This Privacy Notice (“Notice”) describes Jumio Corporation, and its affiliates including Jumio Software Development GmbH, Jumio UK Limited, Jumio Software Development Canada LTD, Jumio India Pvt. Ltd., and Jumio Singapore Pte Ltd (collectively “Jumio”), privacy practices concerning personal information collected in connection with Jumio’s application, recruitment, and hiring processes (“Candidate Services”).
This Notice provides information about the personal information collected from the Candidate Services we process on our own behalf.
Data protection laws and privacy laws in certain jurisdictions, like the European Economic Area (“EEA”), differentiate between “controllers” and “processors” of personal information. A controller decides why and how to process personal information. A processor processes personal information on behalf of a controller, based on the controller’s instructions.
Jumio processes personal information in connection with Candidate Services in the capacity of a data controller. You are not required to provide your personal information to Jumio. However, if you do not provide us with your personal information, we may not be able to provide our Candidate Services.
When you engage with Jumio for the Candidate Services, we collect the following categories of personal information you provide directly to us by submitting an application to Jumio:
When you use Jumio Candidate Services via a Jumio Website, we may also automatically collect certain information which enables us to provide, improve, and develop our Candidate Services. Further information is provided in our Website Privacy Notice.
To the extent permitted by applicable law, we may also collect personal information through public sources (e.g., LinkedIn, etc.), personnel consultants or recruitment agencies, or through professional reference sources.
Overall, Jumio processes the personal information listed in Section 2 to:
Sharing for business purposes. We may provide personal information to service providers to help deliver, manage, and improve the Candidate Services. We may share all the categories of information listed in this Notice with other companies including affiliates, subsidiaries, or parent companies:
Corporate transactions. In the event of a corporate sale, merger, reorganization, dissolution or similar event, any personal information, and data we process from you may become part of the assets we transfer or share in preparation for any such transaction. Any acquirer or successor of Jumio may continue to process personal information consistent with this Notice.
Compliance and compelled disclosures. We may share personal information:
Aggregated information. From time to time, Jumio may also share anonymized and/or aggregated information, such as by publishing a report on trends in the usage of our Candidate Services.
Information for California residents. Other than with your consent, Jumio does not sell or share your personal information. The terms “sell”, “share”, and “personal information” are defined by the California Consumer Privacy Act (the “CCPA”).
The personal information described in this Notice may be transferred to and processed in the United States for the purposes described above. Jumio also may subcontract the processing of your data to, or otherwise share your data with, affiliates or third parties in the United States or countries other than your country of residence. The data protection laws in these countries may be different from, or less stringent than, those in your country of residence.
We take measures to help protect your personal information when it is transferred from the EEA, United Kingdom, and Switzerland to third countries. We may rely on European Commission adequacy decisions about certain countries, as applicable (see here). Where applicable, we rely on standard clauses approved by the European Commission (see here) in our contracts with third parties that receive information from both inside and outside the EEA, or transfer on the basis of permissible statutory derogations.
Jumio will retain the personal information for the duration of the application process, and for a maximum of 36 months thereafter. This is so that we can consider you for further employment opportunities. You can withdraw your consent at any time.
Jumio uses commercially reasonable physical, electronic, and procedural safeguards designed to protect your personal information against loss or unauthorized access, use, modification, or deletion. However, no security program is foolproof, and thus Jumio cannot guarantee the absolute security of your personal information or other information. For more information about our Security program, please visit our Security page.
You can exercise any of the rights described in this section consistent with applicable law by emailing [email protected] Please note that we may ask you to verify your identity and request, before taking further action on your request.
Data Access and Portability. In some jurisdictions, applicable law may entitle you to:
Data Deletion. In certain jurisdictions, you can request that your personal information be deleted. Please note that if you request the deletion of your personal information:
In accordance with applicable law, you may also have the right to: (i) request confirmation of whether Jumio is processing your personal information; (ii) object to or restrict our uses of your personal information; (iii) seek correction or amendment of inaccurate, untrue, incomplete, or improperly processed personal information; and (iv) lodge a complaint with the competent supervisory authority or regulatory agency.
Where we process your personal data based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
We will not discriminate against you for exercising any of the above rights.
Appeals. If you are a resident of the Commonwealth of Virginia, you may request an appeal of a refusal of a request regarding your privacy rights under the Virginia Consumer Data Protection Act by sending an email to [email protected].
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
We may only use information relating to criminal convictions as part of the Candidate Services where the law allows us to do so and in line with our Notice.
If you are an EEA resident, Jumio processes your personal information on the following legal bases under the General Data Protection Regulation (“GDPR“):
As revisions to the Notice are made, Jumio will post any updates on the Notice at https://www.jumio.com/legal-information/privacy-notices/candidate-notice/, we recommend reviewing that page periodically. If we make a material change to the Notice, you will be provided with appropriate notice.
If you have any questions or comments regarding Jumio’s Notice, please send an email to [email protected]. If you prefer to contact us by mail, please write to Jumio Corporation, ATTN: Privacy, 395 Page Mill Road, Palo Alto, CA 94306.
Jumio’s representative in the EU is Jumio Software Development GmbH, Stättermayergasse 28, 1150 Vienna, Austria. Jumio’s Data Protection Officer may be contacted at [email protected]