Privacy Policy

Personal data protection legislation aims to guarantee that individuals have a high level of control of their privacy and personal data. As of May 2018, Regulation (EU) 2016/679 (the General Data Protection Regulation or "GDPR") and the 2002/58/EC Directive (together with any other applicable European regulations applicable to the processing and protection of Personal Data, the "European Data Protection Regulations") define the applicable legal framework to guarantee this level of protection for personal data.

The CMA CGM group undertakes to comply with the European Data Protection Regulations.

CMA CGM, its affiliates or subsidiaries or their successors in interest (“the Company”) process personal data about their employees. This notice is designed to provide you with which data are collected and how they are used.

Why does the Company need your personal data?

CV, application data and all information collected through this form are held on an internal and secured platform. It will be exclusively processed by recruiting individuals for open opportunities matching your profile.

Who processes your personal data?

Your personal data are processed by qualified HR staff members or by the Information system department if stored on a computing system. All the professionals involved are bound by confidentiality requirements. Furthermore, all technical and organisational measures have been taken by the Company to secure the processing.

In addition, the Company can be led to transfer certain personal data to third party providers . They are allowed to process personal data only in accordance with the Company’s instructions, and are subject to contractual agreements as required under the European 2016/679 General Data Protection Regulation (GDPR) or the national law whichever has a higher level of personal data protection.

International Transfers

Intra group transfers are done in accordance with the Binding Corporate Rules governing international transfers and personal data processing within the group worldwide.

The Company may use service providers located outside the European Economic Area. Where the recipient is located in a country which has not been deemed by the European Commission to have adequate laws, the Company transfers the personal data as below:

  • Where the Company appoints providers based in the USA, data can be transferred only if they are members of the Privacy Shield; the Privacy Shield decrees a similar protection to personal data shared between Europe and the USA. For further details, see European Commission: EU-US Privacy Shield.
  • Standard Contractual Clauses are approved by the European Commission and have a similar level of personal data protection to the one within the European Economic Area. For further information on Standard Contractual Clauses, see European Commission: Standard Contractual Clauses.  

How long does the Company keep personal data?

Candidate Personal data are deleted by the Company after the recruitment period. The company may keep your CV up to 2 years after the last contact in compliance with the French regulation (Recommendation CNIL n° 02-017 21 March 2002).

Assert your rights

At any time, you may:

  • Have access to your personal data held by the Company
  • Get your personal data corrected or deleted
  • Refuse the processing or the transfer of your personal data
  • Get an electronic copy of your personal data
  • Make a complaint about how your personal data are handled.

If applicable, please contact the HR department. In addition, you can contact the CMA CGM Group Data Protection Officer by email at or by mail to the attention of Legal Department – Data Protection Officer, 4 quai d'Arenc, 13002 Marseille, France.

Requests should be raised by the personal data owner. After investigation, the Data Protection Officer will get back to you. Should you be unsatisfied with the answer, should you think that personal data processing does not follow the rules of law, you can refer to the supervisory authority located in your jurisdiction.