What personal data do we collect ? what special categories of personal data does C-RISK SAS process about you ? How do we use your personal data ? When do we share your personal data ? How do we keep your personal data secure ? For how long will your personal data be retained ? What are your rights in relation to your personal data ? Updates to the privacy notice
In this context, Personal Data means any information relating to an identified or identifiable natural person (a Data Subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
For the purposes of this notice, as a Data Subject and user of C-Risk’s website, you will be hereinafter referred to as ‘’You’’/“Your”.
C-RISK SA, “société anonyme par actions simplifiée” registered in the Nanterre Trade and Companies Register under the number 823 709 050, acts as a Data Controller in the processing of Your personal data (i.e. it determines the purposes and means of the processing of said data). It will hereafter be referred to as ‘’We’’/ “Our”.
What personal data do we collect?
We collect/process the following Personal data about You:
Identification data: such as name, surname, company, phone number, e-mail address.
Professional data, such as profession, professional email, company name.
We process the Personal Data above for the following purposes:
Manage your candidacy to a C-RISK job posting
provide an answer to any request for information you may have sent to C-RISK through online forms;
allow you to receive C-RISK newsletters if you sign up to do so;
allow you to ask questions to members of C-RISK’s management team during live broadcasts of major Group events.
What special categories of personal data does C-Risk SAS process about you?
In the context of your utilization of our website, we do not collect any special categories of Personal Data.
How do we use your personal data?
Your personal data are collected and used for the aforementioned purposes on the basis of Your consent.
Please note that You can withdraw Your consent at any time. However, if You decide to do so, You will no longer be able to receive newsletters or communicate with C-RISK via online forms. This withdrawal, however, does not affect the lawfulness of any processing carried out prior to Your withdrawal.
When do we share your personal data?
We communicate Your Personal Data only to identified and duly authorized recipients. These include:
Branches of C-Risk SAS and fcnpartners SAS
French authorities (administration, regulators, jurisdictions) for the execution of legal obligations;
External partners working with C-RISK to provide service engagements for which you may be a suitable candidate.
Please be advised that Your Personal Data can be transferred outside of the European Union.
In that case, We provide safeguards to ensure the security and the confidentiality of Your Personal Data, by framing the transfer through the Standard Contractual Clauses adopted by the European Commission .
How do we keep your personal data secure?
We use appropriate technical and organizational measures designed to protect the Personal Data collect about You. These measures are designed to provide a level of security appropriate to the risk of processing Your personal information in line with C-RISK standards.
For how long will your personal data be retained?
The collected Data needed will be retained according to the following table:
What are your rights in relation to your personal data?
In accordance with the French "Informatique et Libertés" law (the law on data protection and civil liberties) n° 78-17 of 6 January 1978 modified and the GDPR, You have the right to:
access Your Personal Data and obtain a copy thereof;
rectify Your Personal Data;
request erasure of Your Personal Data, except if the processing is based upon the respect of a legal obligation of the data controller;
ask the restriction of processing of Your Personal Data in certain circumstances; and
the right to request Your Personal Data portability, where applicable.
Please be aware that if you are a French Data Subject, as per national law, you have the right to decide how your data will be used after Your death.
Considering the legal basis for the Processing is your consent, please be reminded that You may withdraw said consent at any time. If You decide to do so, You will no longer be able to receive newsletters or communicate with C-RISK via online forms. This withdrawal, however, does not affect the lawfulness of any processing carried out prior to it.
You can exercise Your rights by contacting Our Data Privacy Officer at www.c-risk.com/gdpr. As part of Our response to Your request, You may be asked to provide further information to confirm Your identity and/or to facilitate locating the Personal Data associated to your request.
Finally, You have the right to raise any concerns about how Your personal data is being processed with a competent supervisory authority, namely the authority of the Member State of Your habitual residence or place of work or place where you think an alleged infringement to your rights occurred.
In France, the data protection authority is the Commission nationale de l'informatique et des libertés, or “CNIL”
- 3 place de Fontenoy - TSA 80715 – 75334 Paris Cedex 07
Updates to the privacy notice
Date of the last update : 03 September 2020
Right to erasure / portability
In accordance with the General Data Protection Regulations (GDPR), any physical person proving his identity may demand the deletion or the copy of his personal data.
If you want to exercise your right to forget or your right to portability, please fill the form below. We will proceed to your request as soon as possible.