RSight® Privacy Policy - Candidates
12/12/2025
Introduction
The company RSIGHT (a simplified joint stock company with share capital of €57 389,15, whose registered office is located at 17 RUE DUMONT D'URVILLE, 75016 PARIS, registered in the Paris Trade and Companies Register under number 890 710 478 and represented by Mr Philippe BEUCHER, hereinafter referred to as "RSight") offers its customers recruitment assistance services. The services offered by RSight are described on its website: https://rsight.com/
In the course of carrying out its services on behalf of these customers, RSight collects personal data from individuals who make their Curriculum Vitae (CV) available on specialized websites or professional social networks.
RSight is committed to the respect of privacy and the protection of personal data and strives to provide a framework of trust in the collection of personal data of candidates who may be of interest to recruiters. The conditions for collecting, processing, storing and transmitting the personal data of potential candidates, as well as the conditions for exercising rights, are detailed in this Confidentiality Policy.
This confidentiality policy concerns "Candidates" (You) as natural persons who may be of interest to recruiters with regard to their experience, academic and professional background, and information that may appear on a CV or professional social network. We have tried to ensure that the information concerning the data processing carried out is concise, transparent and easy to understand. If you have any questions about this Policy, please send an email to dpo@rsight.com.
What is the purpose of this Confidentiality Policy ?
RSight (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of candidates whose information may be processed as part of our AI-assisted recruitment services. This Privacy Policy explains how RSight processes personal data of candidates (“You”), the purposes of such processing, and your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the CNIL Recruitment Reference Framework, and the EU Artificial Intelligence Act (Regulation (EU) 2024/1689). All data processing is carried out for a legitimate, specific and explicit purpose. We undertake to collect and use only personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed. RSight acts as the data controller for personal data processed within its AI-powered candidate search, matching and pre-screening tools. Where RSight transmits candidate data to its clients, each client acts as an independent data controller for its own recruitment activities.
What personal data is processed as part of the Services published by RSight® ?
Personal Data is collected either indirectly from third parties or directly from you.
In order to enable our services, and in particular our artificial intelligence systems, to identify Candidates who are relevant to a recruitment request made by a recruiter, or in the context of monitoring operations or searches for professional profiles, RSight collects personal data from third parties (for example: professional social networks, sites specializing in recruitment). To this end, RSight has entered into agreements with partners in order to collect, in particular via API, the personal data of relevant Candidates. Candidates are informed of the source of their data within one month of initial collection, in accordance with Article 14 GDPR.
The personal data that we collect indirectly and process may be collected, structured, commented or enriched by us from :
- Other sources of information such as blogs, websites, articles, social networks (indirect collection);
- Interviews conducted by a physical or virtual recruiter (via chatbot incorporating automatic natural language processing technology) from RSight (direct collection). RSight uses AI-based algorithms employing natural language processing (NLP) to analyze candidate profiles and match them with job requirements. No fully automated decision-making occurs: every pre-selection or recommendation is subject to human review by a RSight recruiter or the client.
Candidates are informed that:
· AI matching uses objective data (skills, experience, keywords) and excludes protected characteristics (gender, ethnicity, age, etc.);
· RSight regularly audits and tests its AI systems to identify and correct potential biases;
· An internal AI Risk Management System is maintained as required by Articles 9–15 of the EU AI Act;
· RSight maintains documentation describing the model logic, data sources, and testing results (Annex IV AI Act – Technical Documentation).
The processing operations, their purposes and their legal basis are summarized in the table below:
Introduction
The company RSIGHT (a simplified joint stock company with share capital of €57 389,15, whose registered office is located at 17 RUE DUMONT D'URVILLE, 75016 PARIS, registered in the Paris Trade and Companies Register under number 890 710 478 and represented by Mr Philippe BEUCHER, hereinafter referred to as "RSight") offers its customers recruitment assistance services. The services offered by RSight are described on its website: https://rsight.com/
In the course of carrying out its services on behalf of these customers, RSight collects personal data from individuals who make their Curriculum Vitae (CV) available on specialized websites or professional social networks.
RSight is committed to the respect of privacy and the protection of personal data and strives to provide a framework of trust in the collection of personal data of candidates who may be of interest to recruiters. The conditions for collecting, processing, storing and transmitting the personal data of potential candidates, as well as the conditions for exercising rights, are detailed in this Confidentiality Policy.
This confidentiality policy concerns "Candidates" (You) as natural persons who may be of interest to recruiters with regard to their experience, academic and professional background, and information that may appear on a CV or professional social network. We have tried to ensure that the information concerning the data processing carried out is concise, transparent and easy to understand. If you have any questions about this Policy, please send an email to dpo@rsight.com.
What is the purpose of this Confidentiality Policy ?
RSight (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of candidates whose information may be processed as part of our AI-assisted recruitment services. This Privacy Policy explains how RSight processes personal data of candidates (“You”), the purposes of such processing, and your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the CNIL Recruitment Reference Framework, and the EU Artificial Intelligence Act (Regulation (EU) 2024/1689). All data processing is carried out for a legitimate, specific and explicit purpose. We undertake to collect and use only personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed. RSight acts as the data controller for personal data processed within its AI-powered candidate search, matching and pre-screening tools. Where RSight transmits candidate data to its clients, each client acts as an independent data controller for its own recruitment activities.
What personal data is processed as part of the Services published by RSight® ?
Personal Data is collected either indirectly from third parties or directly from you.
In order to enable our services, and in particular our artificial intelligence systems, to identify Candidates who are relevant to a recruitment request made by a recruiter, or in the context of monitoring operations or searches for professional profiles, RSight collects personal data from third parties (for example: professional social networks, sites specializing in recruitment). To this end, RSight has entered into agreements with partners in order to collect, in particular via API, the personal data of relevant Candidates. Candidates are informed of the source of their data within one month of initial collection, in accordance with Article 14 GDPR.
The personal data that we collect indirectly and process may be collected, structured, commented or enriched by us from :
- Other sources of information such as blogs, websites, articles, social networks (indirect collection);
- Interviews conducted by a physical or virtual recruiter (via chatbot incorporating automatic natural language processing technology) from RSight (direct collection). RSight uses AI-based algorithms employing natural language processing (NLP) to analyze candidate profiles and match them with job requirements. No fully automated decision-making occurs: every pre-selection or recommendation is subject to human review by a RSight recruiter or the client.
Candidates are informed that:
· AI matching uses objective data (skills, experience, keywords) and excludes protected characteristics (gender, ethnicity, age, etc.);
· RSight regularly audits and tests its AI systems to identify and correct potential biases;
· An internal AI Risk Management System is maintained as required by Articles 9–15 of the EU AI Act;
· RSight maintains documentation describing the model logic, data sources, and testing results (Annex IV AI Act – Technical Documentation).
The processing operations, their purposes and their legal basis are summarized in the table below:
How long is Candidate data kept ?
RSight® retains the personal data of Candidates:
Candidates contacted but unresponsive: data kept for a maximum of six (6) months from initial contact, then deleted or anonymized.
Candidates who interacted or gave consent: data retained for two (2) years from last contact or consent date, unless renewed.
Clients’ recruitment data: each client applies its own retention policy once candidate data is transferred.
After these periods, personal data are anonymized or irreversibly deleted, with deletion logs maintained for audit purposes.
Applicants may request the deletion of their data at any time under the conditions set out in article 5 below.
RSight's customers who receive Candidate data have their own confidentiality policies and procedures for processing personal data, which should be referred to for any request. Each Customer is responsible for the processing of Candidate data within its environment. RSight is in no way responsible for the conditions under which personal data is processed and stored by its customers.
Is data outsourced and/or shared and/or transferred outside the European Economic Area ?
We may share candidate data with:
RSight’s authorised recruiters and clients (subject to candidate consent);
Service providers hosting or maintaining our databases (e.g., Microsoft Azure, BoondManager – EU servers);
Where relevant, subcontractors outside the EEA offering equivalent protection (based on SCCs or adequacy decisions).
The data collected may be transferred to, accessed from and stored in a country outside the European Economic Area (the "EEA"). It may also be communicated to service providers located outside the European Economic Area. In this case, the data will only be transferred to service providers who provide adequate legal guarantees. These guarantees include, for example, the European Commission's adequacy decisions and standard contractual clauses, which notably commit the service provider or partner to respecting all measures necessary to ensure the security and confidentiality of the data.
What rights do you have over your data ?
As a Candidate, you have the following rights with regard to your personal data:
Right of access: you can obtain information about the processing of your personal data and a copy of that data.
Right to rectify your data: if you believe that your personal data is inaccurate, incomplete or out of date, you may request that it be amended accordingly.
Right to erasure of your data: you may request the erasure of your personal data to the extent permitted by law.
Right to restrict processing: you may request that the processing of your personal data be restricted in the cases provided for by legislation and regulations.
The right to define directives concerning the fate of your data after your death: you have the possibility of defining specific directives concerning the conservation, deletion and communication of your personal data after your death.
Right to the portability of your data: where this right applies, you have the right to have the personal data you have provided us with returned to you or, where technically possible, transferred to a third party.
Right to object: you may object at any time, on grounds relating to your particular situation, to the processing of your personal data for which the legal basis is legitimate interest.
Right to withdraw your consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time. We will then cease to process your personal data without affecting any previous operations for which you have given your consent.
Right of recourse: If necessary, and if any dispute is not resolved amicably, you always have the option of contacting the competent personal data protection authority to lodge a complaint (in France, the CNIL - 3
How can you exercise your rights to your data ?
If you have any queries about this privacy policy or wish to exercise any of the rights listed above, please send us an e-mail to dpo@rsight.com.
All data subject requests are processed within one month of receipt. RSight maintains a data rights register for compliance tracking.
In order to process your request as quickly as possible, we would be grateful if you could tell us exactly what you are looking for.
Is my data secure ?
We attach particular importance to the security of personal data.
RSight® has put in place technical and organisational measures appropriate to the degree of sensitivity of the personal data, with a view to ensuring the integrity and confidentiality of the data and protecting it against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.
Nonetheless, the security and confidentiality of personal data depend on good practice on the part of everyone involved, so everyone is encouraged to remain vigilant in this area.
Changes to this document
We invite you to consult this policy regularly on our website. It may be updated in line with the legal and regulatory context, Cnil policy and developments in the services operated by RSight®.
Contact Details
We invite you to consult this policy regularly on our website. It may be updated in line with the legal and regulatory context, Cnil policy and developments in the services operated by RSight®.
Changes to this document
This Privacy Policy may be updated periodically to reflect legal or operational changes.
The most recent version is always available at https://rsight.com/privacy-policy
How long is Candidate data kept ?
RSight® retains the personal data of Candidates:
Candidates contacted but unresponsive: data kept for a maximum of six (6) months from initial contact, then deleted or anonymized.
Candidates who interacted or gave consent: data retained for two (2) years from last contact or consent date, unless renewed.
Clients’ recruitment data: each client applies its own retention policy once candidate data is transferred.
After these periods, personal data are anonymized or irreversibly deleted, with deletion logs maintained for audit purposes.
Applicants may request the deletion of their data at any time under the conditions set out in article 5 below.
RSight's customers who receive Candidate data have their own confidentiality policies and procedures for processing personal data, which should be referred to for any request. Each Customer is responsible for the processing of Candidate data within its environment. RSight is in no way responsible for the conditions under which personal data is processed and stored by its customers.
Is data outsourced and/or shared and/or transferred outside the European Economic Area ?
We may share candidate data with:
RSight’s authorised recruiters and clients (subject to candidate consent);
Service providers hosting or maintaining our databases (e.g., Microsoft Azure, BoondManager – EU servers);
Where relevant, subcontractors outside the EEA offering equivalent protection (based on SCCs or adequacy decisions).
The data collected may be transferred to, accessed from and stored in a country outside the European Economic Area (the "EEA"). It may also be communicated to service providers located outside the European Economic Area. In this case, the data will only be transferred to service providers who provide adequate legal guarantees. These guarantees include, for example, the European Commission's adequacy decisions and standard contractual clauses, which notably commit the service provider or partner to respecting all measures necessary to ensure the security and confidentiality of the data.
What rights do you have over your data ?
As a Candidate, you have the following rights with regard to your personal data:
Right of access: you can obtain information about the processing of your personal data and a copy of that data.
Right to rectify your data: if you believe that your personal data is inaccurate, incomplete or out of date, you may request that it be amended accordingly.
Right to erasure of your data: you may request the erasure of your personal data to the extent permitted by law.
Right to restrict processing: you may request that the processing of your personal data be restricted in the cases provided for by legislation and regulations.
The right to define directives concerning the fate of your data after your death: you have the possibility of defining specific directives concerning the conservation, deletion and communication of your personal data after your death.
Right to the portability of your data: where this right applies, you have the right to have the personal data you have provided us with returned to you or, where technically possible, transferred to a third party.
Right to object: you may object at any time, on grounds relating to your particular situation, to the processing of your personal data for which the legal basis is legitimate interest.
Right to withdraw your consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time. We will then cease to process your personal data without affecting any previous operations for which you have given your consent.
Right of recourse: If necessary, and if any dispute is not resolved amicably, you always have the option of contacting the competent personal data protection authority to lodge a complaint (in France, the CNIL - 3
How can you exercise your rights to your data ?
If you have any queries about this privacy policy or wish to exercise any of the rights listed above, please send us an e-mail to dpo@rsight.com.
All data subject requests are processed within one month of receipt. RSight maintains a data rights register for compliance tracking.
In order to process your request as quickly as possible, we would be grateful if you could tell us exactly what you are looking for.
Is my data secure ?
We attach particular importance to the security of personal data.
RSight® has put in place technical and organisational measures appropriate to the degree of sensitivity of the personal data, with a view to ensuring the integrity and confidentiality of the data and protecting it against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.
Nonetheless, the security and confidentiality of personal data depend on good practice on the part of everyone involved, so everyone is encouraged to remain vigilant in this area.
Changes to this document
We invite you to consult this policy regularly on our website. It may be updated in line with the legal and regulatory context, Cnil policy and developments in the services operated by RSight®.
Contact Details
We invite you to consult this policy regularly on our website. It may be updated in line with the legal and regulatory context, Cnil policy and developments in the services operated by RSight®.
Changes to this document
This Privacy Policy may be updated periodically to reflect legal or operational changes.
The most recent version is always available at https://rsight.com/privacy-policy
How long is Candidate data kept ?
RSight® retains the personal data of Candidates:
Candidates contacted but unresponsive: data kept for a maximum of six (6) months from initial contact, then deleted or anonymized.
Candidates who interacted or gave consent: data retained for two (2) years from last contact or consent date, unless renewed.
Clients’ recruitment data: each client applies its own retention policy once candidate data is transferred.
After these periods, personal data are anonymized or irreversibly deleted, with deletion logs maintained for audit purposes.
Applicants may request the deletion of their data at any time under the conditions set out in article 5 below.
RSight's customers who receive Candidate data have their own confidentiality policies and procedures for processing personal data, which should be referred to for any request. Each Customer is responsible for the processing of Candidate data within its environment. RSight is in no way responsible for the conditions under which personal data is processed and stored by its customers.
Is data outsourced and/or shared and/or transferred outside the European Economic Area ?
We may share candidate data with:
RSight’s authorised recruiters and clients (subject to candidate consent);
Service providers hosting or maintaining our databases (e.g., Microsoft Azure, BoondManager – EU servers);
Where relevant, subcontractors outside the EEA offering equivalent protection (based on SCCs or adequacy decisions).
The data collected may be transferred to, accessed from and stored in a country outside the European Economic Area (the "EEA"). It may also be communicated to service providers located outside the European Economic Area. In this case, the data will only be transferred to service providers who provide adequate legal guarantees. These guarantees include, for example, the European Commission's adequacy decisions and standard contractual clauses, which notably commit the service provider or partner to respecting all measures necessary to ensure the security and confidentiality of the data.
What rights do you have over your data ?
As a Candidate, you have the following rights with regard to your personal data:
Right of access: you can obtain information about the processing of your personal data and a copy of that data.
Right to rectify your data: if you believe that your personal data is inaccurate, incomplete or out of date, you may request that it be amended accordingly.
Right to erasure of your data: you may request the erasure of your personal data to the extent permitted by law.
Right to restrict processing: you may request that the processing of your personal data be restricted in the cases provided for by legislation and regulations.
The right to define directives concerning the fate of your data after your death: you have the possibility of defining specific directives concerning the conservation, deletion and communication of your personal data after your death.
Right to the portability of your data: where this right applies, you have the right to have the personal data you have provided us with returned to you or, where technically possible, transferred to a third party.
Right to object: you may object at any time, on grounds relating to your particular situation, to the processing of your personal data for which the legal basis is legitimate interest.
Right to withdraw your consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time. We will then cease to process your personal data without affecting any previous operations for which you have given your consent.
Right of recourse: If necessary, and if any dispute is not resolved amicably, you always have the option of contacting the competent personal data protection authority to lodge a complaint (in France, the CNIL - 3
How can you exercise your rights to your data ?
If you have any queries about this privacy policy or wish to exercise any of the rights listed above, please send us an e-mail to dpo@rsight.com.
All data subject requests are processed within one month of receipt. RSight maintains a data rights register for compliance tracking.
In order to process your request as quickly as possible, we would be grateful if you could tell us exactly what you are looking for.
Is my data secure ?
We attach particular importance to the security of personal data.
RSight® has put in place technical and organisational measures appropriate to the degree of sensitivity of the personal data, with a view to ensuring the integrity and confidentiality of the data and protecting it against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.
Nonetheless, the security and confidentiality of personal data depend on good practice on the part of everyone involved, so everyone is encouraged to remain vigilant in this area.
Changes to this document
We invite you to consult this policy regularly on our website. It may be updated in line with the legal and regulatory context, Cnil policy and developments in the services operated by RSight®.
Contact Details
We invite you to consult this policy regularly on our website. It may be updated in line with the legal and regulatory context, Cnil policy and developments in the services operated by RSight®.
Changes to this document
This Privacy Policy may be updated periodically to reflect legal or operational changes.
The most recent version is always available at https://rsight.com/privacy-policy