1.   Purpose of the privacy policy
This Privacy Policy aims to inform Gabriel Greenfield candidates about how their personal data is collected, used and protected.
 
 2.   Role of Gabriel Greenfield
As data controller, Gabriel Greenfield determines the purposes and means of processing your personal data collected. 
 
 3.   Collection of personal data 
Personal data can be collected:
 -   Directly via application mailings: for example when submitting your CV, cover letter or other documents required for an application.
-   Indirectly via recruitment platforms: if you apply through professional recruitment sites or social networks (LinkedIn, Indeed, etc.), some data may be collected to facilitate the recruitment process.
 
 4.   Purposes and duration of storage of personal data 
The table below summarizes all the processing operations for which Gabriel Greenfield is likely to use your personal data. 

​​​​​​​​​​​​​​​​​

5.   Recipients of the personal data collected   
The personal data collected may be communicated to the following categories of recipients, in compliance with applicable regulations:
-   Within Gabriel Greenfield (internal recipients)
 Your personal data is processed by the authorized staff members of Gabriel Greenfield. 
 -   Excluding Gabriel Greenfield (external recipients)
 Several categories of third parties listed below may have access to your Personal Data. Only the strictly necessary personal data is transmitted to them. 
 -   Recruitment providers: Recruitment agencies (Hosmia) and application management platforms used for collecting, sorting, and managing resumes. 
 -   IT service providers: Subcontractors in charge of hosting, maintaining computer systems, and managing candidate databases (Microsoft).
 We ensure that in terms of personal data, these subcontractors contractually commit to implement a level of protection equivalent to ours and in accordance with the Regulations. 
-   Special case of data sharing: 
 Gabriel Greenfield undertakes not to disclose your Personal Data to third parties unless:  
 1. You have given your prior consent to the sharing of your Personal Data with third parties,  
 2. The sharing of your Personal Data with this third party is necessary for the provision of the requested products or services, 
 3. A competent judicial or administrative authority requires that the Data be forwarded to it.

6.   Transfer outside the EU 
We strive to keep your Personal Data within the European Union, however some of the services we use involve potential transfers. Concerned about the security and confidentiality of your Data, we inform you that when your Data is transferred outside the EU, we ensure that it is sent to: 
 -   From a country recognised by the European Commission as providing an adequate level of protection; 
 -   Or to a country that does not offer adequate protection but whose transfer is permitted, in particular by being governed by the standard contractual clauses of the European Commission, which the CNIL has recognized as ensuring a sufficient level of privacy and data protection fundamental rights of persons.

​

7.   Your rights over your data 
a)   Right of access
You may request and obtain information about the personal data we hold about you.
b)   Right to rectification
You have the right to request the correction of your inaccurate or incomplete personal data.
c)   Right to erasure
Also called "right to be forgotten", it allows you to request the deletion of your personal data unless the data must be kept:
 -   To comply with a legal obligation, 
 -   To the establishment, exercise or defence of legal rights. 
d)   Right to restriction of processing
This right allows you to request that the use of your personal data be restricted in certain circumstances:
 -   You have requested the rectification of your data; the processing may then be limited to a certain period during which the necessary verifications can be carried out;
 -   The processing is unlawful and you object to the erasure of your data;
 -   The data controller no longer needs your data, but you need it to establish, exercise or defend a legal claim;
 -   You have objected to the processing and we are checking whether the legitimate grounds pursued prevail over your reasons.
e)   Right to data portability
You may receive your personal data in a structured, machine-readable format for transfer to another organisation.
f)   Right of objection
You have the right to object to the processing of your personal data on legitimate grounds, unless there are compelling legitimate grounds for further processing.
Several processing operations of your personal data are subject to your consent. You can withdraw it at any time.
g)   Right to make a complaint to the CNIL
You also have the right to lodge a complaint with the CNIL, the supervisory authority (www.cnil.fr).

8.   Terms and conditions for exercising your rights
You can address your requests through the following means: 
 -   Email address: rgpd@gabrielgreenfield.com
Gabriel Greenfield has a period of one month to respond to you from the receipt of your request. This period may be extended by two months due to the complexity of your request and the number of requests made to us; in this case, you will be informed. 
 
9.   Changing the Policy
This privacy policy is subject to updates.
 Last Updated: 10/06/2026