Version: 2.0 – Last updated: May 19, 2026.
These legal notices are written in French. Any translation, particularly into English, is provided for informational purposes only. In case of any discrepancy, ambiguity, or difficulty in interpretation between the French version and a translated version, only the French version shall prevail.

Candidate Data Protection Policy

Ask Technologies is committed to protecting the privacy of its candidates and ensuring the security of their personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable French law. This policy explains how Ask Technologies collects, uses, stores, and protects candidates' personal data as part of its recruitment processes.

1. Data Controller

The data controller for candidate data is ASK TECHNOLOGIES, a company registered under SIREN 879858876, with its registered office at 4 PLACE ALBERT EINSTEIN LE PRISME, 56000 VANNES. As such, Ask Technologies determines the purposes and means of processing personal data collected as part of the recruitment process.

2. Personal data collected

As part of the recruitment process, Ask Technologies may collect and process various categories of personal data concerning candidates, including:

-Identification and contact data: first name, last name, postal address, email address, phone number, etc.
-Application documents: curriculum vitae (CV), cover letter, portfolio, or personal work, where applicable.
-Assessment elements: results of any technical or psychometric tests, notes taken during interviews, video recordings of interviews, and automatic transcriptions of these interviews (where applicable).
-Other recruitment-related data: salary expectations, availability, professional references, and generally any information provided by the candidate as part of their application.

Ask Technologies ensures that only relevant and necessary data is collected for the purposes outlined below.

3. Purposes of Processing

Candidates' personal data is collected and used for the following purposes:

-Recruitment management: processing and tracking applications, organizing interviews, communicating with candidates throughout the recruitment process.
-Assessment of skills and qualifications: evaluating the candidate's profile suitability for the proposed position, through analysis of the CV, potential test results, and conducted interviews.
-Building a CV database (candidate pool): with the candidate's consent, retaining received applications to build a talent pool for later offering other professional opportunities that may match their profile.
-Recruitment process improvement: analyzing recruitment data in an aggregated manner (e.g., response rates, process duration, etc.) to optimize our recruitment methods and candidate experience.

Each processing operation performed on candidate data serves a precise, legitimate, and explicitly determined purpose. Data will not be further processed in a manner incompatible with these initial purposes.

4. Legal Basis for Processing

Ask Technologies processes candidate data only when an appropriate legal basis permits it. Depending on the situation, the processing of candidate data is based on:

-Candidate consent – For example, the candidate consents to provide information in their application and may consent to their data being retained for future opportunities (CV database). This consent can be withdrawn at any time, without retroactive effect, by contacting Ask Technologies.

-Legitimate interest of the company – Ask Technologies may have a legitimate interest in processing certain candidate data, particularly to improve its recruitment process, build a pool of talented candidates, or ensure the security and efficient organization of interviews. In all cases, this legitimate interest only exists if it does not disproportionately infringe upon the rights and freedoms of candidates.

-Performance of pre-contractual measures – This basis applies when processing is necessary to take steps at the candidate's request before the potential conclusion of an employment contract. For example, reviewing a CV and interview results with a view to hiring falls under pre-contractual measures.

Ask Technologies always ensures a valid legal basis is identified before processing candidate data. If there is no legal justification for processing, the data will not be processed.

5. Data Access

Access to candidates' personal data is strictly limited to authorized individuals and entities who require it for the recruitment process:

-The Human Resources and Recruitment department at Ask Technologies, responsible for receiving applications, pre-screening, and coordinating recruitment.
-Hierarchical and operational managers involved in recruitment, i.e., the managers or team members within which the position is to be filled, in order to evaluate the application against the job requirements.
-Technical service providers or specialized software publishers involved in the recruitment process, such as providers of applicant tracking systems (ATS) or online assessment tools. These providers act as subcontractors on behalf of Ask Technologies and are contractually bound to respect confidentiality, data security, and GDPR regulations.

Aside from these recipients, no application data is communicated to third parties without the candidate's authorization, except where there is a legal or regulatory obligation. Each person or entity with access to the data is subject to a confidentiality obligation and can only process the data in accordance with the stated purposes.

6. Data Retention Period

Ask Technologies retains candidates' personal data for 2 years from the date of the last interaction or the end of the recruitment process related to the application. This retention period allows the company, subject to the candidate's consent when required, to recontact the candidate for potential future opportunities matching their profile.

After 2 years, candidate data is either securely deleted, anonymized, or archived in accordance with legal obligations. In certain specific cases, Ask Technologies may be required to retain certain information for longer to comply with specific legal obligations or in the event of litigation (for example, a lawsuit related to recruitment); in which case, only strictly necessary data will be retained for the duration required by law.

If the candidate is hired by Ask Technologies, their application data may be integrated into their employee file and retained for the duration of their employment contract, or even longer depending on the legal obligations applicable to personnel data (this point will then be covered by the company's personnel data protection policy).

7. Candidate Rights

In accordance with the GDPR and the French Data Protection Act, each candidate has the following rights regarding their personal data:

-Right of access: you have the right to obtain confirmation as to whether or not Ask Technologies is processing personal data concerning you and, where applicable, to access all such data as well as information relating to the processing (purposes, categories of data, recipients, retention period, etc.). This right allows you to receive a copy of your personal data undergoing processing.
-Right to rectification: you can request the correction or update of your personal data if it is inaccurate or incomplete. Ask Technologies commits to rectifying erroneous information as soon as possible.
-Right to erasure (right to be forgotten): in certain circumstances, you can request the deletion of your personal data, for example, if it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent (when the processing was based on it). Ask Technologies will then erase your data, unless its retention is required by a legal obligation or for the establishment, exercise, or defense of legal claims.
-Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on the legitimate interests of Ask Technologies. You can also object to the processing of your data for direct marketing purposes or, where applicable, withdraw your consent when the processing is based on it (for example, object to the retention of your profile in the company's CV database).
-Right to data portability: where applicable, you can request to receive the personal data you have provided to Ask Technologies in a structured, commonly used, and machine-readable format, so that you can transmit it to another organization. This right applies only to data you have provided yourself, processed by automated means, and based on your consent or the performance of pre-contractual measures.
-Right to restriction of processing: you can request the restriction (freezing) of the processing of your data in certain cases provided by regulations. For example, if you dispute the accuracy of your data or if you have exercised your right to object, you can ask Ask Technologies to temporarily suspend the use of your data while your request is being reviewed. When the restriction is granted, Ask Technologies will only process your data with your consent or for legitimate reasons specified by law.

These rights can be exercised under the conditions and within the limits provided by regulations. For example, the right to erasure may not apply if the law requires the company to retain certain data, and the right to object may be refused if Ask Technologies demonstrates legitimate and compelling grounds for continuing the processing that override your interests and rights.

8. Data Security

Ask Technologies implements appropriate technical and organizational measures to ensure the security and confidentiality of candidates' personal data, and to protect it against any unauthorized access, disclosure, alteration, or unlawful destruction. These measures include, among others:

-IT infrastructure security: storage of application data on secure servers, preferably located within the European Union, use of firewalls, antivirus/anti-malware protection systems, and regular backup mechanisms to prevent accidental loss or alteration of information.
-Strict access control: data access is restricted to Ask Technologies employees and collaborators who require it for their duties (on a "need-to-know" basis). Each user with data access is subject to strong authentication and a confidentiality obligation. External service providers (recruitment software publishers, cloud services, etc.) are also required to implement robust security measures and adhere to strict data protection commitments, formalized through contractual agreements.
-Secure Transfers: When necessary, personal data exchanges (for example, transmitting a CV to a manager or using an online testing service) are carried out securely (encrypted protocols, password-protected access, etc.) to prevent any interception or data leakage.
-Awareness and Supervision: Ask Technologies educates its recruitment teams on best practices for data protection (GDPR training, IT charter, etc.). Furthermore, the company has internal procedures to quickly detect and manage any security incident or personal data breach, including notification to authorities and affected individuals when required by law.

Through these measures, Ask Technologies ensures a level of security appropriate to the risks presented by the processing activities, in accordance with Article 32 of the GDPR. Nevertheless, in the event of a personal data breach, the company commits to taking all necessary actions to limit its impact and to inform the competent authorities as well as the affected candidates, under the conditions provided by regulations.

9. Procedure for Exercising Your Rights

For any questions regarding this policy or to exercise your rights as described above, you may contact Ask Technologies' data protection department. Please address your request by specifying the purpose of your inquiry (for example, "Candidate personal data access request") and by providing proof of your identity (to prevent unauthorized access to your data) via one of the following methods:

-By email: dpo (at) polaria (dot) ai
-By postal mail: ASK TECHNOLOGIES – Data Protection Department, 4 PLACE ALBERT EINSTEIN LE PRISME, 56000 VANNES.

Ask Technologies commits to responding to your requests to exercise your rights as quickly as possible and, in any event, within one month of receiving the request, in accordance with regulations. This period may be extended by two months given the complexity and number of requests, but in such a case, you will be informed of the delay and the reasons for this extension. Exercising your rights is free of charge (except in cases of manifest abuse where reasonable fees may be charged according to regulations).

Please note that some requests may be refused or partially fulfilled if they do not meet legal requirements (for example, a request for erasure cannot be accepted if the retention of certain data is required by law). In case of reasonable doubt regarding the applicant's identity, Ask Technologies may request additional information necessary to confirm identity.

If, after contacting Ask Technologies, you believe your rights have not been respected, you have the option to lodge a complaint with the competent supervisory authority. In France, the supervisory authority is the CNIL (Commission Nationale de l’Informatique et des Libertés).

10. Use of Automated Recruitment Tools or Artificial Intelligence

To optimize its recruitment process, Ask Technologies may use specialized IT tools, including artificial intelligence (AI) solutions, to assist its HR teams. These tools can, for example, help automate certain stages of application processing or provide analyses that facilitate decision-making:

-Ask Technologies may use an Applicant Tracking System (ATS) to sort and filter CVs based on predefined objective criteria (required skills, experience, relevant keywords, etc.). This type of tool allows for more efficient processing of a large volume of applications and ensures that no application is overlooked.

-Asynchronous video interviews or video conferencing tools may be offered, with interview recording and automatic transcription of exchanges. These recordings and transcriptions are used exclusively to fairly assess candidates and can be analyzed using software features (for example, to identify linguistic or technical skills through the candidate's responses).

-Ask Technologies may also use automated online tests (technical tests, situational judgment tests, personality questionnaires) where scoring is partially automated. The results of these tests are then reviewed by recruiters.

The sole purpose of using these technologies is to assist recruiters and improve the candidate experience. Ask Technologies ensures that human intervention remains central to the selection process: final hiring or non-retention decisions for a candidate are always made by humans (HR team and managers), and not solely by an algorithm or artificial intelligence. No decision producing legal or significant effects for the candidate is made exclusively by automated means, without human intervention, in accordance with Article 22 of the GDPR.

Furthermore, Ask Technologies ensures that these tools comply with GDPR principles (transparency, relevance of analyzed data, security, etc.). If a candidate believes that an automated tool has negatively influenced the assessment of their application, they have the right to report it and request additional human intervention, express their point of view, or challenge the decision resulting from the automated process. The company will remain attentive to such requests to ensure a fair and non-discriminatory recruitment process.

11. Policy Updates

This candidate data protection policy may be updated to reflect changes in Ask Technologies' recruitment practices or to comply with legal and regulatory developments. In the event of a substantial modification affecting how we process candidate data, Ask Technologies will inform the affected candidates (for example, via an update on its careers site or by any other appropriate means) and obtain their consent when required by law.

We recommend regularly reviewing this policy during your interactions with our recruitment process to stay informed about the latest terms for protecting your personal data.