Privacy Notice – Recruitment Process

Michelin Romania SA

1. Data Controller

The controller of your personal data is Michelin Romania SA, with its registered office at: 
Oraș Voluntari, Șos. București-Nord, no. 10, Global City Business Park, Building O1, floors 2 and 3, and Building O1, Section O1.3, floor 4, Room 1, Ilfov County, Romania. 
(hereinafter referred to as the “Controller”).

2. Contact Details

You may contact the Controller in writing at the address mentioned above or by email at: dataprivacy_EUC@michelin.com

3. Legal Basis for Processing

Your personal data will be processed in accordance with the provisions of Romanian data protection laws and Regulation (EU) 2016/679 (GDPR) for the purpose of recruitment, based on: 
  • Article 6(1)(c) GDPR – compliance with a legal obligation under Romanian labor legislation; 

  • Article 6(1)(a) and Article 9(2)(a) GDPR – your consent, for any data provided beyond legal requirements; consent may be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal; 

  • Article 6(1)(f) GDPR – the legitimate interests of the Controller, such as: 

    • Assessing professional qualifications; 

    • Ensuring health and safety on the company’s premises; 

    • Retaining data for the period during which legal claims may arise; 

    • Onboarding selected candidates and providing employment-related information. 

4. Categories of Personal Data Processed

The Controller may process the following categories of personal data as part of current and future recruitment processes (including online recruitment): 

  • Full name 

  • Date of birth 

  • Contact information (telephone number, email address) 

  • Education 

  • Professional qualifications 

  • Employment history 

  • IP address (for online recruitment) 

  • Image (for online recruitment) 

  • Biometric data, if required for the role applied for

5. Data Retention

Personal data will be retained for no longer than 1 year from the application date, unless a longer period is legally justified (e.g., to fulfill obligations or for legal claims).

6. Data Recipients

Your data may be shared with:

  • Data processors acting on behalf of the Controller under data processing agreements and in accordance with the Controller’s instructions, with appropriate technical and organizational safeguards; 

  • Other Michelin Group companies

7. Global Career Management Platform (InTouch)

If employed, selected personal data (e.g. name, qualifications, experience, language skills, and employment history) from your application may be made available through Michelin Group’s InTouch global career platform for internal career management purposes. You have full control over what data is shared and may update it at any time: 
https://wd3.myworkday.com/wday/authgwy/michelinhr/login.htmld

8. International Data Transfers

Personal data will not be transferred outside the European Economic Area (EEA) except to other entities within the Michelin Group under Binding Corporate Rules (BCRs), which ensure an adequate level of data protection. 

9. Disclosure to Public Authorities

Your personal data may be disclosed to Romanian public authorities, including tax authorities (e.g., ANAF), public health authorities, and law enforcement agencies, where required by applicable law.

10. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data 

  • Request correction, deletion, or restriction of processing 

  • Object to processing 

  • Withdraw consent at any time 

  • Data portability – receive your data in a structured, commonly used, machine-readable format and transfer it to another controller 

  • Lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)

The National Supervisory Authority for Personal Data Processing (ANSPDCP) 
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, Romania 
Website: www.dataprotection.ro

11. Automated Decision-Making

Your data will not be subject to any decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you.

12. Voluntary Data Provision

Providing your personal data is voluntary, but necessary to participate in the recruitment process. Failure to provide the required data may prevent your application from being considered.