Last update: December 23, 2022
We collect your personal data from the following sources:
2. What personal data is collected during the recruitment and selection process?
We only collect and process personal data related to your professional profile that is necessary to achieve the processing purposes related to the recruitment and selection process.
The types of data we process depend on the information you make available to us and the information about you that is publicly accessible on your professional networks, such as LinkedIn or other public reference sources.
This data usually includes:
If you are approved at all stages of the recruitment and selection process and receive our offer letter, depending on your position or activity to be developed at Incognia, other data about you may be collected for Background Check analysis. If a Background Check is required for you, it will take place to the extent permitted by law, and you may be contacted by us to provide authorization for the release of your information. At that time, you will be provided with further information about the process and what personal data it might involve.
Other data will be collected to formalize the employment or internship contract, as well as to comply with obligations legal and regulatory3. Does Incognia collect any sensitive personal data?
By default, we do not collect sensitive personal data during the recruitment and selection process. However, we can collect sensitive personal data about you to the extent permitted by applicable laws (e.g., U.S. equal opportunity laws) and to support our efforts to create an inclusive and diverse work environment. All our data processing, especially when involving sensitive personal data, respect the principles of transparency and non-discrimination.4. What is the purpose of collecting and processing my data?
Your personal data is processed for the exclusive purpose related to the development of the stages of our recruitment and selection process, which includes the following purposes:
We may also use your personal data for Incognia analytics purposes, including in aggregated, anonymized, or pseudonymized forms, to improve our selection and recruitment process, as well as augment our ability to attract successful candidates.5. What is the role of Incognia as a processing agent?
As we make all decisions about the processing, we act as Controllers of your personal data.
6. What is the legal basis that justifies the processing of my personal data?
We use the legal basis of legitimate interests to justify most of the processing of your personal data that we carry out during the recruitment and selection process.
We also use the consenting basis to store your data for a specified period with a view to its application in future new employment and internship opportunities that are suitable for your professional profile. You can always revoke your consent at any time and free of charge.
When you are approved in any selection process, we use the legal basis for the execution of preliminary procedures to the contract or contract execution for the processing of your personal data to proceed with the formalization of your employment or internship contract.
In addition, we use the basis of compliance with a legal or regulatory obligation when the processing of your data takes place under any law or regulation to which we are subject.
Other legal bases may be used to justify the processing of your personal data, depending on the related processing purpose and application in each specific scenario.
7. Does Incognia make any automated decisions?
Certain roles may require specific technical prerequisites or skills, which, when not fulfilled, may cause your automatic disqualification from the selection process. For example, if knowledge about a certain system is essential for you to apply for any of our vacancies and you respond that you do not meet those requirements, you will be automatically disqualified. In any case, you can request the review of this automated decision by registering your right request by sending an email to our Data Protection Officer (“DPO”) firstname.lastname@example.org.
8. Who does Incognia share my data with?
Your data is only shared with the company hired by Incognia to act as a recruitment platform or with a specialized company to eventually assist Incognia at some stage of the recruitment and selection process and with companies that provide cloud storage services. Your data is also shared internally with members of the Human Resources team, area leaders, or other employees who may participate in decision-making during your recruitment and selection process.
We do not sell your personal data to third parties.
9. How is my personal data stored by Incognia?
Your personal data is stored on internal platforms and tools to which physical, technical, and organizational security measures are applied. In addition, your personal data is accessed by a restricted number of employees only when strictly necessary to perform their functions related to the recruitment and selection processes. It should be noted that all our employees sign confidentiality agreements and undergo training on privacy and data protection.
10. How long is my data stored by Incognia?
If you are approved and accept an offer of employment with us, any relevant personal data collected during your pre-employment period will become part of your personnel records and will be retained in accordance with specific requirements in our internal policies, which will be accessible for you after your hiring.
If you are not hired by Incognia, we will store as less personal data as possible, considering a strict limit of the need to achieve the purpose of registering your recruitment activities with us. Your other data will be securely and definitively deleted unless you have provided your consent to keep them at Incognia for participation in future recruitment and selection processes when your data will only be kept for the period previously authorized.
Exceptionally, we may retain some of your personal data for longer for audits, accountability, compliance with legal or regulatory obligations, compliance with court orders and the regular exercise of rights in judicial and administrative proceedings.
11. What measures does Incognia apply for the security and protection of my personal data?
We adopt technical and administrative measures to protect your personal data from unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication or dissemination. We apply access management techniques and appropriate physical, electronic and procedural mechanisms to protect your personal data.
In addition, we have documented and implemented internal policies, controls and procedures to deal with any security incidents.
12. What are my rights as a subject of personal data?
Check below a simplified list of your rights according to the provisions of the GDPR and CPRA:
To access your rights, you must contact our DPO by emailing email@example.com.
13. How can you contact the Supervisor/DPO?
If you have any questions, comments, requests or suggestions, you can contact our DPO directly by sending an email to firstname.lastname@example.org
14. Changes to this Policy
555 Bryant St, Box 423
Palo Alto CA USA 94301
DPO: Dayana Caroline Costa (email@example.com)