Data protection
Personal data protection policy
Latest version – October 2026
iones is committed to conducting its activities in compliance with all applicable data protection laws and regulations and in line with ethical standards of conduct.
iones cares about respecting your privacy and protecting your personal data. In the interest of transparency, iones has adopted a “Personal Data Protection Policy” covering the personal data it collects, in accordance with the applicable regulations and in particular Regulation (EU) 2016/679 of 27 April 2016 and Law No. 78-17 of 6 January 1978, as amended, on information technology, data files and civil liberties.
Definitions
“Candidate”: any person who has sent an application and/or has been contacted by iones or through a recruitment agency regarding a job offer.
“Personal Data” or “Personal Information”: any information relating to an individual, where the person can be identified (i) directly from the information held, or (ii) indirectly from all the information concerning them that may be accessible, depending on the technical means available.
“Employee”: any person who has been recruited by iones, whatever their status.
“GDPR”: the European data protection regulation (EU) 2016/679 of 27 April 2016.
“iones”: IONES IT SERVICES, SUARL, with a share capital of 1,000 DT.
“Data Subject”: the individual to whom the Personal Data relates.
“Data Controller”: the natural or legal person, public authority, department or any other body which, alone or jointly with others, determines the purposes and means of the Processing.
“HR or Human Resources”: any department or member of a department involved in personnel management, recruitment, payroll or relations with employee representative bodies within iones.
“Processor”: the natural or legal person, public authority, department or any other body which processes Personal Information on behalf of the Data Controller.
“Processing”: any operation or set of operations performed on Data or sets of Personal Information, whatever the process used and whether or not by automated means, and applied (collection, recording, transmission, storage, retention, retrieval, consultation, use, interconnection, etc.).
Who is the data controller?
The data controller is the company IONES IT SERVICES, SUARL, with a share capital of 1,000 DT. Registered under tax registration number 1864845/A/M/000. Registered office address: Immeuble Omar, Bloc A, Bureau 3-2, Montplaisir 1073 – Tunis.
Telephone: +216 98 43 68 87.
If you have any questions, you can contact it at: contact@iones.io
What data is collected?
In general, we ensure that Personal Data is collected and processed lawfully, transparently and fairly. We undertake to inform every Data Subject of the purpose of the collection and Processing of their Personal Data, to collect only Personal Data that is adequate, relevant and necessary for the purposes of the Processing, and to retain Personal Data only for as long as strictly necessary for the purpose of the Processing.
The Personal Data we may collect includes, for example:
- identification data, such as your surname and first name, your address, your telephone number, your email address;
- application data, such as: surname, first name, email address, telephone number, professional experience and all the information you provide to us by sending your application and/or your curriculum vitae and/or during interviews: photo, skills, level of education, languages spoken, salary expectations, home address, hobbies, family situation, etc., if you wish to apply to join iones;
- origin data, when you write to us through a form on the site: the page through which you arrived on the site, the page from which you are writing, the address of the site that directed you to us and the campaign parameters (utm) of the link you followed. This data is kept in your browser for the duration of the visit, saved with your request, shared with no third party, and used solely to find out how our visitors find us;
- professional data, such as surname, first name, your job title, the company you work for, if you are a supplier or service provider of iones, etc.
As part of human resources management:
- Social security data (residence permit number, CIN number, CNSS number),
- Transport/business travel (means of transport used by an Employee for the reimbursement of travel expenses, for example travel card, vehicle running costs, etc.),
- Training and career (CV, diplomas, training experience, professional experience, cover letter, information provided by the Candidate, interview reports, interview dates, work permit (yes/no), foreign languages spoken),
- Working life (employment contract, recruitment date, employee identification number, job title),
- Financial data (tax deductions and withholding taxes, salary level, record of salary and other elements of remuneration, stock option plan, purchase option plan, relevant payments, bank account details),
- Video surveillance and access badge control data (iones operates video surveillance and access control systems on its premises, which lead to the collection and Processing of your Data such as video recordings, access information and information on the time of collection),
- Any other additional Data that we need to collect in order to manage the employment relationship.
For what purposes is your data collected?
Each Data Subject is informed clearly and precisely of the purpose and objective of the collection and Processing of their Data.
(i) Clients – prospects – service providers: Your Personal Data is collected and processed so that you can benefit from our service offers, so that we can perform our contracts and so that you can take part in our events.
The Processing of your Personal Data is intended in particular to meet one or more of the following purposes:
- to enable the administrative and commercial performance and management of contracts, and to carry out projects.
- to respond to and handle any question, any contact request, any appointment request,
- to present you with our commercial offers for services that may interest you, participation in our events, subscription to our newsletters, it being understood that you may, at any time, object free of charge to commercial prospecting by clicking the unsubscribe link in each email or by contacting us using the contact details given in section 2 above.
- to keep our client files up to date so as to meet your expectations ever better.
(ii) Candidates: Management of applications, assessment of the Candidate during the recruitment process.
(iii) Employees: Your Personal Data is collected and processed for one or more of the following purposes:
- Management of the employment relationship (administering remuneration, payroll and other standard employment functions);
- Administration of HR-related processes, including those relating to performance/absence management, disciplinary matters and complaints;
- Security management;
- Provision of IT facilities;
- Compliance with applicable local legislation (maternity leave obligations; working hours; remuneration, salaries and benefits due under your employment contract, annual increases and any other salary adjustment, deductions for income tax and social security contributions, etc.)
- Compiling statistics and carrying out surveys and research for internal and statutory reporting purposes;
- Fulfilling our responsibilities under equality, immigration and public safety legislation.
How long is your data retained?
iones will retain your Personal Data only for as long as necessary for the purposes for which it is processed, and in accordance with applicable legislation. The retention period of your Personal Data therefore depends on the purpose of each processing operation.
To determine the retention period of your Personal Data, we use in particular the following criteria:
- if cookies are used, we determine their lifespan by following the limit set by the competent authority;
- when we retain some of your Personal Data to meet a legal or regulatory obligation, and so that we can exercise our rights, we retain your data, where applicable, for the period stated in the reference legal text (for example: the limitation period or the statutory retention period).
- In the case of an application, your CV and the information you provided during the recruitment process will be retained for up to 2 years after your last contact with iones, unless you object. Only your formal consent allows longer retention.
- The data you enter in the contact form will be retained for as long as necessary to respond to your request.
- Your employee profile and your HR file will be retained by iones until the end of your employment contract, with some personal data being archived for a longer period where the law requires it or for the exercise or defence of legal rights (e.g. limitation period during which someone may bring legal proceedings).
What are your rights as a data subject and how can you exercise them?
Depending on the processing operations your Personal Data is subject to, you may have the following rights:
- Right of access
The right to obtain confirmation from us as to whether or not Personal Data concerning you is being processed (right of access). If so, you can access your Personal Data and obtain information such as the purpose of the processing, the categories of personal data concerned, etc.;
- Right to rectification
The right to obtain from us the rectification of inaccurate Personal Data concerning you (right of rectification);
- Right to erasure (“right to be forgotten”)
The right to obtain the erasure of your Personal Data, provided that one of the grounds justifying this right applies (right of erasure);
- Right to restriction of processing
The right to obtain the restriction of processing, where one of the grounds justifying the exercise of this right applies (right to restriction of processing);
- Right to data portability
The right to receive your Personal Data in a structured, commonly used and machine-readable format, and the right to transmit that data to a data controller without hindrance from us (right to data portability);
- Right to object
The right to object, meaning that you can, for example, prohibit us from using your Personal Data for direct marketing purposes;
The right to set guidelines for the processing of your Personal Data after your death.
To exercise these rights, you can contact us at the following address: contact@iones.io
So that we can handle your request satisfactorily, you will need to prove your identity, by any means. If we have any doubt, we may ask you for additional information, in particular a copy of your identity card, signed by you.
We will do our best to respond to your requests. Whatever our response, we will send it to you within one month, but our response time may be extended by two further months depending on the complexity and number of requests.
If, for any reason, you consider that our response is not satisfactory, please note that you may lodge a complaint with the National Authority for the Protection of Personal Data (INPDP).
Who can access your personal data?
Authorised persons within iones and, in some cases, our processors, may access your Personal Data. We make every effort to ensure that the number of these persons remains as small as possible and we maintain the confidentiality and security of your Personal Data. Other third-party recipients, such as our trusted service providers, may also receive your Personal Data, depending on the processing.
In this respect, we provide them only with the information they need in order to provide the service and ask them not to use your Personal Data for other purposes. We always make every effort to ensure that all the trusted service providers we work with maintain the confidentiality and security of your Personal Data. We also ensure that, when our relationship with a trusted service provider comes to an end, that provider deletes your personal data without delay.
We select our trusted service providers with great care, making sure that they provide sufficient guarantees, in particular in terms of expertise, reliability and resources, to implement technical and organisational measures capable of meeting the requirements of applicable legislation, in particular the security of processing. In this respect, we ensure that our trusted service providers process Personal Data only on our documented instructions. We also ensure that their staff have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
Internally, your personal data is accessible only to the HR department or to any other department with a strict need to know.
Where do we store your personal data?
Your data is stored in France, on servers located on French territory. Transfers of personal data outside the European Economic Area are authorised only under certain conditions.
What security measures have we implemented regarding your personal data?
iones has implemented appropriate technical and organisational measures, in view of the nature of the data and the risks that its processing entails, to preserve the security and confidentiality of your Personal Data and, in particular, to prevent it from being distorted or damaged, or unauthorised third parties from accessing it.
These measures may include practices such as limited access to data by staff of the departments authorised to access it because of their duties, contractual guarantees where an external service provider is used, privacy impact assessments, regular reviews of our privacy practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copies, antivirus software, firewall, etc.).