Privacy Policy
1. Introduction
This Privacy Policy describes howVela Energies, a consulting and recruitment company in the energy sector (hereinafter referred to as “we” or “Vela Energies”), collects, uses and protects the personal data of its users and clients, in accordance with the General Data Protection Regulation (GDPR) No. 2016/679 and the Data Protection Act.
2. Identity of the Data Controller
The data controller of your personal data is:
Vela Energies
60 rue François 1er, 75008 Paris, France
Numéro de SIRET/RCS : 993 644 400 00018 - 993 644 400 R.C.S. Paris
Contact : dpo@velaenergies.com
3. Data Collected, Purposes and Legal Bases
Vela Energies collects and processes personal data for specific purposes:
| Type of Form | Categories of Data Collected | Purposes of Processing | Legal Basis (GDPR) |
| Application Form | Identification (Name, Surname, Contact), Professional background and Qualifications (via the attached CV), Information from the CV/Cover letter. | Management and tracking of applications, assessment of profiles for current or future positions, building a talent pool. | Pre-contractual measures (Art. 6.1.b) or Legitimate Interest of the company (Art. 6.1.f) to assess qualified profiles. |
| Client Needs Form | Company identification (Name, Position, Contact), Detailed job description (attached file). | Management of client requests, commercial contact, execution of recruitment and consulting services. | Contractual execution or Pre-contractual measures (Art. 6.1.b). |
| Connection Data | IP address, pages viewed, operating system, etc. (via cookies/Analytics) | Improvement of service and user experience, audience analysis. | Consent (Art. 6.1.a) via the cookie banner or Legitimate Interest (Art. 6.1.f). |
4. Recipients of the Data
Your personal data is processed by authorised Vela Energies staff, including:
For Candidates:Recruitment consultants and HR services of Vela Energies.
For Clients:The sales team and management.
Third Party Partners:The data of shortlisted candidates is only shared with client companies after your express and prior consent.
We do not sell or rent your personal data to third parties.
5. Data Retention Period
Vela Energies is committed to not retaining personal data beyond the time necessary to achieve the purposes for which it was collected.
| Type of Data | Retention Period | Justification |
| Applications (CV and associated data) | 2 years after the last contact with the candidate. | Allows for recontacting the candidate for new opportunities. (In accordance with the recommendations of the CNIL). |
| Client Data (Needs Form) | 3 years after the last commercial contact. | Necessary for the follow-up of the business relationship and for prospecting purposes. |
| Cookies / Connection Logs | Maximum 13 months. | In accordance with the recommendations of the CNIL. |
At the end of this period, the data is permanently deleted or anonymised.
6. Data Security
Vela Energies implements all appropriate technical and organisational measures to ensure the security, confidentiality, and integrity of your personal data, particularly to prevent any unauthorised access, alteration, disclosure, or destruction.
Data and attachments are stored on secure servers located within the European Union.
Access to this database is strictly reserved for authorised personnel.
7. Data Transfer Outside the EU
Your personal data is primarily processed within the European Union (EU).
If, for the needs of services to our clients operating in the energy sector internationally, a data transfer were to take place outside the EU, we commit to taking all necessary measures to ensure an adequate level of protection, in accordance with the requirements of the GDPR (for example, using the European Commission's Standard Contractual Clauses).
8. Your Rights (Rights of Data Subjects)
In accordance with the applicable regulations, you have the following rights regarding your personal data:
| Right | Description |
| Right of access | To obtain confirmation that your data is being processed and, where applicable, to access it. |
| Right to rectification | To request the update or correction of your data. |
| Right to erasure | To request the deletion of your data (right to be forgotten). |
| Right to restriction | To request the temporary cessation of the use of certain data. |
| Right to object | To object to the processing of your data (notably for marketing purposes). |
| Right to data portability | To receive the data you have provided to us in a structured format. |
| Right to withdraw consent | To withdraw your consent at any time when the processing is based on it. |
To exercise these rights, you can contact us at the email address mentioned in point 2 (Data Controller). We are committed to responding to you within one month.
In case of difficulty, you have the right to lodge a complaint with the CNIL (National Commission for Informatics and Liberties): www.cnil.fr.
9. Update of the Policy
This Privacy Policy may be updated at any time, notably to comply with any legislative, regulatory, jurisprudential or technical developments. We encourage you to consult this page regularly.
Dernière mise à jour : Novembre 2025