Personal data protection

WHEELOFWORK SAS, 35 avenue de la Marne, 59290 Wasquehal, France, SIREN 889 124 343, is the controller for the processing it determines for this website. For any question or request about your data: dpo@wheelofwork.com, or by post to “Data protection — WheelOfWork” at the registered office. You can also contact hello@wheelofwork.com.

This notice describes the corporate website. It is not an exhaustive description of processing in the WoW application, during assignments or in internal tools: the information specific to those services should be read when using them. The sign-in link opens a separate service.

Browsing

Technical requests include the IP address, the requested URL and browser information; they enable page delivery and infrastructure protection. Basis: legitimate interest in providing and securing the site. Technical logs and their retention also depend on the host’s configuration.

Call-back requests and profile submissions

Identity, contact details and the information you enter in the “Talk to a specialist” and “Submit my profile” forms, transmitted to WheelOfWork’s relationship-management tool (HubSpot, on a portal hosted in the European Union) to contact you back and follow up the request. Messages following up your request, such as an acknowledgement, are sent under a dedicated subscription that you can manage at any time from the preference centre linked at the bottom of every message. Basis: pre-contractual steps taken at your request. Retention: for the time needed to handle the request and any ensuing business relationship.

Commercial prospecting

Identity, professional contact details and the subject of your request, kept in HubSpot so that WheelOfWork may later present its services to you. Basis: the publisher’s legitimate interest in making its activity known to the professionals who have contacted it. You may object at any time, without giving reasons and without affecting the handling of your request. Retention: three years from your last contact, then erasure or anonymisation.

WheelOfWork communications

E-mail address, first name, last name and subscription preferences, used to send you the communications you have subscribed to. Basis: your consent, given through a separate, optional and unticked checkbox on the form. You choose which communications you receive and unsubscribe at any time from the preference centre, reachable at the foot of every message. Withdrawal affects neither messages already sent nor the handling of your request. Retention: until you withdraw your consent, or three years without any interaction on your part.

Job applications (Join us page)

Identity, contact details, message and CV, delivered by e-mail to the recruitment team through the e-mail provider Mailjet. Basis: pre-contractual steps taken at your request. Retention: for the duration of the recruitment process; if your application is kept for future opportunities (talent pool), no longer than two years after your last contact, unless you ask for its deletion.

E-mail sent to WheelOfWork

The sender’s address, contact details and content voluntarily provided, to answer and follow up the request. Basis: pre-contractual steps at your request where applicable, otherwise legitimate interest in replying. Retained while the request is handled and, where necessary, archived to the extent useful for the applicable statutory periods.

Exercising your rights

The subject of the request, the details needed to identify you and the answer provided. Additional proof of identity should only be requested in case of reasonable doubt. Basis: legal obligation to handle the request. Retained as necessary to process it and to evidence compliance.

Consent-based trackers

With your agreement given in the Axeptio panel, audience-measurement trackers (Google Analytics), advertising trackers (Google Ads, LinkedIn Insight Tag) and customer-relationship trackers (HubSpot) are loaded through Google Tag Manager and send browsing data to their providers. Basis: consent, withdrawable at any time as simply as it was given, from the panel available in the footer. Without agreement, nothing loads.

Do not enter passwords, banking details, health data or third parties’ personal information without authorisation. The WoW platform showcase on the site is a reconstructed interface with entirely fictional data: it loads no real account.

Requests sent through the forms go to the WheelOfWork teams authorised to answer them. They pass through providers acting on WheelOfWork’s behalf: HubSpot (relationship management, on a portal hosted in the European Union) for call-back requests and profile submissions, and Mailjet (e-mail delivery) for acknowledgements and job applications. The website host processes the technical data needed to deliver and secure the service.

With your consent, the providers of the trackers listed in the cookie settings panel — currently Google (Analytics, Ads), LinkedIn and HubSpot — receive browsing data through Google Tag Manager. Axeptio processes your consent choices on WheelOfWork’s behalf. Competent authorities may be recipients where a legal obligation requires it. WheelOfWork does not sell your data to any third party.

The website is hosted in France (OVH, Roubaix). Some providers — HubSpot, and the providers of consent-based trackers such as Google (Analytics, Ads, Tag Manager) or LinkedIn — belong to groups established outside the European Union: any transfer under WheelOfWork’s responsibility to a country outside the European Economic Area must comply with Chapter V of the GDPR — an adequacy decision effectively applicable to the recipient, or appropriate safeguards such as standard contractual clauses, with the necessary assessment and supplementary measures. The 2016 Privacy Shield is no longer a valid basis.

You can request information about the applicable safeguards and how to obtain a copy at dpo@wheelofwork.com.

• Access and correction: obtain information and a copy of your data, and correct inaccuracies.
• Erasure and restriction: request deletion or restriction of certain uses under GDPR conditions, subject in particular to statutory retention and the defence of legal claims.
• Objection: object on grounds relating to your particular situation to processing based on legitimate interests. You may object to direct marketing at any time without justification.
• Portability: recover data you provided when automated processing is based on consent or a contract, under the applicable conditions.
• Withdrawal of consent: where processing relies on consent, withdraw it as easily as it was given, without affecting earlier lawful processing.
• Instructions after death: provide directions for retention, deletion and disclosure of your data under French law.

Email dpo@wheelofwork.com, specifying the right concerned and information needed to locate your records. A response is due within one month of receipt; an extension of up to two additional months is possible because of complexity or the number of requests, with reasons and notice within the first month. Requests are generally free, subject to legal exceptions for manifestly unfounded or excessive requests.

You may complain to the French data protection authority, the CNIL, including if you believe your rights have not been respected. Complaints and court remedies do not require you to waive other rights.

The website’s forms collect only the fields they display and transmit them over encrypted connections. The site performs no recruitment decisions, candidate scoring or automated decisions producing legal effects.

Data protection requires measures appropriate to risk and is not a guarantee that no incident can occur. Report privacy issues to dpo@wheelofwork.com without sending unnecessary additional data.

Optional trackers load only after your consent, collected and recorded by the Axeptio panel. Details and controls are available under Cookies and trackers.

The date at the top identifies this version. Enabling new forms, a CRM, measurement tools, profiling or third-party services requires suitable information before collection and, where required by law, prior consent. Continuing to browse is not consent to new processing.