Preamble:

The company MARS AND CO (hereinafter, the “Company”), a limited liability company, which registered office is located 100 avenue Raymond Poincaré 75016 Paris – France, registration number RCS Paris 316 486 588.

In the framework of using  the website accessible at https://www.marsandco.com, (hereinafter the “Site”) the user, (hereinafter the User), after his consent has been gathered for this purpose, and in compliance with the stipulations hereinbelow, will have his personal data collected by the Company.

Personal Data Subject to Being Collected

The personal data collected is the following: (i) the information the User provides when filling out forms to the Company by applying for a job (ii) regarding specifically his name, gender, date and place of birth, professional situation, experiences and qualifications, as well as the contact information of the User such his postal address, email address, telephone numbers, electronic signature, (iii)  as well as data gathered through cookies and similar technology used on the Site (specifically, IP addresses) and in emails allowing the User to be recognised, to remember his preferences and, as the case may be, provide him content that may be of interest.

This personal data may only be communicated to the Company by the Users to whom it relates and Users are prohibited from communicating the personal data of another person and/or personal data that does not relate to them.

If you provide us with personal data of another person (for instance, a potential employee/referral), you are responsible for ensuring that such person is made aware of the information contained in this privacy statement and that the person has given you his/her consent for sharing the information with the Company.

Legal Information for the User

a) Identity and contact information of the data controller

The identity and contact information of the entity responsible for processing personal data, the data controller, is the following:  MARS AND CO, which registered office is located 100 avenue Raymond Poincaré 75016 Paris- France. RCS Paris 316 486 588

b) Contact information of the Data Protection Officer

The contact information of the Data Protection Officer is the following: Mr. JM NEGRE – 100 avenue Raymond Poincaré 75116 Paris FR, requests from Users regarding personal data may be addressed to: rgpd@marsandco.com.

c) Purposes of data processing

The purposes of processing personal data are the following: (i) identifying the persons using the Site (ii) hiring and/or sending information to Users.

d) Legal basis for data processing

The legal basis for data processing is the following: (i) data processing is based on the consent of the User wishing using services via the Site (ii), necessary for performance of relationship that the User wishes to enter into with the Company or to provide information requested by the User (iii) data processing is also necessary to protect the legitimate interests of the Company by allowing them to maintain proof of the exchanges of information  with the User (iv) data processing is carried out pursuant to the provisions of EU Regulation 2016/679 of 27 April 2016 (GDPR) and other legal provisions in force (hereinafter, the “Regulations in Force”).

e) Recipients of personal data

The recipients of personal data are: personnel of the Company in charge of the provision and/or administration of services requested via the Site and especially those in charge of hiring, and/or, if the case may be, the subcontracting service providers of the Company participating in these responsibilities and being involved for this purpose in data processing (only if this is necessary). It is specified that in such an event, this will be carried out in compliance with the Regulations in Force applicable to subcontractors.

f) Transfer of personal data

As an international organization with seven offices, personal data collected by the Company may be transferred or be accessible internationally between these offices. Any such transfers throughout the Company’s business take place in accordance with the Regulations in force. We all use the same internal rules. It also means that your rights remain the same no matter where your data are processed by the Company.

g) Time frame for keeping personal data 

The time frame for keeping personal data is the following: as personal data is necessary for carrying out or managing the services via the Site, the User’s personal data is kept (i) as long as the User has not manifested his intent to no longer be a User of the Site or no longer wants his personal data kept, through a request made by him personally in compliance with the following stipulations) (ii) in any case, within a time frame of 3 (three) years following the last use by the User of the Site, the term after which the User’s personal data will no longer be kept.

h) Rights of the User that may be exercised through the data controller (as identified above)

This document also has the purpose of informing the User of his right to request from the entity responsible for data processing (as identified above):

– the right to access their personal data as well as any information available regarding their source;

– the right to correct or delete this data;

– the right to restrict the processing of personal data;

– the User’s right to object to the processing of their personal data;

– the User’s right to object at any time to the processing of their personal data for the purpose of canvassing, including profiling;

– the right of portability of their personal data in certain specific circumstances, particularly when processing is done using automated processes

– the right of the User, at any time, to withdraw their consent to the processing of their personal data (without infringing the legality of data processing based on the consent offered before it was withdrawn).

The User exercises his rights as identified in section (h) herein by a request made by himself personally and sent to the following address: Mars & Co 100 avenue Raymond Poincaré 75116 Paris.

Where relevant, it is stipulated that, the User, by exercising the rights mentioned above may make it impossible for the User to use the services of the Site.

i) Filing a claim with the Supervisory Authority

The User is informed of their right to file a claim with the supervisory authority, which is the Commission Nationale de L’Informatique et des Libertés (CNIL) [the French National Commission on Information Technology and Freedoms]: 3 Place de Fontenoy – TSA 80715 – 75334 Paris 07, France.

j) Information on the contractual nature of providing personal data

Regarding providing the User with information on the question of whether the requirement to provide personal information is of a regulatory or contractual nature or if it indicates entering into a contract and if the person in question is obliged to provide personal data, as well as on the potential consequences of not providing this data, the following information is brought to the User’s knowledge: (i) the request to provide personal data is contractual in nature in the framework of the relationship that the User wishes to enter into with the Company (ii) providing this data, in that it is necessary to carry out the services accessed via the Site, indicates entering into this contractual relationship (iii) in this regard, the User must provide their personal data if they wish to access services via the Site.

k) Automated decision-making

It is indicated that, in terms of the personal data collected, there is no automated decision-making process as described under the terms of the Regulations in Force.

l) Potential future processing of personal data

In the event of future processing of personal data for purposes other than those for which the personal data has been collected and such as identified hereinabove, the data controller (identified hereinabove) will provide information beforehand to the person in question regarding this other purpose and any other legally required pertinent information.

How do we protect personal data?

The company takes various measures to reasonably protect the personal data against their loss, their misuse or illicit use, their disclosure, their alteration or their destruction.

Personal data collected via the Site or transmitted by e-mail are protected by a standard encryption process. However, the Company cannot guarantee the security of information on the Internet or transmitted over the Internet.

The Site may contain hypertext links to the partner sites. The User is informed that such sites have their own privacy policies and Company cannot be held responsible for these policies. The User is invited to check these policies before submitting his personal data to these sites.

Age of the person that may provide their personal data

Personal data may only be gathered from individuals who are at least 15 years of age, and as personal data, as indicated above, is necessary for carrying out and managing services, individuals younger than 15 years old may only give their consent to gathering their personal data, and consequently, have access to the services offered via the Site, on the condition that they are authorised by a holder of parental responsibility related to them, so that, in communicating to the Company their personal data, Users represent and warrant to the Company that they are (i) either at least 15 years old (ii) or they are authorised by the holder of parental responsibility. This stipulation is without prejudice to the commitment that the User has made vis-à-vis the Company according to which it represents and warrants to the Company that it has the legal and statutory capacity to use the services offered via the Site.

Modifications to this document

This document may be subject to updating. In this regard, the User is asked to refer to the latest version of this document, accessible on the Site, specifically in the legal notices.