File processing: Paris, 4th December 2024
Referral N°
(to be included in all correspondence)
Dear Mr ,
I am following up on the exchange of emails between the services of the Commission Nationale
de l'Informatique et des Libertés (CNIL) and the Data Protection Officer of , as
part of the investigation of the complaint sent to us by the Spanish Data Protection Authority,
pursuant to the provisions of Article 56.1 of the General Data Protection Regulation (hereinafter
"GDPR").
The complaint concerned the difficulties encountered by in exercising
his right to have his personal data processed as part of a recruitment process erased by your
company.
In an email dated 7 September 2023, the complainant stated that he had asked your company to
delete his personal data (application and information provided with his CV in PDF format) from its
database. In response, Mr explained that he had received an email dated 7
September 2023 (17:17) which included the link
that
should have enabled him to delete his personal data. However, he specified that, after opening this
link, he had received two emails from your company dated 1st December 2023 at 12:21 and 25th
January 2024 at 16:00.
I have noted that Mr 's request was taken into account by your company
even before the CNIL intervened. I note that the two emails that Mr received
after his request for deletion had been taken into account were sent following an individual error
made by an employee of your company.
I would also like to point out that your company has taken the necessary measures to ensure that
this malfunction does not reoccur and has reiterated the care it takes to protect the personal data it
processes.
In this context, the answers provided by lead me, in agreement with the
other European Data Protection Authorities concerned by your processing operations, to close this
complaint.
However, the CNIL reserves the right, in the event of further complaints, to make use of all the
powers conferred on it by the provisions of the GDPR and Act no. 78-17 of 6 January 1978, as
amended, relating to data processing, data files and individual liberties.
Yours sincerely
For the Chairwoman of the CNIL, and by delegation,
Copy by email: , Data Protection Officer of