As the operators of the Workable websites, www.workable.com and jobs.workable.com (“Website”) Workable Software Limited registered in England and Wales with Company Registration Number 08125469 and having its registered office address at 5 Golden Square, 5th Floor, London, W1F 9BS, United Kingdom (“We”, “Us”, “Workable”), is committed to protecting and respecting your privacy. This Privacy and Cookies Policy (“Policy”) relates to services provided through our websites and application (“Services”) and sets out the basis on which the Personal Data collected from you, or that you provide to Us will be processed by Us. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules, or regulations (collectively the “Data Protection Laws”). This Policy does not cover the practices of companies We don’t own or control or people We don’t manage. For clarity, this policy applies when Workable acts as a “Controller” (as defined in the General Data Protection Regulation (the “GDPR”) and the version of the GDPR retained in UK law (the “UK GDPR”) or “Business” as defined under the California Consumer Privacy Act of 2018 , as amended by the California Privacy Rights Act of 2020 (the “CPRA”) (all together the “CCPA”). Note that we may also process Personal Data of our customers’ job applicants in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor or service provider for your Personal Data (i.e., not the controller or business), please contact the controller/business party in the first instance to address your rights with respect to such data. Please read the following carefully to understand our views and practices regarding your Personal Data and how We will treat it.
For the purpose of the GDPR and the CCPA:
For the Users of the Workable Job board (as the term is defined in the Workable Job Board Terms), when You create an Account (as the term is defined in the Workable Job Board Terms) and use the Services, We act as a Data Controller. When You to apply to a Job Opening, the Employer is collecting and storing your personal data as a Data Controller.
We collect Personal Data about you from:
We collect and process some or all of the following types of information from you:
The provision of your full name and email address, your employer and/or your place of work and the url of the business that you work for is required from you when you register to use our Services. We will inform you at the point of collecting information from you, whether you are required to provide the information to Us.
|Personal Data Collected (including Categories)||Purposes of Use||What is the source of this Personal Data?||Categories of third parties to whom we disclose the information for business purposes|
|A. Personal identifiers|
Real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social profile URL
B. Customer records identified by state law (including the California Customer Records statute (Cal. Civ. Code § 1798.80(e)))
Name, signature, address, telephone number, employment.
C. Commercial information
History of services purchased through Workable
D. Internet or other similar network activity information
Browsing history, search history, information interaction with the website or application.
E. Geolocation data
Physical location (calculated from IP address)
F. Professional or employment-related information
Current job title and employer, Resume
G. Payment information
All information necessary to complete online payments, such as payment details, bank account information, billing information.
The following section provides additional information about how we collect your Personal Data.
Under the GDPR and the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing of your personal data could be:
Legitimate Interest: We may process your personal data based on our legitimate interest, which includes without limitation our legitimate interest to assist Job applicants find a new job (via the Workable Job Board), our legitimate interest to provide and improve the Services, our legitimate interest to improve the Website, our legitimate interest in advertising our product and services, unless you have provided your prior consent as required.
Contract: We may process personal data, in order for us to provide the services and meet our contractual obligations towards you, when we have a contract with you.
Consent: On a few occasions, we may rely on your consent for the processing of your personal data. In any such case, we will indicate this and ask for your specific informed consent, e.g when you sign up to receive marketing communications etc.
Legal Obligation: We may process your personal data to comply with a legal or regulatory obligation such as e.g. detecting, preventing or investigating crime or fraud including working with law enforcement agencies.
Subject to local data protection laws and in particular under the General Data Protection Regulation (GDPR) and the UK GDPR, you have a number of important rights free of charge. In summary, those include rights to:
For further information on each of those rights, including the circumstances in which they apply, see the General Data Protection Regulation (GDPR) Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the UK GDPR.
If you would like to exercise any of those rights, please:
For clarity the above rights apply to EU, UK and Swiss data subjects, as required under applicable law, but also any user of the Website and the Services, regardless of location may exercise any of these rights.
Some of the common uses for our cookies are as follows:
When you use and access the Service, we may place a number of cookie files in your web browser.
We use the following categories of cookies:
Strictly necessary cookies: These cookies are necessary for the Website to function and are enabled by default at the time you access the Website. Those cookies enable us to offer you the best possible experience while using our Website.
Functional/ Preference cookies: These cookies are used in order for us to understand how you use the Services, and provide you with certain functionalities of the Services, e.g remember your preference on the site such as language, region, username etc.
Analytical/ Performance cookies: These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site.
Advertising cookies: We use these cookies to help us to display advertisements that will be relevant to you or are used by third parties in order to provide you with relevant advertising.
We also use both session and persistent cookies on the Service and we use different types of cookies to run the Service:
Session cookies: last only for the duration you browse the website and are deleted automatically once you quit your browser
Persistent cookies: are cookies saved on your computer and that are not deleted automatically when you quit your browser, unlike a session cookie, which is deleted when you quit your browser. Some cookies may store information for less than 24 hours and other may store information up to 24 months or more.Third-party cookies
In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the Service, deliver advertisements on and through the Service, and so on.
We don't control those third party websites, but you can find more information on how to opt out from those on their privacy policies:
|Google services: Google tag manager, Google Analytics etc||https://policies.google.com/privacy?hl=en|
Necessary cookies, which are required for the core functionality of the website, are enabled by default automatically when you access the Website.
For all other categories of cookies used, which are not necessary for the site to operate you can expressly consent on their use by clicking “ accept” or “ignore” on the cookie banner which is set on the Website.
Additionally you can also decide whether or not to accept cookies through your internet browser’s settings. Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new cookie in a variety of ways. You can also delete all cookies that are already on your computer. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some of the Services and functionalities may not work.Where can you find more information about cookies
To explore what cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about cookies, including information about how to manage and delete cookies, please visit https://ico.org.uk/for-the-public/online/cookies/ or http://www.allaboutcookies.org/.
If you have any questions or comments about our Cookies Policy please contact: [email protected]
You may connect your Google account to your Workable account in order to make use of certain Workable features such as Gmail Import and Syncing and scheduling with Google Calendar. This is done through OAuth authentication, a secure mechanism which gives Workable access to your Google account data without letting Workable know your password.
In that case, Workable will require access to your Google account and user data for the following purposes:
Workable’s use of information received from Google APIs will adhere to Google API Services User Data Policy including the Limited Use requirements.
If you request assistance by a representative of Workable, the Workable representative may obtain access to your Workable account for the purposes of resolving your inquiry. Under those circumstances, the Workable representative will assume your role in Workable and view your account as you would when you log in.
Workable reserves the right to assume the role of a user in your account without prior notice in certain situations, for example when it is necessary for security purposes (such as investigating a bug or abuse) or when it is necessary to comply with applicable law.
Where you are using our Services on behalf of our Customer, we rely on legitimate interests in performing our contract with our Customer as the lawful basis on which We collect and use your Personal Data.
We use information held about you in the following ways:
We may use anonymised and/or aggregate data collected through your use of the Services and the Website for statistical purposes, for improvement of the Services, to conduct research,or any other lawful purpose. Aggregate Data is not considered personal data.
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 (where applicable). Where any such member of our group is outside the UK or the EU this transfer will be on the basis of a contract, as described below in accordance with the Data Protection Laws.
We may disclose your personal information to third parties:
We disclose your Personal Data to service providers and other parties for the following business purposes:
We disclose your Personal Data to the following categories of service providers and other parties:
Over the past twelve months, we have disclosed the following categories of your Personal Data to service providers or other parties for the business purposes listed above:
When we disclose personal information for a business purpose, as described above we enter into a contract with the service provider or other parties, that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
We haven’t sold your Personal Data over the last twelve months.
We take appropriate measures to ensure that all Personal Data is kept secure including security measures to prevent Personal Data from being accidentally lost, or used or accessed in an unauthorised way, for the duration of your use of our Services. We limit access to your Personal Data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to the Website, therefore any transmission remains at your own risk. Once we have received your information, we will use strict procedures and security features in order to prevent unauthorised access.Keeping your Personal Data up to date
If your personal details change you may update them by accessing the relevant page of the Website, or by contacting Us at [email protected].
We will endeavour to update your Personal Data within thirty (30) days of any new or updated Personal Data being provided to Us, in order to ensure that the Personal Data We hold about you is as accurate and up to date as possible.Where we store your Personal Data
The data that We collect from you and process as a result of your use of the Services may be transferred to, and stored at, a destination outside the UK, Switzerland or the European Economic Area ("EEA"). It may also be processed by staff operating outside the UK, Switzerland or the EEA who work for Us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your orders, the processing of your payment details and the provision of support services. By submitting your Personal Data, you agree to this transfer, storing or processing.
In particular, your data may be accessible to i) Workable’s staff in the USA or ii) may be stored by Workable’s hosting service provider on servers in the USA as well as in the EEA. The USA does not have the same data protection laws as the United Kingdom and the EEA. A Data Processing and Transfer Agreement has been signed between the entities of the Workable Group of Companies, and between Workable and each of its data processors. These Data Processor Agreements that are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your Personal Data. A full list of Workable's sub-processors can be found here.
If you would like further information please contact Us (see ‘Contact’ below). We will not otherwise transfer your Personal Data outside of the United Kingdom or EEA or to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.How long we keep your Personal Data
We will hold all the data for so long as we have an obligation to You to provide you with the Services, as long as we have an obligation to the Customer to provide the Services, or as long as necessary to fulfill the purpose for which was initially collected and thereafter until such time as we delete the Customer’s account in accordance with our Customer Terms and Conditions. We will retain and use your Personal Data to the extent necessary to comply with any legal/accounting/reporting obligation.
Your personal information will be deleted on one of the following occurrences:
We do not knowingly collect or solicit Personal Data from children under 16; if you are a child under 16, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us at [email protected].
If you are a California resident, you have the rights outlined in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, please contact us at [email protected].Right of Access
You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. We will provide you with the following information:
If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient.Right of Deletion
You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.Right to Correct
You have a right to request correction of inaccurate personal information.Right to Opt out of selling your personal Information
Workable does not sell your personal informationRight to Opt out of sharing your personal Information
Although Workable does not sell your personal information, we may share in a few instances your personal information with third parties. “Sharing” under the CCPA, is broadly defined to cover the disclosing personal information for purposes of cross-context behavioral advertising, as for example targeting advertising based on personal information obtained from a consumer’s activity across distinctly-branded websites or services.
You can request to opt out of sharing your personal information as defined above by using our cookies preference banner.Right to Limit the Use of Sensitive Personal Information
Workable does not use or disclose Sensitive Personal Information for reasons other than permitted under the CCPA.Non discrimination for Exercising Your CCPA Rights
We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA.Right to Opt-out of Automated Decision-Making Technology (Profiling)
Workable does not engage in automated decision-making or profiling.Exercising Your Rights
To exercise the rights described above, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request using the following methods:
Emailing us at: [email protected]
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at [email protected].
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Our Services do not support Do Not Track requests at this time. To find out more about “Do Not Track,” you can visit www.allaboutdnt.com.Nevada Resident Rights
If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at [email protected] with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.
The Services are hosted and operated in the United States (“U.S.”) through Workable, Inc. and its service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Workable, Inc. in the U.S. and will be hosted on U.S. servers, and you authorize Workable to transfer, store and process your information to and in the U.S., and possibly other countries. You hereby acknowledge and agree with the transfer of your data to the U.S.
For transfers of data outside the EEA, Switzerland and the UK to the US, We rely on the European Commission Standard Contractual Clauses ( “EE “SCCs”) and the UK DTIA as approved by the ICO (all together the “SCCs).
With respect to Personal Data that have been received or transferred pursuant to the Privacy Shield Frameworks, Workable Inc. is subject to the regulatory and enforcement powers of the U.S. Federal Trade Commission. For clarity Workable does not rely any more on Privacy Shield Framework as a data transfer mechanism outside the EEA, Switzerland and the UK.
Pursuant to the Privacy Shield Frameworks, EU, United Kingdom and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to [email protected]. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to [email protected].
In certain situations, we may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
In compliance with the Privacy Shield Principles, Workable commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. Please contact us at [email protected] with any questions, concerns or complaints relating to our Privacy Shield Certification.
We are committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning data transferred from the EU and Switzerland and you may have the possibility to engage in binding arbitration through the Privacy Shield Panel.
Workable Inc. is based in the USA and it has appointed Workable Software Single Member Private Company to be its representative within the EEA and Workable Software Limited as its representative in the UK.
Workable Software Single Member Private Company is the EU representative of Workable Software Limited within the EEA and likewise Workable Software Limited is the UK representative of Workable Software Single Member Private Company.
Workable Software Single Member Private Company is registered in Greece with its office located at Leof. Kifisias 95-97, Marousi 151 25, Greece. Contact via the email: [email protected].
Workable Software Limited is registered in England and Wales with Company Registration Number 08125469 and having its registered office address at 5 Golden Square, 5th Floor, London, W1F 9BS, United Kingdom. Contact via the email: [email protected].
We hope that We can resolve any query or concern you raise about our use of your information.
The General Data Protection Regulation and the UK GDPR also give you right to lodge a complaint with a supervisory authority, in particular (under the GDPR) in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.
The supervisory authority in Greece is the Hellenic Data Protection Authority, which may be contacted at Call Centre: +30-210 6475600 or E-mail: [email protected]
Last updated 19th May 2023.