Zama's candidate privacy policy

As part of processing your application to work with us at ZAMA, we will need to collect and process some of your personal data contained in your application. In this case, we are a "data controller”. This means that we are responsible for deciding how we hold and use personal data about you.

This Privacy Policy applies to any personal data (as defined in the General Data Protection Regulation, the “GDPR”) collected about applicants (whether for an employee or contractor position) who apply to work for ZAMA SAS, and candidates we identify and would like to work with and provides you with information about the personal data we collect, how and why your personal data will be used, and how long we will retain it.

Your personal data will be processed for the purposes of managing our recruitment andhiring-related activities, which include setting up and conducting interviews and tests forapplicants, evaluating and assessing the results thereto, conducting reference and/orbackground checks, and as is otherwise needed in the recruitment and hiring processes.We process your information as necessary for our legitimate interests (that is, thesolicitation, evaluation, and selection of applicants for employment) or where we haveyour consent to do so.

ZAMA’s Data Protection Key Principles
ZAMA only collects the information we need to make a decision about your application, including information related to your professional background and references;

If you are not hired at the end of this process, we commit to giving feedback and we'd like to stay in touch. We will keep a copy of your application so that we can keep you in mind for potential future recruitment opportunities. That being said, if you'd rather we didn't keep your data on file, please let us know and we'll make sure your request is fulfilled ;

We take all necessary measures to ensure that your personal data is kept securely.

You have a question or request or want us to delete your personal data?

If you have any questions about this Privacy Policy or your personal data, please reach out to privacy@alan.com. Please note that for your safety, we may need to ask you for proof of your identity before we answer your question or request.

What information do we collect?

In connection with your application for work with us, we will collect your personal datafrom you, from recruitment agencies (who may provide us with information such as CVs,and your named references.

We gather, store, and use the following categories of personal data about you:

− the information you have provided to us in your resume, curriculum vitae, and/or cover letter
− the information you have provided on our application form
− any information you provide to us during an interview
− trial results
− any information your references provide to us during a reference check

This may include the following:
‍
− your name, title, date of birth
− your contact details (address, phone number, email, etc.)
− your professional background (resume, education, skills, work experience, LinkedIn profile,contact details for references you have permission to provide to us, copy of your highestdiploma, etc.)
− your bank details (if we owe you traveling expenses according to our candidate travel policy,available upon request)
− any websites showcasing your work (examples: Github, X, etc.)
− copies of communications between you and ZAMA
− our notes, feedback, and assessments following interviews with you, your trial or calls withyour references
− your salary expectations and availability
− any additional information you proactively share with us (which may include sensitive data)

We rely on you to give us this personal data, or we collect them from other sources that we consider relevant to you professionally, such as:
‍
− your public LinkedIn profile, your profile on other professional social networks, or publiclyavailable sources that we consider relevant to your professional online presence (like yourblogs, conference videos, University websites, etc.)
− the people referring you, if you have been referred to us by a ZAMA employee or an externalperson known to ZAMA
− the references we check in the recruiting process
− Headhunters and recruitment agencies who support our recruitment efforts and forwardyour profile to us
− third parties we may hire as sourcing service providers

How do we use personal data we collect?

Zama collects and uses personal data only to process your application and assess your suitability forjobs at Zama.

We will use the above-described categories of personal data we collect about you to:

− Assess your skills, qualifications, and suitability for the job
− Carry out background and reference checks as appropriate and in accordance with applicablelaw
− Communicate with you about the recruitment process
− Keep records related to our hiring processes
− Comply with legal or regulatory requirements

On what legal basis?

We rely on the contract that we wish to enter with you and pre-contractual measures in managingyour recruitment process and processing your application:
‍
We rely on your consent, where you proactively decide to disclose information about a specific traitin your recruitment process which may qualify as sensitive data. We will gather and use such optionalinformation only for the purpose of ensuring to give every candidate a fair chance to succeed andwith your prior consent.

We process some of your data to comply with our legal and regulatory obligations.

We also rely on our legitimate interests to fulfill our business needs such as improving ourrecruitment process, saving your record for future roles at Zama.

How long do we retain your personal data?

Unless you ask us not to, we retain your personal data for two (2) years after you apply or we identifyyou as a potential candidate.

How can I access or update my personal data?

Just send us a request at privacy@zama.ai
‍
Who else has access to my personal data?
‍
Your personal data may be communicated to Zama's employees and services providers for thepurposes outlined above. They will always be duly informed by Zama of the confidentiality of the personal data communicated to them in this context, and we'll always make sure the right contractual measures are in place to protect your personal data.

To meet our legal and regulatory obligations, we may be required to communicate personalinformation to administrative or judicial authorities upon request. If this were ever the case, wewould make sure we grant authorities' access only to the data they strictly require.

We do not transfer your personal data outside the European Union

What are your rights?

You have the following rights in relation to the personal information we hold about you:

− The right of access, rectification and erasure of your personal data
− The right to withdraw your consent (opt out) at any time
− The right to restriction of processing of your personal data
− The right to object the processing of your personal data
− The right to personal data portability
− The right to file a complaint with the CNIL (the French data protection authority) (https://www.cnil.fr/fr/plaintes)
− The right to issue instructions allowing access to your personal data in the event of death(Art. 85 of the French law No. 78-17 of January 6, 1978, as amended).

You can exercise these rights by e-mail at privacy@zama.ai, specifying the right you wish toexercise and attaching proof of your identity (if necessary) or a power of attorney if you arebeing represented.

If you exercise these rights, we will endeavor to respond to your requests as soon aspossible and at the latest within one month.

Privacy is necessary for an open society in the electronic age. Privacy is not secrecy. A private matter is something one doesn't want the whole world to know, but a secret matter is something one doesn't want anybody to know. Privacy is the power to selectively reveal oneself to the world.If two parties have some sort of dealings, then each has a memory of their interaction. Each party can speak about their own memory of this; how could anyone prevent it? One could pass laws against it, but the freedom of speech, even more than privacy, is fundamental to an open society; we seek not to restrict any speech at all. If many parties speak together in the same forum, each can speak to all the others and aggregate together knowledge about individuals and other parties. The power of electronic communications has enabled such group speech, and it will not go away merely because we might want it to.Since we desire privacy, we must ensure that each party to a transaction have knowledge only of that which is directly necessary for that transaction. Since any information can be spoken of, we must ensure that we reveal as little as possible. In most cases personal identity is not salient. When I purchase a magazine at a store and hand cash to the clerk, there is no need to know who I am. When I ask my electronic mail provider to send and receive messages, my provider need not know to whom I am speaking or what I am saying or what others are saying to me; my provider only need know how to get the message there and how much I owe them in fees. When my identity is revealed by the underlying mechanism of the transaction, I have no privacy. I cannot here selectively reveal myself; I must always reveal myself.Therefore, privacy in an open society requires anonymous transaction systems. Until now, cash has been the primary such system. An anonymous transaction system is not a secret transaction system. An anonymous system empowers individuals to reveal their identity when desired and only when desired; this is the essence of privacy.Privacy in an open society also requires cryptography. If I say something, I want it heard only by those for whom I intend it. If the content of my speech is available to the world, I have no privacy. To encrypt is to indicate the desire for privacy, and to encrypt with weak cryptography is to indicate not too much desire for privacy. Furthermore, to reveal one's identity with assurance when the default is anonymity requires the cryptographic signature.We cannot expect governments, corporations, or other large, faceless organizations to grant us privacy out of their beneficence. It is to their advantage to speak of us, and we should expect that they will speak. To try to prevent their speech is to fight against the realities of information. Information does not just want to be free, it longs to be free. Information expands to fill the available storage space. Information is Rumor's younger, stronger cousin; Information is fleeter of foot, has more eyes, knows more, and understands less than Rumor.We must defend our own privacy if we expect to have any. We must come together and create systems which allow anonymous transactions to take place. People have been defending their own privacy for centuries with whispers, darkness, envelopes, closed doors, secret handshakes, and couriers. The technologies of the past did not allow for strong privacy, but electronic technologies do.We the Cypherpunks are dedicated to building anonymous systems. We are defending our privacy with cryptography, with anonymous mail forwarding systems, with digital signatures, and with electronic money.Cypherpunks write code. We know that someone has to write software to defend privacy, and since we can't get privacy unless we all do, we're going to write it. We publish our code so that our fellow Cypherpunks may practice and play with it. Our code is free for all to use, worldwide. We don't much care if you don't approve of the software we write. We know that software can't be destroyed and that a widely dispersed system can't be shut down.Cypherpunks deplore regulations on cryptography, for encryption is fundamentally a private act. The act of encryption, in fact, removes information from the public realm. Even laws against cryptography reach only so far as a nation's border and the arm of its violence. Cryptography will ineluctably spread over the whole globe, and with it the anonymous transactions systems that it makes possible.For privacy to be widespread it must be part of a social contract. People must come and together deploy these systems for the common good. Privacy only extends so far as the cooperation of one's fellows in society. We the Cypherpunks seek your questions and your concerns and hope we may engage you so that we do not deceive ourselves. We will not, however, be moved out of our course because some may disagree with our goals.The Cypherpunks are actively engaged in making the networks safer for privacy. Let us proceed together apace.Onward. By Eric Hughes. 9 March 1993.

Zama's candidate privacy policy

Libraries and Solutions

Developers

Company