Technology & Strategy Groupe SAS – 4 rue de Dublin, 67300 SCHILTIGHEIM – and/or its subsidiaries (hereinafter referred to collectively or individually as "T&S Group") is committed to ensuring that its website https://tands.com (hereinafter referred to as the "Website") complies with applicable laws and regulations regarding the protection of personal data.

As part of this commitment, T&S Group wishes to inform all persons using its services or interacting with it through its Website (hereinafter referred to as "Users") about the use of their personal data (hereinafter referred to as "Personal Data") and their rights, as set out in this privacy policy (hereinafter referred to as the "Policy"). This Policy also applies to any individual who submits an application for a job offer published on the Website, or who spontaneously submits an application through the Website (hereinafter referred to as "Candidates").

Terms relating to the protection of personal data used in this Policy shall be interpreted in accordance with the definitions and provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").

1- Why do we collect your Personal Data?

As part of the operation of the Website, T&S Group processes Personal Data belonging to Users. This Personal Data is collected directly from the User through form submissions, or indirectly through the use of cookies.

Prior to any collection of Personal Data, T&S Group will inform the User whether the information requested is mandatory or optional. Fields marked with an asterisk in forms are considered mandatory for the provision of services. The User acknowledges that failure to provide such mandatory Personal Data will prevent access to and use of the services. Conversely, failure to provide information in optional fields will not affect the delivery of services, although it may limit their relevance.

This Personal Data is processed in accordance with the purposes detailed below:

1.1 Website management

When the User browses the Website, T&S Group processes Personal Data in order to manage and administrate the services and features of the Website. This processing is based on T&S Group's legitimate interest in ensuring the proper functioning of the Website and carrying out routine administration operations.

The Personal Data concerned includes: technical information such as the type of internet browser, the operating system used, the date and time of browsing, pages visited, errors encountered, and the IP address.

T&S Group may also use Users' Personal Data to measure its audience and the performance of the Website's content and web pages through cookies. This processing is based on Users' consent, expressed by accepting cookies via the dedicated banner.

For more information, Users may refer to the Cookie Policy.

When the User directly submits their Personal Data via the Website's contact form, T&S Group uses this information to process the requests made. This processing is based on T&S Group's legitimate interest in responding appropriately and promptly to Users' requests.

The categories of Personal Data collected are: identity data, contact data, technical data relating to the request, information included in the message, and any follow-up actions taken. This data is retained for the period necessary to process the User's request and, in any event, for a period not exceeding six (6) months from the date of the request. After this period, the data may be retained for a longer period if necessary, either to ensure follow-up on the request or to comply with a legal obligation, in particular regarding applicable limitation periods.

1.2 Social media buttons

The Website incorporates buttons and/or modules from social media platforms (LinkedIn) allowing Users to share content or interact with T&S Group's profiles on these platforms. The use of these platforms is governed by the privacy policies of each social network, as well as by the privacy settings defined by Users. T&S Group encourages Users to consult the policies of these platforms to understand how their Personal Data may be used.

In the context of its recruitment activities, T&S Group uses its Website to publish job offers or allow spontaneous applications. In this regard, Personal Data is processed in accordance with the purposes detailed below:

1.3 Management of applications

When Candidates apply for one of our job offers or submit a spontaneous application, their Personal Data is used for:

• • Identifying relevant profiles to fill a position, based on T&S Group's legitimate interest in efficiently managing its human resources and finding suitable profiles for each role;
  • Reviewing and selecting applications, based on the execution of pre-contractual measures taken at the Candidates' initiative;
  • Contacting Candidates and verifying their professional skills, based on T&S Group's legitimate interest in assessing their ability to perform the proposed role;
  • Building a CV database, based on Candidates' consent expressed via a checkbox;
  • Completing administrative onboarding formalities, in compliance with T&S Group's obligations.

The categories of Personal Data collected are: identity data, contact data, technical data, data relating to the position, and data relating to skills, professional background, and educational background. In the event of a successful recruitment outcome, such data will be transmitted to organisations involved in the hiring of Candidates, included in their administrative file, and retained for up to five (5) years after the end of their contract. In the event of an unsuccessful outcome, it may be retained for up to two (2) years for potential future opportunities, subject to their consent.

Furthermore, in the course of its activities, T&S Group may process Personal Data for the following purposes:

1.4 Social media management

As part of the management of its social media accounts and other digital platforms, T&S Group processes Personal Data for the purposes of administering its accounts, managing interactions with users, and publishing content relating to its activities. This processing is based on T&S Group's legitimate interest in promoting its activities, responding to user inquiries, and maintaining engagement with its online communities.

The Personal Data concerned includes information provided during interactions with T&S Group's accounts, names or usernames, published content, comments, messages, reactions, and any other information made available through the relevant platform.

Social media platforms may also be used as part of T&S Group's recruitment activities, in particular to promote job opportunities, identify potential candidates, and communicate with individuals interested in the professional opportunities offered by T&S Group.

For further information, Users may refer to Section 1.3.

1.5 Management of disputes

In the event of a potential dispute, T&S Group informs that the Personal Data of any person involved may be processed and retained, based on its legitimate interest in ensuring its defence, throughout the duration of any potential amicable or judicial proceedings. Personal Data processed in this context will be limited to the information necessary for the management of the dispute and will be retained until the right to take action has lapsed.

2- Who are the recipients of your Personal Data?

To the extent of their respective needs, Users' Personal Data may be shared with the following recipients:

• Internal departments that require access to Personal Data in the course of their functions;
• Other affiliated companies within T&S Group that are involved in the processing of Personal Data;
• Service providers engaged by T&S Group, strictly within the scope of their mandates;
• Entities responsible for auditing and financial and administrative control within T&S Group;
• Client companies, when a Candidate may be assigned to a client project, and only to the extent strictly necessary to assess the compatibility of their profile with the project in question.

In addition, T&S Group reserves the right to disclose Users' Personal Data in order to fulfil its legal obligations. In accordance with applicable regulations, such data may be transmitted to authorised third parties, including but not limited to public bodies, legal officers, and ministerial officers authorised by legislative or regulatory provisions, in the exercise of a specific mission or statutory right of access.

3- Is your Personal Data transferred outside the European Union or the European Economic Area?

Personal Data is, in principle, processed exclusively within the European Economic Area. However, given T&S Group's international presence, it may be transferred to countries outside the European Union. Such transfers are carried out in compliance with applicable legal and regulatory requirements. T&S Group implements all necessary safeguards to ensure an adequate level of protection for Personal Data.

4- How is your Personal Data secured?  

T&S Group implements all appropriate technical and organisational measures to guarantee the security, integrity, and confidentiality of Personal Data processed in connection with the management of its Website.

These measures include storing Personal Data in secure environments that are not publicly accessible, with access strictly reserved for authorised staff members, as well as expressly authorised service providers or agents. Contracts compliant with legal requirements govern relationships with sub-processors. Regular audits are conducted to ensure that security rules are properly applied throughout the group.

Furthermore, T&S Group has appointed a Data Protection Officer (DPO) for its entities. The DPO is responsible for ensuring compliance with Personal Data processing requirements, verifying that all operations carried out meet the requirements of the GDPR.

Nevertheless, the security and confidentiality of Personal Data also depend on good practices by each individual, and T&S Group encourages Users to remain vigilant on this matter.

5- What are your rights regarding your Personal Data?

In accordance with the GDPR and subject to certain exceptions or limitations provided for by applicable law, Users have the following rights over their Personal Data:

• Right of access: the right to obtain confirmation that their Personal Data is being processed and to obtain it free of charge in an understandable format.
• Right of rectification: the right to request the rectification of their Personal Data if it is inaccurate, incomplete, or obsolete. This right also allows Users to complete their Personal Data when necessary for the purposes for which it is collected or processed.
• Right to erasure (“right to be forgotten”): the right to request the deletion of your Personal Data, within the limits provided for by law.
• Right to restriction of processing: the right to request, in certain circumstances, that the use of your Personal Data be restricted.
• Right to portability: the right to request to receive the Personal Data provided, in a structured, commonly used and machine-readable format, and/or to transmit this data to another data controller, by requesting the initial data controller to transfer it, where technically possible and subject to the conditions provided for by law.
• Right to object: the right to object, at any time, to the processing of your Personal Data for specific purposes.
• Right not to be subject to automated decision-making: the right not to be subject to a decision based solely on automated processing and producing legal or significant effects.
• Right to withdraw consent: the right to withdraw consent at any time, when processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.

Any request to exercise one of these rights must be addressed to the relevant contact person at the T&S Group company concerned: 

By email to dpo@technologyandstrategy.com  

Or by post to the following address:

Technology & Strategy

For the attention of the Data Protection Officer

4 rue de Dublin,

67300 SCHILTIGHEIM, France

When processing these requests, Users are asked to specify the right(s) they wish to exercise and provide the information necessary for their identification. Users are informed that in case of reasonable doubt about their identity, proof of identity may be requested.

If, after contacting the DPO, Users believe that their rights regarding their Personal Data have not been respected, they may lodge a complaint with the CNIL (www.cnil.fr).

6- Policy Changes

The T&S Group reserves the right to revise, modify, or update this Policy at any time to reflect changes in legal requirements, internal practices, or the technologies used.  

Any new version will take effect as soon as it is posted on the Website.

Date of update: August 05, 2026