DPF Statement

HireVue Data Privacy Framework Self-Certification Notice

Introduction

This HireVue Data Privacy Framework Self-Certification Notice (“DPF Notice”) applies in combination with any privacy notice (“Privacy Notice”) that expressly links to it or that otherwise expressly incorporates it by reference.

Compliance with the Data Privacy Framework

HireVue and its US-based subsidiary Modern Hire, Inc. comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce.

HireVue has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.HireVue has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in this DPF Notice or the Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Types of personal information, purposes, rights and more

HireVue’s Privacy Notice sets out:

• the types of individuals about whom HireVue collects personal information,
• the types of personal information HireVue collects,
• the purposes for which HireVue processes personal information,
• the recipients to whom HireVue discloses personal information,
• your privacy rights and how to exercise them, and
• how we can be contacted (including any relevant contact address we provide in the EU).

 

For more information, please refer to the Privacy Notice that expressly links to this DPF Notice or that otherwise expressly incorporates this DPF Notice by reference.

Complaints

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, HireVue commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact HireVue at: privacy@hirevue.com

Dispute resolution

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, HireVue commits to refer unresolved complaints concerning our handling of personal information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint.The services of JAMS are provided at no cost to you.

Arbitration

You have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other mechanisms set out in this DPF Notice or our Privacy Notice. For more information, please see here.

Jurisdiction

The Federal Trade Commission has jurisdiction over HireVue’s compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

Disclosures to public authorities

HireVue may, from time to time, be required to disclose personal information it receives under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework Swiss-U.S. DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Liability for onward transfers

HireVue is liable for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. HireVue shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless HireVue proves that it is not responsible for the event giving rise to the damage.