Recruitment Privacy Notice
We at Cellebrite Mobile Synchronization Ltd. (the “Company”, “we”, “us”, “our”) respect your privacy.
This privacy notice (“Notice”) explains your rights concerning the Personal Information we have about you. It also explains the policies and procedures we use regarding Personal Information you provide us, or that we collect and Process, during our recruitment process. We are committed to complying with the applicable data protection laws and the European General Data Protection Regulation (GDPR) and protect our work privacy and their privacy rights.
This Notice applies to all Personal Information related to Candidates that is Processed by Company, whether in electronic format or in a structured filing system.
This Notice may be amended from time to time. We will post any change to this Notice on our website a reasonable period of time in advance of the effective date of the change.
The Company is the Controller of the Personal Information for the purpose of this Notice. We are located at 94 Shlomo Shmelzer Rd., Petah Tikva 4970602, P.O.B 3925, Israel and can be contacted through the Data Protection Officer, by following the link: https://cellebrite.com/en/privacy-data-inquiry/.
Definitions used in this Notice
- “Candidate” – any applicant for a position at Company as a temporary, full-time or part-time employee, intern, contractor or contingent worker.
- “Candidate Personal Information” – any Personal Information related to Candidates.
- “Controller” – the entity that determines the purpose and means of the processing of Personal Information of Individuals.
- “GDPR” – The EU General Data Protection Regulation which came into effect on May 25, 2018.
- “Identifiable Individual” – An individual who can be identified by reference to any identifier such as a name, identification number, location, or other identifiers (including online identifiers).
- “Personal Information” – Any information relating to an identified Individual or identifiable Individual.
- “Processor” – An entity that processes Personal Information on behalf of the Controller.
- “Processing” – (and any variant of such term) – Any action taken on Processed Data such as collecting, recording, storing, organizing, altering, using, disclosing, transmitting or deleting, including if performed by automated means.
How we collect data and why
We will collect and Process Candidate Personal Information for the purpose of administering employment applications and for various necessary recruitment purposes prior to making a hiring decision and, where relevant, entering into an employment agreement.
Candidate Personal Information may include, but is not limited to, name, contact details, physical address, gender, date of birth, photograph, details of your qualifications, employment history, Information included in your CV or cover letter, job preferences, current and historic salary details together with salary expectations, details of your current benefit entitlements.
Personal Information may also include names and contact details for references. Please note that it is your responsibility to obtain consent from your references prior to providing us personal information about them.
Company may also collect Personal Information about Candidates from other third parties, subject to your consent or where required by law, including academic history, references supplied by former employers, information from employment background check providers and information from criminal records checks where necessary or required by law.
Company may collect this information in a variety of ways, including directly from Candidates, via hard copy and web-based application forms, from recruiters and recruitment agencies and through individual referrals.
Should your application be successful, relevant data will be transferred to our HR information system in accordance with Company’s EU Employee Privacy Notice.
Your Personal Information will be Processed for the purposes and on the basis detailed below. We may Process the Personal Information for additional purposes, provided that notice is provided to you, and provided that we receive your consent, if so required.
Recruitment process, workforce staffing, assessing suitability for employment
Contact details, gender, birthdate, education, CV, referrals, employment history, salaries, work permits, social security, Identification documents
Our legitimate interests, legal obligation
We will notify you of any changes to the information we collect or to the purposes for which we collect and process it in this context.
Sharing Processed Data
Your Processed Data may be shared and disclosed with our HR team. We may share some of Candidate Personal Information with Processors engaged by us to provide services we require to use Candidate Personal Information for permitted purposes. Such Processors operate under our instruction. We ensure that any Processor we use takes adequate measures to protect your Processed Data, by signing a data processing agreement with it.
We do not sell your Processed Data to third parties. We may also share your Processed Data with companies in our corporate group for purposes set out above.
Where required by law, we will also disclose your Processed Data to a governmental authority.
International data transfer
Company is based in Israel. Information we collect from you will be processed in Israel, which is recognized by the European Commission as having adequate protection for personal data.
If we transfer your Information from within Europe to other jurisdictions outside Europe (the United States, Singapore, Brazil, Canada, and Australia), this will be done under the terms of a data transfer agreement which contain standard data protection contract clauses with adequate safeguards determined by the EU Commission.
Retention and security
Retention. Candidate Personal Information will not be kept for longer than is necessary for the recruitment process, unless the data is relevant to a successful Candidate’s employment. In such cases, relevant data will be transferred to our HR information system in accordance with Company’s Workforce Privacy Notice. Unsuccessful Candidate’s Personal Information will be deleted within 7 years of the decision.
For more information on how long we retain Candidate Personal Information, please contact us using the contact details in under “Contact us” below.
Safeguards. We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of Candidate Personal Information. We also request our affiliates to implement such measures in order to secure the information we provide them. However, although efforts are made to secure Candidate Personal Information, we cannot guarantee its absolute protection.
You have the following rights under the GDPR:
Right to Access and receive a copy of your Processed Data that we Process.
Right to Rectify inaccurate Processed Data we have concerning you and to have incomplete Personal Information completed.
Right to Data Portability – that is, to receive the Processed Data that you provided to us, in a structured, commonly used and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your Processed Data transmitted directly from us to the person or entity you designate.
Right to Withdraw Consent to Processing your Processed Data, at any time, if the basis for our Processing is based on your consent. We may continue to Process Processed Data with respect to which your consent is not necessary. Withdrawing your consent will not affect the lawfulness of Processing we carried out based on your consent before such withdrawal.
Right to Object to our Processing of your Processed Data on the basis of our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to Process such Processed Data for the establishment, exercise or defense of legal claims.
Right to Restrict us from Processing your Processed Data (except for storing it): (a) if you contest the accuracy of the Processed Data (in which case the restriction applies only for a period enabling us to determine the accuracy of the Processed Data); (b) if the Processing is unlawful and you prefer to restrict the Processing of the Processed Data rather than requiring the deletion of such data by us; (c) if we no longer need the Processed Data for the purposes outlined in this Notice, but you require the Processed Data to establish, exercise or defend legal claims; or (d) if you object to our Processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).
Right to be Forgotten. Under certain circumstances, such as when our Processing of your Processed Data is based on your consent, you have the right to ask us to erase your Processed Data. However, notwithstanding such request, we may still process your Processed Data if it is necessary to comply with our legal obligations under the laws of England and Wales, or for the establishment, exercise or defense of legal claims.
If you wish to exercise any of these rights, contact us through the channels listed below.
When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. According to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or of an alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.
We do not recruit or employ individuals under the age of 18. We do not knowingly collect Personal Information about children under that age, other than Personal Information about your underaged children that we may process for purposes like HR administration, tax reporting provision of insurance, etc.
To exercise any of your rights, please contact the Data Protection Officer, by following the link: https://cellebrite.com/en/privacy-data-inquiry/. Please be aware that every request will be examined by us and its resolution will be documented and notified to you.
As mentioned above, in certain cases we will not be able to grant all your rights (for example, deletion of Processed Data) as we may be subject to law and regulation that mandate us to retain your Processed Data.