Lever’s Privacy Notice
Effective as of 5 October, 2020
- Visit Lever’s websites that display or link to this Privacy Notice;’Visit Lever’s branded social media pages;
- Visit Lever’s offices;
- Receive communications from us, including invitations, resources, materials, emails, phone calls, texts or fax;
- Register for, attend or take part in Lever’s events, webinars or contests; or
- Ask questions about the recruiting software Lever provide (“Service”).
1. Changes to Our Privacy Notice
2. The Information We Collect and Store
- Personal Data You Voluntarily Provide. Lever will collect Personal Data when you voluntarily provide it to Lever (including to Lever’s service providers or other parties who collect it on Lever’s behalf). For example, Lever collect Personal Data when you request information about Lever’s Service, subscribe to marketing communications, complete surveys, or sign up for a Lever event or webinar. Lever may also collect Personal Data from you offline, such as when you attend one of Lever’s events, or during phone calls with sales representatives. The Personal Data Lever collect may include contact information (such as your name, address, telephone number or email address), professional information (such as your job title, department or job role), and contact preferences. Lever also collect information you choose to provide to Lever when requesting information or completing any “free text: boxes in Lever’s forms (for example, for event sign-up), or the nature of your request or communication.
- Log Data. When you use the Service, Lever automatically record information from your device, its software, and your activity using the Service (“Log Data”). This may include the device’s Internet Protocol (“IP”) address, browser type, the web page visited before you came to Lever’s website, information you search for on Lever’s website, locale preferences, identification numbers associated with your devices, your mobile carrier, date and time stamps associated with transactions, system configuration information, metadata concerning your Files, and other interactions with the Service. Lever may use your IP address to identify the general geographic area from which you are accessing the website. While an IP address may reveal your ISP or geographic area, Lever cannot determine your identity solely based upon your IP address.
- Location Data. Lever may collect geolocation and proximity of your device if location services are enabled on your device (e.g., GPS-based functionality on mobile devices used to access Lever’s website), and may use that information to customize the Interactions with location-based information and features. If you access Lever’s website through a mobile device and you do not want your device to provide Lever with location-tracking information, you can disable the GPS or other location-tracking functions on your device, provided your device allows you to do this.
3. Third Party Sources of Information
Lever collect information about you from the following third-party sources:
- Third-Party Services. You may choose to register events sponsored by Lever’s partners where Lever will share your information with Lever’s marketing partners. Lever will provide notice of the intent to share your data with Lever’s partners at the point of personal data collection. To engage in marketing activities, Lever may collect Personal Data disclosed by you on message boards, chat features, blogs and other services or platforms to which you are able to post information and materials (including third party services and platforms). Lever process such information to better understand you, to maintain and improve the accuracy of the information Lever store about you, and to better promote or optimize Lever’s Interactions with you, including providing information about Lever’s Service.
4. How We Use Personal Data
Your Personal Data may be used for the following purposes:
- a) Respond to Requests.Lever may process your Personal Data when you contact us, such as with questions, concerns, feedback, disputes or issues, to respond to your request or provide information requested by you. Lever share this information with third parties upon your request, or Lever’s service providers or partners to the extent necessary to facilitate the Interactions. Without your Personal Data, Lever cannot respond to you or ensure your continued use and enjoyment of the website.
- b) Ensure the Security of the Service.Lever is committed to ensuring your safety and continued enjoyment of Lever’s website. To do so, Lever may process your Personal Data to help monitor, prevent and detect fraud, enhance security, monitor and verify identity or access, and combat spam or other malware or security risks. combat spam, malware, malicious activities or security risks; improve and enforce Lever’s security measures; and to monitor the security of Lever’s website.
- c) Facilitate and Evaluate Use of the Online Properties. Lever may use your Personal Data to provide you with the online services, to facilitate your use of the online services (such as facilitating navigation and the login process, preserving information between sessions and enhancing security), to improve quality, to evaluate page response rates and determine content.
- d) Improve the Accuracy of Lever’s Records. Lever may use the Personal Data Lever receive from you or third parties to better understand you and/or maintain and improve the accuracy of the records Lever hold about you.
- e) Post Testimonials. Lever may use Personal Data to post testimonials on Lever’s website. Prior to posting a testimonial, Lever will obtain your consent to use your name and testimonial. You can request your testimonial be updated or deleted at any time by sending a request with your name, testimonial location and contact information.
- g) Marketing: Lever may use information Lever obtain from you, your interactions with Lever and Lever’s website, and from third party sources to provide you with marketing and promotional communications, to deliver targeted and relevant advertising and marketing to you, to determine the effectiveness of Lever’s marketing and promotional campaigns, to better understand you and your preferences, and to position and promote Lever’s Services. Lever’s marketing will be conducted in accordance with your advertising / marketing preferences and as permitted by applicable law.
- h) Quality Control and Training. Lever may use or access Personal Data for the purposes of quality control related to the website and staff training.
- i) Conferences and Events. Lever and Lever’s partners may use Personal Data to communicate with you about Lever’s events or Lever’s partner events. After the event, Lever may contact you about the event and related products and services, and may share information about your attendance with your company and Lever’s conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests your Personal Data at their conference booths or presentations, your Personal Data will be handled in accordance with their privacy practices. Lever recommend that you review the privacy practices of such partners and sponsors.
- j) Provide Online Communities and Blogs: Lever may use Personal Data and other information disclosed by you on Lever’s message boards, chat features, blogs and other services or platforms to which you are able to post information and materials for the purposes of providing you and Lever’s customers with a forum to discuss Lever’s Services, responding to your request, providing you with support, improving Lever’s website or any other purposes set forth in this Privacy Notice. Any information that is disclosed in those forums becomes public information and may therefore appear in public ways, such as through search engines or other publicly available platforms, and may be “crawled” or searched by third parties. It could also be read, collected or used by other users to send you unsolicited messages. Please do not post any information that you do not want to reveal to the public at large.
- k) Other Legitimate Business Purposes. Lever may use your Personal Data when it is necessary for other legitimate purposes such as protecting Lever’s confidential and proprietary information.
If, in the future, Lever use your Personal Data in any way that is not described in this Privacy Notice, Lever will disclose this to you. At that time, you can choose not to allow Lever to use your Personal Data for any purpose that is incompatible with the purposes for which Lever originally collected it or subsequently obtained your consent. If you choose to limit the ways Lever can use your Personal Data, some or all of the website may not be available to you, and Lever may not be able to interact with you.
5. Information Sharing and Disclosure
Lever only disclose your Personal Data to those who really need access to perform their tasks and third parties who have a legitimate purpose for accessing it. Lever may share Personal Data with third parties in the following situations:
- a) Service Providers, Business Partners and Others.Lever may share your Personal Data with third parties, such as vendors, consultants, agents and other service providers who work on Lever’s behalf. Examples include vendors and service providers who provide assistance with marketing, billing, processing credit card payments, data analysis and insight, technical support and customer service. Unless described in this Privacy Notice, Lever do not share, sell, rent, or trade any of your Personal Data with third parties for their own promotional purposes.
- b) Compliance with Laws and Law Enforcement Requests; Protection of Lever’s Rights.Lever may use or disclose Personal Data stored in your Lever account and other Personal Data about you to third parties when Lever have a good faith belief that disclosure is reasonably necessary to: (i) comply with a law, regulation or legal requests including to meet national security or law enforcement requirements; (ii) protect the safety of any person from death or serious bodily injury; (iii) prevent fraud or abuse of Lever or its user, or (iv) protect Lever’s property rights.
- c) Vital Interests: Lever may disclose information when Lever believe it necessary to protect the vital interests of any person.
- d) Business Transfers. If Lever is involved in a merger, acquisition, or sale of all or a portion of Lever’s assets, your information may be transferred as part of that transaction, but Lever will notify you (for example, via email and/or a prominent notice on Lever’s website) of any change in control or use of your Personal Data, or if either become subject to a different Privacy Notice. Lever will also notify you of choices you may have regarding the information.
- e) With Your Consent: Lever may disclose your Personal Data for any purpose with your consent.
6. Marketing Opt Out and Choice
If you sign up to receive marketing or informational announcements from us, such emails will include the capability to opt-out of receiving such e-mails in the future. Marketing and informational announcements include any communications to you that are only based on advertising or promoting products and services. Transactional communications about an Interaction, or Lever’s Services are not considered “marketing” or “informational” communications.
7. Transfer of Personal Data
If you Interact with Lever or provide your Personal Data to us, your Personal Data may be transferred to, processed and maintained on servers or databases located outside of the country or jurisdiction where you are located. Such countries or jurisdictions may have data protection laws that are less protective than the laws of the jurisdiction in which you reside. If you do not want your Personal Data transferred to or processed or maintained outside of the country or jurisdiction where you are located, you should not use this website, Lever’s resources, or the Services.
If you are located in the European Economic Area (“EEA”), the United Kingdom or Switzerland, Lever comply with applicable laws to provide an adequate level of data protection for the transfer of your Personal Data to the US. Lever is certified under the EU-U.S. and the Swiss-U.S. Privacy Shield Framework and adheres to the Privacy Shield Principles. For more, see Section 13 below.
Where applicable law requires Lever to ensure that an international data transfer is governed by a data transfer mechanism, Lever will use an appropriate lawful transfer mechanism.
The security of your Personal Data is important to us. Lever employ appropriate technical and organizational measures to ensure a level of security that is appropriate for Lever’s Interactions with you. Lever follow generally accepted standards to protect the Personal Data submitted to us, both during transmission and once Lever receive it. No method of electronic transmission or storage is 100% secure, however. Therefore, Lever cannot guarantee its absolute security. If you have any questions about security on Lever’s website, you can contact Lever at firstname.lastname@example.org.
9. Accessing or Updating Your Personal Data
If you would like to correct or update the Personal Data you provided to Lever in relation to Lever’s Interactions with you or in connection with Lever’s Service, please contact email@example.com. Lever will use responsible efforts to respond to your inquiry as soon as practicable. When updating your Personal Data, Lever may ask you to verify your identity before Lever can act on your requests.
Individuals located in the European Economic Area, Switzerland, or the United Kingdom during data collection, or that are California residents should refer to the relevant sections below for more information about their access, correction and other rights in relation to their Personal Data.
10. Data Retention
Lever may retain and use your Personal Data as necessary to comply with Lever’s legal obligations, or resolve disputes. Consistent with these requirements, Lever will try to delete your Personal Data within the time limits imposed by applicable law, if any upon request. When Lever have no justifiable business need to process your Personal Data, Lever will either delete or anonymize it, or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then Lever will securely store your Personal Data and isolate it from any further processing until deletion is possible.
While retention requirements can vary by country, Lever generally apply the retention periods noted below.
- Marketing. Lever store Personal Data used for marketing purposes indefinitely until you unsubscribe. Once you unsubscribe from marketing communications, Lever add your contact information to Lever’s suppression list to ensure Lever respect your unsubscribe request.
- Telephone Records. As required by applicable law, Lever will inform you that a call will be recorded before doing so. Any telephone calls with you may be kept for a period of up to six years.
11. Our Policy Toward Children
Our website and Services are not directed to persons under 18. Lever do not knowingly collect Personal Data from children under 18. Any individuals under the age of 18 must have consent to Interact with Lever or use the Services from their parent or guardian. If a parent or guardian becomes aware that his or her child has provided Lever with Personal Data without their consent, he or she should contact Lever at firstname.lastname@example.org. If Lever become aware that a child under 18 has provided Lever with Personal Data, Lever will take steps to delete such information from Lever’s files.
12. California Privacy Rights
A business subject to California Civil Code section 1798.83 is required to disclose to its California customers, upon request, the identity of any third parties to whom the business has disclosed Personal Data information within the previous calendar year, along with the type of Personal Data disclosed, for the third parties’ direct marketing purposes. Please note that under California law, businesses are only required to respond to a customer request once during any calendar year. If you are a California resident and would like to make either type of request described above, please contact Lever at email@example.com.
13. Additional Rights for Individuals in the EEA, UK or Switzerland
This section only applies to Interactions with individuals who are in the European Economic Area, United Kingdom or Switzerland (collectively, the “Designated Countries”) at the time of data collection.
Lever may ask you to identify which country you are in when you Interact with us, or Lever may rely on your IP address to identify which country you are located in. When Lever rely on your IP address, Lever cannot apply the terms of this section to any individual that masks or otherwise hides their location information from Lever so as not to appear located in the Designated Countries. If any terms in this section conflict with other terms contained in this Notice, the terms in this section shall apply Designated Countries users.
Lever is a data controller with regard to any Personal Data collected from users pursuant to an Interaction. A “data controller” is an entity that determines the purposes and the manner in which the Personal Data is processed. Any third parties that handle your Personal Data in accordance with Lever’s instructions are Lever’s service providers and are “data processors.” You are a “user.” Users are individuals providing Personal Data to Lever via an Interaction, such as signing up for Lever’s newsletter(s), or otherwise accessing or using Lever’s resources that Lever provide.
a) Marketing.Lever will only contact individuals located in the Designated Countries by electronic means (including email or SMS) based on Lever’s legitimate interests, as permitted by applicable law, or the individual’s consent. To the extent Lever can rely on legitimate interest under the applicable law, Lever will only send you information about Lever’s Services and other materials that are similar to those which were the subject of a previous Interaction with you. If you do not want Lever to use your Personal Data in this way please go to the email settings for your account to opt out, click an unsubscribe link in your emails, or contact Lever at firstname.lastname@example.org. You can object to direct marketing at any time and free of charge
b) Additional Privacy Rights. Lever provide you with the rights described below when you Interact with us. Lever may limit these privacy rights requests (i) where denial of access is required or authorized by law, (ii) when granting access would have a negative impact on others’ privacy, (iii) to protect Lever’s rights and properties, or (iv) where the request is frivolous or burdensome. If you could like to exercise your rights under applicable law, please contact Lever at email@example.com. Lever may seek to verify your identity when Lever receive your privacy rights request to ensure the security of your Personal Data.
- Right to withdraw consent.For any consent-based processing of your Personal Data, you have the right to withdraw your consent. A withdrawal of consent will not affect the lawfulness of Lever’s processing or the processing of any third parties based on consent before your withdrawal.
- Right of access/right of portability.You may have the right to access the Personal Data that Lever hold about you, and in some limited circumstances, have the Personal Data provided to you so that you can provide that Personal Data to another controller.
- Right to rectification. You may request to correct any of your Personal Data in Lever’s files.
- Right to erasure. In certain circumstances, you may have a right to the erasure of your Personal Data that Lever hold on you.
- Right to restriction.You have the right to request that Lever restrict Lever’s processing of your Personal Data win certain circumstances.
- Right to object to processing.You have the right to object to Lever’s processing at any time and as permitted by applicable law if Lever process your Personal Data on the legal bases of: consent; contract; or legitimate interests. Lever may continue to process your Personal Data if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
- Notification to third parties.When Lever fulfill your individual rights requests for correct (or rectification), erasure or restriction of processing, Lever will notify third parties also handling the relevant Personal Data unless this proves impossible or involves disproportionate effort. Upon your request, Lever will identify such third parties.
- Right to Lodge Complaint. In compliance with the Privacy Shield Principles, Lever commit to resolve complaints about Lever’s collection or use of your Personal Data. European Union and Swiss individuals with inquiries or complaints regarding Lever’s Privacy Shield policy should first contact Lever at firstname.lastname@example.org.
If you have questions, or would like to exercise any of the above rights you may reach Lever’s Data Protection Officer (“DPO”) at email@example.com or Lever’s EU member representative VeraSafe by using this contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative or via telephone at: +420 228 881 031.
c). The EU-U.S. and Swiss-U.S. Privacy Shield Frameworks. Lever complies with the EU-U.S. and the Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred from the European Union and Switzerland to the United States. Lever has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. The Federal Trade Commission has jurisdiction over Lever’s compliance with the Privacy Shield. In addition to maintaining Privacy Shield certification, where applicable law requires Lever to ensure that an international data transfer is governed by a data transfer mechanism, Lever will use an appropriate lawful transfer mechanism.
If there is any conflict between the terms in this Privacy Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. In the context of an onward transfer, Lever has responsibility for the processing of Personal Data it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf. To learn more about the Privacy Shield program, and to view Lever’s certification, please visit https://www.privacyshield.gov/.
If you are a European data subject with an unresolved complaint or dispute arising under the requirements of the Privacy Shield Framework, Lever agree to refer your complaint under the Framework to an independent dispute resolution mechanism. Lever’s independent dispute resolution mechanism is the International Centre for Dispute Resolution (“ICDR”), operated by the American Arbitration Association (“AAA”). For more information and to file a complaint, you may contact the International Centre for Dispute Resolution by phone at +1.212.484.4181, or by visiting the website http://go.adr.org/privacyshield.html,
Please note that if your complaint is not resolved through these channels, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel. You also have a right to lodge a complaint with a competent supervisory authority situated in a Designated State of your habitual residence, place of work, or place of alleged infringement.
d) Legal Bases for Processing Personal Data. Lever’s legal bases for collecting and using the Personal Data described above will depend on the type of Personal Data collected, the specific context in which Lever collect it and the purposes for which it is used. Lever rely on the following legal bases under the European Union’s General Data Protection Regulation in processing your Personal Data.
Section & Purposes of Processing
Legal Basis for Processing
5(a) Respond to Requests
6(a) Service Providers, Business Partners and Others
Processing is based on Lever’s contract obligations or to take steps at the request of the individual prior to entering into a contract.
5(c) Facilitate and Evaluate Use of the Website
5(d) Improve the Accuracy of Lever’s Records
5(f) Personalize your Experience
5(h) Quality Control and Training
5(i) Conferences and Events
5(j) Provide Online Communications and Blogs
5(k) Other Legitimate Purposes
Processing is based on Lever’s legitimate interest to better understand you, to maintain and improve the accuracy of the information Lever store about you, and to better promote or optimize Lever’s Services.
5(e) Post Testimonials
6(e) With Your Consent
Processing is based on your consent.
5(b) Ensure the Security of the Service
6(b) Compliance with Laws and Law Enforcement Requests; Protection of Lever’s Rights
6(c) Vital Interests
6(d) Business Transfers
Processing is necessary for compliance with Lever’s legal obligations, the public interest, or in your vital interests.
14. Contacting Us
If you have any questions or complaints about this Privacy Notice, please contact Lever’s DPO at firstname.lastname@example.org or send physical mail to:
1125 Mission Street
San Francisco, California 94103
Attention: Lever DPO