Privacy policy
This site has one form, the application form. This page says exactly what it collects, where it goes and how long we keep it — and nothing more, because there is nothing more.
Last updated
Who is responsible
The data controller is the company that operates the bakeries and does the hiring: it is the one that decides what happens to the applications received.
- Site publisher
- BO&MIE Global Intellectual Property Rights Management L.L.C S.O.C
- Contact
- recrutement@boetmie.com
What we collect
The application form records five pieces of information, and only these:
- First and last name, so we can reply to you.
- Email address, the only way we get back to you.
- Role applied for, when you answer a specific opening.
- Your message, whose content is entirely up to you.
- Site language at the time you wrote, so we answer in it.
Your IP address is passed to Cloudflare Turnstile for as long as it takes to check that you are not a robot. It is never stored in our database.
We do not ask for your date of birth, photograph, nationality or family situation. If you volunteer them in your message, they will be kept with it: include only what serves your application.
On what basis
The processing rests on pre-contractual steps taken at your request — you wrote to us in order to work with us — and, for keeping your profile beyond the current hiring round, on our legitimate interest in building a talent pool. You may object to that second purpose without losing the benefit of the first.
For how long
An unsuccessful application is kept for 24 months from our last exchange, the period the French data protection authority recommends for a recruitment pool. After that it is deleted.
You may ask us to delete it sooner, at any time and without giving a reason.
Who has access
Applications are read by the people in charge of hiring at BO&MIE, and by no one else. Two technical providers are involved, and neither ever uses your data for its own purposes:
- Supabase, Inc.
- Application database, hosted in the Paris region (European Union).
- Cloudflare, Inc.
- Site hosting and anti-robot verification of the form.
We sell no data, we rent none out, and we pass none to any commercial partner.
Transfers outside the European Union
Applications are stored within the European Union. Both of our providers are US companies: their support operations may involve access from the United States, governed by the European Commission’s standard contractual clauses. As the site publisher is established in the United Arab Emirates, consultation from that country is also possible.
Your rights
Over the data concerning you, you hold the following rights:
- Access: obtain a copy of what we hold.
- Rectification: correct inaccurate information.
- Erasure: have your application deleted.
- Objection: refuse to have your profile kept in our talent pool.
- Restriction: freeze the processing while a dispute is settled.
- Portability: get your data back in a machine-readable format.
To exercise them, write to recrutement@boetmie.com. We answer within one month. We may ask you to clarify your request, but never to prove your identity with an ID document if you write from the address you applied with.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority — cnil.fr.
Security
Exchanges with this site are encrypted end to end. The application database is never reachable from the browser: only the server touches it, with a key that never leaves the host — an automated check fails the deployment should that key ever end up in the code sent to browsers.
Cookies
This site sets no analytics or advertising cookie. The details are on the cookie settings page.
Changes
This page will change the day the site collects anything else — a newsletter sign-up, an analytics tool. It will change at the same time as the feature, not afterwards, and the date at the top of the page will show it.