Data protection policy

As part of your application, your personal data are processed under the conditions described below.

1- Processing of your personal data by RATP Dev

In order to ensure that your personal data is protected, RATP Dev processes your personal data in accordance with applicable regulations.

2- What processing is concerned by our personal data protection policy?

This policy covers all processing related to a hiring process. This processing and process may be different depending on the positions concerned.

3- What personal data do we process?

We only process personal data necessary for the smooth running of the hiring process (data included in the CV, cover letter, connection data for the candidate platform,…). 

In this regard, we process essentially the data you provide to us, in particular via the candidate portal and all of our exchanges of any kind with you, as well as data collected from third parties (e.g. recruitment firms). 

4- Why do we process your personal data and on what basis?

The processing we implement in this respect is based on the implementation of pre-contractual measures, on compliance with legal obligations or on the legitimate interest of our company. 

5- Who can have access to your personal data?

Your personal data may be transmitted to employees of RATP Dev SA and/or its subsidiaries involved in the recruitment process and authorised to receive it as part of their duties (e.g. HR functions, recruitment functions, etc.).

They may also be communicated to certain third parties who may legitimately receive such data within the limits of their respective responsibilities (e.g. recruitment firms).

6- How long do we store your personal data?

The retention period of your personal data varies according to the legislation in force or the recommendations of the country for the job offer for which you apply.

We do not store your data beyond the permitted retention periods. Thus, unless otherwise requested by you, the data is kept for two years, from the date of the last connection to the candidate platform.

7- What are your rights?

You have all the rights provided for by the regulations applicable to the protection of personal data and, in particular, the right of access, the right of correction, and the right of erasure when these rights are applicable.

These rights are strictly personal and can only be implemented for your own data.

8- Who should you contact if you have questions?

If you wish to obtain information or ask questions about your personal data, or exercise any of your rights referred to above, you may:

• For EU countries: contact the Data Protection Officer

     - For France and Belgium: Délégué à la Protection des Données RATP Dev - 54 , quai de la Rapée - LAC LA 30 75012 PARIS and dpo@ratpdev.com

      - For Italy:

• For CILIA : dpo@cilia-italia.com
• For Gest : dpo@gestramvia.it
• For Autolinee Toscane: dpo@at-bus.it

• For other countries: contact the recruitment team in charge of your application.

Your contacts will ensure they respond to your requests within the time constraints set by applicable regulations.

9- What are our security measures?

We implement all technical and organisational measures to protect and secure your personal data and, in particular, at the time of their collection, during their transmission and storage, in order to prevent them from being impaired, lost, destroyed or accessed by unauthorised third parties.

10- Transfer of your personal data outside the European Union

Your personal data may be transferred outside the European Union under conditions that ensure compliance with the regulations applicable to the protection of personal data.

11- What do we do in the event of a personal data breach?

Where required by regulations we undertake to notify the independent supervisory authority of any breach of data that we may suffer under the conditions prescribed by the applicable personal data regulations. 

For France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL).

In the event of a high risk for your rights and freedoms, we undertake to inform you of this data breach.

12- How to file a complaint?

You can file a complaint with the independent supervisory authority. For France, this is the CNIL.

13- Amendment

This policy may be amended or adjusted at any time to reflect changes in the applicable regulations and take into account the recommendations of the competent supervisory authority.

Any new versions of this policy will be accessible on the candidate portal.

14- For further information

For any other information on the protection of personal data, you may consult the independent supervisory authority’s website.