UCEAP INTERNATIONAL RECRUITMENT PRIVACY NOTICE:
This Privacy Notice explains how the University of California Education Abroad Program (“UCEAP”, “we” or “us”) collects and processes your Personal Data in connection with our recruiting activities and processes; how we use, store, transfer and protect this Personal Data; and your rights in relation to this Personal Data.
“Personal Data” is any information that enables us to identify you, directly or indirectly, by reference to an identifier such as your name, identification number, location data, online identifier, or one or more factors specific to your physical, physiological, genetic, mental, economic, cultural, or social identity.
This Privacy Notice applies to all Personal Data we collect or process about you in the context of your application for employment or other job opportunity abroad. This notice will inform you of:
• Who we are;
• How to contact us;
• How we collect Personal Data;
• How we use Personal Data;
• Who has access to Personal Data;
• Transfer of Personal Data;
• How we store and protect Personal Data;
• How to exercise your rights; and
• Changes to this Privacy Notice.
Who we are
For the purposes of the General Data Protection Regulation 2016/679 (the “GDPR”), The Regents of the University of California (“University” or “UC”) of 1111 Franklin Street, Oakland, California 94607, is the data controller for all Personal Data that it holds and processes, except where it is done in the capacity of a data processor on behalf of another data controller.
How to contact us
If you have any questions or concerns about this Privacy Notice, please contact us by phone at +1 (805) 893-4762, by sending an email to [email protected], or by mail to 6950 Hollister Avenue, Suite 200, Goleta, California 93117.
How we collect Personal Data
When you participate in a recruitment, this Privacy Notice will apply to our processing of your personal information.
UCEAP obtains Personal Data about you in the following ways:
- Collected from you directly, such as when you submit an application, CV, and other documents to UCEAP; participate in interviews and other assessments; and through correspondence related to your application;
- Generated by us about you, such as information that may be captured by security cameras; and
- Obtained by us from third party sources, such as prior employers, employment agencies, references and employment background check providers as permitted by law.
CATEGORIES OF PERSONAL DATA THAT WE MAY COLLECT DIRECTLY FROM YOU
- Personal details, such as your name.
- Contact information, such as your home address, email address, and phone numbers.
- Entitlement to work information, such as your visa, your passport, or other government-issued identification.
- Employment information, such as details of your qualifications, skills, experience, education, employment history, and reference contact information.
- Academic Information, such as schools attended and level achieved.
CATEGORIES OF PERSONAL DATA THAT WE MAY GENERATE ABOUT YOU
- Interview and test evaluation information, such as evaluation of interview responses and skills test assessments.
- Technical information, such as what platform you used to apply to our online recruiting system.
CATEGORIES OF PERSONAL DATA THAT WE MAY OBTAIN FROM THIRD PARTIES ABOUT YOU
- Employment information, such as prior employment details and references collected from individuals or organizations you named as references.
- Employment information, such as details regarding your qualifications, skills, experience, education, and employment history provided by employment agencies or partner institutions that may serve as the hiring entity.
SPECIAL CATEGORIES OF PERSONAL DATA THAT WE MAY COLLECT AND USE
Some of the categories of Personal Data that we collect are considered “special categories” of Personal Data under European Union law. In particular, we may process the following special categories of Personal Data:
- Health information relating to disability accommodations, only if requested to participate in the recruitment process.
- Criminal record information as part of a background check for applicable positions, may be obtained by third parties, but only after acceptance of a job offer (and where permitted by local law).
How we use Personal Data
UCEAP uses your personal information for a variety of human resources and business management purposes in connection with your job application including the following:
- To communicate with you about the recruitment process and respond to your inquiries. This is generally required to process a request made by you prior to entering into a contract with us. In other cases, we have a legitimate interest in communicating with you.
- To assess your skills, knowledge, abilities, and suitability as they relate to the role(s) for which you applied. Our basis for doing so is to serve our legitimate interest.
- To conduct reference checks and conduct pre-employment screening. Our basis for doing so is to serve our legitimate interest.
- To confirm your right to work in the location of the role. This processing is necessary to comply with legal requirements.
- Processing and dealing with any complaints or inquiries made by you or legally on your behalf. This processing is necessary for compliance with our legal obligations.
PURPOSES AND LEGAL BASIS FOR PROCESSING SPECIAL CATEGORIES OF DATA
- Health data. To the extent we process health data, we do so to support your participation in the recruitment process. We may process such data to provide assistance, mobility, and other necessary accommodations. Our basis for doing so is compliance with social obligations laws or where there is a substantial public interest in providing such services or accommodations.
Who has access to Personal Data
We treat your Personal Data with care and confidentiality. Your Personal Data will only be available for the purposes mentioned above and only to employees on a need-to-know basis and to the extent reasonably necessary to perform their functions and fulfill contractual obligations.
We may share your Personal Data with third parties under the following circumstances:
- University of California and affiliate offices. Your Personal Data will be shared with colleagues within the University of California and related affiliate locations only where it is necessary for them to undertake their duties with regard to recruitment. This includes HR personnel supporting the recruitment process, UCEAP management, the local hiring manager and interview panel participants that may be situated in the US and abroad.
- Service providers and business partners. We may share your Personal Data with service providers or business partners, including reference check and pre-employment background check providers, employment agencies, legal counsel, other partners, suppliers, and sub-contractors for the performance of obligations arising from your participation in a recruitment, or any other contract we enter into with them or you or to provide you with the information and services.
- Law enforcement agencies, courts, regulators, government authorities or other third parties. We may share your Personal Data with these parties where we believe this is necessary to comply with a legal or regulatory obligations, or otherwise to protect our rights or the rights of any third party.
Because we operate internationally, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). Please refer to the section below on “Transfer of Personal Data outside of the European Economic Area” for more information.
Transfer of Personal Data
Your Personal Data may be transferred to, stored, and processed in a country (such as the United States, where the University of California is located) that is not regarded as ensuring an adequate level of protection for Personal Data under European Union law.
We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us via email at [email protected].
How we store and protect Personal Data
We implement technical and organizational measures to ensure a level of security appropriate to the risk to the Personal Data we process. These measures are aimed at ensuring the ongoing integrity and confidentiality of Personal Data. We evaluate these measures on a regular basis to ensure the security of the processing.
We will store your Personal Data, in a form which permits us to identify you, for no longer than is necessary for the purpose for which the Personal Data is processed. If your application is not successful, we will keep your data for 12 months from the conclusion of the recruitment process or date your profile was last updated on our recruitment site, whichever comes first. If your application is successful, your data will be kept and transferred to the systems we use to administer employee data. We have a separate privacy notice for employees, which will be provided to you as part of the on-boarding process.
How to exercise your rights
Where applicable under local law, you may have certain rights regarding your Personal Data. Where applicable, you have the right to access Personal Data UCEAP holds, and in some situations you have the right to have that Personal Data corrected or updated, erased, restricted, or delivered to you or a third party in a usable electronic format (the right to data portability). Where applicable, you may also object to how UCEAP uses your Personal Data if the legal basis for processing that information is our legitimate interest.
Where we are using your Personal Data on the basis of your consent, where applicable under local law you have the right to withdraw that consent at any time. You also have the right to register a complaint to the supervisory data protection authority of the country in which you are a resident, where applicable.
If you wish to exercise these rights or to notify us of a change in your personal details, or if you have any questions on the content of this Notice, please contact us at [email protected].
Changes to this Privacy Notice
Any changes we make to our Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by e-mail.
Effective Date: This privacy notice is effective January 23, 2019