Privacy Notice – Recruitment

Homepage | Privacy Notice – Recruitment

The purpose of this privacy notice is to inform you about how your personal data is collected, processed and protected in the context of our recruitment process, in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter the “GDPR”) and the Luxembourg law of 1 August 2018 on the organisation of the Commission nationale pour la protection des données and the general data protection framework.

This notice applies to any natural person whose data is collected by MGSI in the context of a recruitment process, whether through a spontaneous application or in response to a job offer.

Your data may be collected directly from you or transmitted to us by a recruitment agency or any other intermediary acting on your behalf.

  1. Identity of the data controller

MGSI S.àr.l., a limited liability company incorporated under Luxembourg law, registered with the Luxembourg Trade and Companies Register under number B192771, with its registered office at 52a Waistrooss, L-5495 Wintrange, Luxembourg, represented by Mélanie Gagnon, in her capacity as manager (hereinafter “MGSI”).

  1. Data processed

In the context of the recruitment process, we may process CVs and cover letters which may contain the following data:

  • Personal identification data: surname, first name, postal address, nationality and work permit (for the purpose of verifying eligibility for employment in Luxembourg);
  • Electronic identification data: telephone number, e-mail address;
  • Personal details: date of birth, place of birth;
  • Academic and professional background data: qualifications, experience, skills, certifications;
  • Recruitment process data: interview notes, assessments.

We do not collect special categories of data within the meaning of Article 9 of the GDPR (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, sex life or sexual orientation). If such information is spontaneously communicated to us, it is immediately deleted.

  1. Purposes and legal bases for processing

We collect the categories of data detailed in section 2 in the context of recruitment management:

  • Assessment of your application — legal basis: performance of pre-contractual measures taken at your request (Article 6.1.b GDPR).
  • Retention of your application for future opportunities — legal basis: legitimate interest of MGSI (Article 6.1.f GDPR). You mayobject at any time (see section 8).
  1. Data retentionperiods

Your personal data is retained for a period of six (6) months after it becomes clear that a job offer will not be made or will not be accepted by the data subject. After this period, your data is deleted.

  1. Data location

We store your personal data within the European Union.

  1. Recipients of your data

We may share your personal data with:

  • persons in charge of recruitment within MGSI;
  • where applicable, our sub-processor in charge of the management and maintenance of our IT system.

These recipients are bound by confidentiality and data protection obligations.

  1. Data security

MGSI implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures aim to protect your data against any unauthorised access, disclosure, alteration or accidental or unlawful destruction.

  1. Your rights

In accordance with Regulation (EU) 2016/679 (GDPR), you have the following rights:

  • Right of access: obtain confirmation that we process your data and obtain a copy thereof;
  • Right to rectification: request the correction of inaccurate or incomplete data;
  • Right to erasure: request the deletion of your data, subject to our legal retention obligations;
  • Right to restriction: request that we restrict certain processing in the cases provided for by the GDPR;
  • Right to data portability: receive your data in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means;
  • Right to object: object at any time, on grounds relating to your particular situation, to the processing of your data based on the legitimate interest of MGSI, in particular the retention of your application beyond the current recruitment process;
  • Right to lodge a complaint: lodge a complaint with the Commission nationale pour la protection des données (CNPD), the Luxembourg supervisory authority.
  1. Contact

If you have any questions about this notice or your personal data, or if you wish to exercise your rights, you may contact us:

  • By e-mail: privacy@mgsi.lu
  • By post: MGSI S.àr.l., 52a Waistrooss, L-5495 Wintrange, Luxembourg

As of 20/04/2026