MANGOPAY - JOB APPLICANT PRIVACY STATEMENT
Mangopay - Last update June 2026
This privacy statement describes how the entities of the Mangopay Group (“Mangopay”) collect and process your personal data in the context of recruitment activities. Mangopay includes the following entities that may be involved in the processing of your personal data:
Mangopay S.A., registered at 4 rue du Fort Wallis, L-2714 Luxembourg (“Mangopay S.A.”), including the following subsidiaries: Mangopay S.A. France ("Mangopay France"), Mangopay S.A. Germany ("Mangopay Germany"), and Mangopay S.A. Spain ("Mangopay Spain");
Mangopay UK Limited, registered at 32-34 Great Marlborough Street, London, England, W1F 7JB, United Kingdom (“Mangopay UK”);
Mangopay Ireland Ltd registered at 6th Floor, 2 Grand Canal Square, Dublin 2, D02 A342 (“Mangopay Ireland”),
Mangopay Solutions S.A., registered at 4 Rue de la Tour des Dames, 75009 Paris, France, (“Mangopay Solutions”);
Mangopay Poland registered at Plac Europejski 1 Warsaw (00-844) (“Mangopay Poland”);
Mangopay Malta Limited, registered at Office Nr. 2 The Bastions, Triq Emvin Cremona, Floriana, FRN 1281, Malta (“Mangopay Malta”),
Jointly referred to as "Group Companies", "we", "our".
The Group Companies are joint controllers of your personal data for the purpose of recruitment processes and informing about recruitment events and initiatives.
Categories of personal data we process
About candidates:
Data from interviews, assessments and other information from the recruitment process - Such as notes from interviews with you, assessments and tests made, salary requirements.
Information in your application - Such as your CV, cover letter, work samples, references, letters of recommendation and education.
Information in your public profile - Meaning the information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
Information provided by references - Meaning the information we receive from our employees or partners who refer you to us, or by the persons you have listed as your references.
We may also process the following data from candidates or any other individual interacting with our career pages or involved in our recruitment process:
Device information - If you visit our Career Site, we will collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, operating system and device settings/usage.
Technical and statistical data - If you visit our Career Site, we will collect technical and statistical data about your use of the site, such as information about which URLs you visit, and your activity on the site.
Communications data - We will collect and store your communication with us, including the information you provided in the communication. This may include the content of emails, video recordings, messages on social media, the information you add to your account with us, surveys, etc.
Contact details - Such as your name, email address, telephone number and physical address.
We may obtain your personal data through the following sources:
Our Career webpages;
Directly from you;
From the person for whom you are a reference or you indicated as a reference;
From public sources such as LinkedIn or your current employer’s website;
From our partners (e.g., recruitment agencies); and
Information we create ourselves or in cooperation with you during the recruitment process (e.g., during tests or interviews).
Legal bases for processing your personal data
The Group Companies will process your personal data for different purposes on the following legal bases:
To fulfil contractual obligations: the processing of your personal data is necessary to take steps, at your request (by actively submitting your job application), prior to entering into a contract with you - to assess your eligibility for the job you are applying for.
Providing your personal data through the application form and in the attached CV is necessary in order for us to process your application. If you don’t provide us with the required data, we will not be able to invite you to take part in our recruitment process.
If you apply through a recruitment agency, the relevant agency will be acting as a separate data controller and will be responsible for ensuring legality of processing of your personal data as well as fulfilling information obligations towards you. If you have questions about how this recruitment agency processes your personal data, please contact the agency directly.
Responsibilities of the joint controllers
Group Companies run multiple recruitment processes simultaneously, while searching for candidates with comparable qualifications for similar positions. Because of that, the recruitment process is highly centralised and Group Companies are acting as joint controllers with respect to your personal data. As a result, the Group Companies jointly determined their respective responsibilities for compliance with data protection obligations. In particular the Group Companies have decided that Mangopay S.A. and Mangopay Poland, as the case may be, are responsible for:
collecting consents for processing of personal data for current and future recruitment projects and for communication with individuals on behalf of all the joint controllers;
fulfilling information obligation on behalf of joint controllers;
ensuring legal basis for data transfers outside the European Economic Area (EEA), should Group Companies decide to entrust the processing of data in the HR database to entities located in a third country;
conclusion of data processing agreements when data are entrusted to processors for recruitment purposes;
acting as a common point of contact for individuals whose data are processed.
All the other obligations remain with individual Group Companies as data controllers.
Your rights
In order to exercise your rights under applicable data protection regulations, you can contact us either at privacy@mangopay.com.
Right to object. You have the right to object to the processing carried out by Group Companies based on our legitimate interests. If you do so, we will stop processing your data for the purposes listed above, unless we are able to prove that legally justified bases exist, which override your rights and interests, or that your data is necessary for the purpose of establishing, defense and exercise of legal claims, or when we have an obligation to keep your data based on binding provisions of law.
Withdrawal of consent. When your personal data is processed based on your consent, you have the right to withdraw it at any time, in which case we will stop processing your personal data and we will delete it. Withdrawal of consent does not affect legality of processing carried out by Group Companies prior to your withdrawal.
Moreover, you have the right to request:
The confirmation of whether we are processing your personal data, how we process it and request access to your personal data ;
The deletion of your personal data;
The rectification of your data, in the event that it is outdated or incorrect;
The restriction of the processing of your personal data;
Data portability, i.e., to ask us to transfer your personal data to another data controller;
In addition to these rights, you can file a complaint with a national data protection authority at any time if you believe that your rights have been violated. Some data protection authorities may be available via the links provided in the list below or you can contact any other national data protection authority in your jurisdiction directly:
How long we keep your data
We process your data for the duration of the recruitment process and additionally for up to three months after closing the recruitment process. We may process your data for a longer period, established based on the following criteria:
whether we are planning to recruit for similar positions in the future, which you might find of interest, and you consented to processing of your data for the purpose of future recruitment – we will keep your personal data for up to 1 year from the date of consent;
whether processing of your personal data is necessary for defense of potential future claims – for the aforementioned purposes, depending on circumstances, we may archive your personal data for a period of up to 5 years, starting from the closure of the recruitment process.
If we receive your personal data from a recruitment agency, we need to keep it for up to 1 year for evidentiary purposes which follow from our contractual obligations with the agencies.
Your data will be deleted upon the lapse of the established retention periods or if you (i) withdraw your consent, (ii) successfully object to the processing based on legitimate interest or (iii) if we establish that your data is outdated or no longer necessary for the purpose of collection (e.g. if you stop expressing your will to take part in future recruitment).
Who we share your data with
We share your personal data with the partners that powers our career page and recruitment process, and with recruiting agencies when applicable. One of these partners is Teamtailor, which is our tool for tracking job applications from beginning to the end of the recruitment journey. We do not make your data available to other third parties. However, we may sometimes have to share your personal data with competent authorities (in particular the police or prosecution service), if they approach us with such a request, provided that there exists an appropriate legal basis for making your personal data available to them (e.g. a court order).
Your application is treated confidentially. Only our hiring managers and our HR department (recruitment officers, managers, etc.) will have access to your personal data. If the recruitment process is successful, in order to finalize the recruitment, our HR department will be required to transmit some of the information collected to the relevant organizations (notably pertaining to unemployment insurance, health insurance, retirement, mutual insurance).
