Protection of personal data and privacy

This confidentiality policy of data intends to explain how UPPERSTONE collects, uses, processes and stores personal information.

1. Data nature and collect

The term « personal data » names all kinds of data allowing to directly or indirectly identify a person such as first and last names, postal adresses, email addresses, phone numbers and data relating to professional experience as well as any other requested information.

1.1. Nominees

We collect personal data directly from the nominees and from job boards or from websites of social medias such as LinkedIn as well as from publications of official data or disclosed publicly from other persons.
UPPERSTONE might need to collect different categories of personal data from nominees such as :

  • Identity and data (names, postal address & email, phone numbers).
  • Data relating to trainings and employment (Resume, trainings, employment, employer’s name, qualification,
    skills, experiences, former jobs).
  • Data relating to suggested positions (mobility, availability, sought job, sought line of business, remuneration
    and other advantages).
  • Other information within your resume.

1.2. Clients and suppliers

Collected data within organisations are only used for the purpose of communication in the course of our business as well as to supply us with goods or services and are only displayed by the name, the phone numbers and data of the person.

2. Purpose of processing of personal data

The nominees’ personal data communicated to UPPERSTONE are only used for the purpose of recruitment.
Your personal data might be used in an anonymous way only for the purpose of analysing data for our internal services.

3. Recipient of personal data

In processing your application, we allow the access to your personal data only to the people inside the company UPPERSTONE and to our client, in the context of a precise mission and with your explicit agreement on this particular mission.
UPPERSTONE will never disclose your personal data to others for a use relative to marketing.
UPERSTONE might be asked to give your personal data to administrative authorities in order to satisfy legal
requirements. The collected data are hosted in France.

4. Duration of data’s protection

The data will be kept, unless opposed by you, during 24 months straight from the last contact and will be stored only for the purpose of evidence by way of application of the legal duration.
You benefit a right of access, of opposition, of portability and of deletion (right to omission) of your data or of
limitation of the processing.

5. Representative to the data and rights protection (DPD)

A representative to the data protection was named. In order for you to exercise your rights, you can contact the DPD either by postal address to the following : UPPERSTONE Délégué à la Protection des Données 29, rue Raffet 75016 Paris or by email at :

You will have to justify your identity in order to see your request answered.
In accordance with data protection and freedom of information modified law from the 6th January 1978 and to European rules number 2016/679/UE from the 27th April 2016 (applicable upon the 25th May 2018), you benefit a right of access, of opposition, of portability and of deletion (right to omission) of your data or of limitation of the processing. You can also, for legitimate reasons, refuse the treatment of your data. You can exercise these rights by writing to the following address : UPPERSTONE 29, rue Raffet 75016 Paris or by email to :

You have the right to claim at any time to the French authority of Control for issues of data protection, which is the Commission Nationale de l'Informatique et des Libertés (CNIL).

5. Modifications

UPPERSTONE reserves the right to update and to modify the dispositions of the current policy of personal data according to the needs and without notification available on its website.