Privacy Policy for Job Recruiting

Extreme Reach, Inc.; Extreme Reach Talent, Inc; Extreme Reach Services Group, LLC; CMC Crew Services, Inc; and Extreme Reach Payroll Solutions, Inc.; Slate and Extreme Reach UK Limited (collectively “Extreme Reach”) are committed to respecting and protecting your privacy.

This Privacy Policy describes how we collect, use, disclose, store and otherwise process information in relation to Extreme Reach’s recruiting. For information related to other contexts or particular Services, please see the relevant policy posted on our Privacy website https://extremereach.com/privacy-policy/.

Information We Collect

In order to facilitate job recruiting, Extreme Reach collects a variety of information, including work history, education and other qualifications, skills, current and prior home address, date of birth, driver’s license, social security number, and correspondence regarding your application. If you visit us online in order to apply, we may also collect details of your visits to our website (or our partners’) including, but not limited to, traffic data, location data, weblogs and other communication data. By submitting such information in association with applying for a position with Extreme Reach, you consent to Extreme Reach processing your personal data for the purpose of assessing your job application.

Information We Collect From Other Sources

Workable provides Extreme Reach with the ability to link the data you provide to us, with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media profiles.

Workable’s technology allows Extreme Reach to search various databases – some publicly available and others not, which may include your personal data (include your CV or Resumé), to find possible candidates to fill Extreme Reach job openings. Where Extreme Reach utilizes this ability, we will obtain your personal data from these sources. We may also receive your personal data from a third party who recommends you as a candidate for a specific job opening.

How Collected Data Is Used

Information collected during the job application process is used to evaluate your potential employment and to communicate with you regarding recruitment; no automated profiling is conducted as part of this process.

In the event of hiring, your information will also be used to establish your records in Extreme Reach systems.

United States applicant data is processed in the United States, Canadian applicant data is processed in Canada, United Kingdom and all other applicant data is processed in the United Kingdom.

Information Disclosed to Outside Parties

As set out above, Extreme Reach passes your information to our third party service providers, including Workable, who use it only in accordance with our instructions and as otherwise required by law.

Where you have applied for a job opening through the Indeed Apply functionality, and where you have consented to this disclosure, Extreme Reach will disclose to Indeed certain personal data that we hold, including but not limited to a unique identifier used by Indeed to identify you, and information about your progress through our hiring process for the applicable job opening, as well as tangible, intangible, visual, electronic, present, or future information that we hold about you, such as your name, contact details and other information involving analysis of data relating to you as an applicant for employment (collectively “Disposition Data”). Indeed’s Privacy Notice in respect of Indeed’s use of the Disposition Data is available on Indeed’s website.

Where you have applied to a job opening through another service provider, We may disclose data similar to the Disposition Data defined above to such service provider. The service provider shall be the data controller of this data and shall therefore be responsible for complying with all applicable law in respect of the use of that data following its transfer by us. 

We do not otherwise sell, trade, or transfer collected information to outside parties, unless we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

How We Protect Your Information

Security of all information is of the utmost importance for Extreme Reach. We use technical and physical safeguards to protect the security of your personal information from unauthorized disclosure. We also make all attempts to ensure that only necessary people and third parties have access to personal and confidential information.

We require that our third party service providers (1) use confidential information only to perform their obligations, and (2) otherwise maintain the confidentiality of such information. These third party service providers and channel partners are obligated to maintain privacy and security protections that are consistent with Extreme Reach’s privacy and information security policies.

Your Rights

You have a variety of rights you may exercise with respect to your personal information.  While legislation only requires that we honor certain requests from people who live in certain jurisdictions, we believe in your privacy rights regardless of where you live and, therefore, allow anyone from anywhere to exercise any of those same rights, and we will not discriminate in any way against anyone for doing so.  

As such, you can exercise the following rights with respect to your PII that we have: (1) access your information, (2) correct or update your information, (3) delete your information, (4) Do Not Sell directive (unnecessary because we do not ever sell applicant information), (5) receive, transfer or port your information to someone else, (6) find out who we’ve disclosed your information to, and (7) unsubscribe or opt-out. To exercise any of these rights, please click here.  However, due to the nature of the data (job applicant related), there are some requests we may not be able to comply with due to our legal obligations.

GDPR

Extreme Reach is committed to protecting your data in compliance with the General Data Protection Regulations (GDPR). Extreme Reach is the controller of data collected you provide to us as a job applicant. Should you have any issues with how we handle your data, we request that you contact us first so that we can make every effort to address your concerns. You also have the right to lodge a complaint with a local data supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at http://ico.org.uk/concerns/ or telephone: +44303-123-1113.

For further information on your rights under GDPR, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

CCPA

If you are a California resident, California law provides you with particular rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws. To exercise any such rights, please click the link above within the “Your Rights” section.

For data regarding Data Requests we received and responded to in 2020, please see the Consumer Data Request Report.

International Transfers

We store and process data in the United States, Canada and the UK, depending on your location. The data that we collect from you and process using Workable’s Services may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for Extreme Reach or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing or processing.

In particular, your data may be (i) accessible to Workable’s staff in the USA or (ii) stored by Workable’s hosting service provider on servers in the USA as well as in the EU. The USA does not have the same data protection laws as the United Kingdom and EEA. A Data Processor Agreement has been signed between Workable Software Limited and its overseas group companies, and between Workable Software Limited and each of its data processors. These data processor agreements are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data.

If you would like further information please contact Us (see “Contact Information” below). 

Privacy Shield Compliance

Extreme Reach complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Extreme Reach has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

In compliance with the Privacy Shield Principles, Extreme Reach commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Extreme Reach at [email protected].

Extreme Reach has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of the employment relationship.

Extreme Reach is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its use of your data. Under certain conditions, you may have the right to invoke binding arbitration regarding your privacy rights. If Extreme Reach wrongly transfers your private data to third parties, it may be liable to you for damages.

For more information on how we comply with Privacy Shield, see our Privacy Shield Supplemental Policy.

Data Retention

Information we collect is retained for a period of four (4) years. If hired, information will be retained for seven (7) years after your last day of employment.

Changes to This Policy

Extreme Reach reserves the right to change, modify, add or remove portions of this Privacy Policy at any time without notice (except when legally obligated to provide notice). Any changes to this Privacy Policy will become effective when we post the revised version on our website.

Legal Basis

Your consent and our legitimate interest (recruiting of employees) are the legal bases for collecting and processing your data.  By submitting your job application to us, you are providing your consent to process your data in the manners described herein. You have the right to withdraw or decline your consent at any time by contacting Extreme Reach (see Your Rights above or Contact Information below). Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal. Withdrawing consent will terminate your job application processing.

Contact Information

You can contact us at [email protected] or 1-800-324-5672 if you have questions about this privacy policy, or for requests related to your privacy rights.

Last updated: July 1, 2021 to update CCPA Data link