The University of Namur organizes "job days" or "career days" where students or former students meet with companies or organizations looking to recruit employees. In this context, the University is required to collect and process data from students likely to be interested or who register for the event.

Contexte

L'Université de Namur organise des journées de rencontre entre étudiants ou anciens étudiants et des entreprises ou organisations qui cherchent à recruter des collaborateurs (job days ou career days). Dans ce contexte, l'Université est amenée à collecter et traiter des données des étudiants susceptibles d’être intéressés ou qui s’inscrivent à l'évènement.

Categories of personal data processed and purposes of use

  • General identification data [category grouping the following type of data: surname, first name, postal address, e-mail addresses, copy of identity card, passport photograph, telephone number ...]
  • Student and doctoral student study enrollment data [category grouping the following type of data: data at the study cycle of registration ...]
  • Data relating to professional experience and skills [category grouping the following type of data: CV, language skills, previous experience, references ...]
  • Registration data [category grouping the following type of data: date of event registration, purpose of registration ...]
  • Data relating to the preservation of proof of authorization or consent [category grouping the following type of data: dates of authorization, purpose ...]
  • Data relating to the taking of sounds, photographs or videos [category grouping the following type of data excluding video surveillance images and ID photo: recordings, metadata associated with recordings ...]. ]

This data is used to:

  • Manage information on the description and progress of the event
  • Manage registration for the event
  • Manage the creation and communication to participating companies of a portfolio of student CVs
  • Manage access to the event
  • Manage promotion of the event

Basis of lawfulness of data processing

The activity is necessary for the performance of a contract with the person whose data is processed or for the performance of measures taken with a view to the conclusion of a contract at that person's request (Article 6, 1, b) of the GDPR).

In addition:

  • Images taken at the event may be published in the University's newsletter, on the University's website, or on a University social network account. Depending on the type of images and their context, the basis for this use is the legitimate interest of the University of Namur in being able to inform the public about the activities it organizes as part of its teaching, research and community service missions, or the consent of the persons concerned.
  • Students' CVs are included in the CV portfolio made available to participating companies on the basis of the person's consent specifically collected for the processing of his or her data (Article 6, 1, a) of the RGPD).

Categories of people concerned

The persons whose data are processed for the purposes of the activity are registered students.

Data sources

The data included in the processing activity comes from the following source(s):

  • The person himself provided it
  • The data is generated by an activity of the person

Data recipients

Data are processed solely by University individuals and departments for the purposes of carrying out the activity. Internal data recipients mainly belong to the following category:

  • Faculty and department staff (for registration management)

External data recipients belong to the following categories:

  • Companies participating in job days or career days with regard to data included in the CV portfolio.

Treatment features

The retention period is determined according to the following criterion(s):

  • The need to retain data for operational purposes according to the purpose of its use.
  • The University of Namur deletes CVs within 3 months of their transmission to participating companies.

When information or images are published on social networks in the context of promoting the activities of the University of Namur, this data may be transferred outside the territory of the European Economic Area.

This transfer takes place under cover of the following grounds or guarantees:

  • The transfer takes place to an organization that undertakes to implement measures that comply with the requirements of the European Commission to ensure an adequate level of protection (these guarantees and mechanisms are described in their own data protection policy accessible on their websites).
  • When publication is carried out on the basis of the consent of the data subject, the circumstance that this publication involves a transfer of data outside the European Economic Area is the subject of a request for consent as well.

Rights of persons concerned

The rights of data subjects are described on www.unamur.be/fr/vie-privee. In particular, they have the right to withdraw their consent if processing takes place on this basis. The first point of contact for this purpose is the event organizer.