Summary

Privacy Policy for Visitors of JOIN Website

This Privacy Policy aims to inform you, as a visitor to our website and depending on the purpose of your visit, about the reasons why we collect your personal data and the measures we implement to protect it, in full compliance with your rights and the applicable regulations (i.e., French Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended, Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data — the “GDPR” — as well as the recommendations issued by the CNIL).

1. Who are we and on what basis do we collect your data?

We are JOIN, a simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 833 938 269, with its registered office at 62 rue du Faubourg Poissonnière, 75010 Paris, France.
We act as the data controller for the data we collect from you when you browse our website.

For any questions regarding these data processing activities, you may contact us by email at privacy@teamjoin.fr.

Note: This Privacy Policy does not concern the protection of personal data processed by JOIN as a data processor in the context of its contractual relationships with its clients.

2. What personal data do we collect?

We collect your data either directly from you when you provide it to us, or indirectly through automated means (for example, your IP address or cookie identifier).

Data you provide directly

These are the data you share with us when you:

request a demo on our website;
apply for one of our job offers;
communicate with us as part of our commercial relationship.

In this context, we may process:

Identification and contact information (name, first name, company, postal and email addresses, phone numbers) to provide you with information about our products and services, respond to your questions, and communicate about our offerings;
Professional information (company name, CV, LinkedIn URL, etc.) to process your application;
Browsing data (IP address, pages visited, connection date and time, browser used, operating system, user ID, IFA);
Any other information you choose to provide in the context of a contact request.

(Mandatory fields are clearly indicated when you provide your data.)

Data collected through automated means

We use automated technologies such as cookies to collect data from your computer or mobile device when you visit and use our website.

The table below lists the technical and functional data that enable us both to ensure our website operates correctly and to offer products and services tailored to your interests (including advertisements) and to measure audience metrics for improvement purposes.

Suppliers	Cookies	Types	Storage duration
Axeptio	axeptio_all_vendors axeptio_authorized_vendors axeptio_cookies	Functional	6 months
Hubspot	__cf_bm _cfuvid __hstc __hssrc __hssc hubspotutk	Performance	Session Session 6 months Session Session 6 months
Google Analytics	_ga _ga_xxxxxxxxxx _gid _gat_xx-xxxxxxxxx-x	Performance	13 months 13 months 1 day Session
Microsoft Clarity	_clck _clsk	Performance	12 months 1 day
JOIN	_join_stories _join_stories_valid _join_stories_tc	Performance	13 months Session Session
Facebook	_fbp	Marketing	3 months
LinkedIn	li_gc lidc bcookie	Marketing	1 day 6 months 12 months

3. For what purposes, on what legal basis, and for how long do we keep your data?

Purpose	Legal Basis	Retention Period
Building a database of prospects	Our legitimate interest in developing and promoting our business and services	The data are retained for three (3) years from the date of your last contact with us.
Sending newsletters, marketing communications, and promotional messages	Our legitimate interest in retaining and informing our prospects of our latest news	The data are retained for three (3) years from the date of your last contact with us.
Responding to information requests	Our legitimate interest in responding to your requests	The data are retained for the time necessary to process your information request and are deleted once the request has been processed.
Processing job applications and managing interviews (shortlisting candidates, contacting them to assess their ability to fill the position, finalising the recruitment process, etc.)	Performance of pre-contractual measures	Your data are retained in the active database for the entire duration of the recruitment process until a hiring decision is made. If your application is rejected, your data may be retained for three (3) months after the end of the recruitment process in order to provide you with explanations regarding the reasons for the rejection of your application. Your data may also be retained in intermediate archiving for evidentiary purposes for five (5) years from the date of the hiring decision.
Creation of a CV database	Your consent	The data are retained for two (2) years from the date of the last contact with the data subject.
To produce statistics (such as browsing or website audience statistics) and improve the website’s functionalities through the use of audience measurement cookies	Your consent	The data are retained for thirteen (13) months.
To deliver personalised advertising through the use of advertising cookies	Your consent	The data are retained for thirteen (13) months.
To manage requests to exercise data subject rights	Our legitimate interest in responding to your requests and keeping a record of them	If we ask you to provide proof of identity, we retain it only for the time necessary to verify your identity, after which it is deleted. If you exercise your right to object to receiving marketing communications, we retain this information for three (3) years.

4. Who has access to your data?

Access to your data is strictly limited to:

i. JOIN personnel, bound by confidentiality obligations;
ii. Certain sub-processors, such as hosting providers, newsletter services, audience measurement and analytics providers, email service providers, and cookie management tools;
iii. Where applicable, audit and oversight bodies (e.g. statutory auditors) and public or private entities, solely to comply with legal obligations.

5. Do we sell or share your data?

No. Your personal data are never sold, rented, or exchanged with third parties.

6. Where is your data stored and transferred?

Your data are stored for the duration of processing on the servers of the providers listed above (see Section 2).

Where applicable, your personal data may be transferred by these companies to countries outside the European Union. In such cases, the transfer is secured using one of the following safeguards:

The data are transferred to a country that benefits from an adequacy decision by the European Commission (Article 45 GDPR).
The data are transferred to a country whose level of data protection has not been recognised as adequate under the GDPR. In such cases, these transfers are based on appropriate safeguards as provided for in Article 46 of the GDPR, adapted to each service provider, including, but not limited to, the execution of standard contractual clauses approved by the European Commission, the implementation of binding corporate rules, or reliance on an approved certification mechanism.
The data are transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.

7. What are your rights regarding your data?

You have the following rights with regard to your personal data:

Right to information: this is precisely the reason why we have drafted this policy. This right is provided for in Articles 13 and 14 of the GDPR.
Right of access: you have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.
Right to rectification: you have the right to rectify your personal data at any time if they are inaccurate, incomplete, or obsolete, in accordance with Article 16 of the GDPR.
Right to restriction: you have the right to obtain restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
Right to erasure: you have the right to request that your personal data be erased and to prohibit any future collection thereof, for the reasons set out in Article 17 of the GDPR.
Right to lodge a complaint: with a competent supervisory authority (in France, the CNIL), if you consider that the processing of your personal data constitutes a breach of the applicable provisions, in accordance with Article 77 of the GDPR.
Right to define instructions relating to the retention, erasure, and communication of your personal data after your death.
Right to withdraw your consent at any time: for processing operations based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. Such withdrawal shall not affect the lawfulness of processing carried out before the withdrawal.
Right to data portability: under certain conditions set out in Article 20 of the GDPR, you have the right to receive the personal data that you have provided to us in a standard, machine-readable format and to request that they be transferred to a recipient of your choice.
Right to object: pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data. However, please note that we may continue to process them despite your objection, for legitimate reasons or for the establishment, exercise, or defence of legal claims.

You may exercise these rights by writing to us using the contact details indicated at the beginning of this Privacy Policy. In doing so, we may ask you to provide additional information or documents to verify your identity.

8. Updates to this Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time, in whole or in part, notably to comply with applicable legislation or if required by a law, regulation, or judicial or administrative authority.

Such modifications shall take effect upon publication of the updated Privacy Policy online. You are therefore encouraged to consult this policy regularly.

‍

Voir la politique de confidentialité utilisateur