Privacy Policy – Job Ads

Last Updated: June 27, 2023

A-LIGN Compliance ad Security, Inc. together with all its affiliates, including, but not limited to, A-LIGN BG EOOD (jointly referred to hereinafter as “A-LIGN”) is a leading cybersecurity and compliance professional services firm providing audit and attestation services.

In its capacity as controller of personal data within the meaning of the General Data Protection Regulation, A-LIGN collects, processes, stores or otherwise uses your personal data, which you provide when applying for a job at A-LIGN.

We collect and process information about you only where we have a legal basis or bases for doing so under applicable laws.

When you apply for a job at A-LIGN, by submitting your CV or resume, you provide us your contact and professional information, including educational and work background, as well as your consent for processing of your Personal Data as described herein.

For the purposes of recruitment and hiring we process the following categories of personal data:

• Identification data, such as your name, citizenship;
• Contact details, including address, email and phone number;
• Information about your education, certifications, skills and professional experience, including any references from previous employers or colleagues;
• Information, gathered in the course of our interviews, etc.;
• Other information included in your application, which you deemed relevant and voluntarily provided within your CV or during interviews.

We process your Personal Data, as described above, to assess if your application is suitable for the relevant position and whether your skills, education and experience suffice with our requirements, including where permitted by the applicable law performing background checks; to receive evidence for the qualities and qualifications, necessary for occupying the respective position and to extend a job offer if you are selected for employment.

We use your Personal Data to establish contact with you for setting up an interview and to communicate with you regarding your application or opportunities at A-LIGN that appear over time that we believe may be of interest to you.

Upon your express consent we may use your Personal Data to send you new hire and employee experience information. We may verify your information, including through reference checks and, where allowed, background checks.

If you would like to opt out of receiving messages with new hire and employee experience information, you may send A-LIGN an email at  [email protected] or [email protected]

We also process your Personal Data to evaluate and improve our recruitment system, our application tracking and recruitment activities.

We also adopted the California Consumer Privacy Statement which supplements the information contained herein and represents an Attachment to this Job Ads Privacy Policy, an integral part hereto which applies to all California residents. The California Consumer Privacy Statement applies solely to personal information as defined in the relevant data privacy laws collected about California consumers, such as our website visitors, attendees of our webinars and events, representatives of our business customers and business partners, and job applicants.

To submit an access, correction, or deletion request, please contact us at [email protected] or call us at 1-888-702-5446. To opt-out of the sale or sharing of your personal information, follow the instructions provided in the Do Not Sell or Share My Personal Information link below.

Cookie Settings

To submit a request as an authorized agent on behalf of a consumer, please contact [email protected]. We may also share and transfer your Personal Data to A-LIGN entities outside the EU/EEA, upon complying with the provisions of Regulation (EU) 2016/679, by entering into the appropriate agreements containing relevant data protection provisions, for business reasons, such as human resource management and internal reporting or with our service providers for business reasons, such as the recruitment platform and to manage background checks, if applicable; and law enforcement or government authorities, or as otherwise necessary to comply with law or as needed for the recruitment and human resources process.

We may review your social media profiles with providers of social networks for searching and establishing business contacts, such as LinkedIn, but in all cases we will not inspect any personal social media activities.

If you are a selected candidate for employment, we will require additional personal details, as is necessary for the conclusion of an employment contract.

The personal data you provided when applying shall be processed for the purposes of the current recruitment campaign and will be deleted nolater than 6 (six) months as of its completion unless you are a selected candidate. If in the course of the current recruitment campaign you provided copies of documents, these documents will be returned to you within the term stated above.

We may create documentation required by our internal policies and practice which concerns you and your application in the course of the current recruitment campaign on the basis of the information and documents you provided. Such documentation may be stored by us for a period of 3 (three) years as of the completion of the campaign in order to defend our legal rights and interests in the course of any administrative or court proceedings as per applicable legislation in force.

Upon your express consent we may keep your personal data and use it for consideration for a future position in the course of subsequent recruitment campaigns to inform you of available positions and include your application in the selection process. In this case, subject to your explicit consent, we will store your personal data for a period of another 2 (two) years as of the end of the current campaign. After that your personal data will be permanently deleted unless you explicitly consent to further processing of your Personal Data for the purposes of subsequent recruitment campaigns.

You may withdraw your consent at any time by sending us an email sent to one of the following email address: [email protected] or [email protected]

The withdrawal of consent, including the withdrawal of further participation in the current recruitment campaign, does not affect the lawfulness of the processing completed prior to receiving the withdrawal.

Furthermore, you have certain rights under European data protection law with respect to personal data, including the right to request access to, correct, amend, update, request deletion of your Personal Data, restrict the processing, limit the use of, or withdraw your consent for the processing of your Personal Data at any time, as well as the right of data portability.

You may also have the right to receive a copy of your personal information in a commonly used and machine-readable format and to transmit such information to another controller.

You are also entitled to lodge a complaint with the Bulgarian Commission for Personal Data Protection, address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., telephone 02/91-53-518, e-mail: [email protected], internet page: www.cpdp.bg in regard to the procession of your Personal Data by A-LIGN or personal data processors which were provided with your personal data by us.

You may direct all inquiries regarding this privacy policy or our data collection and processing practices to our Data Protection Officer at: [email protected]  or [email protected] 

DPO MAILING ADDRESS
Mrs. Diana Milkova
A-LIGN’s Data Protection Officer
245 Slivnitsa Blvd, 4^th floor.
Sofia 1202
Bulgaria

California Consumer Privacy Statement

Effective Date: January 1, 2023

This California Consumer Privacy Statement (“Statement”) supplements our Privacy Policy and is an integral part thereto. This Statement applies solely to personal information collected about California consumers, such as our website visitors, attendees of our webinars and events, representatives of our business customers and business partners, and job applicants. This Statement does not apply to A-LIGN’s personnel.

This California Consumer Privacy Statement uses certain terms that have meanings given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”).

Notice of Collection and Use of Personal Information

We may collect (and may have collected during the 12-month period prior to the Effective Date of this Statement) the following categories of personal information about you:

1. Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as device identifiers; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number; unique pseudonym; user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, account name and login credentials (including security questions and other information for user account maintenance), Social Security number, driver’s license number, passport number and other similar identifiers.
2. Additional Data Subject to Cal. Civ. Code § 1798.80: signature, credit card number, debit card number, bank account number and other financial information,state identification card number, and education information.
3. Protected Classifications: characteristics of protected classifications under California or federal law, such asgender, race,age, sex, national origin,marital status, disability, citizenship status, and military and veteran status.
4. Commercial Information: commercial information, including products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
5. Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history and information regarding your interaction with websites, applications or advertisements.
6. Geolocation Data: IP addresses;
7. Employment Information: professional or employment-related information, such asbusiness contact information,résumé information, occupation details, education details, certifications and professional associations, previous employment details, pre-employment screening and background check information, including criminal records information.
8. Education Information: education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).
9. Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We may use (and may have used during the 12-month period prior to the effective date of this Statement) the categories of personal information listed above for the purposes described in the A-LIGN Privacy Policy and for the following business purposes as described in the CCPA:

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage, or providing similar services;
• Providing advertising and marketing services to you, except for cross-context behavioral advertising (which is addressed in the Sale or Sharing of Personal Information Section below);
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us;
• Helping to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes;
• Debugging to identify and repair errors that impair existing intended functionality;
• Undertaking internal research for technological development and demonstration;
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us;
• Managing career opportunities with us; and
• Managing our relationships with current or prospective partners, corporate customers and vendors and other business partner personnel.

A-LIGN does not use or disclose sensitive personal information with the purpose of inferring characteristics about consumers.

Retention of Personal Information

We will retain your personal information for the time period reasonably necessary to achieve the purposes described in the A-LIGN Privacy Policy and this Statement, or any other notice provided at the time of collection, taking into account our legal obligations and our records retention requirements. 

Sources of Personal Information

During the 12-month period prior to the Effective Date of this Statement, we may have obtained personal information about you from the following categories of sources:

• Directly from you, such as when you apply to a job online, subscribe to our mailing list, register for our webinars, events and/or whitepapers, or otherwise contact us
• From your devices, such as when you interact with our website, products, and other online services
• Online advertising services and advertising networks
• Social networks
• Data brokers
• Recruiting and talent agencies
• Job references, such as your employers

Sale or Sharing of Personal Information

We do not sell or share your personal information in exchange for monetary compensation. We may disclose your personal information by allowing certain third parties (such as online advertising services, advertising networks and social networks) to collect personal information via automated technologies on our websites for cross-context behavioral advertising purposes.

Under California law, these kinds of disclosures may be considered a “sale” when the personal information is exchanged for non-monetary consideration, or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes. You have the right to opt out of these types of disclosures of your information.

We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Effective Date of this Statement) the following categories of personal information about you to online advertising services, advertising networks and social networks:

• Identifiers
• Online Activity
• Inferences

We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Disclosure of Personal Information

During the 12-month period prior to the Effective Date of this Statement, we may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:

Categories of Personal Information	Categories of Third Parties
Identifiers	Vendors who provide services on our behalf Online advertising services and advertising networks Social networks Data brokers Recruiting and talent agencies Job references, such as your employers
Additional Data Subject to Cal. Civ. Code § 1798.80	Vendors who provide services on our behalf
Protected Classifications	Vendors who provide services on our behalf  Government entities
Online Activity	Our affiliates and subsidiaries Vendors who provide services on our behalf Advertising services Advertising networks Social networks
Geolocation Data	Internet service providers
Employment Information	Our affiliates and subsidiaries Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Business partners Operating systems and platforms Government entities Data brokers
Education Information	Our affiliates and subsidiaries Vendors who provide services on our behalf Operating systems and platforms Data brokers
Inferences	Advertising services Advertising networks Social networks

In addition to the categories of third parties identified above, during the 12-month period prior to the Effective Date of this Statement, we may have disclosed personal information about you to government entities (e.g., in response to law enforcement requests) and third parties in connection with corporate transactions (e.g., mergers, acquisitions, joint venture, reorganization, divestitures, dissolution or liquidation).

California Consumer Privacy Rights

You have certain choices regarding your personal information, as described below.

Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed and sold or shared about you.

Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate.

Deletion: You have the right to request that we delete certain personal information we have collected from you.

Opt-Out of Sale or Sharing: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes.

How to Submit a Request

To submit an access, correction, or deletion request, please contact us at [email protected] or call us at 1-888-702-5446. To opt-out of the sale or sharing of your personal information, follow the instructions provided in the link Do Not Sell or Share My Personal Information below.

Cookie Settings

To submit a request as an authorized agent on behalf of a consumer, please contact [email protected] .

Verifying Requests

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you request access to or correction or deletion of your personal information, we may require you to provide information to help us identify you and verify your identity, depending on the nature of your relationship with A-LIGN, including: name, address, phone number or other information to verify your identity. In addition, we require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

If you designate an authorized agent to make a request on your behalf, we require that you verify your identity as set forth above. We also may require you to provide the authorized agent a written confirmation that you have authorized the agent to act on your behalf and the scope of such authorization.

Additional Information

If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us.  To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.  For questions or concerns about our privacy policies and practices, please contact us as described in our Job Ads Privacy Policy.