptitude tests have access to the personal data contained therein.

If the position to be filled concerns a company in the SOTHYS Group other than SOTHYS INTERNATIONAL, then the latter and the company concerned act as joint data controllers.

“CDMO” contact requests:

Your request is treated as confidential.

Only the employees of the SOTHYS Group departments concerned by your request have access to the personal data contained therein.

“Other” contact requests:

Your request is treated as confidential.

Only the employees of the SOTHYS Group departments concerned by your request have access to the personal data contained therein.

“Sothys Paris” information requests:

Your request is treated as confidential.

Only the employees of the SOTHYS Group departments concerned by your request have access to the personal data contained therein.

“Bernard Cassière” information requests:

Your request is treated as confidential.

Only the employees of the SOTHYS Group departments concerned by your request have access to the personal data contained therein.

V / How long do we keep your data? 

Receipt, analysis and processing of job applications:

The data of the candidate and of the persons to be contacted for reference checks is kept for as long as is necessary to complete the recruitment process.

The data of unsuccessful candidates will be kept in an active database for two years at the end of the recruitment process so that candidates can obtain explanations on the reasons that led to this decision, and in an intermediate archiving database for a period of five years from the end of the recruitment process for evidentiary purposes. The same applies to the personal data sent to us for reference checks.

The data of unsuccessful candidates who have not objected will be kept for the purpose of adding to our CV database and, where appropriate, suggesting new job vacancies for a period of up to two years after the last contact with the candidate.

“CDMO” contact requests:

Your data will be kept for a period of two years after the last contact.

“Other” contact requests:

Your data will be kept for a period of two years after the last contact.

“Sothys Paris” information requests:

Your data will be kept for a period of three years after the last contact.

“Bernard Cassière” information requests:

Your data will be kept for a period of three years after the last contact.

VI / What are your rights and how can you exercise them? 

You have the right to access your personal data. You also have the right to rectify and delete this data, as well as the right to object to it being processed.

If you have any questions about the protection of your data or if you wish to exercise your rights, please send an email to the following address:


If there is any doubt as to your identity, you may be asked to provide a copy of your proof of identification.

If you have any problems, you can lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL).