EMPLOYMENT CANDIDATE PRIVACY NOTICE
CONCERNING PERSONAL DATA PROCESSING
Last Updated: October 31, 2024
1. Introduction
We are committed to the protection and promotion of your privacy. In connection with your application for employment with us at Verathon, it is necessary for us to collect, store and use information about you (“Personal Data”) to administer and evaluate your application. We are the “controller” of the Personal Data you provide us and will process any such Personal Data in accordance with applicable law and the statements contained in this Employment Candidate Privacy Notice.
2. Scope
In order to promote the coordinated and secure processing of your data for purposes of administering the application process, we rely on one or more services and/or centralized human resource information systems that may be operated or administered either by us, by our parent Verathon, Roper Technologies, or by one of its affiliates (collectively, the “Roper Group”). We also may share information about your application with other members of the Roper Group in the event that they have openings that may be a fit for your skillset. No mobile phone information will be shared with third parties/affiliates for marketing/promotional purposes. This notice (“Notice”) provides relevant information about the Personal Data that is processed using those systems.
3. Purposes for Processing Personal Data
Where required by law, we obtain your consent to use and process your Personal Data for these purposes. Otherwise, we rely on other legal bases to collect and process your Personal Data. We process your Personal Data for the following purposes:
- Qualification Assessment: We process your Personal Data to assess your skills, qualifications, and interests against our job opening requirements to further our legitimate interest in identifying qualified applicants.
- Employment Eligibility: We process your Personal Data to further our legitimate interest in verifying the information you provide us during the application process and conducting reference checks and background checks (where applicable) if you are offered a job.
- Communication: We process your Personal Data to further our legitimate interest in communicating with you about your applications and the recruitment process, including informing you about other potential job opportunities within Verathon.
- Legal Obligations: We process your Personal Data to meet our legal obligations, including complying with applicable laws, regulations, or legal requirements, responding to legal requirements, or completing any reports required by law.
For a more complete list of the types of Personal Data we collect and our bases for processing, see Annex1. We have not sold and do not sell any Personal Data that you provide to us as part of your employment or share that Personal Data as defined by the California Consumer Privacy Act.
4. Categories of Personal Data We Collect
We collect Personal Data to manage and administer our relationship with you beginning when you apply for a role with us, during your employment, and through your departure from the Verathon. This may include the electronic monitoring of your use of Verathon systems (including personal computers), specialized software, or system administrative access. The categories of data we may collect about you fall into the following categories under the California Consumer Privacy Act:
- identifiers (e.g., name, address, phone number, IP address);
- protected classifications (e.g., age, gender, gender identity);
- financial and commercial information (e.g., credit card numbers, purchase history);
- your internet/online activity information;
- geolocation data (e.g., computer/device location);
- professional/educational information;
- sensitive personal information (including government-issued identifiers, account log-in, and precise geolocation”) and
- inferences drawn from any of the above.
5. Sensitive Personal Data That We Process
We collect and use certain types of sensitive information (e.g., health, race, or religion) in limited circumstances where it is necessary for us to protect your interests (e.g., to provide certain job-related accommodations), where we need to do so to comply with specific legal obligations (e.g., equal opportunity or anti-discrimination legislation or employment law), or where we have your explicit consent to use it.
The purposes for which Sensitive Personal Data may be used include the following:
- compliance with equal opportunity or anti-discrimination legislation or regulations (where applicable);
- background checks for employment (where permitted by applicable laws); and
- in the course of legal proceedings (including prospective legal proceedings), complying with laws and regulations, obtaining legal advice, establishing or defending legal claims, or otherwise where strictly necessary for the administration of justice in accordance with applicable laws.
6. Sources of Information
We may collect personal data about you from the following sources:
- you, in the form of your application, resume, and other materials submitted to the Verathon;
- your named references;
- from publicly accessible sources, such as Linkedin, Facebook, etc.; and
- from background check service providers (if we extend a conditional offer of employment).
If you fail to provide Personal Data when requested and the Personal Data is necessary for us to evaluate your application (e.g., work history), we may not be able to process your application further.
7. Recipients of Personal Data
Verathon shares Personal Data with the Roper Group and certain third parties in furtherance of processing your application. This includes sharing your Personal Data with the Roper Group so that you can be considered for other roles within the Roper Group and with third parties when sharing is necessary for them to perform services for Verathon related to processing your application. We will only share your Personal Data with these third parties in accordance with this policy, when otherwise required by applicable law, or with your consent. We will obtain assurances from each third party with whom we share your Personal Data that it will safeguard your Personal Data in a manner consistent with this policy. If we have knowledge that a third party is using or disclosing Personal Data in a manner contrary to this Policy, we will take reasonable steps to prevent or stop the use or disclosure.
Your Personal Data may be also disclosed or transferred to a third party in the event of any proposed or actual reorganization, sale, merger, or any other type of corporate action involving of any portion of Verathon or assets (including insolvency). Should such an event take place, we will direct the transferee to use Personal Data in a manner that is consistent with this Privacy Policy.
Mobile phone information will not be shared with third parties for marketing/promotional purposes.
We do not sell or share Personal Data about you to unrelated companies for their independent use.
8. Your Individual Rights
You may have certain rights relating to your Personal Data based on applicable local data protection laws., including from individual US state privacy laws (e.g., California, Virginia), Canadian privacy laws, and the EU/UK General Data Protection Regulation. Depending on the applicable laws these rights may include the right to:
- Request and receive copies of your Personal Data that we hold;
- Request additional information about how we process your Personal Data;
- Correct inaccurate or incomplete Personal Data (taking into account our use of it);
- Request deletion of your Personal Data;
- Restrict or object to our processing of your Personal Data, including restricting the sale or sharing of your data or its use for cross-context behavioral marketing. Where we process Personal Data for direct marketing purposes (either by us or third parties) or for cross-context behavioral marketing, you may not have to provide a specific reason for such objection;
- Require us (if possible) to transfer your Personal Data to another controller (i.e., data portability);
- Limit the use or disclosure of your sensitive Personal Data;
- Restrict certain disclosures of your Personal Data to third parties;
- Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects; and
- Withdraw your consent to the processing of your Personal Data (to the extent we base processing on consent and not on another lawful basis).
We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights. You may exercise these rights, to the extent applicable, by sending us an email at privacy@verathon.com, making the request via our website at www.verathon.com, or by calling 1-800-331-2313 (US only), +31 (0) 20 210 30 91 (EU Only). We will respond to any such requests within 30 days of receipt.
If you are not happy with how Verathon handles your Personal Data and we cannot provide you with a satisfactory resolution to your request, you also have the right to lodge a complaint with a supervisory body for data protection in your jurisdiction. If you wish to pursue any of these rights, please contact us using the details set out at the end of this Notice below.
9. Transfers to Third Countries
Verathon is an affiliate of the Roper Group, with offices located throughout the world. As a result, your Personal Data may be transferred to other Roper Group offices for the purposes identified above. Any such transfer shall take place only in accordance with and as permitted by the law of your jurisdiction, but please be aware that the laws and practices relating to the protection of Personal Data are likely to be different and, in some cases, may be weaker than those within your home jurisdiction.
Verathon and the Roper Group have executed Standard Contractual Clauses, as approved by the European Commission and/or by the United Kingdom’s Information Commissioners’ Office. These clauses permit us (or the Roper Group) to transfer data from the EU and the UK to third countries, including the United States. Regardless, in all events, we shall apply the provisions of this Policy to your Personal Data wherever it is located.
10. Protection of Personal Data
We are committed to protecting your Personal Data. We use a variety of security measures and technologies to protect your Personal Data form unauthorized access. This includes storing the Personal Data you provide in secure areas or on secure servers and using encryption when electronically transmitting or storing highly-confidential or sensitive information.
11. Data Breaches
While we work hard to reduce the risk of data breaches, we have dedicated controls and procedures in place for when such situations, along with the procedures that are required to make notifications to you and to the relevant Supervisory Authority as appropriate.
12. Retention of Personal Data
We will keep and process your Personal Data only for as long as is necessary for the purposes for which it was collected, unless there is a legal right or obligation to retain the data for a longer period. Generally, this means that your Personal Data will be retained as documented in our corporate data retention schedule.
13. Contact Information
If you have any questions, please contact privacy@verathon.com.
14. Updates
We reserve the right to update this Employment Candidate Privacy Notice from time to time. When we do, we will revise the "last updated" date at the top of this Notice. If there are material changes to this Notice or in how Verathon will use your personal data, we will use reasonable efforts to notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification.
Annex 1: Categories of Personal Data and Grounds for Processing
Verathon will process the following categories of data based on legitimate grounds for processing.
Some examples of data and the legal bases for processing are set out below:
1. Personal Data necessary for the evaluation of your application
a) Personal Identification Details
|
|
b) Personal History
|
|
c) Other Information
|
|
2. Personal Details necessary to comply with Verathon’s legal obligations.
Some examples of the legal obligations include:
- record-keeping and reporting obligations
- physical access policies
- conducting audits, compliance with government inspections and other requests from government or other public authorities
- responding to legal processes, pursuing legal rights and remedies, defending litigation and managing any internal complaints or claims, conducting investigations, and
- complying with internal policies and procedures.
The categories of Personal Data collected include:
|
|
