The respect of privacy is very important for PhinC Development (hereinafter: « PhinC »). We are committed to protecting the personal data of candidates applying at PhinC.

This privacy notice (hereinafter: « Notice ») describes the framework to meet our privacy commitments. We process personal data in accordance with all applicable data protection laws and regulations, including and without limitation in accordance with the provisions of the EU General Data Protection Regulation 2016/679 (GDPR).

This Notice explains how PhinC collects, uses, shares and retains personal data in the context of recruitment, including when you submit your application.

What is a Personal Data?

Personal Data means any information relating to an identified or identifiable natural person (“Data Subject”), such as an address, telephone number, e-mail address, date of birth, gender, data concerning health or geographic location (“Personal Data”).

Data Controller

For the purposes of the GDPR, the Data Controller, namely the company that is responsible for your personal data and that determines the purposes of the processing of your data and the means with which it processes them are:

PHINC DEVELOPMENT, whose registered head office is 5 rue Henri Auguste Desbruères, Genopole Campus 1, Bâtiment 8, 91030 ÉVRY CEDEX, FRANCE

Data Protection Officer

For the purposes of the GDPR, PhinC has appointed a Data Protection Officer (DPO).

You can contact the DPO as follows:  

+33 9 70 70 20 09

Personal Data that we process

PhinC only processes data that are relevant and strictly necessary for the needs and purposes of recruitment:

  • Identity data including last name and first name.
  • Contact Data including email address, personal mailing address, telephone number.
  • Professional Data including Curriculum Vitae, cover letter and interview assessments.

Purposes and legal basis of the processing activities et storage of your personal data


Legal basis


Processing candidate data for engagement and interview management

PhinC’s legitimate interest to collect and process data to ensure the smooth running of recruitment procedures (e.g. that the candidate's profile matches the job description)

When the candidate is hired, his/her data are then kept for the time necessary to comply with the employer's various legal obligations.

If the candidate is not selected, his/her data are deleted or retained for the purpose of creation of a CV library.

Creation of a CV-library

PhinC’s legitimate interest to keep the data of the candidates in order to contact them again for a job opportunity.

If a candidate does not request the destruction of his/her file, the data are automatically destroyed 2 years after the last contact. Data can be kept longer only with the formal agreement of the candidate.

Recipients of your personal data

For the purposes stated above, your personal data may also be processed by our administration/finance department and by hiring department’s managers.

We may disclose your personal data to any authority for which we are legally obliged to do so (e.g. Tax Authorities, social security authorities) and to external service providers who may be involved in the recruitment process.

Transfers of your Personal Data outside the Economic European Area (EEA)

No personal data transfers will be performed outsite the EEA.

Security of your personal data

PhinC takes appropriate technical and organizational measures to ensure a level of security appropriate to the risk to the rights and freedoms of natural persons, including measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data.

Your rights

As a data subject, you have the possibility to request the exercise of the following rights:

  • Right of access: you have the right to obtain confirmation as to whether or not your personal data are being processed by PhinC and if so, you can obtain precise information about the processing of your data. You also have the right to request a copy of all information held about you.
  • Right to rectification: you are entitled to ask us to rectify, in particular by completing or correcting, all or certain information held about you.
  • Right to erasure (“right to be forgotten”): you are entitled to ask us to remove all information held about you from our systems.
  • Right to restriction of processing: you can ask us not to process some of your data. They are then said to be locked.
  • Right to data portability: you can ask to receive your information in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
  • Right to object: you can object to the processing of Personal Data concerning you.

The application of these rights is not absolute.  The requests for the exercise of rights will always be subject to a case-by-case analysis by the DPO of PhinC.

If you want to receive more information regarding the processing of your personal data or if you want to exercise your rights, your requests can be sent to the DPO of PhinC.

You also have the right to lodge a complaint with the Data Protection Authority in the EU Member State where you reside or work, or in the EU Member State where the alleged violation took place if you believe that your personal data is not being processed in accordance with the GDPR.

You will find the contact details of the different European Data Protection Authorities on the following link:


This Privacy Notice is effective from 31/03/2021

Date of last update: 31/03/2021



Club Phase 1
GMP - Groupe de Métabolisme et Pharmacocinétique
Oncodesign services
Paris Saclay
Paris Region Business Club
French Tech Paris-Saclay