california privacy notice and policy
california privacy notice and policy for job applicants
categories of personal information we have collected in the past 12 months
the company has collected the following categories of personal information and sensitive personal information:
a.identifiers such as name, address, email address, telephone number, social security number, driver’s license number, state identification card, passport number, online identifier, ip address, and date of birth;
b.personal information as defined in the california customer records act (section 1798.80(e)) such as physical characteristics, signature, banking or payment card information, and medical information, including covid-19 symptom-related, testing related, and vaccination-related information;
c.characteristics of protected classifications under california or federal law such as race, ethnicity, sex, gender, marital status, age, disability status, medical or mental condition, veteran status, citizenship, immigration status, and familial status;
d.biometric data such as face photographs used for access badges and account profiles;
e.internet or other electronic network activity information such as internet and email activity, and information regarding interaction with company websites, applications, and information technology resources;
f.audio, electronic, visual, thermal, or similar information such as audio recordings, and video recordings;
g.professional or employee-related information such as employment history and employment-related assessments and evaluations;
h.education information such as education records and transcripts, including non-public educational information); and
i.inferences drawn from any of the above categories to determine characteristics, preferences, attitudes, abilities, or behavior; and
j.sensitive personal information such as personal information that reveals a job applicant’s social security number, driver’s license, state identification card, passport number, financial account information, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, or the contents of email transmitted to the company; personal information collected and analyzed concerning a job applicant’s health; and information from the processing of biometric information for the purpose of uniquely identifying a job applicant.
categories of sources from which personal information is collected
the categories of sources from which personal information, including sensitive personal information, is collected include:
a.directly from job applicants;
b.from references provided by job applicants; and
c.from company websites and applications; and
d.from business partners, government sources, and third party vendors
purposes for collecting personal information
the company may collect personal information, including sensitive personal information, for any of the following business purposes:
a.to comply with employment laws and regulations;
b.to administer human resource policies and other company policies;
c.to communicate with job applicants;
d.to recruit and evaluate candidacy for employment;
e.to identify potential symptoms relating to communicable diseases (including covid-19), prevent the spread of disease, and conduct contact tracing; and
f.to help promote workplace health, security, and safety;
g.for due diligence, compliance, and corporate administration purposes;
h.to anonymize or de-identify personal information for business purposes; and
i.to comply with local, state, and federal laws, regulations, ordinances, guidelines, and orders, including those relating to covid-19.
sale and sharing of personal information
the company has not sold or shared (as defined under the cpra) job applicant personal information in the preceding 12 months (including any information of persons under 16 years of age).
disclosure of personal information for business purposes
in the preceding 12 months we have disclosed the above categories of personal information and sensitive personal information for business purposes, including administrative purposes, to our service providers and contractors, including those for recruiting, benefits and human resource policy administration, web analytics, data processing, auditing, and other administrative purposes. the service providers and contractors are obligated not to disclose or use personal information outside of the business relationship with us or for purposes not permitted in their contract with us.
use and disclosure of sensitive personal information
we do not use or disclose sensitive personal information except in connection with those business purposes permitted under section 1798.121 of the cpra, including to perform services on behalf of our business.
your rights under the cpra
(1) right to know
you have the right to request that we disclose certain information to you about our collection and use of your personal information. once we receive and confirm your verifiable consumer request, we will disclose to you:
a.the categories of personal information we have collected about you;
b.the categories of sources from which the personal information was collected;
c.the business or commercial purpose for collecting, selling, or sharing personal information;
d.the categories of third parties to whom we disclose personal information; and
e.the specific pieces of personal information we have collected about you (subject to exceptions and restrictions in the cpra regarding disclosure of certain personal information).
(2) right to delete personal information
you have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers and contractors to delete) your personal information from our records, unless an exception applies (for example, if we are required by law to retain that information). if your request is denied, the response we provide to your verifiable consumer request will explain the reason for denying your request.
(3) right to correct inaccurate personal information
you have the right to request that we correct inaccurate personal information that we maintain about you, subject to certain exceptions. once we receive and confirm your verifiable consumer request, we will correct (and direct our service providers and contractors to correct) inaccurate personal information that we maintain about you, unless an exception applies. if your request is denied, the response we provide to your verifiable consumer request will explain the reason for denying your request.
(4) right to opt-out of the sale or sharing of personal information
we do not sell or share (as defined under the cpra) personal information that we collect from you and therefore do not provide a method to opt-out from such activities.
(5) right to limit use of sensitive personal information
we do not use or disclose sensitive personal information that we have collected from you for purposes other than those business purposes permitted under section 1798.121 of the cpra and therefore do not provide a method to limit such activities.
we will not discriminate against you or retaliate against you for exercising any of your cpra rights.
how to exercise your cpra rights
to exercise your right to know, right to delete, and right to correct, please submit a verifiable consumer request to us by either:
-phone: tel:+1 888-901-6812
-email: firstname.lastname@example.org or email@example.com
our verification process
upon receipt of your request, we will provide directions on identity verification requirements which will include submission of pieces of personal information that we can match to our records. once you provide such information and assuming we are able to verify your identity by matching the information you provided to our records, we will begin to gather information to respond to your request. for requests to correct, we may require you to provide additional documentation to rebut any of our own documentation that the personal information that you are requesting to correct is accurate.
no later than 10 business days after receiving your request, we will confirm receipt of the request and provide information about how we will process the request. we will endeavor to respond to a verifiable consumer request within 45 calendar days of its receipt. if we require more time (we may take up to 45 additional days), we will inform you of the reason and extension period in writing. if we cannot verify the request within the 45 calendar days, we may deny the request. if we deny your request, we will inform you of the reason for its denial.
you may use an authorized agent to submit a request to know, request to delete, or request to correct on your behalf. the authorized agent can submit such requests on your behalf by following the instructions in the “how to exercise your rights” section above.
when you use an authorized agent to submit a request to know, request to delete, or request to correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. we may also require you to do either of the following: (1) verify your own identity directly with us; or (2) confirm directly with us that you provided the authorized agent permission to submit the request.
if you have any questions or concerns about our privacy policies or information practices, including, but not limited to, the ways in which we collect and use your personal information, or your choices and rights regarding such use, or if you wish to exercise your rights under the cpra, please do not hesitate to contact: firstname.lastname@example.org
this privacy notice and policy can be found on https://www.alexanderwang.com/us-en/customer-care/privacy-policy-customer.