Privacy Notice for Job Applicants
Please read the following information carefully before applying for a job position at Worldline.
1. Whom is this Privacy Notice applicable to?
This Privacy Notice is applicable to everyone who is interested in working at Worldline and who applies for a job position at Worldline (“job applicant”, “you” or “your”). This Privacy Notice provides you with information about the processing of your personal data and your rights in the context of our recruitment process.
While this Privacy Notice is intended to describe the broadest range of our data processing activities globally for recruitment purposes, those processing activities may be more limited in some jurisdictions based on the restrictions of their laws. Local Worldline entities may therefore issue a local addendum to this Privacy Notice.
2. Who is responsible for the processing of your personal data?
Worldline S.A., its affiliates and subsidiaries, except PayOne GmbH and its subsidiaries (a list of which is available in Appendix B in our Privacy Notice published on our Worldline corporate website) (together “Worldline”, “we”, “our” or “us”) will process your personal data as controllers.
3. Which personal data do we process?
In the context of our recruitment process we may collect and use the following categories of personal data (hereinafter “Personal Data”):
| Category | Personal Data | Purpose |
|---|---|---|
| Login Data | Last name, first name, email address, country of residence | • Creation of job application account in our career portal |
| Identification Data | Title, last name, first name, middle name, maiden name, suffix, date of birth, nationality, resident and work permit, profile photo, home address |
• Identification • Pre-employment background check |
| Contact Data | Email address, phone number, language preference |
• Communication during application process • Conduction of surveys |
| Employment and Education Data | Work and education history, professional background, academic degrees, certifications, professional qualifications and information which you have made public on professional networking sites (e.g., Xing, LinkedIn) |
• Assessment of application • Pre-employment background check |
| Other Application-Related Data | Other information which you voluntarily make public or share with us in connection with your job application, including that which you provide in your application documents, in our communications, during an interview, or as part of other forms of assessment |
• Assessment of application |
| Sensitive Personal Data | Disability status (optional), and criminal background screenings (if necessary and allowed by applicable law) |
• Compliance with local law, if applicable |
| Job Alert Data | First name, last name, email address, resume, your preferences of job categories and job locations submitted via our website at https://jobs.worldline.com/ |
• Contact for potential job opportunities |
| Cookie Data | Cookie Data is processed when you browse our website at https://jobs.worldline.com/ More information on how we process your Cookie Data can be found in our Cookie policy. |
Privacy Notice for Job Applicants
Please read the following information carefully before applying for a job position at Worldline.
1. Whom is this Privacy Notice applicable to?
This Privacy Notice is applicable to everyone who is interested in working at Worldline and who applies for a job position at Worldline (“job applicant”, “you” or “your”). This Privacy Notice provides you with information about the processing of your personal data and your rights in the context of our recruitment process.
While this Privacy Notice is intended to describe the broadest range of our data processing activities globally for recruitment purposes, those processing activities may be more limited in some jurisdictions based on the restrictions of their laws. Local Worldline entities may therefore issue a local addendum to this Privacy Notice.
2. Who is responsible for the processing of your personal data?
Worldline S.A., its affiliates and subsidiaries, except PayOne GmbH and its subsidiaries (a list of which is available in Appendix B in our Privacy Notice published on our Worldline corporate website) (together “Worldline”, “we”, “our” or “us”) will process your personal data as controllers.
3. Which personal data do we process?
In the context of our recruitment process we may collect and use the following categories of personal data (hereinafter “Personal Data”):
• Pre-employment background check
• Conduction of surveys
• Pre-employment background check
4. Sources of Personal Data
We collect your Personal Data from a variety of sources, including:
Directly from you
Personal Data are collected directly from you e.g., when you create your account in our job portal, when you submit a job application, when you communicate with us via emails or phone or personal interviews.
Third-party sources
Examples of third-party sources include employment screening agencies, background check agencies, recruiting agencies, former employers and/or schools and educational institutions, publicly available information on websites or social media (e.g., when applying through LinkedIn, where relevant for recruitment purposes and allowed by applicable law; or when you choose to create your job application account with the single sign-on function using your LinkedIn or Google accounts), public government databases (if necessary) and others where they are legally allowed to share your Personal Data with us. For example, if you register to be contacted by prospective employers on another website, the website may provide your Personal Data to us.
Worldline employees
Upon your consent, a Worldline employee who knows you may provide us some of your Personal Data such as your name and your LinkedIn profile via our referral tool (Talentry) in order to refer you to an open position at Worldline. More details about how your Personal Data is processed via Talentry can be found on this referral tool’s privacy notice.
5. What is our legal basis for the processing of your Personal Data?
Primarily, our legal basis for the processing of your Personal Data with regards to your job application is based on Article 6(1)(b) and 6(1)(f) of the EU General Data Protection Regulation (“GDPR"), respectively:
- the preparation of contracts; and
- our legitimate interests in assessing your suitability for the role(s) you have applied for and in developing and improving our recruitment process.
In case you provide us with any Sensitive Personal Data, we will only process them based on Article 6(1)(c) of the GDPR, i.e., to fulfill our obligations under applicable law during the recruitment process.
In those cases where we keep your Personal Data to contact you about potential job opportunities, the legal basis is your consent in pursuant to Article 6(1)(a) of the GDPR.
Besides, our legal basis when processing your Cookie Data are detailed in our Cookie Notice available here Cookie policy.
6. No profiling nor automated decision making
We do not profile nor make any automated decisions pursuant to Article 22 of the GDPR in relation to your Personal Data. A member of our talent acquisition team will be involved in every step of our recruitment process.
7. How long do we retain your Personal Data?
We retain your Personal Data for as long as necessary to achieve the purposes specified in Section 3 of this Privacy Notice, unless otherwise required by applicable laws.
In case you accept a job offer from Worldline, your Personal Data will be retained for employment purposes and will be processed under our internal employee data processing policy.
We will only retain Personal Data for as long as necessary to fulfil the purpose(s) for which it was collected or to comply with legal, regulatory or internal policy requirements, whichever is longer. In general, although there may be exceptions, data relating to unsuccessful candidates for roles within Worldline is kept for 12 months after the date on which we notify you that your most recent application has been unsuccessful. We may retain your Personal Data for another 12-month period with respect to potential future job opportunities upon your consent. Any maximum storage term set forth by applicable local law will prevail.
Your Job Alert Data will be retained until you withdraw your consent. We will however delete your Job Alert Data in case your job alert account is inactive for 6 months.
You have the right to request the erasure of your Personal Data at any time by contacting us under talentacquisition@worldline.com or via our Data Subject Request form.
8. Whom do we share your Personal Data with?
Subject to applicable law, including consent (if required), we may share your Personal Data in the following circumstances (where applicable):
- Internally within Worldline affiliates and subsidiaries: Your Personal Data may be shared with personnel involved in the recruiting and hiring processes, e.g., recruiters in charge within our global talent acquisition team, with the relevant local human resources personnel, the hiring managers and the hiring teams.
- Service Providers: We may share your Personal Data with Service Providers in connection with the provision of services including, but not limited to, the following: recruitment, talent acquisition and administration, technology services, qualification and background checks (where allowed by applicable law) and employment history checks. We have contracts with our Service Providers that address the safeguarding and proper use of your Personal Data. A list of our Service Providers can be found in Appendix 1 of this Privacy Notice.
- Other Third Parties: We may also disclose your personal information to other third parties including:
- as necessary to comply with our legal obligations, including in order to respond to a lawful government request, court order, administrative or judicial process;
- as necessary to establish, exercise or defend our legal rights;
- as necessary to protect your vital interests (for example, we may need to share your personal information with third parties in the event of an emergency); or
- where we have otherwise obtained your consent.
9 . How do we secure your Personal Data?
We may process your Personal Data electronically and/or in paper form.
We have implemented appropriate technical, physical and organizational measures to protect your Personal Data from misuse or accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access as well as all other forms of unlawful processing. To achieve this, we have developed and implemented an Information Security Management System and other relevant policies and guidelines relating to the protection of personal data. For example, our employees are permitted to access your Personal Data only to the extent necessary to fulfill the applicable business purpose(s) and to perform their jobs, subject to confidentiality obligations.
10. How is your Personal Data protected in case of international transfers?
Certain countries outside the European Economic Area (“EEA”) have been approved by the European Commission as providing essentially equivalent protections to the EEA data protection laws, and therefore no additional safeguards are required to export Personal Data to these jurisdictions.
If your Personal Data is processed by Worldline group entities located outside the EEA where applicable law does not provide essentially equivalent protections to the EEA data protection laws (“Third Countries”), we ensure an adequate protection for your Personal Data with our intragroup data sharing and transfer agreement.
If your Personal Data is processed by third party entities in Third Countries, we will ensure an adequate protection for your Personal Data with the latest version of the standard data protection clauses adopted by the Commission in accordance with Article 46.2(c) of the General Data Protection Regulation of the European Union.
11. What privacy rights do you have?
In accordance with and to the extend allowed by applicable laws, you have the rights to request us to:
(a) provide you with further details on the use we make of your Personal Data;
(b) provide you with a copy of your Personal Data that we process;
(c) update any inaccuracies in your Personal Data that we process;
(d) delete your Personal Data in certain circumstances. Please note that there may be circumstances where you ask us to delete your Personal Data but we are legally entitled to retain it;
(e) withdraw your consent so that we stop a particular processing, for which processing is based on your consent;
(f) refrain from any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights;
(g) restrict how we process your Personal Data whilst a complaint is being investigated;
(h) not be subject to profiling or decisions based on automated decisions that could result in adverse effects. In principle, there is no automated decision making involving your Personal Data during our recruitment process; and
(i) transfer your Personal Data to a legitimate party of your choice, if possible, in a readily usable format.
Please be aware that certain exceptions apply to the exercise of these rights and so you will not be able to exercise them in all situations. In addition, these might vary slightly between countries due to national specificities.
Besides, you also have the right to lodge a complaint with us or with the relevant supervisory authority of your usual place of residence or place where the alleged breach to the law occurred.
For EU Member States, please click here to see the list and contact information of the EU Supervisory Authorities.
For Australia, you can contact the Office of the Australian Information Commissioner (OAIC) here.
For Brazil, you can contact the National Data Protection Authority (ANPD) here.
For Canada, you can contact the Office of the Privacy Commissioner of Canada here.
For New Zealand, you can contact the Office of the Privacy Commissioner here.
For Singapore, you can contact the Personal Data Protection Commission here.
For Switzerland, you can contact the Federal Data Protection and Information Commissioner here.
For the UK, you can contact the Information Commissioner’s Office (ICO) here.
12. How to contact us
If you would like to exercise any of your rights listed in this Privacy Notice, you are welcomed to use our Data Subject Request webform designed for that purpose, which is accessible here:
We will then check your entitlement and respond within the applicable timescale.
If you have other questions in relation to our processing of your Personal Data, please contact us under talentacquisition@worldline.com.
13. Changes to this Privacy Notice
This Privacy Notice shall not form part of any potential employment contract and we may change it from time to time. The latest version of the Privacy Notice was published on 02/04/2024.
Appendix 1
List of Service Providers
In the list below, you will be provided with our Service Providers’ name, role (controller or processor), the services to be provided, your Personal Data which we share with the Service Providers to have the services performed and our legal basis when processing your Personal Data in this regard.
Most of our Service Providers process your Personal Data as independent data controllers. In that case, you can refer to the relevant Service Provider’s privacy notice for more information on how they process your Personal Data for the listed purposes. The Service Provider’s privacy notice links are only provided below for your convenience, we are not responsible for their accessibility.
| Service Provider | Service scope | Service Provider’s role | Service provided | Personal Data shared by Worldline | Legal basis | Service Provider’s privacy notice |
|---|---|---|---|---|---|---|
| Assessio | Worldline Group | Data controller | Psychometric assessment for job applicants | Name, email address, assessment report | Our legitimate interests (Article 6(1)(f), GDPR) | https://assessio.com/gdpr/ |
| Certn | The USA, Canada | Data controller | Pre-employment background check | Email address | Our legitimate interests (Article 6(1)(f), GDPR) | https://certn.co/privacy-policy/ |
| Firstadvantage/ X-Ref | Australia | Data controller | Pre-employment reference check | Name and email address | Our legitimate interests (Article 6(1)(f), GDPR) | https://fadv.com/privacy-policy/ |
| ICIMS | France | Data controller | English skill assessment | Last name, first name, email address, phone number | Our legitimate interests (Article 6(1)(f), GDPR) | https://www.icims.com/legal/privacy-notice-services/ |
| Manpower Group | Worldline Group | Data processor | Recruitment assistance, external recruiters | Your Personal Data in accordance with this Privacy Notice | Our legitimate interests (Article 6(1)(f), GDPR) | The processing is based on this Privacy Notice. |
| PerformanSe | France | Data controller | Soft skills assessment for job applicants | Name and email address | Our legitimate interests (Article 6(1)(f), GDPR) | Available upon request |
| Talentry | Worldline Group | Data processor | Management of job referral portal |
• Name, LinkedIn profile (optional) • Application status |
• Your consent (Article 6(1)(a), GDPR); • Referrers’ and our legitimate interests (Article 6(1)(f), GDP) |
https://myreferral.talentry.com/app/talent/privacy/applicant |
| Validata | Worldline Group | Data processor | Pre-employment background check |
• Basic Data; • Employment Data; • Education Data |
Our legitimate interests (Article 6(1)(f), GDPR) |
The processing is based on this Privacy Notice. |
| Verifdiploma | France | Data controller | Management of candidate authorizations, verification of the identity and academic documents |
CV including name, home address, e-mail address, telephone number, details of previous professional experience, training, interests, language level |
Our legitimate interests (Article 6(1)(f), GDPR) |
https://verifdiploma.com/politique-de-confidentialite/ |
| VerityIntelligence | Asia | Data controller | Pre-employment background check on job applicants |
CV including name, home address, e-mail address, telephone number, details of previous professional experience, training, interests, language level |
Our legitimate interests (Article 6(1)(f), GDPR) |
https://www.verityintel.com/privacy-policy/ |
4. Sources of Personal Data
We collect your Personal Data from a variety of sources, including:
Directly from you
Personal Data are collected directly from you e.g., when you create your account in our job portal, when you submit a job application, when you communicate with us via emails or phone or personal interviews.
Third-party sources
Examples of third-party sources include employment screening agencies, background check agencies, recruiting agencies, former employers and/or schools and educational institutions, publicly available information on websites or social media (e.g., when applying through LinkedIn, where relevant for recruitment purposes and allowed by applicable law; or when you choose to create your job application account with the single sign-on function using your LinkedIn or Google accounts), public government databases (if necessary) and others where they are legally allowed to share your Personal Data with us. For example, if you register to be contacted by prospective employers on another website, the website may provide your Personal Data to us.
Worldline employees
Upon your consent, a Worldline employee who knows you may provide us some of your Personal Data such as your name and your LinkedIn profile via our referral tool (Talentry) in order to refer you to an open position at Worldline. More details about how your Personal Data is processed via Talentry can be found on this referral tool’s privacy notice.
5. What is our legal basis for the processing of your Personal Data?
Primarily, our legal basis for the processing of your Personal Data with regards to your job application is based on Article 6(1)(b) and 6(1)(f) of the EU General Data Protection Regulation (“GDPR"), respectively:
- the preparation of contracts; and
- our legitimate interests in assessing your suitability for the role(s) you have applied for and in developing and improving our recruitment process.
In case you provide us with any Sensitive Personal Data, we will only process them based on Article 6(1)(c) of the GDPR, i.e., to fulfill our obligations under applicable law during the recruitment process.
In those cases where we keep your Personal Data to contact you about potential job opportunities, the legal basis is your consent in pursuant to Article 6(1)(a) of the GDPR.
Besides, our legal basis when processing your Cookie Data are detailed in our Cookie Notice available here Cookie policy.
6. No profiling nor automated decision making
We do not profile nor make any automated decisions pursuant to Article 22 of the GDPR in relation to your Personal Data. A member of our talent acquisition team will be involved in every step of our recruitment process.
7. How long do we retain your Personal Data?
We retain your Personal Data for as long as necessary to achieve the purposes specified in Section 3 of this Privacy Notice, unless otherwise required by applicable laws.
In case you accept a job offer from Worldline, your Personal Data will be retained for employment purposes and will be processed under our internal employee data processing policy.
We will only retain Personal Data for as long as necessary to fulfil the purpose(s) for which it was collected or to comply with legal, regulatory or internal policy requirements, whichever is longer. In general, although there may be exceptions, data relating to unsuccessful candidates for roles within Worldline is kept for 12 months after the date on which we notify you that your most recent application has been unsuccessful. We may retain your Personal Data for another 12-month period with respect to potential future job opportunities upon your consent. Any maximum storage term set forth by applicable local law will prevail.
Your Job Alert Data will be retained until you withdraw your consent. We will however delete your Job Alert Data in case your job alert account is inactive for 6 months.
You have the right to request the erasure of your Personal Data at any time by contacting us under talentacquisition@worldline.com or via our Data Subject Request form.
8. Whom do we share your Personal Data with?
Subject to applicable law, including consent (if required), we may share your Personal Data in the following circumstances (where applicable):
- Internally within Worldline affiliates and subsidiaries: Your Personal Data may be shared with personnel involved in the recruiting and hiring processes, e.g., recruiters in charge within our global talent acquisition team, with the relevant local human resources personnel, the hiring managers and the hiring teams.
- Service Providers: We may share your Personal Data with Service Providers in connection with the provision of services including, but not limited to, the following: recruitment, talent acquisition and administration, technology services, qualification and background checks (where allowed by applicable law) and employment history checks. We have contracts with our Service Providers that address the safeguarding and proper use of your Personal Data. A list of our Service Providers can be found in Appendix 1 of this Privacy Notice.
- Other Third Parties: We may also disclose your personal information to other third parties including:
- as necessary to comply with our legal obligations, including in order to respond to a lawful government request, court order, administrative or judicial process;
- as necessary to establish, exercise or defend our legal rights;
- as necessary to protect your vital interests (for example, we may need to share your personal information with third parties in the event of an emergency); or
- where we have otherwise obtained your consent.
9 . How do we secure your Personal Data?
We may process your Personal Data electronically and/or in paper form.
We have implemented appropriate technical, physical and organizational measures to protect your Personal Data from misuse or accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access as well as all other forms of unlawful processing. To achieve this, we have developed and implemented an Information Security Management System and other relevant policies and guidelines relating to the protection of personal data. For example, our employees are permitted to access your Personal Data only to the extent necessary to fulfill the applicable business purpose(s) and to perform their jobs, subject to confidentiality obligations.
10. How is your Personal Data protected in case of international transfers?
Certain countries outside the European Economic Area (“EEA”) have been approved by the European Commission as providing essentially equivalent protections to the EEA data protection laws, and therefore no additional safeguards are required to export Personal Data to these jurisdictions.
If your Personal Data is processed by Worldline group entities located outside the EEA where applicable law does not provide essentially equivalent protections to the EEA data protection laws (“Third Countries”), we ensure an adequate protection for your Personal Data with our intragroup data sharing and transfer agreement.
If your Personal Data is processed by third party entities in Third Countries, we will ensure an adequate protection for your Personal Data with the latest version of the standard data protection clauses adopted by the Commission in accordance with Article 46.2(c) of the General Data Protection Regulation of the European Union.
11. What privacy rights do you have?
In accordance with and to the extend allowed by applicable laws, you have the rights to request us to:
(a) provide you with further details on the use we make of your Personal Data;
(b) provide you with a copy of your Personal Data that we process;
(c) update any inaccuracies in your Personal Data that we process;
(d) delete your Personal Data in certain circumstances. Please note that there may be circumstances where you ask us to delete your Personal Data but we are legally entitled to retain it;
(e) withdraw your consent so that we stop a particular processing, for which processing is based on your consent;
(f) refrain from any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights;
(g) restrict how we process your Personal Data whilst a complaint is being investigated;
(h) not be subject to profiling or decisions based on automated decisions that could result in adverse effects. In principle, there is no automated decision making involving your Personal Data during our recruitment process; and
(i) transfer your Personal Data to a legitimate party of your choice, if possible, in a readily usable format.
Please be aware that certain exceptions apply to the exercise of these rights and so you will not be able to exercise them in all situations. In addition, these might vary slightly between countries due to national specificities.
Besides, you also have the right to lodge a complaint with us or with the relevant supervisory authority of your usual place of residence or place where the alleged breach to the law occurred.
For EU Member States, please click here to see the list and contact information of the EU Supervisory Authorities.
For Australia, you can contact the Office of the Australian Information Commissioner (OAIC) here.
For Brazil, you can contact the National Data Protection Authority (ANPD) here.
For Canada, you can contact the Office of the Privacy Commissioner of Canada here.
For New Zealand, you can contact the Office of the Privacy Commissioner here.
For Singapore, you can contact the Personal Data Protection Commission here.
For Switzerland, you can contact the Federal Data Protection and Information Commissioner here.
For the UK, you can contact the Information Commissioner’s Office (ICO) here.
12. How to contact us
If you would like to exercise any of your rights listed in this Privacy Notice, you are welcomed to use our Data Subject Request webform designed for that purpose, which is accessible here:
We will then check your entitlement and respond within the applicable timescale.
If you have other questions in relation to our processing of your Personal Data, please contact us under talentacquisition@worldline.com.
13. Changes to this Privacy Notice
This Privacy Notice shall not form part of any potential employment contract and we may change it from time to time. The latest version of the Privacy Notice was published on 02/04/2024.
Appendix 1
List of Service Providers
In the list below, you will be provided with our Service Providers’ name, role (controller or processor), the services to be provided, your Personal Data which we share with the Service Providers to have the services performed and our legal basis when processing your Personal Data in this regard.
Most of our Service Providers process your Personal Data as independent data controllers. In that case, you can refer to the relevant Service Provider’s privacy notice for more information on how they process your Personal Data for the listed purposes. The Service Provider’s privacy notice links are only provided below for your convenience, we are not responsible for their accessibility.
• Application status
Referrers’ and our legitimate interests (Article 6(1)(f), GDP)
• Employment Data; • Education Data