Privacy policy · Mistertemp’group

This page is a translation, provided for information only. Only the French version is legally binding: in the event of any contradiction, discrepancy or doubt as to interpretation, the French version shall prevail.

Version of 1 October 2026

Part 1 — Common provisions

1. What is the purpose of this document?

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (“GDPR”) and with French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended (the “French Data Protection Act”), the purpose of this policy is to inform you of how your personal data (hereinafter “your data”) are collected and processed by the companies of the Mistertemp’ Group (hereinafter “the Group”).

It applies to all of the Group’s activities, and in particular:

to the Group’s websites (hereinafter the “Sites”);
to the Group’s platforms, including the Mistertemp’Plus solution (hereinafter the “Platforms”);
to the Group’s mobile applications, including the Mistertemp’ mobile application (hereinafter the “Applications”);
to the recruitment, temporary work and placement activities carried out by the Group and its network of partners and franchised agencies;
to the Group’s business relationships with its customers and prospects.

It is organised in two parts:

Part 1 : common provisions, applicable to all data subjects;

Part 2 : provisions specific to each audience, describing, for each category of persons, the data processed, the purposes pursued, the legal bases and the retention periods.

2. Who is the controller of your data?

The data controller is ALPHYR, a simplified joint-stock company (société par actions simplifiée) with share capital of 307,500 euros, registered with the Nanterre Trade and Companies Register under number 512 098 468, whose registered office is located at 12-22 boulevard Victor Hugo, 92110 Clichy (hereinafter “Mistertemp’”, “we”), which operates, in particular, the following brands:

Aquila RH;
Lynx RH;
Vitalis RH;
Mistertemp’
and Mistertemp’Plus.

The Group has appointed a data protection officer (“DPO”), who can be contacted at protectiondesdonnees@mistertemp-group.com or by post at the address given in the article “How to exercise your rights?”

3. Who does what? Controller and processor

Depending on the processing operation, Mistertemp’ acts as data controller or as processor. The table below specifies the role adopted. This may change as the purposes and their processing evolve.

Processing operation	Role adopted
Browsing the Sites, contact forms, newsletter, cookies and trackers	Mistertemp’ is the data controller (Section A)
Demo and quote requests, commercial prospecting, content downloads, management of the Mistertemp’-customer relationship	Mistertemp’ is the data controller (Section B)
Creation and management of the account of the establishment using the Mistertemp’Plus solution, professional user accounts, invoicing, security and logging	Mistertemp’ is the data controller (Section C)
Applications sent to Mistertemp’ or to the network’s agencies (website, email, job boards), CV database, interviews, reference checks	Mistertemp’ is the data controller (Section D)
Management of temporary assignments, placements, payroll, health and safety, work organisation and training of temporary workers and placed employees	Mistertemp’ is the data controller (Section E)
Pool of replacement staff built by an establishment using the Mistertemp’Plus solution: import of the existing list, invitations by email, SMS, link or QR code, posting of assignments to the pool, favourites, history of replacements	The establishment is the data controller; Mistertemp’ acts as processor (Section F)

4. Who is this policy for?

Find the section that applies to you below. The same person may successively fall into several categories.

You are...	Applicable section
A visitor to one of the Group’s Sites	Section A — Visitors to the Sites (including cookies and trackers)
A professional contact at a customer or prospect company or establishment: you request a demo or a quote	Section B — Contacts at customers and prospects
An establishment or company that creates an account to use the Mistertemp’Plus solution, and its users	Section C — Establishments using the Mistertemp’Plus solution and their users
A candidate who applies for a vacancy, submits a CV or is contacted with a view to a temporary assignment or a fixed-term or permanent placement directly with a Group brand;	Section D — Candidates
A temporary worker or an employee placed by the Group with a user company or establishment	Section E — Temporary workers, placed employees
A candidate invited by an establishment using the Mistertemp’Plus solution to join its pool (by email, SMS, link or QR code)	Section F — Candidates invited by an establishment

5. How are your data collected?

Most of your data are obtained directly from you. Where they are collected through a form, the necessary and therefore mandatory fields are marked with an asterisk (*). If they are not completed, your request, your application or the creation of your account cannot be processed.

Some data may be collected indirectly, that is, passed on by third parties or obtained from third-party sources:

from a company using the Platforms that has added you to its pool or invited you to join it, in particular when it imports its list of replacement staff from a file or invites you by email or SMS;
via platforms that connect employers and candidates (“job boards”), offering in particular access to a shared CV database and the sorting and assessment of profiles against a vacancy;
on professional social networks;
from the tax authorities, as regards your personalised withholding tax rate, under our legal obligation to collect income tax;
from user companies and establishments, as regards assignment evaluations and the information required to monitor working time;
from public sources and professional data providers (directories, databases of healthcare and medico-social establishments, legal registers), as regards B2B prospecting data.

6. Do we process sensitive data?

We do not collect sensitive data within the meaning of Article 9 of the GDPR, with the exception of health data strictly necessary for the performance of our obligations relating to occupational health and safety (occupational health monitoring, reporting and management of workplace and commuting accidents, provident and healthcare cover files, requests for workstation adjustments), processed on the basis of Article 9(2)(b) of the GDPR.

In the healthcare and medico-social sector, the professional qualifications of care staff (state-registered nurse, care assistant, hospital service agent, etc.), their diplomas and their registration numbers with a professional body do not constitute health data: they are data relating to professional life. No patient health data are processed.

We ask you not to communicate sensitive data in free-text comment fields, in your CV or in your exchanges with our teams.

7. Automated decision-making, algorithms and machine learning

In order to offer suitable assignments and positions more quickly, we use decision-support tools, some of which are based on artificial intelligence: CV analysis, matching between vacancies and profiles, and identification of relevant profiles according to qualifications, location and availability. We inform you explicitly when we use an AI system to assess or sort your application (via our job offers or our privacy policy).

These tools are an aid: every decision to assign an assignment, make a placement or recruit is taken by a person, who reviews your profile and may depart from the tool’s suggestion. They are based on objective, professional criteria, are subject to regular checks to prevent any bias, and analyse neither your emotions nor your biometric characteristics, in compliance with the GDPR and Regulation (EU) 2024/1689 on artificial intelligence.

You may at any time obtain explanations of how these tools work and of their role in a decision concerning you, request that your situation be reviewed by a member of staff and express your point of view, by writing to our data protection officer.

8. Who are the recipients of your data?

Your data may be disclosed, within the limits of their respective remits and depending on the purposes pursued, to the following recipients.

Internal recipients

staff responsible for managing candidates, temporary workers and customer accounts, namely the sales and agency teams, the support teams, the technical teams and the payroll teams;
IT department staff;
the Group’s data protection officer.

External recipients

the Group’s entities and the franchised entities of the Mistertemp’ Group network, in particular the agencies called upon when an assignment cannot be filled from an establishment’s pool;
partner agencies designated by an establishment using the MistertemPlus’ solution, when it chooses to send them a staffing need;
occupational health staff;
persons responsible for financial auditing (statutory auditors, chartered accountants);
public bodies and bodies entrusted with a public service mission, in order to meet our legal obligations (URSSAF, pension and provident funds, CIBTP, tax authorities, etc.);
banks and financial institutions holding the accounts used;
our processors involved in carrying out the processing (hosting, software publishers, CV extraction or anonymisation providers, email and SMS delivery providers, electronic signature tools, audience measurement and consent management tools), as well as our advisers in the course of their assistance engagements (lawyers, ministerial officers);
parties involved in corporate transactions (sale, merger, restructuring).

Our processors act only on our instructions and are bound, by a contract entered into in accordance with Article 28 of the GDPR, by confidentiality and security obligations.

9. Are your data transferred outside the European Union?

Your data are not transferred outside the European Union.

10. How are your data secured?

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, including:

encryption of communications between your device and our Sites, Platforms and Applications (HTTPS protocol);
data segregation: the pool of each establishment using the Mistertemp’plus solution is reserved for it and is neither shared nor pooled with any other establishment;
access rights management restricting access to data to those persons who need to know it, with differentiated user profiles;
individual authentication of users of our systems, storage of passwords in encrypted, non-reversible form, and access logging;
regular backups and tested restoration procedures;
contractual confidentiality and security commitments from our processors.

11. What are your rights over your data?

You have the following rights over your personal data.

Right of access

You have the right to obtain confirmation as to whether or not your data are being processed and, where they are, to obtain a copy of your data and the following information:

the purposes of the processing;
the categories of data concerned;
the recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged retention period or, if not possible, the criteria used to determine that period;
the existence of the right to request rectification or erasure of your data, restriction of processing, or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the data are not collected from you, any available information as to their source;
the existence of automated decision-making, including profiling, and meaningful information about the logic involved;
where data are transferred to a third country or an international organisation, the appropriate safeguards relating to the transfer.

Right to rectification

You have the right to request at any time that your inaccurate or incomplete data be rectified and completed.

Right to erasure

Except where the law requires us to retain them, you have the right to obtain the erasure of your data without undue delay where one of the following grounds applies:

the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw your consent, where the processing is based on it, and there is no other legal ground;
you object to the processing and there are no overriding legitimate grounds for continuing it;
the data have been unlawfully processed;
the data must be erased to comply with a legal obligation to which we are subject;
the data have been collected in relation to the offer of information society services to minors.

Right to restriction of processing

You have the right to obtain restriction of processing where:

you contest the accuracy of your data, for a period enabling us to verify it;
the processing is unlawful and you prefer restriction to erasure;
we no longer need your data but you still require them for the establishment, exercise or defence of legal claims;
you have objected to the processing, pending verification of our legitimate grounds.

Right to object

You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. We will then stop processing your data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

You may object to commercial prospecting at any time and without giving reasons, by using the unsubscribe link in each of our messages or by writing to our data protection officer.

Right to data portability

You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format, or to transmit them to another data controller. This right is not general: it applies only to automated processing based on your consent or on a contract, and excludes processing based on a legal obligation or on our legitimate interests.

Right to withdraw your consent

Where processing is based on your consent, you may withdraw it at any time without having to give reasons. Such withdrawal does not affect the lawfulness of processing carried out before it.

Right to set post-mortem directives

You may give our services specific directives regarding the retention, erasure and disclosure of your data after your death. These specific directives concern only the processing we carry out and are limited to that scope.

12. How to exercise your rights?

You may submit any request concerning the exercise of your rights by contacting our data protection officer at protectiondesdonnees@mistertemp-group.com, or by post:

For the attention of the Data Protection Officer, Mistertemp’group

12-22 boulevard Victor Hugo

92110 CLICHY

Proof of identity may be requested from you under the conditions of Article 77 of Decree No. 2019-536 of 29 May 2019 implementing Law No. 78-17 of 6 January 1978. The exercise of one of these rights may be refused if your request does not meet the conditions laid down by the regulations; in that case, you will be given the reasons for the refusal.

We will respond to your request within one month of its receipt; this period may be extended by two months, taking into account the complexity and number of requests, in which case you will be informed.

If you are in the pool of a healthcare establishment using the Mistertemp’Plus solution (Section F) and your request concerns data managed by that establishment, please contact the establishment concerned first, as it is the data controller. We will pass on your request if you send it to us, but only the establishment is able to respond to it within that scope.

13. How to lodge a complaint with the CNIL?

If you consider that the processing of your data does not comply with legal and regulatory provisions, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

online: https://www.cnil.fr/fr/plaintes ;
by post: Commission nationale de l’informatique et des libertés, Service des plaintes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

14. Cookies, pixels and other trackers

The placing and reading of cookies and other trackers on your device when you browse the Sites, Platforms and Applications, as well as the use of tracking pixels in our emails, are described in the consent banner and via the footer of each of the Sites.

15. Changes to this policy

This policy may be amended to take account of changes in our services, our processing operations or the applicable regulations. The date of the last update appears at the top of the document. In the event of a substantial change, we will inform you by any appropriate means, in particular by email or by a notice displayed on the Sites, Platforms and Applications, before it takes effect.

Part 2 — Provisions specific to each audience

Section A — Visitors to the Sites

This section applies whenever you browse one of the Group’s Sites, whether or not you create an account there. It includes the policy on cookies and other trackers.

A.1 What data are processed?

browsing and technical data (IP address, login identifiers, browser type and version, operating system, pages viewed, date and time of visit, length of visit, referring site);
the data you enter in our contact forms and, where applicable, your email address if you subscribe to our communications;
data relating to your choices regarding cookies and other trackers.

A.2 Purposes and legal bases

Purposes	Sub-purposes	Legal basis for processing
Provision and operation of the Sites	displaying pages and managing sessions managing your account and your preferences	Mistertemp’s legitimate interests, namely providing functional sites, and performance of a contract (terms of use) for account management
Security of the Sites and fraud prevention	detecting and preventing attacks, misuse and attempted fraud	Mistertemp’s legitimate interests, namely ensuring the security of its systems
Retention of connection data	—	Legal obligation (Article L. 34-1 of the French Postal and Electronic Communications Code and Decree No. 2021-1362 of 20 October 2021)
Audience measurement and traffic statistics	analysing the use of the Sites and page performance	Consent (Article 82 of the French Data Protection Act), except where configured to be exempt from consent in accordance with CNIL recommendations
Advertising and personalisation cookies and trackers	personalised or non-personalised advertising sharing content on social networks A/B testing and behavioural analysis	Consent (Article 82 of the French Data Protection Act)
Managing your contact requests	responding to your requests and questions	Mistertemp’s legitimate interests, namely providing you with the information requested
Sending the newsletter and information communications	—	Consent
Managing requests to exercise rights	—	Legal obligation

A.3 Retention periods

Purposes	Active database	Intermediate archiving
Operation of the Sites and account management	Browsing session; for accounts: until their deletion or 2 years of inactivity	—
Security of the Sites	1 year for security logs	—
Retention of connection data	1 year from the connection	—
Audience measurement	Trackers: 13 months maximum	—
Advertising and personalisation cookies and trackers	13 months maximum from placement	—
Choices expressed regarding cookies	6 months in the event of refusal or acceptance	—
Management of contact requests	The time strictly necessary to process the request	If necessary, archiving for a maximum of 2 years
Newsletter and information communications	Until you withdraw your consent (unsubscribe) or 2 years without any interaction on your part	—
Managing requests to exercise rights	The time needed to process the request	5 years from the response, except for requests relating to the right to object, which are kept for 6 years

A.4 Cookies and other trackers

A.4.1 Purpose and scope

Cookies and other trackers may be placed on, or read from, your device when you browse the Group’s Sites, Platform and/or Application, as may tracking pixels contained in the emails we send you. Mistertemp’ and its partners place cookies and trackers that enable them, in particular, to measure the audience of the Sites.

A.4.2 What is a cookie?

A cookie is a file that a site places in your device’s browser so that the site can remember who you are. We use cookies to make it easier for you to browse our Sites and for other features, including for traffic analysis purposes. Cookies can also recognise when you are logged in and offer you personalised content. Some cookies may collect personal data, including information you disclose (for example your username) or where these cookies track your browsing in order to offer you relevant advertising content.

A.4.3 Categories of cookies that may be used

Functional or strictly necessary cookies (always active). These cookies are necessary for the Site to function and cannot be switched off in our systems. They are usually set in response to actions you have taken that amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block these cookies or to alert you to them, but some parts of the Site may be affected. They are exempt from consent.

Preference and functionality cookies. These cookies make it possible to improve and personalise the Site’s features. They may be enabled by our teams or by third parties whose services are used on the pages of our Sites. If you do not accept these cookies, some or all of these services may not work properly.

Statistics and performance cookies. These cookies allow us to determine the number of visits and the sources of traffic, in order to measure and improve the performance of our Sites. They also help us identify the most and least visited pages and assess how visitors navigate the Site. The information collected is used in statistical and aggregated form. If you do not accept these cookies, we will not know about your visit, except where audience measurement is configured so as to be exempt from consent in accordance with CNIL recommendations.

Marketing and targeted advertising cookies. These cookies may be placed on our Sites by our advertising partners. They may be used by these companies to build a profile of your interests and show you relevant advertising on other sites or applications. They are based on the unique identification of your browser and your device. If you do not allow these cookies, you will see less targeted advertising.

A.4.4 List of trackers

The detailed list of trackers placed on each Site is available from the cookie management module.

A.4.5 Tracking pixels in our emails

Our emails may contain tracking pixels: invisible images which, when loaded as you open the message or display its images, inform us that it has been opened and, where applicable, of the links you click.

This information makes it possible to compile delivery statistics, manage mailing lists and personalise the content of messages, the sending frequency or the communication channel. Their use for marketing analysis purposes is based on your consent, in accordance with the CNIL recommendation on tracking pixels in emails (see also Section B).

A.4.6 How to express, change and withdraw your choices?

For cookies. On your first visit, a banner is displayed before any non-exempt tracker is placed. It allows you, with the same degree of visibility and in the same number of clicks, to accept or refuse all trackers, or to access settings purpose by purpose. No box is pre-ticked and continuing to browse does not constitute consent. You can change your choices at any time, including to withdraw consent already given, via the tracker management module accessible from the footer of each Site. Withdrawing consent is as easy as giving it.

For pixels in emails:

you can withdraw your consent at any time, as easily as you gave it, via the link in the footer of each of our messages ; if you encounter any difficulty, you can contact us and we will reply as soon as possible;
refusing does not deprive you of any content: you will continue to receive the communications to which you are subscribed.

A.4.7 Changes

This point may be amended to take account of changes in our tools or in the applicable regulations. Any substantial change to the purposes or to the list of third parties will give rise to a new request for your consent.

Section B — Contacts at customers and prospects

This section applies when you contact us in your professional capacity, on behalf of a customer or prospect company or healthcare or medico-social establishment: request for a demonstration, download of documentation, request for a quote or for the provision of staff, or follow-up of the business and contractual relationship.

B.1 What data are processed?

your professional identification and contact data (surname, first name, job title, company or establishment, professional email address and telephone number, address and postcode);
data relating to your request (type and size of the company or establishment, staffing needs, qualifications sought, volumes, preferred call-back slot, free-text comments);
data relating to the business relationship (exchanges, demonstrations given, quotes, staff provision, placement or subscription contracts, orders, assignment history, invoicing and payments);
data relating to your contact preferences and to any objection on your part to receiving our commercial communications;
where applicable, open and click data for our emails, under the conditions set out in point A.4.

B.2 Purposes and legal bases

Purposes	Sub-purposes	Legal basis for processing
Management of requests for demonstrations, quotes and introductions	qualifying your need and responding to your request organising and conducting the demonstration preparing and sending commercial proposals	Performance of pre-contractual measures taken at your request
Provision of content (brochure, documentation, webinars)	sending the requested document and following up the request	Performance of pre-contractual measures taken at your request
Management of the contractual relationship	conclusion and follow-up of staff provision, placement and subscription contracts follow-up of assignments and of evaluations of the staff deployed management of timesheets and invoicing	Performance of a contract
Accounting and invoicing	—	Mistertemp’s legal obligations
Commercial prospecting	sending information and offers relating to our services by email, telephone or post organising commercial operations and invitations to events	Mistertemp’s legitimate interests, namely promoting its services to professionals whose activity is related to the subject of the solicitation (Article L. 34-5 of the French Postal and Electronic Communications Code), subject to your right to object
Measuring engagement with our electronic communications	open and click statistics for marketing analysis purposes	Consent (Article 82 of the French Data Protection Act), in accordance with the CNIL recommendation on tracking pixels in emails
Producing commercial statistics	—	Mistertemp’s legitimate interests, namely understanding market trends and improving its business
Debt recovery, management of pre-litigation and litigation	—	Mistertemp’s legitimate interests, namely defending its rights and interests
Managing requests to exercise rights	—	Legal obligation

B.3 Retention periods

Purposes	Active database	Intermediate archiving
Management of requests for demonstrations and quotes (prospects)	3 years from your last contact	If necessary, archiving for a maximum of 5 years
Management of the contractual relationship (customers)	Throughout the business relationship	5 years from the end of the contractual relationship, under the applicable limitation period
Accounting and invoicing	Current financial year	10 years from the close of the financial year (Article L. 123-22 of the French Commercial Code)
Commercial prospecting	3 years from your last contact, or until you object	—
Measuring engagement with our electronic communications	Open and click data: 25 months maximum; in the event of refusal, your consent may be requested again no earlier than 6 months later	—
Debt recovery, pre-litigation and litigation	pre-litigation: until the dispute is settled amicably or, failing that, until the corresponding action becomes time-barred litigation: until no further appeal is possible against the decision handed down	—
Managing requests to exercise rights	The time needed to process the request	5 years from the response, except for requests relating to the right to object, which are kept for 6 years

Section C — Establishments using the Mistertemp’Plus solution and their users

This section applies when your establishment or company creates an account on the Mistertemp’Plus solution and when you are an authorised user of it: management, healthcare manager, human resources manager, scheduler, payroll officer or any other person to whom access is granted.

The data in the pool of replacement staff built by your establishment fall under Section F and the allocation of roles set out in your contract with our Group.

C.1 What data are processed?

the establishment’s identification data (company name, legal form, SIREN/SIRET number, FINESS number where applicable, address, type of establishment and capacity);
your professional identification and contact data (surname, first name, job title, department, professional email address and telephone number);
your account and access rights data (username, password stored in encrypted, non-reversible form, profile and access rights, date of creation and last login);
technical and logging data (IP address, device, browser, connection and activity logs);
usage data (assignments created, saved templates, posting methods chosen, coverage rate, service settings, qualifications and assignment locations);
data relating to the settings of your pool (favourite replacement staff, designated partner agencies);
invoicing and payment data, as well as exchanges with our support and training teams.

C.2 Purposes and legal bases

Purposes	Sub-purposes	Legal basis for processing
Creation and management of the establishment’s account and of user accounts	opening the account, initial setup and data migration managing usernames, profiles and access rights authentication and session management	Performance of the contract entered into with the establishment and of the terms of use
Provision of the features of the Mistertemp’Plus solution	creating and duplicating assignments and templates posting assignments (cascade, posting to the whole pool, agency, direct allocation) generating DPAEs (pre-employment declarations) and contracts, monitoring replacements	Performance of a contract
Onboarding, training and customer support	handling your support requests, setup and training sessions	Performance of the contract and Mistertemp’s legitimate interests, namely the proper performance of its services
Security of the Mistertemp’Plus solution, traceability and fraud prevention	logging of access and actions detection of abnormal or abusive use	Mistertemp’s legitimate interests, namely ensuring the security and integrity of the Mistertemp’Plus solution, and legal obligations
Invoicing, accounting and debt recovery	—	Performance of the contract and Mistertemp’s legal obligations
Service improvement and usage statistics	measuring feature usage and performance producing aggregated and anonymised indicators	Mistertemp’s legitimate interests, namely improving the quality and usability of its solution
Product information and service-related communications	operational notifications and assignment-related alerts information on developments in the Mistertemp’Plus solution	Performance of the contract for operational notifications; Mistertemp’s legitimate interests for product information, subject to your right to object
Managing requests to exercise rights	—	Legal obligation
Management of pre-litigation and litigation	—	Mistertemp’s legitimate interests, namely defending its rights and interests

C.3 Retention periods

Purposes	Active database	Intermediate archiving
Establishment account and user accounts	for the establishment: throughout the contractual relationship for a user: until their access is removed by the establishment, or 2 years if the account is inactive	If necessary, archiving for a maximum of 5 years from the end of the contractual relationship
Content created in the Mistertemp’Plus solution (assignments, templates, replacement history)	Throughout the contractual relationship	5 years from the end of the contractual relationship, under the applicable limitation period
Customer support, training and setup	The time strictly necessary to process the request	If necessary, archiving for a maximum of 5 years
Invoicing and accounting	Current financial year	10 years from the close of the financial year (Article L. 123-22 of the French Commercial Code)
Usage statistics	The time needed to produce the statistics, then deletion; anonymous statistics are kept indefinitely	—
Managing requests to exercise rights	The time needed to process the request	5 years from the response, except for requests relating to the right to object, which are kept for 6 years
Debt recovery, pre-litigation and litigation	pre-litigation: until the dispute is settled amicably or, failing that, until the corresponding action becomes time-barred litigation: until no further appeal is possible against the decision handed down	—

Section D — Candidates

This section applies when you are a candidate for a temporary assignment or for a placement on a fixed-term or permanent contract, whether your application reaches us via our Sites (response to a vacancy or profile submission), by email sent directly to Mistertemp’ or to a network agency, or via a job board platform.

When you fill in an application or registration form, you are also given an information notice at the time of collection.

D.1 What data are processed?

your identification data (surname, first name, sex, date and place of birth, nationality);
your contact and location data (postal address, email address, telephone number);
your data relating to your education, diplomas, certifications, languages spoken and licences;
your data relating to your career path and professional aspirations (employment history, positions sought, business sectors, experience, desired salary, availability);
your professional references;
data relating to your application, interviews and interview reports, as well as the results of tests and practical exercises (including personality tests);
the free-text comments you choose to send us.

D.2 Purposes and legal bases

Purposes	Sub-purposes	Legal basis for processing
Building a CV database or “candidate pool”	—	Performance of pre-contractual measures
Creation and management of candidate accounts	—	Performance of a contract (terms of use)
Contacting candidates	interviews and interview reports personality tests and practical exercises	Mistertemp’s legitimate interests, namely assessing how well profiles match its customers’ needs
Management of assignments and placements	automatic pre-qualification of profiles searching for relevant profiles communication by SMS, email or telephone	Performance of pre-contractual measures
Reference checks with third parties	contacting former employers or colleagues consulting professional social networks	Mistertemp’s legitimate interests, namely verifying the information provided
Producing commercial statistics	—	Mistertemp’s legitimate interests, namely understanding market trends and improving its business
Management of contact requests	answering your questions	Mistertemp’s legitimate interests, namely providing you with the information requested
Managing requests to exercise rights	—	Legal obligation
Management of pre-litigation and litigation	—	Mistertemp’s legitimate interests, namely defending its rights and interests
Machine learning	training algorithms using data from the candidate pool	Mistertemp’s legitimate interests, namely improving the efficiency and quality of its services

D.3 Retention periods

Purposes	Active database	Intermediate archiving
CV database / candidate pool	2 years from your last contact (application, appointment, update); you may request the withdrawal of your application at any time	If necessary, archiving for a maximum of 5 years
Candidate accounts	Until your account is deleted or after 2 years of inactivity	—
Contacting candidates	The time strictly necessary	If necessary, archiving for a maximum of 5 years
Management of assignments and placements	2 years from the last contact	If necessary, archiving for a maximum of 5 years
Reference checks	The time strictly necessary	If necessary, archiving for a maximum of 5 years
Commercial statistics	The time needed to produce the statistics, then deletion; anonymous statistics are kept indefinitely	—
Management of contact requests	The time strictly necessary	If necessary, archiving for a maximum of 5 years
Managing requests to exercise rights	The time needed to process the request	5 years from the response, except for requests relating to the right to object, which are kept for 6 years
Debt recovery, pre-litigation and litigation	pre-litigation: until the dispute is settled amicably or, failing that, until the corresponding action becomes time-barred litigation: until no further appeal is possible against the decision handed down	—

Section E — Temporary workers and placed employees

This section applies when you are a temporary worker (including on a permanent temporary employment contract) or an employee placed by the Group with a user company or establishment, and when you are part of our pool of temporary workers with a view to future assignments.

E.1 What data are processed?

your identity and contact data, as well as the contact details of your emergency contacts;
data relating to your assignment contracts and your assignments (user company, position, qualification, location, dates, assignment evaluations);
payroll and remuneration data (salary, bonuses, allowances, expense reimbursements, individual allocations);
tax data, in particular your personalised withholding tax rate;
your bank details;
data relating to working time, leave and absences;
data relating to occupational health and safety, under the conditions set out in Article 6 of the common provisions;
data relating to training (requests, sessions attended, knowledge assessments);
where applicable, data relating to disciplinary sanctions and litigation.

E.2 Purposes and legal bases

Purposes	Sub-purposes	Legal basis for processing
Management and administration of placements	management of contracts entered into with customer companies placement of candidates with customer companies	Mistertemp’s legitimate interests, namely placing profiles with companies
Management and administration of temporary workers	management of contracts with temporary workers and customers payroll management, including withholding tax management of direct and indirect remuneration and expense reimbursements management of the temporary worker’s entitlements management of disciplinary sanctions and litigation management of emergency contacts communication to user companies statistical reports on temporary workers, payroll analysis management of special constraints giving entitlement to leave and of individual allocations internal communications	Legal obligations, performance of a contract and Mistertemp’s legitimate interests, namely the proper administration of its staff
Management of the pool of temporary workers and subsequent applications	management and monitoring of candidate accounts receipt and analysis of assignment evaluations management of temporary workers’ profiles pre-selection of profiles according to qualifications and availability searching for relevant profiles updating of contact details	Performance of pre-contractual measures or Mistertemp’s legitimate interests, namely having up-to-date data
Sending offers tailored to profiles	contacting you by SMS, email or telephone to offer assignments	Performance of pre-contractual measures
Health and safety of temporary workers	reporting and management of workplace accidents occupational health appointments processing of provident and healthcare cover files prevention measures, assessment of working conditions and risk awareness protection in the event of a health crisis management of requests for workstation adjustments provision of safety equipment	Legal obligations (Article 9(2)(b) of the GDPR for health data)
Work organisation	preparation of the single staff register and the BSI management and monitoring of tasks management of staff provision or placement management and monitoring of leave and absences management of schedules and working time measurement of service quality and productivity	Mistertemp’s legitimate interests, namely the proper administration of its staff
Staff training	monitoring of training requests and completed training periods knowledge assessment organisation of training sessions	Legal obligations and Mistertemp’s legitimate interests
Managing requests to exercise rights	—	Legal obligation
Management of pre-litigation and litigation	—	Mistertemp’s legitimate interests, namely defending its rights and interests

E.3 Retention periods

Purposes	Active database	Intermediate archiving
Management and administration of placements	The duration of the placement operation	If necessary, archiving for a maximum of 5 years
Management of temporary workers (contractual relationships, single staff register, monitoring and control of working time)	deletion after 2 years of inactivity reasons for absence: not kept beyond the payslips pre-litigation: until amicable settlement or the expiry of the limitation period litigation: until enforcement of the decision	if necessary, archiving for a maximum of 5 years payslips and contribution base calculation data: 5 and 6 years, 10 years as accounting records social security contributions and payroll tax: 3 years transfer orders: 10 years disciplinary sanctions: 3 years single staff register: 5 years after departure
Management of the pool of temporary workers	2 years from the last contact (application, appointment, update)	If necessary, archiving for a maximum of 5 years
Health and safety of temporary workers	The duration of the assignment or of the processing of the operation	Workplace accident reports: 5 years
Work organisation	The duration of the temporary worker’s assignment	if necessary, archiving for a maximum of 5 years reasons for absence: 5 years working time records: 1 year on-call duty: 1 year annual days-based working arrangement (forfait jours): 3 years
Continuing training	2 years from the last contact with the temporary worker	Possible archiving for 5 years after the temporary worker’s departure
Managing requests to exercise rights	The time strictly necessary to handle the request	5 years from the response, 6 years for the right to object
Debt recovery, pre-litigation and litigation	pre-litigation: until the dispute is settled amicably or, failing that, until the corresponding action becomes time-barred litigation: until no further appeal is possible against the decision handed down	—

Section F — Candidates invited by an establishment to join its Mistertemp’Plus pool

This section applies when an establishment invites you to join its pool of temporary replacement staff via the Mistertemp’Plus solution, by email, SMS, link or QR code, or when it registers you by importing its list of replacement staff.

In this case, it is the establishment that has built the pool: it decides who it registers in it, the assignments it offers them and how long it keeps their contact details. It is therefore the data controller. Mistertemp’ provides it with the tool enabling it to do so and acts as processor, solely on its instructions.

Mistertemp’ retains your data only under the conditions agreed with the establishment in their Contract.

Information on the processing of your data is provided to you when you fill in the pool registration form, in the establishment’s information notice, which you accept at that time. For any question about your presence in the pool, or the updating or deletion of your data, please contact the establishment that invited you first. You may also write to our data protection officer, who will pass on your request.

Privacy policy.