Hosting
# Which supplier is responsible for hosting the Service?
Microsoft Azure
# Where are the data stored?
European Union (main datacenter in France, backup datacenter in Ireland)
# Is the data transferred outside the EU?
No.
# What security measures are in place?
Please refer to the "Security" section.
Sending Transactional Emails
# What is involved in sending Transactional Emails from the Service?
The Service works by sending personalized notifications to each of its users. These notifications are sent by email to their professional email account provided by the Customer when the user registered for the Service.
Some examples of emails sent by the Service to its users:
- Registration email
- Personalized email for profile completion suggestion
- Personalized email for opportunity suggestion
# Who is the supplier responsible for sending transactional emails?
Mailjet.
# Where is the supplier responsible for sending transactional emails located?
European Union
# What type of data does the supplier responsible for sending transactional emails process?
The supplier only processes the data required to send each email: the recipient's email address and the email template.
No other data is transmitted that is not required to send the email.
The supplier only stores this data for the purposes of email delivery.
# Is the data transferred outside the EU?
No.
# Does the supplier responsible for sending transactional emails own the data it processes?
No.
# Does the supplier responsible for sending transactional emails sell the data it processes?
No.
# Does the supplier responsible for sending transactional emails segregate the processing by Customer?
Yes: use of API keys specific to each Customer.
# What is the SLA of the supplier responsible for sending transactional emails?
99,99%
# Does the supplier responsible for sending transactional emails keep the data it processes at the end of the Contract with the supplier?
No.
# What is the path taken by the emails?
From the Service to the supplier: by encrypted API (HTTPS connection) and authenticated (by a pair of public/private API keys specific to each Customer).
From the supplier to the Customer's email server: by encrypted connection (TLS).
For more information:
https://fr.mailjet.com/dpa/\
https://fr.mailjet.com/privacy-policy/\
https://fr.mailjet.com/terms-and-conditions
Integration aggregation
# What is the aggregation of integrations for the Service ?\
The Service is based on the exchange of data between 365Talents and its customers. In particular, API integrations between the customer's HRIS and the platform are necessary to offer a consistent experience. For example, with SmartRecruiters, Talentsoft or SAP SuccessFactors.\
To make integration with these tools easier and more robust, 365Talents relies on a supplier specializing in integrations with HRIS software, who acts as a single point of contact between 365Talents Service and a large number of HRIS tools.
# Who is the supplier in charge of the aggregation of integrations?
Kombo: https://www.kombo.dev/\
# Where is the supplier responsible for the aggregation of integrations?
European Union
&#xNAN;# What type of data does the integration aggregation supplier process?
The supplier processes all data in transit between the customer's HRIS software(s), connected by API to the subcontractor, and the 365Talents platform.
Please note that data is only processed by the supplier once the connection has been established between the HRIS software(s) and the subcontractor, which requires positive action on the part of the customer, who must provide connection parameters and authorize the connection.
# Is data transferred outside the EU?
No.
# Does the integration aggregation supplier own the data it processes?
No.
# Does the integration aggregation supplier resell the data it processes?
No.
# Does the integration aggregation supplier partition processing by Customer?
Yes: use of customer-specific API keys.
# What is the SLA of the integration aggregation supplier?
99,9%
&#xNAN;# Does the integration aggregation supplier keep the data it processes once the contract with the supplier has expired?
No.
# What is the path taken by the data?
See the standard data flow: Kombo Data Flow
Service activity monitoring
# What does Service activity monitoring involve?
365Talents' teams measure for reporting purposes the quality of the Service, its usage and functionality.
A supplier provides a tool used internally by the 365Talents' R\&D team to improve the user experience. It enables the 365Talents' R\&D team to know which features of the platform are being used and which aren't, in order to improve the product and produce anonymous reports.
This Supplier does not process data, only activities (clicks, paths).
# Which supplier provides the tool used for monitoring the Service's activity?
Mixpanel, an American company, hosting data in the European Union.
# Where are the infrastructures of this supplier located?
European Union
# Is data transferred outside the EU?
No.
# What type of data does the supplier process?
Strictly no personal data is transmitted to the supplier.
Strictly no Customer data is transmitted to the supplier.
Only anonymous usage tracking is transmitted.
# Is the monitoring of Service activity necessary for the Service to function?
No.
Activity tracking does not contribute to the Service.
It is only used for reporting purposes on the quality of the Service, its uses and its functionalities.
# Does a disruption in the monitoring of the Service's activity affect the proper functioning of the Service?
No.
# Does the supplier own the data it processes?
No.
# Does the supplier resell the data it processes?
No.
# Does the supplier retain the data it processes at the end of the Contract with the supplier?
No.
Technical management of static content
# What does the technical management of the Service's static content involve?
The technical management of static content consists of providing a tool that enables all the texts ("wordings") displayed in several languages on the platform to be maintained and developed over time, such as button texts ("Log in"), titles ("Welcome to 365Talents", "Skills management"), error messages ("Oops, an error happened!"), etc.
A supplier provides an application used internally by 365Talents' R\&D team to maintain a consistent and complete set of static texts in all languages supported by the Service.
The supplier does not process User data or Personal data.
# Who is the supplier used for the technical management of the static content of the Service?
Lokalise, an American company.
# Where are the infrastructures of the supplier used for the technical management of the static content of the Service located?
United States
# What type of data does the supplier used for the technical management of the static content of the Service process?
Strictly no personal data is transmitted to the supplier.
Strictly no User or Personal data is transmitted to the supplier.
Only static content is transmitted.
# Is the technical management of the Service's static content necessary for the Service to function?
No.
# Will disruption to the technical management of the static content of the Service affect the correct operation of the Service?
No.
# Does the supplier used for the technical management of the static content of the Service own the data it processes?
No.
# Does the supplier used for the technical management of the static content of the Service resell the data it processes?
No.
# Does the supplier used for the technical management of the static content of the Service keep the data it processes at the end of the Contract with the Supplier?
No.
Technical support management
# What does the technical management of the Service Support consist of?
365Talents provides Support by email to the team in charge of the Customer's Project. This support is provided by the 365Talents' Customer Support team. The technical management of Service Support consists of providing 365Talents' Customer Support team with a digital tool capable of referencing support requests, listing urgent requests and proposing a response in a timely manner.
A supplier therefore provides an application used internally by 365Talents' Customer Support team in order to offer quality support.
The supplier only processes the data required to ensure good contact with the people in charge of the Customer's Project when they use the support service (including email address) and for incident resolution (including incident description).
# Which supplier is used for the technical management of Service Support?
Hubspot, an American company (USA)
# Where are the infrastructures of the supplier used for the technical management of the Service Support?
North America
# Is data transferred outside the EU?
Yes.
# What type of data does the supplier used for the technical management of the Service Support process?
The supplier processes :
- the data required to ensure good contact with people using the support service, including their email address;
- the data required to resolve incidents, including the incident description.
# Is the technical management of Service Support necessary for the operation of the Service?
No.
# Does a disruption to the technical management of the Service Desk Support have an impact on the correct operation of the Service?
No.
# Does the supplier used for the technical management of the Service Support own the data it processes?
No.
# Does the supplier used for the technical management of the Service Support resell the data it processes?
No.
# Does the supplier used for the technical management of the Service Support retain the data it processes at the end of the Contract with the Supplier?
No.
Technical management of User Guides
# What does the technical management of User Guides involve?
The User Guides are an instructional service for users browsing our platform (FAQ) to help them understand how to use the platform.
# Which supplier is used for the technical management of the User Guides?
Stonly, a French company (European Union)
# Where are the infrastructures of the supplier used for the technical management of User Guides located?
European Union
# Is data transferred outside the EU?
No.
# What type of data does the supplier used for User Guides process?
The Service Provider processes the data required to display the correct User Guide, in particular the current page of the application.
No Customer data is communicated to this service provider.
No Personal data is communicated to this service provider.
# Is the technical management of the Service's User Guides necessary for the operation of the Service?
No.
# Does a disruption in the technical management of the Service's User Guides affect the correct operation of the Service?
No.
# Does the supplier used for the technical management of the Service's User Guides own the data it processes?
No.
# Does the supplier used for the technical management of the Service's User Guides resell the data it processes?
No.
# Does the supplier used for the technical management of the Service User Guides keep the data it processes at the end of the Contract with the Supplier?
No.
Administrative information
365Talents
Head office location: France (65 COURS DE LA LIBERTE, 69003 LYON)
RCS Lyon 81221580400012
Mailjet SAS
Head office location: FRANCE (4 rue Jules Lefebvre 75009 Paris)
RCS Paris B 524 536 992
Contact details of the DPO or privacy contact : privacy@mailgun.com
Kombo
Headquarter : Kombo Technologies GmbH, Kottbusser Damm 25-26, 10967 Berlin
VAT ID : DE356992199
Commercial Register : Amtsgericht Charlottenburg (Berlin) HRB 244447 B
Represented by its managing director : Alexander Kübel
Contact : contact@kombo.dev
Microsoft Ireland Operations Limited
Head office location: Ireland (One Microsoft Place, South County Business Park, Leopardstown, DUBLIN 18 D18 P521)
Registered number: IE 256796
Generic contact address : https://aka.ms/privacyresponse
Contact details of the DPO or privacy contact : Microsoft EU Data Protection Officer at: Microsoft Ireland Operations Limited, Attn: Data Protection Officer, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Telephone: +353 1 706 3117.
STONLY
Company domiciled in France; data hosted in the European Union. STONLY provides us with a user guide management service. No Customer or User data is communicated to this service provider.
Head office location: France (36 rue Chaptal, 92300 Levallois)
RCS Nanterre 841 193 667
HUBSPOT
Company domiciled in Slovakia; data hosted in the European Union. HUBSPOT provides us with a ticketing and support tool for platform administrators. We use this service to respond efficiently to requests from the teams in charge of the Project at our Customers' sites. The data required to contact these teams (including the email address) and to resolve incidents (including the incident description and the history of exchanges) are transmitted to this service provider.
Head office location: Dublin (European HQ), 1 Sir John Rogerson's Quay, Dublin 2
MIXPANEL
Company domiciled in the United States; data hosted in the European Union. MIXPANEL provides us with a service for monitoring activity on our platform. We use this service to consolidate information for reporting and development purposes. No client, user or personal data is communicated to this service provider, as the monitoring is entirely anonymous.
Head office location: USA (405 Howard Street 2nd Floor, San Francisco, California 94105, United States)
LOKALISE
Company domiciled in the United States; data hosted in the United States. LOKALISE provides us with a static content management service. We use this service to manage static texts (wordings) displayed in several languages on the platform. No Customer, User or Personal data is communicated to this service provider.
Head office location: USA (3500 South DuPont Highway, Suite BZ-101, Dover, DE 19901)