Privacy policy                             

Effective Date: 8th February, 2024

1. General Statement

Financière Amuse BidCo and its subsidiaries (hereafter “ASMODEE”) are committed to protecting the privacy of all job applicants. ASMODEE places the highest priority and takes the utmost care to protect your Personal Data.

This privacy policy (“Privacy Policy”) describes how we collect, store, use and protect your Personal Data through our digital platform careers.asmodee.com in connection with the recruiting processes and how we ensure the respect of data protection legislation.

We recommend that you read this Privacy Policy carefully as it provides important information about the processing of your personal data.

Do not hesitate to contact us should you have any questions or remarks about our Privacy Policy (See section “How to contact us?” below).

2. About us

This e-recruitment site is operated by Financière Amuse BidCo (18 rue Jacqueline Auriol, 78270 Guyancourt, France) who is acting as data controller.

In order to handle your application, ASMODEE is collecting personal data.

For the sake of clarity “ASMODEE”, "we", "us" and “our” refer to Financière Amuse BidCo and its subsidiaries as the controllers of your personal data, except otherwise stated in this Privacy Policy.

For further details on Asmodee group, please visit Asmodee

You can find our contact details in section “How to contact us?” below.

3. What personal data do we collect and how is it collected?

What is a “personal data”?

Personal Data refers to any information relating to an identified or identifiable natural person (e.g. your name, surname, email, home address, etc.). We may collect personal data either directly from you (for example when you fill out your application online) or automatically when you access or use our Website (e.g. technical details, IP address, browsing information, etc.).

ASMODEE collects several types of Personal Data about You:

3.1 Information you provide directly to us

We collect Personal Data that you provide directly when you use our Website. This is specifically the case when you:

• Apply to job offer on our website careers.asmodee.com ;

Depending on what you provide us with, such information may include:

• Identification and contact information: e.g., last name, first name, mailing address, postal address, email address, phone numbers, country and region
• Your professional background: professional experience and all the information you provide by sending your application and/or your curriculum vitae and/or cover letter, including :
  • previous work experience, and education information,
  • current position, type of contract,
  • knowledge, spoken languages, skills, abilities, and preferences, including learning agility, aptitude, and working style and preferences;
  • professional and other work-related licenses, permits, and certifications held;
  • referral names and contact information;
  • information relating to character and employment references;
  • any other information you elect to provide to us (e.g., employment preferences, willingness to relocate, current salary, salary expectations, …);
• information that you voluntarily provide in contact forms, registration forms and surveys, including (first and last name, email address, telephone number and preferences (including your feedbacks, or other communications with us).

We hope to ensure that the personal data we possess are accurate at all times and therefore we encourage you to update your information in case any changes have occurred.

We recommend that you only provide the data requested or necessary for your query.

3.2 Information automatically collected

We automatically collect certain Data about You when You access or use the Website, through cookies or similar technologies placed on your device. specifically:

website log data when you use this Website: including your IP address, the address of the web page you visited, your browser type and settings, the date and time of your access, how you used this Website;

information about the device you are using to access this Website which may include the type of device, the device operating system, device settings, and unique device identifiers; and

Some cookies are required for the proper functioning of our website careers.asmodee.com and other are used for analytics purposes which help us to provide you with more personalized and customized services and a better digital experience.

For more information about cookies and to know how you can edit your preferences, please read our Cookie Policy.

We may also collect information about you from third parties, such as an individual who provides us with your information in order to forward you a job opportunity which may be of interest for you, according to this individual.

If you provide personal data to us about someone else, you must ensure that you are entitled to disclose that information to us and that we may collect, use and disclose such information for the purposes described in this Privacy Policy.

4. Categories of personal data that we collect.

Identifiers

A real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number if needed, driver’s license number, passport number, or other similar identifiers.

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

Protected classification characteristics under California or U.S. Federal law:

Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), veteran or military status, genetic information (including familial genetic information).

Internet or other similar network activity

Browsing history, search history, information relating to your interaction with a website, application, or advertisement.

Sensory data

Audio, electronic, visual.

Professional or employment-related information Current or past job history or performance evaluations.

Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

5. On what legal grounds do We use the Data that We collect?

In accordance with current personal data protection regulations, We only collect and use your Personal Data, when We have a legal basis to do so.

Personal Data is collected either:

(i) based on your consent. Please note that for this specific legal basis, you have the right to withdraw your consents at any time (see below “What rights do you have on your personal data?”);

(ii) the processing is necessary in connection with any contract between ASMODEE and you;

(iii) in our legitimate interest to carry out the processing and that legitimate interest is not overridden by your interests, fundamental rights, or freedoms, or

(iv) to meet our legal obligations.

6. For which purposes do we collect the Data that We use?

Any Personal Data that is collected on this website will be collected and processed fairly and lawfully in accordance with data protection and privacy legislation applicable in the countries where ASMODEE companies are established, notably the European Regulation n 2016/679 of April 27, 2016.

Personal Data will only be used by ASMODEE for the purpose of carrying out its employment application and recruitment process. Such uses include:

• assessing your skills, qualifications, and interests against our career opportunities and determining your suitability for the job you apply for;
• conduct checks of your professional background and take references if you are offered a job;
• communicate with you about the recruitment process and/or your job application(s), including, in appropriate cases, informing you of other potential career opportunities with Us;
• respond to your queries, requests and suggestions;
• recommending potential career opportunities based on your skills, qualifications, and interests;
• monitor and improve our digital platform XX.com;
• to manage cybersecurity of the Website,
• to prevent fraudulent acts in order to ensure the security of our assets and contents.
• tracking your browsing and email actions, such as the pages you visited on our website over time and the job postings you viewed, for analytics and job
• recommendation purposes, and to evaluate your interest in ASMODEE and engage with candidates based on their level of interest in ASMODEE;
• provide information to regulatory bodies when legally required.

The provision of your personal data is optional. Should you decide not to provide your personal data, ASMODEE may be unable to continue the employment application process with you.

5. How long do we keep your personal data?

Your Personal Data are processed for the period necessary for:

(i) the purposes for which they have been collected,

(ii) to comply with legal and regulatory obligations and

(iii) for the duration of any period necessary to establish, exercise or defend any legal rights.

In order to determine the most appropriate retention periods for your personal data, we have specifically considered the amount, nature and sensitivity of your personal data, the reasons for which we collected your personal data, the service you deserve and expect from us together with the applicable legal requirements.

For example:

• With regard to the users of our website careers.asmodee.com : your data is stored for a period of 6 months from your latest contact with our recruitment site (note: these retention periods may be adapted if required by your national legislation). This is to give us the ability to match your details to any future suitable vacancies that may arise. After this 6 month period your profile details will be automatically deleted. You may request the removal of your Personal Data at any time earlier than this by notifying us in writing. for this, please contact us using the contact details provided below (see "How to contact us?")
• With regard to the cookies used on digital platforms: they are stored for up to 13 months from the moment they were installed on your device.

6. Who receives your personal data?

ASMODEE takes care to ensure that your Personal Data is accessed only by those persons who need such access to perform their tasks and duties, and to third parties who have a legitimate purpose for processing or accessing it. As such, we may share your Personal Data with the following categories of recipients:

• ASMODEE employees that need to have access to your personal data and are authorized to process them in order to achieve the aforementioned purposes and who are committed to confidentiality, including the managers in charge of the open position you applied for and ASMODEE Human Resource personnel and recruiters;
• ASMODEE subsidiaries and affiliates, for recruitment purposes: when you apply to an ASMODEE Group affiliate’s job offer, this affiliate collects and processes your Data as independent data controller. In such case, your Data will be processed according to this affiliate’s personal data protection policy, which You may obtain by contacting it directly. Likewise, the rights You enjoy pursuant to personal data protection laws must be directly enforced against it;
• Our subcontractors and service providers acting for technical and logistical reasons (carriers, Website hosting, security and maintenance providers, fraud management service providers, technical service providers responsible for sending e-mails, anti-spam and anti-bot services, recruitment agencies which may provide Us with advice on the management of our candidates’ databases and help with the selection of profiles within such databases, etc.), provided such parties provide at least the same level of privacy protection as is required of ASMODEE (these companies are authorized to use your personal data only as necessary to provide these services to us);
• potential buyers (and their agents and advisors) in connection with any proposed merger, acquisition, or any form of sale or transfer of some or all of our assets (including in the event of a reorganization, dissolution or liquidation), in which case, Personal Data held by us about you will be among the assets transferred to the buyer or acquirer;
• third parties under the following circumstances where we, in good faith: (i) believe we are compelled by applicable law or regulation, judicial request from a court of competent jurisdiction, or another legal process or government authority; (ii) find it necessary to exercise, establish or defend our legal rights;

(iii) seek to protect our rights or property; (iv) seek to protect ASMODEE, our customers, or the public from harm or illegal activities; (v) seek to respond to an emergency which we believe, in good faith requires us to disclose data to prevent harm; or (vi) rely on your consent.

Please note that we do not sell (as defined in applicable data protection and privacy laws) your personal data (and will not sell it without providing you with a right to opt- out or the right to decline to authorize us to engage in a sale transaction).

7. How your personal data is transferred?

ASMODEE group companies are located worldwide. Some of your data can be shared with other ASMODEE entities in the purpose detailed in the heading " For which purposes do we collect the Data that We use? As a result, personal data may be transferred outside the country where you are located. This includes transfers to countries outside the European Union (“EU”) and to countries that do not have laws that provide adequate protection for personal data according to the European Commission.

The transfer of your application data outside EU is for recruitment & selection purposes only. ASMODEE will ensure adequate security measures for the transfer and processing of applicant data to the locations in the countries where ASMODEE operates.

By agreeing to this statement, you authorize ASMODEE to process any Personal Data recorded in the website careers.asmodee.com and you recognize that, for the needs of your application, your personal data can be transferred outside the European Union, in the countries where ASMODEE is located.

We may also disclose personal data to third-party providers acting on behalf of ASMODEE and approved by ASMODEE. (For example, a recruitment agency entrusted with an exclusivity of the search on behalf of ASMODEE). All such processing is based on our prior instructions set out in a binding contract that is compliant with the requirements of applicable law. These providers are committed to confidentiality and are not permitted to use your personal data for any other purposes. We also require them to use appropriate security measures to protect your personal data.

Part of those service providers are located outside of your country, notably outside the EU. We have taken steps to ensure all personal data is provided with adequate protection and that all transfers of personal data, including outside the EU are done lawfully.

7. How do we protect your personal data?

All your personal data is strictly confidential and will only be accessible, on a need-to- know basis, to duly authorized personnel of ASMODEE and other entities of the ASMODEE Group and third providers acting on our behalf with appropriate technical and organizational security safeguards and in cases provided for by law.

The ASMODEE group has implemented appropriate technical and organisational security measures in place to prevent unauthorised or unlawful processing of data, accidental loss of or destruction/damage to Personal Data.

We limit those who access your personal data to those who have a genuine business need to access it. Those who do access your data will be subject to a duty of confidentiality towards us.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Under written agreements, ASMODEE requires its service providers and processors to provide safeguards and implement sufficient security measures to protect the Personal Data they have agreed to process, in accordance with applicable requirements under personal data protection laws.

However, ASMODEE does not control all risks related to the transmission of information via the draws your attention to the inherent risks of internet which is not completely secure. So, we cannot ensure the security of your personal data transmitted by you to us via the internet. Any such transmission is at your own risk and you acknowledge and agree that we shall not be responsible for any unauthorized use, distribution, damage or destruction of Your Information.

Your Account Information is password-protected for your own privacy and security.

You are therefore responsible for maintaining the confidentiality of that user id and/or password. You agree to immediately notify ASMODEE of any unauthorised use of your user id and/or password.

Any breach of the above conditions may result in legal action being taken against the individual concerned.

8. What rights do you have on your personal data?

In accordance with the applicable data protection laws, you can, at any time, request access, rectification, erasure and portability of your personal data or restrict and object to the processing of your personal data. A summary of these rights is provided below:

• Your right of access: the right to be provided with a copy of your personal data.
• Your right to rectification: the right to require us to correct any mistakes in your data or to complete your information.
• Your right to be forgotten: the right to require us to delete your personal data — in certain situations.
• Your right to restriction of processing: the right to require us to restrict processing of your personal data — in certain circumstances, for example if you contest the accuracy of the data.
• Your right to data portability: the right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party — in certain situations.
• Your right to object to processing: the right to object: at any time to your personal data being processed for direct marketing; in certain other situations to our continued processing of your personal information, eg processing carried out for the purpose of our legitimate interests.

For France and when mandatory local provisions so provide, You may determine how You want Us to handle your Personal Data upon your death.

Procedure to exercise your Data protection rights

You can exercise these rights, by sending your request by mail at the following address: FINANCIERE AMUSE BICDO Data Protection Officer, 18 rue Jacqueline Auriol 72270 Guyancourt, France

Or by email to donneespersonnelles-bidco@asmodee.com

We will respond to such requests in accordance with the requirements of applicable data protection laws. Please note that in order to fulfil your request, we may need you to provide certain personal data to verify your identity. Depending upon applicable data protection and privacy law, individuals may also designate an authorized agent to exercise these rights on their behalf.

Should you feel the need to lodge a complaint or escalate any issues regarding

ASMODEE’ handling of your request, please refer to your competent supervisory authority.

California, U.S.A. rights.

The California Consumer Privacy Act (CCPA) provides residents of the State of California in the United States of America with specific rights regarding their personal

data. Residents of the State of California includes (1) every individual who is in the State of California for other than a temporary or transitory purpose, and (2) every individual who is “domiciled” in the State of California who is outside of the State for a temporary or transitory purpose. Domicile is the place where an individual has his true, fixed, permanent home and principal establishment and where that person intends to return to if they are absent.

This section describes the CCPA rights that are available to California residents and it explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable request, we will disclose to you:

• the categories of personal data we collected about you;
• the categories of sources for the personal data we collected about you;
• our business or commercial purpose for collecting or selling your personal data;
• the categories of third parties with whom we share that personal data.
• the specific pieces of personal data information we collected about you (also called a data portability request).
• although we do not sell (as defined in the CCPA) your personal data (and will not sell it without providing you with a right to opt-out or the right to decline to authorize us to engage in a sale transaction), if that ever changes we will disclose the personal data categories that each category of recipient purchased and the business purpose of the transaction.

Deletion Request Rights

You have the right to request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and direct our service providers to delete) your personal data from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• complete the transaction for which we collected the personal data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with U.S. federal law, or otherwise perform our contract with you;
• detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
• debug products to identify and repair errors that impair existing intended functionality;
• exercise free speech, ensure the right of another California resident to exercise their free speech rights, or exercise another right provided for by law.
• comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
• engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the data’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
• enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• comply with a legal obligation;
• make other internal and lawful uses of your personal data that are compatible with the context in which you provided it;

Exercising California, U.S.A. Access, Data Portability, and Deletion Rights

To exercise the California, U.S.A. access, data portability, and deletion rights described above, please submit a verifiable request to us via email as follows:

• Via our Data Protection Office: donneespersonnelles-bidco@asmodee.com

Only you, or someone legally authorized to act on your behalf, may make a verifiable request related to your personal information.

You may only make a verifiable request for access or data portability twice within a 12- month period. The verifiable request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. We will only use personal data provided in a verifiable request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We will acknowledge requests within ten (10) days of receipt and we will endeavor to respond to a verifiable request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding the verifiable request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Personal Information Sales Opt-Out Rights

You have the right to direct us to not sell your personal data at any time. However, we do not sell (as defined in the CCPA) your personal data (and will not sell it without providing you with a right to opt-out or the right to decline to authorize us to engage in a sale transaction).

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

9. How to contact us?

In issues relating to your account, to withdraw your consents, to ask general questions or to lodge a complaint, please contact our Customer Service:

• By email: donneespersonnelles-bidco@asmodee.com
• By mail: FINANCIERE AMUSE BIDCO – DRH Groupe – 18 rue Jacqueline Auriol 72270 Guyancourt , France

If you have any questions or concerns about our Privacy Policy or data processing, you may contact our Group Data Protection Officer at: donneespersonnelles- bidco@asmodee.com

10. Changes to our Privacy Policy

ASMODEE may amend the terms of this Privacy Policy, in particular if a new processing of Personal Data is carried out. Please check this page regularly to ensure that You agree with any changes. You will be notified of these modifications, either through a special note on our Website or through a notification by email.

Consent

I have read and understood the conditions regarding the protection of my personal data by ASMODEE and give my specific and informed consent:

to the processing of all my data supplied within my applications for the purpose of recruitment, including through external organisations where these are used by ASMODEE in the recruitment process.

to the transfer of my personal data outside the European Union, in the countries where ASMODEE is located, for recruitment and selection purposes.