RSight® Privacy Policy - Candidates
30.06.2026
Introduction
RSight® (a simplified joint-stock company with capital of €57,389.15, headquartered at 17 rue Dumont d’Urville, 75016 Paris, registered with the Paris Trade and Companies Register under number 890 710 478) supports its clients in their recruitment and talent search efforts.
As part of this activity, RSight® collects, reviews, analyzes, and transmits certain personal data relating to potential candidates who may meet its clients’ recruitment needs.
To carry out these operations, RSight® uses automated analysis tools that may include artificial intelligence systems. The terms and conditions of this use, as well as the associated safeguards, are described in Section 6.
The purpose of this Privacy Policy is to explain what data is processed, how it is used, the legal basis for its processing, with whom it is shared, and what rights data subjects have.
If you have any questions regarding this policy or the exercise of your rights, you may contact our Data Protection Officer at the following address: dpo@rsight.com.
Data Controller
RSight® acts as the data controller for the processing operations described in this policy.
Data processing is carried out in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of personal data (“GDPR”), as well as applicable data protection regulations. When using artificial intelligence systems, RSight® also ensures compliance with Regulation (EU) 2024/1689 establishing harmonized rules on artificial intelligence (“AI Act”).
Data Sources
Personal data may be collected: Directly from you
In particular when:
• you submit your resume to RSight®;
• you communicate with an RSight® recruiter;
• you participate in an interview;
• you fill out a form or interact with a recruitment tool provided by RSight®.
Indirectly from third parties
As part of its talent search and identification activities, RSight® may also obtain data from:
• professional networks;
• recruitment platforms and resume databases;
• professional or institutional websites;
• company websites;
• providers specializing in the provision of professional data for recruitment and sourcing purposes;
• publicly accessible sources of a professional nature.
When data has not been collected directly from the data subject, RSight® provides the information required by Article 14 of the GDPR within a reasonable timeframe and no later than the first contact regarding a career opportunity.
Categories of Data Processed
• Depending on the circumstances, RSight® may process the following categories of data:
• identity (last name, first name);
• business contact information (business email address, business phone number, business location);
• information regarding career and professional history;
• information regarding education and qualifications;
• information contained in a resume or professional profile;
• history of communications with RSight®;
• evaluation scores related to a recruitment process;
• information regarding professional preferences or desired opportunities.
RSight® does not intentionally collect sensitive data as defined by the GDPR and asks candidates to provide only the information strictly necessary for the evaluation of their application.
RSight® does not intentionally collect or process special categories of data as defined in Article 9 of the GDPR (including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sexual life, or sexual orientation). If such data nevertheless appears in a submitted resume or profile, it is not used for the purpose of evaluating the application and is deleted or redacted as soon as possible.
When RSight® carries out, where applicable, operations to detect and correct biases in its automated tools, limited processing of such data may be performed in strict compliance with the conditions and safeguards provided for by applicable regulations, to the extent strictly necessary for this purpose.
Purposes and Legal Bases for Data Processing
Personal data is processed for the following purposes:
Identification and assessment of professional profiles
• searching for candidates who meet the needs expressed by clients;
• analysis of skills, experience, and qualifications;
• creation of talent pools.
Legal basis: the legitimate interest of RSight® and its clients in identifying candidates who may be suitable for professional opportunities.
Management of recruitment processes
• contacting candidates;
• scheduling interviews;
• presenting profiles to recruiters;
• tracking applications.
Legal basis: legitimate interest and, where applicable, pre-contractual measures taken at the candidate’s request.
Improvement of recruitment services and tools
• improvement of search processes;
• optimization of tools for analyzing and matching positions with profiles;
• improvement of data quality.
Legal basis: legitimate interest.
When processing is based on the legitimate interest of RSight® or its clients, RSight® conducts a balancing test between this interest and the rights, freedoms, and interests of the data subjects to ensure that the processing is not likely to cause them disproportionate harm. You may obtain additional information about this balancing test by contacting the Data Protection Officer..
Automated Decisions, Profiling, and the Use of Artificial Intelligence (AI)
As part of its sourcing and matching activities, RSight® uses automated analysis tools—which may include artificial intelligence systems—to search for, classify, and match candidate profiles with its clients’ hiring needs (a process known as “matching”). This processing may involve profiling as defined in Article 4 of the GDPR, that is, the automated evaluation of certain professional aspects concerning you (skills, experience, suitability for a position).
The sole purpose of these tools is to assist RSight® teams in identifying relevant candidates. They do not result in decisions that produce legal effects concerning you, or that significantly affect you in a similar manner, which would be made solely on the basis of automated processing within the meaning of Article 22 of the GDPR. Human intervention is required at every critical stage: the evaluation of applications, the presentation of a profile to a client, and any hiring decision are subject to human assessment, with the final hiring decision resting with the client in question.
Underlying logic: These tools analyze professional information (career history, skills, experience, qualifications) to assess how well a profile matches a job opening. They do not conduct an intrusive assessment of your personality and do not use sensitive data for this purpose.
Compliance with the Artificial Intelligence Regulation: AI systems intended for use in the recruitment or selection of individuals are classified as high-risk systems under Regulation (EU) 2024/1689 (the “AI Act”). RSight® ensures that such systems are used in compliance with this regulation and, in particular, implements appropriate human oversight, governance measures, and data quality controls designed to prevent inaccurate or discriminatory results, as well as provides information to data subjects regarding the use of such systems.
You have specific rights regarding this processing (see the “Your Rights” section), including the right to obtain information about the underlying logic, to express your point of view, to obtain an explanation, and to request human intervention.
Recipients of the Data
Personal data may be disclosed to:
• authorized RSight® employees;
• RSight® clients seeking candidates for specific positions;
• technical service providers and subcontractors acting on behalf of RSight®;
• administrative or judicial authorities when required by law.
Data is not sold to third parties for marketing purposes.
Clients who receive the submitted profiles act as independent data controllers for the processing they carry out as part of their own recruitment processes.
Retention Period
Data relating to identified or sourced candidates is retained for a maximum of two (2) years from:
• the last contact with the individual concerned; or
• the date the individual was notified when the data was collected indirectly,
unless the individual objects, requests erasure, or a legal obligation requires a different retention period.
At the end of this period, the data is deleted or anonymized.
Transfers Outside the European Economic Area
Certain data may be processed by service providers located outside the European Economic Area.
In such cases, RSight® ensures that these transfers are based on a mechanism recognized by the GDPR, including:
• an adequacy decision by the European Commission;
• the European Commission’s standard contractual clauses;
• or any other appropriate safeguards provided for by applicable regulations.
You may obtain a copy of the safeguards put in place to govern these transfers, or information on where they have been made available, by contacting the Data Protection Officer.
Your Rights
In accordance with the GDPR, you have the following rights:
• the right of access to your data;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to object;
• the right to data portability, where applicable;
• the right to obtain information about the source of your data when it was not collected directly from you;
• the right, when a decision is based solely on automated processing that produces legal effects concerning you or significantly affects you, to not be subject to such a decision, to obtain human intervention, to express your point of view, and to challenge that decision;
• the right to obtain an explanation of how the automated or artificial intelligence tools used to analyze your profile work, as well as the main criteria taken into account;
• the right to obtain information about the balancing test conducted when processing is based on a legitimate interest;
• the right to file a complaint with the CNIL.
When processing is based on legitimate interests, you may object to it at any time for reasons related to your particular situation.
You may also request that we no longer contact you regarding future career opportunities.Exercising Your Rights
To exercise your rights or obtain additional information regarding the processing of your personal data, you may submit your request to:
dpo@rsight.com
RSight® is committed to responding within the timeframes set forth in applicable regulations and, in any event, within a maximum of one month from the date of receipt of your request.
Data Security
RSight® implements appropriate technical and organizational measures to ensure the confidentiality, integrity, availability, and security of personal data.
These measures are designed, in particular, to prevent any unauthorized access, disclosure, alteration, loss, or destruction of data.
13. Updates to This Policy
This Privacy Policy may be amended to reflect changes in laws, regulations, case law, recommendations from the relevant authorities, or changes to the services offered by RSight®.
The most recent version is available at:
https://rsight.com/privacy
14. Table of Personal Data Processing Activities
The processing activities described below—including sourcing, data enrichment, matchmaking, and tool improvement—may involve automated analysis and profiling, under human supervision, without any decision having significant legal effects being made solely on the basis of automated processing.
Introduction
RSight® (a simplified joint-stock company with capital of €57,389.15, headquartered at 17 rue Dumont d’Urville, 75016 Paris, registered with the Paris Trade and Companies Register under number 890 710 478) supports its clients in their recruitment and talent search efforts.
As part of this activity, RSight® collects, reviews, analyzes, and transmits certain personal data relating to potential candidates who may meet its clients’ recruitment needs.
To carry out these operations, RSight® uses automated analysis tools that may include artificial intelligence systems. The terms and conditions of this use, as well as the associated safeguards, are described in Section 6.
The purpose of this Privacy Policy is to explain what data is processed, how it is used, the legal basis for its processing, with whom it is shared, and what rights data subjects have.
If you have any questions regarding this policy or the exercise of your rights, you may contact our Data Protection Officer at the following address: dpo@rsight.com.
Data Controller
RSight® acts as the data controller for the processing operations described in this policy.
Data processing is carried out in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of personal data (“GDPR”), as well as applicable data protection regulations. When using artificial intelligence systems, RSight® also ensures compliance with Regulation (EU) 2024/1689 establishing harmonized rules on artificial intelligence (“AI Act”).
Data Sources
Personal data may be collected: Directly from you
In particular when:
• you submit your resume to RSight®;
• you communicate with an RSight® recruiter;
• you participate in an interview;
• you fill out a form or interact with a recruitment tool provided by RSight®.
Indirectly from third parties
As part of its talent search and identification activities, RSight® may also obtain data from:
• professional networks;
• recruitment platforms and resume databases;
• professional or institutional websites;
• company websites;
• providers specializing in the provision of professional data for recruitment and sourcing purposes;
• publicly accessible sources of a professional nature.
When data has not been collected directly from the data subject, RSight® provides the information required by Article 14 of the GDPR within a reasonable timeframe and no later than the first contact regarding a career opportunity.
Categories of Data Processed
• Depending on the circumstances, RSight® may process the following categories of data:
• identity (last name, first name);
• business contact information (business email address, business phone number, business location);
• information regarding career and professional history;
• information regarding education and qualifications;
• information contained in a resume or professional profile;
• history of communications with RSight®;
• evaluation scores related to a recruitment process;
• information regarding professional preferences or desired opportunities.
RSight® does not intentionally collect sensitive data as defined by the GDPR and asks candidates to provide only the information strictly necessary for the evaluation of their application.
RSight® does not intentionally collect or process special categories of data as defined in Article 9 of the GDPR (including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sexual life, or sexual orientation). If such data nevertheless appears in a submitted resume or profile, it is not used for the purpose of evaluating the application and is deleted or redacted as soon as possible.
When RSight® carries out, where applicable, operations to detect and correct biases in its automated tools, limited processing of such data may be performed in strict compliance with the conditions and safeguards provided for by applicable regulations, to the extent strictly necessary for this purpose.
Purposes and Legal Bases for Data Processing
Personal data is processed for the following purposes:
Identification and assessment of professional profiles
• searching for candidates who meet the needs expressed by clients;
• analysis of skills, experience, and qualifications;
• creation of talent pools.
Legal basis: the legitimate interest of RSight® and its clients in identifying candidates who may be suitable for professional opportunities.
Management of recruitment processes
• contacting candidates;
• scheduling interviews;
• presenting profiles to recruiters;
• tracking applications.
Legal basis: legitimate interest and, where applicable, pre-contractual measures taken at the candidate’s request.
Improvement of recruitment services and tools
• improvement of search processes;
• optimization of tools for analyzing and matching positions with profiles;
• improvement of data quality.
Legal basis: legitimate interest.
When processing is based on the legitimate interest of RSight® or its clients, RSight® conducts a balancing test between this interest and the rights, freedoms, and interests of the data subjects to ensure that the processing is not likely to cause them disproportionate harm. You may obtain additional information about this balancing test by contacting the Data Protection Officer..
Automated Decisions, Profiling, and the Use of Artificial Intelligence (AI)
As part of its sourcing and matching activities, RSight® uses automated analysis tools—which may include artificial intelligence systems—to search for, classify, and match candidate profiles with its clients’ hiring needs (a process known as “matching”). This processing may involve profiling as defined in Article 4 of the GDPR, that is, the automated evaluation of certain professional aspects concerning you (skills, experience, suitability for a position).
The sole purpose of these tools is to assist RSight® teams in identifying relevant candidates. They do not result in decisions that produce legal effects concerning you, or that significantly affect you in a similar manner, which would be made solely on the basis of automated processing within the meaning of Article 22 of the GDPR. Human intervention is required at every critical stage: the evaluation of applications, the presentation of a profile to a client, and any hiring decision are subject to human assessment, with the final hiring decision resting with the client in question.
Underlying logic: These tools analyze professional information (career history, skills, experience, qualifications) to assess how well a profile matches a job opening. They do not conduct an intrusive assessment of your personality and do not use sensitive data for this purpose.
Compliance with the Artificial Intelligence Regulation: AI systems intended for use in the recruitment or selection of individuals are classified as high-risk systems under Regulation (EU) 2024/1689 (the “AI Act”). RSight® ensures that such systems are used in compliance with this regulation and, in particular, implements appropriate human oversight, governance measures, and data quality controls designed to prevent inaccurate or discriminatory results, as well as provides information to data subjects regarding the use of such systems.
You have specific rights regarding this processing (see the “Your Rights” section), including the right to obtain information about the underlying logic, to express your point of view, to obtain an explanation, and to request human intervention.
Recipients of the Data
Personal data may be disclosed to:
• authorized RSight® employees;
• RSight® clients seeking candidates for specific positions;
• technical service providers and subcontractors acting on behalf of RSight®;
• administrative or judicial authorities when required by law.
Data is not sold to third parties for marketing purposes.
Clients who receive the submitted profiles act as independent data controllers for the processing they carry out as part of their own recruitment processes.
Retention Period
Data relating to identified or sourced candidates is retained for a maximum of two (2) years from:
• the last contact with the individual concerned; or
• the date the individual was notified when the data was collected indirectly,
unless the individual objects, requests erasure, or a legal obligation requires a different retention period.
At the end of this period, the data is deleted or anonymized.
Transfers Outside the European Economic Area
Certain data may be processed by service providers located outside the European Economic Area.
In such cases, RSight® ensures that these transfers are based on a mechanism recognized by the GDPR, including:
• an adequacy decision by the European Commission;
• the European Commission’s standard contractual clauses;
• or any other appropriate safeguards provided for by applicable regulations.
You may obtain a copy of the safeguards put in place to govern these transfers, or information on where they have been made available, by contacting the Data Protection Officer.
Your Rights
In accordance with the GDPR, you have the following rights:
• the right of access to your data;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to object;
• the right to data portability, where applicable;
• the right to obtain information about the source of your data when it was not collected directly from you;
• the right, when a decision is based solely on automated processing that produces legal effects concerning you or significantly affects you, to not be subject to such a decision, to obtain human intervention, to express your point of view, and to challenge that decision;
• the right to obtain an explanation of how the automated or artificial intelligence tools used to analyze your profile work, as well as the main criteria taken into account;
• the right to obtain information about the balancing test conducted when processing is based on a legitimate interest;
• the right to file a complaint with the CNIL.
When processing is based on legitimate interests, you may object to it at any time for reasons related to your particular situation.
You may also request that we no longer contact you regarding future career opportunities.Exercising Your Rights
To exercise your rights or obtain additional information regarding the processing of your personal data, you may submit your request to:
dpo@rsight.com
RSight® is committed to responding within the timeframes set forth in applicable regulations and, in any event, within a maximum of one month from the date of receipt of your request.
Data Security
RSight® implements appropriate technical and organizational measures to ensure the confidentiality, integrity, availability, and security of personal data.
These measures are designed, in particular, to prevent any unauthorized access, disclosure, alteration, loss, or destruction of data.
13. Updates to This Policy
This Privacy Policy may be amended to reflect changes in laws, regulations, case law, recommendations from the relevant authorities, or changes to the services offered by RSight®.
The most recent version is available at:
https://rsight.com/privacy
14. Table of Personal Data Processing Activities
The processing activities described below—including sourcing, data enrichment, matchmaking, and tool improvement—may involve automated analysis and profiling, under human supervision, without any decision having significant legal effects being made solely on the basis of automated processing.
