您可以访问我们网站（“网站”）的招聘部分，并在不提供个人信息的情况下搜索职位。但是，当您访问我们的网站时，我们会自动从您的设备收集某些信息。有关更多信息，请参阅一般适用于使用我们网站的 隐私声明，包括网站的招聘部分。

另请注意，您对我们网站的使用受我们的使用条款的约束。

我们所收集的个人信息可能由您直接提供，或者我们可能会自动或从第三方获取个人信息，例如推荐人、前雇主、教育场所或其他数据来源。

在适用法律允许并遵守适用法律的情况下，我们所收集和使用的个人信息的类型可能包括：

• 身份数据和详细联系信息 - 包括您的姓名、地址、电子邮件地址、电话号码和其他联系信息、性别、种族或民族血统、性取向、婚姻状况、退伍军人身份、出生日期、国籍、国民身份标识符（如身份证/护照、社会保障号）、身体特征或描述以及其他个人和在线标识符。
• 工作经历 - 例如前雇主和工作职衔/职位。
• 背景信息 – 例如学术/专业资格、工作资格、教育、简历/履历中包括的详细信息（可能包括构成敏感个人信息的任何成员身份或利益的详细信息）、成绩单和工作推荐信。
• 您指定的推荐人的详细信息（包括他们的姓名、详细联系信息、雇主和工作职位）。
• 您的居住地、公民身份、签证状态、工作许可证状态和军人身份的详细信息。
• 以前的申请/职位（与您之前向 C&W 集团提交的申请和/或之前在 C&W 集团的任何工作经历相关的信息）。
• 工作申请信息 – 例如您申请的职位、您的工作申请和相关文件/通讯、求职信、面试和电话筛查信息、薪酬/福利请求、调动信息。
• 健康信息、身体限制和所需的特殊便利。
• 闭路电视/建筑物出入控制 - 出于任何访问 C&W 场所的目的（例如为了面谈），请注意，我们可能会出于安全和执法目的部署闭路电视和/或建筑物出入控制（涉及处理闭路电视图像和/或其他个人信息，如访客姓名和进入建筑物的时间），以确立、行使或捍卫我们的合法权利和/或保护任何人的切身利益。
• 我们遵守法律所需的信息，包括依照执法机构或法院命令的指示。
• 与上述个人信息相关或您在整个过程中自愿提供的其他信息，包括通过评估中心/练习和面试提供的信息。

如果适用法律有所要求，我们将获得您的明确同意，以处理上述任何个人信息。

在适用法律允许并遵守适用法律的某些情况下，我们可能需要收集或请求自愿披露属于“敏感个人信息”（或某些法律所定义的类似术语）子类别的某些上述个人信息。我们会根据需要收集敏感个人信息，以实现合法招聘相关目的，并且不会使用此类信息来推断关于您的特征。例如，我们可能会出于监控平等机会、遵守反歧视或其他法律以及履行政府报告义务（我们在此背景下生成的任何报告都无法直接识别您的身份，除非法律要求我们这样做）之目的而收集有关您的种族/民族血统、性别和残疾状况的信息；或我们可能会出于为相关工作职位提供任何必要便利之目的而收集有关您的身体或精神状况的信息，以考虑为招聘流程或者在工作录用阶段提供便利。您可以在招聘过程中自愿提供其他敏感个人信息。

我们目前不收集生物特征信息。

从其他来源收集的个人信息和人才库的运营

我们可能会不直接向您收集一些个人信息，例如：

• 由招聘或猎头机构提供的信息。
• 由推荐人提供的推荐信。
• 由学术机构和培训或认证提供商提供或确认的其他背景信息。
• 通过犯罪记录核查获得的犯罪记录数据（在适用法律允许进行此类核查以及实施此类核查的国家/地区）。
• 由背景调查机构和其他外部数据库持有者（例如信用参考机构和专业/其他制裁登记处）提供的信息。
• 从公开可用来源收集的信息，包括您所使用的任何专业社交媒体平台或在线提供的其他相关信息。
• 出于本隐私声明中所述目的、来自其他 C&W 集团公司的信息。

（在适用法律允许并遵守适用法律的每种情况下，包括与获得您的同意相关的任何要求，如需核查犯罪记录，使用背景调查机构，从公开可用来源收集信息，则在参考资料证实适合工作职位的情况下，将在实施核查之前向您提供进一步信息）。

申请不成功

如果您的申请不成功，我们会将您的个人信息添加到我们的人才库中，以便在此类人才库中创建关于您的个人资料。我们可能会将您提供给我们的个人信息与从第三方来源获得的信息相结合，包括为实现此类目的而使用的公开可用来源（例如，您发布职业个人资料所使用的公开可用平台）。

我们会将此个人资料信息保留一段时间（根据下文第 6 节），以确定您可能不时适合的工作机会，并就此类机会与您取得联系（并确保我们不会就相同或类似职位再次与您联系）。您可以随时联系下文第 9 节中的电子邮件地址，选择拒绝加入人才库。如果法律有所要求，在将您的个人信息加入人才库之前，我们将获得您的同意。

申请成功

如果您被录用担任 C&W 的职位，在招聘过程中收集的信息也将用于协助入职流程（包括建立系统访问权限和准备入职），并将构成您持续的员工记录的一部分（如果与持续的雇佣关系相关），但须遵守我们内部的员工隐私声明。

我们出于各种业务目的收集和使用个人信息，包括但不限于：

• 管理和改进我们的招聘和雇用流程
• 评估您针对特定职位的技能、资格和背景，并就您的申请与您沟通
• 安排面试和测试，验证您的信息，并在适用情况下进行推荐调查或背景调查。
• 出于运营目的，例如维护和改进我们的业务运营、技术和安全性。
• 遵守政府要求的报告义务。
• 遵守适用法律、法规、法定程序或必要的可强制执行政府要求，例如通过发现和防范安全事件、欺诈和非法活动。

欧洲经济区 (EEA) 和英国 (UK) 范围内的求职者在个人信息处理方面享有《通用数据保护条例》(GDPR) 和其他适用数据保护法律所规定的某些权利。其中包括以下权利：

• 请求访问、更正、更新或删除您的个人信息。您有权随时提出此类请求。
• 限制或反对处理您的个人信息。您有权要求我们在某些情况下限制处理您的个人信息，或以您的个人情况为由反对处理您的个人信息。
• 可携带性。每当我们基于您的同意或协议而处理您的个人信息时，您均有权要求将您的个人信息的一份可用电子格式副本传输给您或另一方。这适用于您已向我们提供的个人信息。
• 就我们收集和使用您的个人信息向您当地的数据保护机构或监管机构提出投诉。如需更多信息，请联系您当地的数据保护机构。

您如何行使您的权利

如果您希望行使上述任何一项权利，或对我们使用您的个人信息有任何疑问，请使用位于本隐私声明底部的联系信息。我们将根据适用的数据保护法律，回应我们从希望行使其数据保护权利的个人收到的任何请求。在某些情况下，我们可能无法满足您的请求。请注意，我们可能会要求您向我们提供更多信息，以便确认您的身份并确保您有权访问相关个人信息。

根据您居住所在的国家/地区，您也可以向当地数据保护机构提出有关个人信息的任何问题或疑虑。

我们处理个人信息的法律依据

我们仅在有法律依据且出于本隐私声明中所述目的的情况下才会处理您的个人信息。我们处理您的个人信息：

• 以便遵守我们的法律义务，包括适用的移民和/或雇佣法律和法规。
• 在考虑雇佣您的情况下，以便在与您签订雇佣合同之前采取相应措施。
• 根据适用法律的要求和许可，以便保护 C&W 集团、我们的员工、求职者和其他人的权利和利益。
• 在获得您自愿同意的前提下。
• 以便满足我们的合法利益，包括开展我们的招聘流程、管理求职者、回应来自公共、政府、司法或其他监管机构的请求并与上述各方展开其他沟通，以及保护我们和求职者的权利、财产或安全。

如果我们根据您的同意处理您的个人信息，则您可以随时撤销您的同意。撤销您的同意将不会影响我们在您撤销同意之前所进行的任何处理的合法性，也不会影响根据除同意以外的合法处理理由对您的个人信息所进行的处理。

您可以选择不向我们提供个人信息。但是，当法律要求我们收集关于您的个人信息时，如您不提供这些信息可能会妨碍或延迟我们履行法律义务，并可能影响我们雇佣您的能力。

国际数据传输

出于本隐私声明所述目的，您的个人信息可能会在国际范围内传输，包括从 EEA 传输到其以外的国家/地区。这些国家/地区的数据保护法律可能与您所在国家/地区的法律不同（在某些情况下，可能不具有同等保护性）。

具体而言，我们的网站服务器位于美国，而我们的集团公司和第三方服务提供商却遍布世界各地。这意味着，当我们收集您的个人信息时，我们可能会在上述任何国家/地区进行处理。例如，我们使用位于美国的招聘平台来处理招聘个人数据。

C&W 实施遵守 GDPR 所需的保障措施（见第 5 节“保护您的个人信息安全”），而您可以随时使用位于本隐私声明底部的联系信息来要求提供关于特定保障措施的更多信息。

我们根据本隐私声明来采取措施保护您的个人信息。其中包括实施适当的保障措施，直至并包括欧盟委员会关于国际跨境传输个人信息的标准合同条款（根据《通用数据保护条例》第 46.2 条）。

在与我们的第三方服务提供商进行某些安排的情况下，我们还依赖传输风险评估 (TRA)（根据《通用数据保护条例》第 45 条）。

我们实施合理的技术、管理和物理控制措施，以保护我们控制的个人信息免遭丢失和未经授权的更改或披露。我们使用基于角色的访问控制，以符合我们收集此类信息之目的的严格需知方式来限制对您的个人信息的访问。我们使用适当的反恶意软件和入侵检测系统来防止未经授权访问我们的网络，并且我们制定了事件响应计划，以快速响应任何可疑的个人信息泄露或违规。尽管我们付出了努力，但任何网站或互联网传输都不会完全安全，因此我们无法保证存储或发送给我们的个人信息的安全性。您还应该采取充分的预防措施来保护您的个人信息。

个人信息将根据适用法律进行存储，并在实现本隐私声明所述目的需要的时间内或适用法律另有要求的期限内予以保留。

我们使用以下标准来确定保留个人信息的期限：

• 我们与您的关系，以及我们向您提供的产品和服务；
• 您向我们提出的关于您的信息或者我们的产品或服务的请求；
• 保留数据的任何法律义务，或出于我们自己的法律目的（例如执行我们的协议或诉讼）；
• 适用劳动和雇佣方面的建议和法律要求；以及
• 技术考虑因素和可行性，以及针对您的个人信息所设定的保护水平。

如果您的申请不成功，并且您未选择不在我们的人才库中加入您的个人信息，我们将自您提交申请（或您最后更新您的详细信息）之日起将您的个人资料信息保留 12 个月。在删除您的个人资料信息之前，我们可能会向您发送提醒，以便您可选择是否在上述期限之后将您的个人信息保留在我们的人才库中。如果您同意，我们会将您的个人信息再保留 12 个月。如果特定国家/地区的适用法律要求这样做，我们将获得您的明确同意，才可将您的详细信息加入人才库中。

在我们对某些职位进行审查（在允许的情况下，并根据适用法律）的情况下，我们将尽快销毁通过审查活动获得的信息，或在任何情况下均于 6 个月内将其销毁（仅保留结果记录）。

一般而言，我们不会在可能提出招聘流程所引发索赔的法定期限之外保留招聘记录，除非有明确的业务原因导致超过该期限。

根据 2018 年《加州消费者隐私法案》（“CCPA”）和 2020 年《加州隐私权法案》（“CPRA”），加州居民可能享有以下方面的权利：

• 透明度。收集受上述法律约束的个人信息的企业需要就以下方面向您提供相关通知：收集的个人信息的类别、收集或使用个人信息类别的目的、是否出售或共享该信息、打算保留每种类别个人信息的期限，或者（如果无法做到）用于确定该期限的标准等信息。
• 选择不出售或共享个人信息。尽管加州居民有权选择不向第三方传输个人信息以用于有价值对价或跨场景行为广告目的，但 C&W 不会出售或共享您的个人信息。
• 访问我们收集的关于您的个人信息的类别和具体内容、从其处收集个人信息的来源类别、收集个人信息的业务目的，以及 C&W 与之共享个人信息的第三方的类别。
• 限制敏感个人信息的使用和披露。
• 更正 C&W 可能保留的不准确或过时的个人信息。
• 在某些情况下删除个人信息。
• 不得因您行使 CCPA 和 CPRA 赋予的任何权利而受到歧视。

如需请求访问、更正或删除您的个人信息，请发送电子邮件至 privacynorthamerica@cushwake.com或拨打以下免费电话联系我们：+1-844-339-8836。您也可以通过以下链接在我们的在线申请门户网站中填写并提交适当的在线申请表：

访问我的信息

删除我的信息

请在您的申请中说明您希望访问、更正或删除哪些个人信息。

我们将在收到您的申请后 10 个工作日内首先确认收到，然后在收到申请后 45 个日历日内提供实质性答复。如果我们需要更多时间（最长 90 天或所允许的时间范围），我们将以书面形式通知您延期原因和所延期限。

只有您或授权代理人才能提出与您的个人信息相关的可验证消费者请求。为了回应您的请求，我们必须验证您的身份。

• 如何授权代理人。您可以指定一名授权代理人代表您提交经过验证的消费者请求，但前提是您已填写 代理人授权表，并且您已采取措施直接向我们验证您的身份。
• 我们如何验证您的请求。我们仅会在您请求的背景下使用所提供的个人信息来验证您的身份或您授权代理人提出请求的授权。根据请求，我们可能需要您提交或确认来自您工作所提供电子邮件或其他帐户的请求，或提供我们已经持有的至少两条个人信息，包括您的紧急联系人或您社会保障号的最后四位数字。我们会将您提供的信息与我们已经持有的信息进行比较，以核实您的请求，从而尽可能降低欺诈风险。

我们可能会修改或更新本隐私声明，以说明我们对您的个人信息的收集和使用的变更，或为体现适用法律的更新。如果我们对本隐私声明作出重大变更，我们将酌情通知您变更情况。对于管理变更，我们可通过更新位于本隐私声明顶部的“最后更新”日期来提供指示。

我们欢迎您提出数据保护和隐私相关问题。请通过以下方式提出与本隐私声明相关的任何问题或请求：

• 对于美国和加拿大，请联系：privacynorthamerica@cushwake.com
• 对于欧洲、中东和非洲，请联系：privacyemea@cushwake.com
• 对于南美地区，请联系： DPO.Brasil@cushwake.com
• 对于亚太地区、澳大利亚和新西兰，请联系：privacyapac@cushwake.com
• 对于大中华区，请联系：GChina.Privacy@cushwake.com

You can visit the recruitment section of our website ("Website") and search for jobs without providing Personal Information. However, we do collect certain information automatically from your device when you visit our Website. For further information, please see the privacy notice that applies to the use of our Website generally, including the recruitment section of the Website.

Note also that your use of our Website is governed by our Terms of Use .

The Personal Information we collect may be provided by you directly, or we may obtain Personal Information automatically or from third parties such as references, prior employers, places of education, or other data sources.

Where permitted by, and in accordance with applicable law, the types of Personal Information we collect and use can include:

• Identification data and contact details – including your name, address, email address, phone number and other contact information, gender, race or ethnic origin, sexual orientation, marital status, veteran status, date of birth, nationality/ies, national identifiers (such as national ID/passport, social security number(s)), physical characteristics or description, and other personal and online identifiers.
• Employment history – such as previous employers and job titles/positions.
• Background information – such as academic/professional qualifications, job qualifications, education, details included in your CV/résumé (which might include details of any memberships or interests constituting sensitive personal information), transcripts and employment references.
• Details of your nominated referees (including their name, contact details, employer, and job role).
• Details of your residency, citizenship, visa status, work permit status, and military status.
• Previous applications/roles (information relating to previous applications you have made to the C&W Group and/or any previous employment history with the C&W Group).
• Job application information – such as the roles for which you are applying, your job application and related documentation/communications, cover letters, information from interviews and phone screenings, compensation/benefits requests, relocation information.
• Health information, physical limitations and special accommodations needed.
• CCTV/Building access control – for the purposes of any visit to a C&W premises (e.g. for interview), please note that we may deploy CCTV and/or building access controls (which involve the processing of CCTV images and/or other Personal Information such as visitor name and time of access to the building) for security and law enforcement purposes, to establish, exercise or defend our legal rights and/or to protect the vital interests of any person.
• Information required for us to comply with laws, including at the direction of law enforcement authorities or court orders.
• Other information linked to the Personal Information above or that you voluntarily provide throughout the process, including through assessment centres / exercises and interviews.

We will obtain your explicit consent to process any of the above Personal Information, if required to do so by applicable law.

In some circumstances, to the extent permitted by, and in accordance with, applicable law, we may need to collect, or request on a voluntary disclosure basis, some Personal Information above that falls under a sub-category of “Sensitive Personal Information,” or a similar term, as defined by certain laws. We collect Sensitive Personal Information as necessary to fulfil legitimate recruitment-related purpose, and do not use such information to infer characteristics about you. For example, we may collect information about your racial/ethnic origin, gender and disabilities for the purposes of equal opportunities monitoring, to comply with anti-discrimination or other laws and for government reporting obligations (any reports produced by us in this context would not directly identify you, unless we are legally required to do so); or information about your physical or mental condition to consider accommodations for the recruitment process or at job offer stage for the purposes of making any necessary accommodations for the relevant job role. You may provide, on a voluntary basis, other Sensitive Personal Information during the recruitment process.

We do not collect biometric information at this time.

Personal Information collected from other sources and operation of a talent pool

We may collect Personal Information other than directly from you, for example:

• Information provided by recruitment or executive search agencies.
• References provided by referees.
• Other background information provided or confirmed by academic institutions and training or certification providers.
• Criminal records data obtained through criminal records checks (in countries where such checks are permitted by applicable law and are carried out).
• Information provided by background checking agencies and other external database holders (for example credit reference agencies and professional / other sanctions registries).
• Information collected from publicly available sources, including any professional social media platforms you use or other relevant information available online.
• From other C&W group companies for the purposes outlined in this Privacy Notice.

(in each case where permissible by, and in accordance with applicable law, including any requirement in relation to obtaining your consent, and, in the case of criminal records checking, use of background checking agencies, and collecting information from publicly available sources, where justified by reference to the job role, in which case you will be provided with further information prior to the checks being carried out).

Unsuccessful Applications

If your application is unsuccessful, we will add your Personal Information to our talent pool for the purposes of creating a profile about you within such talent pool. We may combine the Personal Information you provide to us with information obtained from third party sources, including publicly available sources for such purposes (e.g., publicly available platforms on which you publish a professional profile).

We will retain this profile information for a period (as per Section 6 below) to identify job opportunities for which you may be suitable from time to time and to contact you about such opportunities (and to ensure that we do not contact you again in relation to the same or similar roles). You can opt out of your inclusion in the talent pool at any time by contacting the email address in Section 9 below. If required by law, we will obtain your consent before including your Personal Information in the talent pool.

Successful Applications

If you are accepted for a role at C&W, the information collected during the recruitment process will also be used to assist with the process of on-boarding (including establishing systems access and preparing for induction), and will form part of your ongoing staff member record (where relevant to the ongoing employment relationship), subject to our internal employee privacy notice.

We collect and use Personal Information for our business purposes, which include, without limitation:

• managing and improving our recruitment and hiring processes
• assessing your skills, qualifications, and background for a particular role, and communicating with you about your application
• organizing interviews and tests, verifying your information, and carrying out reference checks or background checks, where applicable.
• for operational purposes, such as maintaining and improving our business operations, technology, and security.
• complying with government-required reporting.
• complying with applicable laws, regulations, legal processes, or enforceable government requests as necessary, such as by detecting and protecting against security incidents, fraud, and illegal activity.

Applicants within the European Economic Area (EEA) and the United Kingdom (UK) have certain rights under GDPR and other applicable data protection laws in relation to the processing of your Personal Information. These include the right to:

• request access, correction, update or deletion of your Personal Information. You have the right to make such a request at any time.
• restrict or object to processing of your Personal Information. You have the right to ask us to restrict processing of your Personal Information under certain circumstances or to object to the processing of your Personal Information on grounds relating to your personal situation.
• portability. Whenever we process your Personal Information based on your consent or based on an agreement, you have the right to have a copy of your Personal Information in a usable electronic format transferred to you or to another party. This applies to Personal Information you have provided to us.
• lodge a complaint with your local data protection authority or regulatory body about our collection and use of your Personal Information. For more information, please contact your local data protection authority.

How you can exercise your rights

If you wish to exercise one of your rights stated above or have any questions about our use of your Personal Information, please use the contact information at the bottom of this Privacy Notice. We will respond to any requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may in some instances not be able to comply with your request. Please note that we may request you to provide us with additional information in order to confirm your identity and ensure that you are entitled to access the relevant Personal Information.

Depending on your country of residence, you may also raise any questions or concerns you have regarding Personal Information with your local data protection authority.

Our legal basis for processing Personal Information

We only process your Personal Information when we have a legal basis to do so and for the purposes outlined in this Privacy Notice. We process your Personal Information:

• to comply with our legal obligations, including applicable immigration and/or employment laws and regulations.
• to take steps prior to entering an employment contract with you, where you are considered for employment.
• to protect the rights and interests of the C&W Group, our employees, applicants, and others, as required and permitted by applicable law.
• with your voluntary consent.
• to meet our legitimate interests, including, for example, conducting our recruitment processes, managing applicants, responding to requests from, and other communications with, public, governmental, judicial or other regulatory authorities, and protecting our rights, property or security and those of job applicants.

If we process your Personal Information on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

You can choose not to provide Personal Information to us. However, when we are required by law to collect Personal Information about you, your failure to provide this information may prevent or delay the fulfilment of our legal obligations and may impact our ability to employ you.

International data transfers

Your Personal Information may be transferred internationally, including from the EEA to a country outside it, for the purposes referred to under this Privacy Notice. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Specifically, our Website servers are located in the United States, and our group companies and third-party service providers are based around the world. This means that when we collect your Personal Information, we may process it in any of these countries. For example, we use a recruitment platform that entails the processing of recruitment personal data in the US.

C&W implements safeguards necessary to comply with GDPR (see Section 5 “Securing your Personal Information”), and you may request more information on particular safeguards at any time by using the contact information at the bottom of this Privacy Notice.

We take steps to safeguard your Personal Information in accordance with this Privacy Notice. These include implementing appropriate safeguards up to and including the European Commission’s Standard Contractual Clauses (under Article 46.2 of the General Data Protection Regulation) for transfers of Personal Information across international borders.

In the context of certain arrangements with our third-party service providers we additionally rely on Transfer Risk Assessments (TRA) (pursuant to Article 45 of the General Data Protection Regulation).

We implement reasonable technical, administrative and physical controls to safeguard the Personal Information under our control against loss and unauthorised alteration or disclosure. We use role-based access controls to limit access to your Personal Information on a strict need-to-know basis consistent with the purposes for which we have collected such information. We use appropriate anti-malware and intrusion detection systems to guard against unauthorised access to our network, and we have an incident response plan in place to quickly respond to any suspected leak or breach of Personal Information. Despite our efforts, no website or internet transmission is completely secure and we cannot guarantee the security of your Personal Information stored or sent to us. You should also take adequate precautions to protect your Personal Information.

Personal Information will be stored in accordance with applicable laws and kept as long as needed to carry out the purposes described in this Privacy Notice or as otherwise required by applicable law.

We use the following criteria to determine how long to retain Personal Information:

• Our relationship with you, and the products and services we provide to you;
• Your requests to us regarding your information, or our products or services;
• Any legal obligations to retain the data, or for our own legal purposes (such as enforcing our agreements or litigation);
• Recommendations and legal requirements in applicable labor and employment; and
• Technical considerations and feasibility, and the level of protections in place for your Personal Information.

If your application is unsuccessful and you do not opt-out of inclusion of your Personal Information in our talent pool, we will keep your profile information for 12 months from the date that you submitted your application (or the latest update of your details by you). Prior to deleting your profile information, we may send you a reminder to give you an option to keep your Personal Information in our talent pool after the above period. If you agree, we will keep your Personal Information for an additional 12-month period. If required to do so under applicable law in a particular country, we will obtain your explicit consent to inclusion of your details in the talent pool.

Where we undertake vetting for certain positions (where permissible and in accordance with applicable law), we will destroy the information obtained by a vetting exercise as soon as possible, or in any case, within 6 months (retaining only a record of the result).

In general, we will not hold recruitment records beyond the statutory period in which a claim arising from the recruitment process may be brought unless there is a clear business reason for exceeding this period.

Under the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”), California residents may have the right to:

• Transparency. Businesses that collect Personal Information subject to the above listed laws are required to provide you with notice regarding the categories of Personal Information to be collected, the purposes for which the categories of Personal Information are collected or used, whether that information is sold or shared, and the length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period, among other information.
• Opt out of the sale or sharing of Personal Information. Although California residents have the right to opt out of the transfer of Personal Information to third parties for valuable consideration or cross-context behavioral advertising purposes, C&W does not sell or share your Personal Information.
• Access the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business purpose for collecting the Personal Information, and the categories of third parties with whom C&W shares Personal Information.
• Limit the use and disclosure of sensitive Personal Information.
• Correct inaccurate or obsolete Personal Information that C&W may maintain.
• Delete Personal Information under certain circumstances.
• Not be discriminated against on the basis of your exercising any of the rights afforded by the CCPA and CPRA.

To request access to, correct, or delete your Personal Information, please contact us by emailing privacynorthamerica@cushwake.com or calling this toll-free number: +1-844-339-8836. You may alternatively complete and submit the appropriate online request form in our online request portal by following the below links:

Access My Information

Delete My Information

Please specify in your request what Personal Information you would like to access, correct or delete.

We will first acknowledge receipt of your request within 10 business days and provide a substantive response within 45 calendar days after its receipt. If we require more time (up to 90 days or the permitted timeframe), we will inform you of the reason and extension period in writing.

Only you or an authorized agent may make a verifiable consumer request related to your Personal Information. To respond to your requests, we must verify your identity.

• How to Authorize an Agent. You may designate an authorized agent to submit your verified consumer request on your behalf, but only if you have completed the Agent Authorization Form and you have taken steps to verify your identity directly with us.
• How We Verify Your Request. We will only use the Personal Information provided in the context of your request to verify your identity or the authority of your authorized agent to make the request. Depending on the request, we may need you to submit or acknowledge the request from your work-provided email or other account or provide at least two pieces of Personal Information we already have in our possession, including your emergency contact person or last four digits of your Social Security Number. We will verify your request by comparing the information you provide to information already in our possession to minimize the risk of fraud.

We may modify or update this Privacy Notice to account for changes in our collection and use of your Personal Information, or due to updates in applicable law. If we make a material change to this Privacy Notice, we will notify you of the change, as appropriate. For administrative changes, we may provide indication by updating the “Last Updated” date at the top of this Privacy Notice.

We welcome data protection and privacy related questions. Please address any questions or requests relating to this Privacy Notice:

• For USA and Canada please contact: privacynorthamerica@cushwake.com
• For Europe, Middle East and Africa please contact: privacyemea@cushwake.com
• For South America please contact: DPO.Brasil@cushwake.com
• For Asia, Pacific, Australia, and New Zealand please contact: privacyapac@cushwake.com
• For Greater China please contact: GChina.Privacy@cushwake.com