Job Candidate Privacy Notice

Job Applicant Privacy Notice

Last Updated: July 14, 2025

This Job Applicant Privacy Notice (this “Notice”) describes the information that BigID Inc. (“BigID”, “our”, “we”, or “us”) may collect, use, and/or disclose about you when you apply for a job with BigID. BigID is committed to the responsible collection and use of your personal information under this Notice, which includes any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked with an identified or identifiable individual. If an applicable law describes personal information more broadly, we will apply that definition.

The purpose of this Notice is to provide BigID job applicants with information about (1) the categories of personal information that BigID collects from them, (2) the purposes for which the personal information is collected or used, (3) disclosures of your personal information, and (4) retention of your personal information, (5) safeguarding personal information, and (6) your rights with regard to your personal information.

If you have questions about this Notice, please contact us at [email protected]

INFORMATION ON BIGID’S INFORMATION PRACTICES

1. What Personal Information does BigID Collect?

BigID sammelt persönliche Informationen direkt von Ihnen, die Folgendes beinhalten können:

Name, contact details, and government-issued identification document; ● Job title, resume, employment history, educational background, and other relevant candidate information (e.g., job application or cover letter);
Information collected from internal communications and IT Systems that are relevant to your job application or inquiries (e.g., to scheduling interviews); [GK1]
Characteristics of protected classifications under the law (e.g., gender, race, medical conditions, national origin, or military status) should you choose to provide them when completing applications;
Log-in credentials to access the recruiting system and other technologies used in the job applicant process;
Information needed to carry out a background check request;
Information and correspondence related to a privacy rights request; and ● Other personal information contained in correspondence or documents you provided to us before, during, and after the job application and interview process.

BigID may also collect personal information about you from other sources, including but not limited to (1) public sources (e.g., public social media profiles) and (2) third parties who provide information directly related to a job applicant (e.g., a professional reference or a background check provider).

2. How does BigID use Personal Information?

BigID verwendet Ihre persönlichen Daten für die folgenden Zwecke:

To create and maintain job application records and to communicate with job applicants regarding employment opportunities, employment applications, and status updates on job applications or interview process;
To conduct employment background checks;
To conduct equal opportunity and diversity monitoring where permitted or required by law;
To comply with applicable legal and regulatory requests and obligations (including investigations);
To establish or defend legal claims and allegations;
For security purposes (e.g., providing notifications, addressing security issues, protecting the security and integrity of our systems, etc.); and/or
For the prevention, detection, or investigation of fraud, suspected or actual illegal activity, or other misconduct.

3. Does BigID share your Personal Information?

BigID may disclose your personal information to the following categories of third parties for the purposes described below:

To manage recruitment and onboarding. We share your personal information with service providers to create and maintain your application records, evaluate your candidacy, extend offers and onboard you into our systems. These service providers may include (1) social media and recruiting tools that help us source, manage and communicate with applicants and (2) HR system providers to transition your data from a candidate to an employee record upon an accepted offer. Some of the service providers may use AI features that do not train on data that you or BigID inputs in order to provide the services. We may also share your information with third parties to which you have consented your data be provided (e.g., background check providers). We may also share your personal information with our BigID affiliates.
To manage our business operations and protect our systems. We may share your information with IT and software providers to maintain the security and integrity of our IT infrastructure and applicant data.
To comply with legal and regulatory obligations. We may disclose your information where we believe it is necessary to comply with our internal policies and/or applicable laws. This may include sharing personal information with (1) governmental authorities, auditors or legal counsel or (2) third parties as needed to protect our rights and to make or defend legal claims.

BigID does not “sell” or “share”, as these terms are defined by privacy laws, your personal information for cross-context behavioral advertising.

4. How long does BigID Retain your Personal Information

BigID retains your personal information for the least amount of time necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

Based on the laws of your region, you may submit a request to delete your personal information from BigID’s databases through the Ihre Entscheidungen zum Datenschutz link at the footer of www.bigid.com or by emailing [email protected].

5. How does BigID Safeguard your Personal Information?

BigID maintains organizational, technical, and administrative security measures designed to protect personal information within our organization.

6. What are your rights to your Personal Information at BigID?

Individuals in specific jurisdictions, including but not limited to the EEA, Switzerland, United Kingdom, California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and Brazil, have certain rights to their personal information. This section describes those rights and how you can exercise them with BigID.

Right to View and Access. You have the right to know whether your personal information is being processed and how and with which third parties it is being shared. You also have the right to request access to your personal information and request a copy of the personal information being processed.
Recht auf Löschung. You may request that we erase your personal information, subject to certain exceptions as set forth by applicable law.
Recht auf Berichtigung. You may request that we correct or rectify your personal information that is inaccurate.
Recht auf Einschränkung der Verarbeitung. You may request that we restrict processing of your personal information.
Recht auf Datenübertragbarkeit. You have the right to receive the personal information you provided us in a structured, industry-standard and machine-readable format and you have the right to transmit the personal information to a third-party of your choice.
Recht auf Einschränkung der Nutzung sensibler persönlicher Daten. You have the right to limit our use and disclosure of your sensitive personal information.
Recht auf Widerspruch gegen die Verarbeitung. You have the right to object to our reliance of legitimate interests as the basis of our processing of your personal information when you have specific grounds to object.
Recht auf Ablehnung der automatisierten Entscheidungsfindung. You have the right not to be subject to a decision based solely on automated processing, including profiling.
Das Recht, nicht diskriminiert zu werden. You have the right to not be discriminated against for exercising your privacy rights.

The rights set forth in this section can be actioned either through the portal accessed through the Ihre Entscheidungen zum Datenschutz link at the footer of www.bigid.com or by emailing [email protected].

We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will provide you with the reason for such determination, if permitted by law. If you would like to appeal our decision or submit a complaint about our use of your personal information or response to your requests, you may contact us at [email protected] or submit a complaint to the data protection regulator in your jurisdiction.

7. Does BigID Process the Information of Minors?

No. Individuals must be 18 or older to apply for a position with BigID. As such, we do not seek to collect personal information on any person under the age of 18. If you inform us or we otherwise become aware that we have unintentionally received personal information from an individual under the age of 18, we will delete this information from our records.

8. Does BigID Transfer Personal Information Internationally?

Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers and, by submitting a job application and/or engaging with our recruiters, you consent to the transfer of information to countries outside of your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your personal information.

9. Additional Information for Residents of the EEA, UK and Switzerland

EWR-Vertreter: Under European data protection laws, BigID is the controller of your personal information covered by this Notice. You can contact us and our EU Representative at [email protected].
UK-Vertreter: Under UK data protection laws, BigID is the controller of your personal information covered by this Notice. You can contact us and our UK Representative at [email protected].
Schweizer Repräsentant: Under Swiss data protection laws, BigID is the controller of your personal information covered by this Notice. You can contact us and our Swiss Representative at [email protected].
Legal Bases for Processing: We only use your personal information where we have a legal basis to do so. We rely upon your consent and/or our legitimate interests for processing personal information for the activities described herein.

If you are in the EEA, UK, or Switzerland you have the following rights related to your personal information: (1) right to view and access, (2) right to erasure, (3) right to rectification, (4) right to restrict processing, (5) right to data portability, (6) right to object to our reliance of legitimate interests as the basis of our processing of your personal information when you have specific grounds to object, and (7) the right to opt out of automated decision making. These rights can be actioned either through the portal accessed through the ‘Ihre Datenschutzwahlen’ link at the footer of www.bigid.com or by emailing [email protected].

You have the right to submit a complaint to the supervisory authority of the appropriate jurisdiction.

10. Additional Information about US Data Privacy Laws

We process personal information in accordance with applicable US state privacy laws. Several state laws, including the California Consumer Privacy Act of 2018, as amended by the newly enacted California Privacy Rights Act of 2020 and the California Consumer Privacy Act Regulations (collectively defined as the “CCPA”), require BigID to provide residents additional information, as set forth below. The following disclosures are required by US state privacy laws and supplement this Notice.

Rights Available to You.

○ Residents of states with privacy laws may have specific rights to manage their personal information, as outlined in Section 6. For example, California residents have the right to view, access, delete, and correct their personal information. They also have the right to opt out of the sale or sharing of their personal information, to limit the use and disclosure of their sensitive personal information, and to not receive discriminatory treatment by BigID for the exercise of their privacy rights. Please note that BigID does not use or disclose sensitive personal information unless you have provided it to BigID to process your job application or as otherwise permitted by applicable privacy law.

○ You or your authorized agent can submit a request to exercise your rights through the portal accessed through the ‘Ihre Datenschutzwahlen’ link at the footer of www.bigid.com or by emailing [email protected]. Should you submit a request, BigID will verify your or your authorized agent’s identity.

Collection, Use, and Disclosure of Personal Information. For information on the types of personal information we collect, including the personal information we have collected from California residents in the last 12 months, the sources of that collected personal information, the purposes for collecting personal information, and the categories of third parties with whom we share that information, please refer to Sections 1, 2, and 3 of this Notice on collection, use, and disclosure.
Daten von Minderjährigen. BigID does not seek to process personal information of individuals under the age of 18.
Vorratsspeicherung. We only retain your personal information for as long as necessary to fulfill the purposes for which it was collected. To determine the appropriate retention period for personal information, we consider the volume, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Submitting a Complaint. If you would like to appeal our decision or submit a complaint about our use of your personal information or response to your requests, you may contact us at [email protected] or submit a complaint to your state’s Attorney General or, for California residents, to the California Privacy Protection Agency.

11. Updates to this Notice

We may periodically review and update this Notice as appropriate. Any changes or updates we make will become effective on the date we post the revised Notice on our job listings. The date at the top of the page indicates when this Notice was last revised. By continuing to engage with BigID in the job application process, you accept the revised Notice. We encourage you to

please review this page regularly for the latest information on our privacy practices.

12. How can you Contact BigID?

Wenn Sie Fragen oder Bedenken zu diesem Hinweis haben, wenden Sie sich bitte an uns: [email protected].