Applicant Privacy Policy

Welcome to the Mistral AI applicant privacy policy (the “Privacy Policy”) and thank you for applying to a position in our company! This Privacy Policy explains how we collect, use and protect your personal data in the context of our hiring processes.

1. Who collects your data ?

Mistral AI - Mistral AI is the data controller. This means that Mistral AI is the entity that decides how and why your personal data is collected and used.

Who we are - Mistral AI is a French company incorporated in Paris, under number 952 418 325, having its registered offices at 15 rue des Halles, 75001 Paris (“We”, “Us” or “Mistral AI”).

How to contact us or our data protection officer -

By using the “Privacy Requests” contact form available here.
By sending us a letter at Mistral AI, Attn: Privacy Team, Mistral AI, 15 rue des Halles, 75001 Paris, France.

2. What data do we collect ?

2.1. Data you provide directly to us

To enable us to evaluate your application and assess your suitability for the position we will ask you to provide Personal data. If you choose not to provide Personal data that is necessary for your application, we may be unable to process your application or move you forward in the hiring process.

When you apply to a Mistral AI job offer, we collect the following categories of personal data:

Your identification data, such as your name, title, address, phone number, or email address;
Your professional data, such as your resume, cover letter, and references, and past experiences (if relevant);
Your application data, such as your salary expectations, availability, notice periods, responses to application questions and responses to interview questions;
Your financial data, where necessary, to reimburse you for any agreed expenses and travel.

If you share sensitive personal data (such as details about your medical condition) in your application, please note that we will process it. However, unless strictly necessary (see Section 3 below), we encourage you to avoid providing such data. Should it be included in your submission, we will process it in accordance with our privacy policy, but it will not be used to determine the outcome of your application.

2.2. Data indirectly provided to us

We may also collect categories of personal data indirectly:

When we source candidates for our job offers, we collect personal data publicly available on professional platforms such as Linkedin. This personal data includes identification data (such as your name) and professional data (such as your resume).
When you are referred for a position by a Mistral AI employee, we collect both the personal data available on your professional profiles (e.g., LinkedIn) and the justification provided by the referring employee for your candidacy.
During the interview process, we collect:

Interview data, such as interview dates or feedback provided by Mistral AI employees or recruiting agencies involved in the hiring process;
Reference data, such as feedback from professional/academic references provided by you as part of the interview process.

3. Why do we use your personal data?

Why we use your personal data	Category of personal data	Lawful basis
To proactively reach out to you about an opportunity for a position at Mistral AI	Your identification data (e.g. name) Your professional data publicly available on professional platforms (e.g. Linkedin)	Our legitimate interest to proactively identify, engage, and build relationships with potential talent for current or future opportunities
To assess your suitability for the position you applied for, as well as other open positions at Mistral AI	Your identification data (e.g. name, email address) Your professional data (e.g. resume) Your application data (e.g. cover letter) Your professional data publicly available on professional platforms (e.g. Linkedin) Your interview data (e.g. feedback from interviewers) Your reference data (e.g. feedback from professional references you provided) When you have been referred by a Mistral AI employee, the referral context (i.e., the reasons provided by the Mistral AI employee for recommending you).	The performance of precontractual relationship between You and Mistral AI
To coordinate interviews, assessments, and logistical arrangements	Your identification data (e.g. name, email address) Your interview data (e.g. date of the interview, name of interviewers) Your financial data to reimburse you for any agreed expenses and travel.	The performance of precontractual relationship between You and Mistral AI
To keep you informed about the status of your application and next steps	Your identification data (e.g. name, email address)	The performance of precontractual relationship between You and Mistral AI
To confirm the accuracy of the information you provide, including employment history, qualifications, and reference and to conduct background checks	Your professional data publicly available on professional platforms (e.g. Linkedin) Your reference data (e.g. feedback from professional references you provided)	Our legitimate interest to ensure the integrity, safety, and suitability of our hiring processes
To propose to you any additional opportunities that may align with your profile	Your identification data (e.g. name, email address) Your professional data (e.g. resume) Your application data (e.g. cover letter) Your interview data (e.g. feedback from interviewers)	Our legitimate interest to optimize talent engagement, enhance candidate experience, and ensure you are informed of relevant roles that match your skills and career aspirations
To analyze recruitment data to monitor and improve the effectiveness of our hiring processes, tools, strategies, systems and enhance the candidate experience	Aggregated and anonymized statistics about the interview process	Our legitimate interest to continuously improve our hiring process
To test and evaluate the performance of our internal automated tools, for instance the use of an artificial intelligence agent in the context of talent acquisition, to assist recruiters in reviewing applications or scheduling interviews. Your data will not be used to train our models. This is only to test already built internal tools, including to detect and correct any potential biases in such tools. You can object to this processing anytime by contacting our privacy team via the dedicated form. Objecting won’t affect your application.	Your application data (e.g. the position you applied for); Your professional data (e.g. your resume).	Our legitimate interest in developing and improving tools to continuously improve our hiring process
To respond to legal requests, complaints, or claims, or defending Mistral AI’s interests in accordance with applicable laws and depending on the case	Your identification data Your professional data Your interview data Any other data necessary for the investigation or resolution of the claim or dispute.	Our legitimate interest in protecting and exercising our legal rights
To respond to your requests to exercise your rights on your personal data	Your Identification data Any other personal data included in your privacy request	Our legal obligation to respond to your requests

4. Do we use automated decision making in application processing ?

For roles that receive a high number of applications, we use automated tools to help us manage the initial screening fairly and efficiently. This means that a tool may be the first to assess whether your profile matches the requirements of the role, but this is only ever a preliminary step.

This screening works by comparing your application against a set of objective predefined criteria for the role, such as required skills, experience level, or location. Its sole purpose is to help us focus our attention on the profiles that best match what we are looking for at this stage.

If your application does not meet these criteria, it will not be included in the shortlist presented to our talent acquisition team, though your application remains accessible to them throughout the process.

If you have not heard from us within 10 business days of submitting your application, please consider that your application was not shortlisted at this stage.

You are always welcome to ask us for more details about how this tool works and how it applied to your application. Except in cases where your application was already reviewed by our talent acquisition team, you can also request that a member of our talent acquisition team personally reviews your application after this 10 business days period. You can exercise these specific rights:

By using the “Privacy Requests” contact form available here.
By sending us a letter at Mistral AI, Attn: Privacy Team, Mistral AI, 15 rue des Halles, 75001 Paris, France.

5. How long do we store your personal data?

We retain applicant data only as long as necessary to fulfill the purposes outlined in this Privacy Policy (or any other applicable notice) and in compliance with legal requirements.

If you accept a role with us: Your data will be retained to manage your employment or assignment, and a separate privacy notice will apply to your ongoing relationship with us.
If your application is unsuccessful, withdrawn, or declined: Your data will be retained for the purposes specified in this Privacy Policy, such as considering you for future roles, improving our recruitment processes, and maintaining records. You may request the deletion of your data by following the process outlined in Section 8.

6. Who do we share your personal data with?

Access to your Personal data is strictly limited to:

Mistral AI Employees on a need-to-know basis. Only employees directly involved in the recruitment process have access to your data (e.g. recruiters, hiring relevant managers, and interviewers including employees of our Affiliates);
Regulatory authorities if requested;
Legal and professional services such as competent courts, mediators, accountants, or lawyers when appropriate;
Third-party providers solely for the purposes described in this Privacy Policy to support our recruitment process and under strict contractual safeguards. This includes for instance headhunters or recruitment agencies.

7. Do we transfer your personal data outside of the European Union ?

Your Personal data may be transferred to countries outside the European Union (e.g. the U.S.), where our Affiliates are located.

We prioritize selecting providers within the European Union that strictly adhere to the GDPR. However, in exceptional cases, we may opt for non-EU providers that meet our high standards of data security and Personal data protection. We take the necessary steps to ensure that all contracts with service providers who process personal data outside the European Union have adequate safeguards in compliance with Article 46 of the GDPR. Additionally, we attach the most recent version of the European Commission’s Standard Contractual Clauses to all such contracts and, where applicable, additional technical and organizational measures to protect your data

8. Your rights

8.1. What are your rights?

You can exercise the following rights :

Access - You have the right to know if we process your personal data. You also have the right to request a copy of such personal data and to obtain further information about the way we process your personal data.
Portability - You have the right to obtain and transfer your personal data you provided to another entity.
Rectification - You have the right to ask us to update or correct your personal data.
Deletion - You have the right to delete and/or ask us to delete your personal data.
Objection - You have the right to object to the processing of your personal data. This right does not apply when we have a legal obligation to process your personal data.
Consent withdrawal - You have the right to withdraw your consent to the processing of your personal data that we are processing on this basis at any time.
Limitation - You have the right to ask us to freeze the processing of your personal data.
Automated decision - You have the right to not be subject to an automated decision (including profiling) and to appeal such a decision.
Post mortem - You have the right to tell us how you would like us to process your personal data after your death.
Lodge a complaint - You have the right to lodge a complaint before the competent data protection authority, including the French data protection authority (the CNIL).

8.2. How to exercise your rights?

We will take every step to make sure we reply to your requests.

You can exercise these rights at all times:

By using the “Privacy Requests” contact form available here.
By sending us a letter at Mistral AI, Attn: Privacy Team, Mistral AI, 15 rue des Halles, 75001 Paris, France.