Privacy notice

As a global leader in consulting, technology services and digital transformation, Capgemini is at the forefront of innovation leveraging cloud, data, AI connectivity, software, digital engineering, and platforms to address the entire breadth of our clients’ needs. From advancing the digital consumer experience, to accelerating intelligent industry and transforming enterprise efficiency, we help our clients define the right path forward to a better future.

Capgemini is committed to protecting all personal information entrusted to it as part of its activities. We are committed to fostering transparency on how we collect and further process personal information.

Introduction

The aim of this Privacy Notice is to provide you with all the relevant information regarding the collection and further processing of your personal information by Capgemini.

In particular, in relation to the collection and processing of information which may result from your use of the Capgemini website – www.capgemini.com (hereinafter, “the website”).

Capgemini Services SAS, as the group’s parent company and other entities of the group (hereinafter, “we”, “us”, “our” or “Capgemini”) may collect and process your personal information as a data controller.

What categories of personal information does Capgemini collect?

The categories of personal information Capgemini may collect about you, or may have collected within the preceding twelve months, depends on your relationship and/or interaction with Capgemini at the time of collection whether you are a consumer, client, business associate, employment candidate or employee. We may collect the following personal information about you:

When you access our website. We may collect contact information, such as name, email address, phone number, company name, job title and seniority level through our Contact Us form. We may also collect web browsing activity, such as page views, time spent on site, date and time, location, device type, OS type, and browser type through Google Analytics. We may use this information to send marketing communications, suggest relevant content via advertising, and improve web user experience, or respond to RFI/RFP or general inquiries from potential or current customers.

When you engage our services. We may collect contact information, such as name, title, email address, business address, and phone number specific to the context of the Services we are providing, to administer our Services to you, or to send you marketing communications.

When you go through our recruitment process. We may collect personal information, including sensitive personal information, such as contact information, including name and email address, employment history, education history, EEO information, SSN, I-9 Employment Eligibility Verification, visa type, IP address for employment application, resume, video and screenshots of interviews, and interview feedback. We may use this information during our recruitment process for payroll and background check investigations, communication with the candidate, government reporting requirements, work authorization, fitness to role, and interviewee validation.

De-identified Information. Capgemini may use de-identified information of demographic information for recruitment initiatives.

Why is Capgemini processing your personal information?

Although your visiting our website will not necessarily result in the collection and/or further processing of your personal information, accessing parts of the website and/or requesting specific information may lead to such processing.

Depending on the purpose for which Capgemini collects or further processes your personal information, it shall either rely on your consent or on its legitimate interest. Please find below the main purposes for which Capgemini shall collect and/or further process your personal information:

How long will Capgemini keep your data?

Capgemini shall keep your personal information for no longer than is necessary for the purpose(s) for which they were first collected. Capgemini shall determine the appropriate retention period considering the purpose(s) of the processing and the relevant applicable legal requirements.

This means that the retention period may be defined differently depending on the purpose(s) pursued by the processing and the local requirements, considering specific legal obligations.

In any case, and as described below, you can exercise your rights to access your personal information, object to the processing of your personal information, or ask that your personal information be rectified or deleted.

Who has access to your personal information?

1. With other entities of the Capgemini Group

Capgemini is a global organization, as such, several entities of the Capgemini Group may access and further process your personal information. However, such access will always be strictly limited to the relevant stakeholder(s) both from a functional and geographical scope.

Please note that all processing activities carried out by Capgemini, including any cross-border transfers of personal information shall be covered and framed by Capgemini’s Binding Corporate Rules (BCR).  Capgemini BCR include both its EU and UK BCR.

Capgemini’s EU BCR where first approved the European Data Protection Authorities back in March 2016 and subsequently updated in January 2019 to comply with the General Data Protection Regulation (GDPR). Capgemini EU BCR where most recently updated in April 2023, to align with additional obligations regarding data transfers. As Capgemini’s Group Data Protection Policy, Capgemini’s BCR are legally binding on all Capgemini entities and their employees and provide a strong standard of protection to all personal information processed by Capgemini on its own behalf and on behalf of its clients.

2. With third parties

Capgemini may share your personal information with third parties from time to time and only where strictly necessary. Where Capgemini shares your personal information with any third party, it shall do so in compliance with any applicable data protection legislation. Where any cross-border transfers of personal information are involved, such transfers shall be framed by the appropriate data transfer mechanism(s). In particular, where GDPR applies, Capgemini shall enter into Standard Contractual Clauses (SCC) approved by the European Commission to frame cross-border data transfers to countries which do not benefit from an adequacy decision by the European Commission.

Capgemini may share your personal information with third parties, such as email address, demographic and firmographic data for advertising purposes with advertising vendors.

Additional categories of suppliers who may receive your personal information are:

• Background service providers
• Suppliers of services related to work permit obtention and I-9 verification
• Technology providers for the management of offer letter or contract execution
• Preboarding platforms, which candidates will have access during the preboarding phase

Capgemini may share sensitive personal information with third parties, such as name, Social Security Number, date of birth, and email address for the purposes of conducting legally required background checks, I-9 Employment Eligibility Verification, and to file EEOC reporting in its recruitment process.

3. With judicial, public and/or law enforcement authorities

We may also be required – by law, legal process, litigation, and/or requests from public and/or law enforcement authorities – to disclose your personal information.  Please note that any such disclosure shall only occur after Capgemini has carefully assessed and ascertained the legality and legitimacy of the request, as provided under our internal policies.

Should you have any question or require further information on whether or why Capgemini may share and/or transfer your personal information, please reach out to our Data Protection Officer(s) using the contact form available below.

What are your rights and how can you exercise them?

You can request access to, rectification or deletion of your personal information. You may also object to the processing of your personal information, or request that such processing be restricted. You may also withdraw your consent at any time, which will not affect the lawfulness of the processing.

In addition, you may ask for the communication of your personal information in a structured, commonly used and machine-readable format. You also may have certain data rights under various U.S. state privacy laws as set forth below.

• Right To Know. You have the right to know what personal information the business has collected about the consumer, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer. The categories of personal information that Capgemini collects, processes, and discloses can be found in the Section: “What categories of personal information does Capgemini collect?”
• Right to Delete. You have the right to request that Capgemini delete your personal information, subject to certain exceptions.
• Right to Correct. You have the right to correct inaccurate personal information Capgemini may have about you.
• Right to Opt-Out of Sale or Sharing. You have the right to opt-out of the sale or sharing of personal information. Capgemini does not Sell personal information in accordance with the California Consumer Privacy Act of 2018 as amended by and the California Privacy Rights Act of 2020, and implementing regulations (collectively, “CCPA”).
• Right to Limit Use and Disclosure of Sensitive Personal Information. You have the right to limit the use or disclosure of sensitive personal information if the business uses or discloses sensitive personal information for reasons other than those “approved sensitive personal information business purposes.” However, Capgemini does not use or disclose your sensitive personal information other than the purposes identified in Cal. Code Regs. tit. II Section 7027(m). 
• Right to Opt-Out of Targeted Advertising. You have the right to opt out of the processing of your personal information for targeted advertising or profiling. Capgemini may use name, email address, demographic and firmographic data, and skills for targeted advertising.
• Right to Access. You have the right to access your personal information.
• Right to Data Portability. You have the right to request to receive your personal information in a portable and, to the extent technically feasible, in a readily useable format.

If you wish to exercise any of these rights and/or if you have any question or request related to the processing of your personal information, or if you wish to exercise your right to appeal if you disagree with our decision to deny these rights, please reach out to our North America DPO at dataprivacyoffice.nar@capgemini.com. Please include all relevant information allowing us to best address your question/request. California residents have the right to not be discriminated against due to the exercise of their CCPA privacy rights.

Please note that you also have the right to lodge a complaint with the competent data protection authority.

If you are an authorized agent making a request on behalf of another pursuant to applicable privacy law, we may ask you to provide information verifying you have proper authority to make the request.

Third-party websites

Capgemini websites may feature links to third-party websites. Capgemini does not make any representations or warranties with respect to such third-party websites. You should be aware that the owners and operators of such third-party websites might collect, use, or transfer your personal information under different terms and conditions than Capgemini. Therefore, we invite you to carefully review any such third-party website’s Privacy Notice, Terms of Use and/or other documentation.

Notification of changes to this Policy

This Notice was last updated in June 2024. Please note that we may periodically change this Notice to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons.