GDPR - Privacy Statement For Danone Employees
Privacy Statement for Danone Employees
- Introduction
Our commitment to data protection
At Danone (“Danone” or “we” or “us”) we are committed to protecting your personal data. We manage your personal data in a responsible way and aim to be transparent in our personal data processing. Detailed information regarding our practices can be found in this Privacy Statement for Danone Employees (“Privacy Statement”).
This Privacy Statement
This Privacy Statement is relevant for you when you join Danone and describes the processing of personal data during the internal application process, onboarding process and during the term of your employment at Danone (“Employee”). You are considered an Employee from the moment you have signed an employment agreement with us.
- Basic principles and our data protection commitment
With respect to the protection of your data, we have committed ourselves to the following basic principles:
- We only collect and process your data for the purposes set out in this Privacy Statement or for specific purposes that we share with you and/or that you have consented to. Your data will not be processed in a manner incompatible with those purposes.
- We only collect, process and use the minimum required data and not more than is required for the purposes as described in this Privacy Statement.
- When we process your data, we take adequate measures to keep it as accurate and up to date as possible.
- We make our best efforts to protect your data from misuse, interference, loss, unauthorized access, modification or disclosure. To that end, we have implemented a number of security measures to help protect your data.
- As a rule, we keep the data we collect for the time period necessary for processing purposes. We do not keep personal data for an unlimited duration, unless otherwise expressly required by law. For employees, we retain the personal data after termination of the employment contract for the period of time set forth in this Privacy Statement. The purpose for retention could be a legal obligation such as tax law or another legitimate reason, for example to prove our rights and obligations. If this data is no longer needed for any of the purposes as described in this Privacy Statement and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it.
- What kind of data do we process
Employee data
- Collected directly from you and generated by Danone: Danone collects your personal data directly from you during the hiring process, the internal application process for a new position and during your employment. Danone, for example, collects your personal contact details as well as bank details to pay your salary. In addition, we also generate data relating to you during your employment. Danone, for example, collects information relating to your work performance, work, leave and/or absence records as well as information relating to your compensation and benefits.
- Collected from third parties: we might also be provided with personal data about you (which can include your education & professional background information) from other sources, such as third-party vendors (e.g. recruitment agencies, former employer or talent mapping agencies).
Sensitive data
- Danone & your sensitive data: sensitive data includes your data revealing racial or ethnic origin, biometric data, data concerning health, data relating to criminal convictions and offences and government issued identification numbers (passport number, ID number, social security number, etc).
- In principle, Danone does not process sensitive data relating to you unless the nature of your job requires the processing of such information and only when allowed under applicable data protection or other applicable laws as provided in this Privacy Statement. For example, it might be relevant to share information on allergies when it regards staffing in certain production areas or to use biometric data for the purposes of authentication and security purposes in sensitive areas in our factories. Danone will also process sensitive data on you if this is prescribed by local law. If that is the case, we will let you know in advance as per local law requirements.
- Why we collect and use your data
We will only process your personal data for specified and lawful purposes, described in this Privacy Statement which can include any of the following:
- Legitimate business interest: the processing of your Employee information is necessary for the purposes of Danone’s legitimate interest. For example: managing our business, compliance with our policies and the security of our systems and premises;
- Contract: the processing is necessary for the performance of the employment contract we have with you. For example: in fulfilling your employment contract we will process your bank details for payroll purposes; and
- Legal obligation: the processing is necessary for us to comply with our legal obligations (not including contractual obligations). For example: compliance with labor and employment laws.
We process the following personal data for the following purposes:
Talent Acquisition & Onboarding Candidate selection and assessment, tracking of candidates, including pre-employment screening for validation of identity, the preparation of a job offer and/or your employment contract, assessment of the application procedure and background and reference checks.[1] |
||
Data |
Lawful grounds |
Categories of recipients with whom your data may be shared |
|
|
Outside of Danone:
Within Danone:
|
HR services Providing HR Support in order to manage all aspects of your employment relationship, including performance appraisal, administering termination of employment, complying with legal or regulatory obligations including in relation to any pending or threatened litigation, establishing, exercising or defending legal rights, administering data subject requests, providing any underlying (IT) support and HR reporting as well as for monitoring purposes. |
||
Data |
Lawful grounds |
Categories of recipients with whom your data may be shared |
Sensitive Personal Data
|
|
Outside of Danone:
Within Danone:
|
Compensation and benefits Execution and administration of benefits and compensation. |
||
Data |
Lawful grounds |
Categories of recipients with whom your data may be shared |
Sensitive Personal Data:
|
|
Outside of Danone:
Within Danone:
|
International mobility Cost estimation, package definition, international contract preparation and other support measures to execute international mobility and reporting (for data analysis and cost estimation at corporate level |
||
Data |
Lawful grounds |
Categories of recipients with whom your data may be shared |
Sensitive Personal Data
|
|
Outside of Danone:
Within Danone:
|
Learning Execution and administration of internal and external learnings. |
||
Data |
Lawful grounds |
Categories of recipients with whom your data may be shared |
|
|
Outside of Danone:
Within Danone:
|
*Additional categories of personal data: In some situations, we might request and process additional information if this is necessary for specific purposes and always in accordance with applicable laws. For example, if a you are eligible to a company car, we might check whether or not you have a driver’s license or ask our external providers to do so.
**Monitoring: You are advised that Danone may, subject to applicable laws, monitor your use of the Danone mobile devices and computer systems to ensure the correct functioning and security of our systems. For example, Next – Generation Firewalls and Unified Threat Management systems, which can provide a variety of monitoring technologies, security applications and measures that involve logging employee access to the employer’s systems, eDiscovery technology, the use in the workplace of office applications provided as a cloud service and device usage via unseen software. These monitoring activities will be legitimate and reasonable and conducted in fulfillment of Danone’s legitimate interests or legal obligations.
- How long do we keep your data?
We keep your personal data for the time necessary to enable us to satisfy the purpose for which your data was collected, as indicated in this Policy, and in any event as required or permitted according to laws and regulations applicable and the corresponding limitation periods.
Personal data is kept throughout the employment relationship and for at least 2 years (for the Netherlands) and 5 years (for Belgium) from the end of the employment relationship.
- Transfer of your data to Third Parties and/or outside of the European Economic Area
- Sharing your data with third parties: Your data will not be shared, sold, rented or disclosed other than as described in this Privacy Statement. We may, however, share your data when required by law and/or government authorities.
When we share your data with affiliates and other organizations, we make sure we only do so with organizations that safeguard and protect your data and comply with applicable data protection laws in the same or similar way that we do.
- International data transfer: When we process your data outside the European Economic Area (“EEA”), Danone will make sure that this cross-border data processing is protected by adequate safeguards.
- Your rights
When we process your data and according to applicable legislation, you might be entitled to exercise certain rights. When eligible, you can exercise your rights via Clio by clicking on the following link:
According to the applicable legislation, you have the right to:
• ask us for access to information about you that we hold
• have your personal data rectified, if it is inaccurate or incomplete
• request the deletion or removal of personal data where there is no compelling reason for its continued processing
• restrict our processing of your personal data (i.e. permitting its storage but no further processing)
• object to: direct marketing (including profiling) and processing activities based on legitimate interest and processing activities
• not to be subject to decisions based purely on automated processing where it produces a legal or similarly significant effect on you
• ask for your data portability (when eligible).
• Lodge a complaint with the supervisory authority of your country.
Please keep in mind that these rights are not absolute.
- Contact us
Contact us via privacyHR.benelux@danone.com if you have any queries and/or comments regarding this Privacy Statement, or if you want to make a request regarding any of your data subject rights.
You can also contact our Data Protection Officer using the following contact details:
Data Protection officer
Danone
17 boulevard Haussmann
75009 Paris
[1] As required by internal rules or local laws.