Privacy Policy
Last Updated: July 10, 2026
PRIVACY POLICY
OBO WORLD
Last Updated: July 10, 2026
1. INTRODUCTION
Protecting personal data is a fundamental commitment of OBO WORLD SAS ("Obo World", "we", "our" or "us").
This Privacy Policy explains how Obo World collects, uses, stores, protects and, where applicable, shares Personal Data when individuals use the Obo World Website, Platform or Services.
This Privacy Policy applies in particular to:
- visitors to our Website;
- Candidates participating in recruitment processes through the Platform;
- representatives of Customer organizations;
- Users holding an Account on the Platform;
- individuals who contact Obo World.
This Privacy Policy should be read together with our:
- Terms of Use;
- Interview Participation Terms;
- Cookie Policy;
- Responsible AI Governance Policy;
- and any other applicable contractual documentation.
2. DATA CONTROLLER
Unless otherwise specified, the Data Controller responsible for the processing of Personal Data described in this Privacy Policy is:
OBO WORLD SAS
A French simplified joint-stock company (Société par Actions Simplifiée – SAS)
Registered Office
23 rue du Pâquier
74000 Annecy
France
Annecy Trade and Companies Register (RCS): 913 219 184
Email:
contact@obo-world.com
Where Obo World provides its Platform solely on behalf of a Customer, Obo World acts as a Data Processor and processes Personal Data exclusively in accordance with the Customer's documented instructions and the applicable contractual arrangements.
3. OUR PRIVACY PRINCIPLES
At Obo World, we are committed to processing Personal Data in accordance with the following principles:
- lawfulness, fairness and transparency;
- data minimization;
- purpose limitation;
- storage limitation;
- accuracy, where reasonably possible;
- integrity and confidentiality;
- accountability;
- respect for the rights of individuals;
- responsible governance of Artificial Intelligence.
Privacy is integrated into the design of our services through the principles of Privacy by Design and Privacy by Default.
4. WHAT PERSONAL DATA DO WE COLLECT?
Depending on the Services used, Obo World may process the following categories of Personal Data.
4.1 Identification Data
This may include:
- first name;
- last name;
- title or salutation;
- email address;
- telephone number;
- country of residence.
4.2 Recruitment Data
Depending on the information provided by the Candidate or the Customer, Obo World may process:
- résumés (CVs);
- cover letters;
- employment history;
- educational background;
- professional skills;
- certifications;
- languages spoken;
- availability;
- salary expectations, where voluntarily provided;
- responses provided during Conversational Interviews.
4.3 Conversational Interview Data
When Candidates participate in a Conversational Interview through the Platform:
- written responses may be processed;
- spoken responses may be processed in order to understand, transcribe and analyze the content of the interview.
Important Information
A Conversational Interview is not a video conference.
During the standard operation of the Service:
- the Candidate's camera is never activated;
- no image of the Candidate is collected;
- no facial recognition technology is used;
- no biometric data is collected;
- no emotion recognition or facial expression analysis is performed.
Unless expressly communicated before the interview begins, Obo World does not record the Conversational Interview in its entirety.
4.4 Technical Data
When Users access the Website or Platform, Obo World may collect certain technical information, including:
- IP address;
- technical identifiers;
- browser type;
- operating system;
- browser language;
- date and time of access;
- technical logs necessary to ensure the security, integrity and proper functioning of the Services.
4.5 Customer Data
For representatives of Customer organizations, Obo World may process:
- first name;
- last name;
- professional title;
- business email address;
- business telephone number;
- Account information;
- activity history relating to the use of the Platform.
5. PURPOSES OF PROCESSING
Obo World processes Personal Data for the following purposes:
- providing access to and operating the Platform;
- managing recruitment processes;
- conducting Conversational Interviews;
- generating summaries, reports and decision-support indicators for recruiters;
- managing User Accounts;
- ensuring the security and integrity of the Platform;
- responding to enquiries and requests submitted to Obo World;
- complying with legal and regulatory obligations;
- improving and developing our Services.
Personal Data is never used to make fully automated hiring decisions without meaningful human involvement.
6. LEGAL BASES FOR PROCESSING
Depending on the processing activity concerned, Obo World relies on one or more of the following legal bases:
- the performance of a contract or the implementation of pre-contractual measures;
- compliance with a legal obligation;
- the legitimate interests pursued by Obo World or its Customers;
- the consent of the Data Subject, where required by applicable law.
Where processing is based on consent, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
7. RECIPIENTS OF PERSONAL DATA
Personal Data is accessible only to individuals who require access in order to perform their duties.
Depending on the relevant processing activity, Personal Data may be disclosed to:
- authorized Obo World personnel;
- the Customer that initiated the recruitment process;
- authorized recruiters;
- carefully selected technical service providers acting on behalf of Obo World;
- administrative or judicial authorities where disclosure is required by law.
All service providers acting on behalf of Obo World are selected with care and are contractually bound by appropriate confidentiality, security and data protection obligations.
Obo World never sells Personal Data.
8. DATA HOSTING
Whenever possible, Obo World hosts Personal Data within the European Economic Area (EEA).
Our technical infrastructure is selected to ensure a high level of:
- security;
- availability;
- confidentiality;
- operational resilience.
Where certain technical services require processing outside the European Economic Area, Obo World implements appropriate safeguards in accordance with the GDPR, including, where applicable:
- European Commission Adequacy Decisions;
- Standard Contractual Clauses (SCCs);
- or any other legally recognized transfer mechanism.
9. INTERNATIONAL DATA TRANSFERS
Due to the international nature of Obo World's business and that of its Customers, certain Personal Data may be processed in multiple jurisdictions.
Whenever Personal Data is transferred outside the European Economic Area, Obo World implements appropriate safeguards to ensure a level of protection essentially equivalent to that required under the GDPR.
Individuals may obtain further information regarding these safeguards by contacting Obo World using the contact details provided in this Privacy Policy.
10. DATA RETENTION
Obo World retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
Examples of retention periods include:
- Prospect Data: for the period necessary to manage the commercial relationship, unless the individual objects;
- User Account Data: for the duration of the contractual relationship and thereafter for the periods required by applicable law;
- Recruitment Data: in accordance with the Customer's instructions and applicable legal requirements;
- Technical Logs: for periods appropriate to security requirements and applicable legal obligations.
At the end of the applicable retention period, Personal Data is securely deleted, anonymized or archived where required by law.
11. YOUR RIGHTS
Subject to applicable data protection laws, you may exercise the following rights regarding your Personal Data:
- the right of access;
- the right to rectification;
- the right to erasure ("right to be forgotten");
- the right to restriction of processing;
- the right to object to processing;
- the right to data portability, where applicable;
- the right to withdraw your consent at any time where processing is based on consent;
- where permitted by applicable law, the right to provide instructions regarding the processing of your Personal Data after your death.
Where a Customer acts as the Data Controller, certain requests relating to your Personal Data may need to be submitted directly to that Customer.
12. HOW TO EXERCISE YOUR RIGHTS
You may exercise your rights at any time by contacting:
OBO WORLD SAS
23 rue du Pâquier
74000 Annecy
France
Email: contact@obo-world.com
To protect the confidentiality of Personal Data, Obo World may request reasonable information necessary to verify the identity of the person submitting the request.
Requests are handled within the time limits prescribed by applicable data protection laws.
13. HOW WE PROTECT YOUR PERSONAL DATA
Obo World implements appropriate technical and organizational measures designed to protect Personal Data against:
- unauthorized access;
- accidental loss;
- destruction;
- alteration;
- unauthorized disclosure.
These measures include, among others:
- access control mechanisms;
- authentication and authorization procedures;
- logging and monitoring systems;
- secure backups;
- identity and access management;
- infrastructure security measures.
Our security measures are reviewed regularly to reflect technological developments, evolving cybersecurity threats and applicable regulatory requirements.
While Obo World continuously works to safeguard Personal Data, no method of transmission over the Internet or electronic storage can guarantee absolute security.
14. ARTIFICIAL INTELLIGENCE
Obo World uses Artificial Intelligence (AI) technologies to assist recruiters throughout certain stages of the recruitment process.
Depending on the Services used, AI technologies may:
- analyze Candidate responses;
- generate summaries;
- produce decision-support indicators;
- assist recruiters in evaluating applications.
Obo World is committed to ensuring that Artificial Intelligence is used responsibly, transparently and proportionately.
AI-generated outputs are intended solely to assist human decision-making.
Recruitment decisions remain exclusively the responsibility of the Customer.
Obo World does not make automated decisions producing legal or similarly significant effects within the meaning of Article 22 of the General Data Protection Regulation (GDPR).
Further information regarding our approach to responsible AI is available in our Responsible AI Governance Policy.
15. COOKIES AND SIMILAR TECHNOLOGIES
The Obo World Website and Platform use only cookies and similar technologies that are strictly necessary for their operation.
These cookies are used in particular to:
- secure user sessions and connections;
- authenticate authorized Users;
- remember User preferences, such as the selected display language.
As of the date of the latest update to this Privacy Policy, Obo World does not use advertising cookies, profiling cookies or analytics cookies requiring User consent.
In accordance with applicable laws, the use of these Strictly Necessary Cookies does not require prior User consent.
For further information, please refer to our Cookie Policy.
16. CHANGES TO THIS PRIVACY POLICY
Obo World may update this Privacy Policy from time to time in order to:
- reflect changes in applicable laws or regulations;
- adapt to changes in our Services;
- strengthen the protection of Personal Data;
- reflect technological developments or changes in our business practices.
The version published on the Website at the time of consultation shall be the applicable version.
Where required by applicable law, Users will be informed of material changes by appropriate means.
17. COMPLAINTS
If you believe that your Personal Data has not been processed in accordance with applicable data protection laws, we encourage you to contact Obo World first so that we may seek an amicable resolution.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
If you are located in France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).
If you reside in another jurisdiction, you may also contact your local data protection authority where applicable.
18. CONTACT
If you have any questions regarding this Privacy Policy or Obo World's processing of Personal Data, please contact us at:
OBO WORLD SAS
23 rue du Pâquier
74000 Annecy