Legal information
Version 1.3, in force as of 24 August 2026
You are a candidate and your file is held in Aptessia. There are two situations, and they do not involve the same point of contact. Your file is in a company's talent pool. That company decides how it is used: it is the controller, and CONCIPI, the publisher of Aptessia, acts on its behalf. Your requests go to that company first, and we will help you reach it if you do not know which one it is. Your profile is published in the Aptessia shared talent pool. CONCIPI is then the controller for it and replies to you directly.
The shared talent pool is a space where your profile becomes visible to Aptessia client companies, and not only to the company you sent your file to. That is what allows you to be approached for a role you have not applied for. Until your identity has been revealed, your profile is presented without your name or your contact details: a company sees a career history, skills and assessment results, not an identifiable person. Revealing your identity is a paid action, it is logged, and it is charged to the company that requests it. This publication is based on your consent. The company that submits your file certifies that it has obtained that consent, and you may withdraw it at any time, without having to give a reason, by writing to contact@aptessia.com. Your profile is then removed from the shared talent pool, and that withdrawal has no effect on the applications you have under way.
Depending on what you have provided and on how the recruitment unfolds: your identity and your contact details, your CV and your career history, the skills you declare, the results of the tests and interviews conducted in the platform, and the exchanges relating to your application. No special category data within the meaning of Article 9 of the GDPR is requested, and none is necessary for the service.
This data is used to assess your application against a recruitment need, to conduct the tests and the interviews and, if your profile is published in the shared talent pool, to put you in touch with companies recruiting skills such as yours. It is not used for anything else. It is never sold, never used for marketing, and never passed on to companies outside the framework described here.
Aptessia relies on artificial intelligence models to generate questionnaires, produce summaries and propose matches between a profile and a need. No automated decision-making. No decision producing legal effects concerning you or similarly significantly affecting you is taken solely on the basis of automated processing, within the meaning of Article 22 of the GDPR: a score or a summary only informs a person, who decides. You may ask to be told the logic involved and to obtain a human review. Content sent to a model is filtered beforehand to remove directly identifying data, and content produced by AI is flagged as such in the interface.
The company you sent your file to, and the people in its recruitment team. Aptessia client companies, if your profile is published in the shared talent pool: without your name or your contact details for as long as your identity has not been revealed. CONCIPI's technical providers, which act solely on instructions: Scaleway (hosting in France and sending of emails), Supabase (database, hosted in Paris), Mistral AI (language processing for the artificial intelligence features).
In a company's talent pool: the period that company has set in its workspace, between one and twenty-four months, which is communicated to you at the time of collection. In the shared talent pool: for as long as you do not withdraw your consent, and at most two years after our last exchange. Once that period ends, your profile is deleted. The technical records needed to evidence an operation, such as the withdrawal of a consent, are kept without the data they relate to.
You have the right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to withdraw your consent at any time, without that withdrawal calling into question what was done beforehand. You may also give directions on what is to become of your data after your death. If your file is in a company's talent pool, contact that company: it is the one that decides. If your profile is published in the shared talent pool, write to us at contact@aptessia.com. If you are unsure who to address, write to us: we forward the request and tell you to whom. You will receive a reply within one month, which may be extended to three months if the request is complex: you are then informed of this and told the reason. You may also lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at www.cnil.fr, or with the supervisory authority of the country where you habitually reside.
The data is hosted in France, encrypted in transit and at rest. Access is restricted to the people who need it and is logged, and directly identifying data is filtered out before any call to an artificial intelligence model.
For any question about this document or about your data: contact@aptessia.com, or CONCIPI, 43 quai Malakoff, 44000 Nantes, France.