StreamSets HR Privacy Policy

Effective Date: January 1, 2023
Version number: 1.0

Human Resources Privacy Policy for
California Consumers

Privacy and the protection of your personal information, as that term is defined by the California Consumer Privacy Act (“CCPA”), is a priority for StreamSets, Inc. (“StreamSets”, “we” or “us”). It is important that we are transparent about what personal information we collect and how it is used, for how long it is retained, and to whom that information is disclosed and for what purposes (“Information Practices”). Please review the following provisions carefully and contact us in the event you have questions or would like to exercise your rights as described.

1. Who is covered by this Policy?

This California Human Resources Privacy Policy (“CA HR Privacy Policy” or “Policy”) describes those Information Practices as applied to the personal information of current and former employees, candidates for employment, independent contractors and candidates for independent contractor engagements who are residents of California (“HR Individuals” or “you”). If you are not a resident of California, this Policy does not apply to you.

Be advised that StreamSets maintains different applicable privacy policies and information practices where otherwise noticed. This Policy, and the Information Practices described herein, does not apply to your use of StreamSets services or products as a customer of StreamSets. If you are a StreamSets customer, please see our Privacy Policy.

2. What personal information do we collect and what is that personal information used for?

As a general principle, our Information Practices regarding your personal information are carried out for the management of StreamSets’ business operations. For example:

For employees, our collection, use, storage (including retention) and disclosure (collectively, “processing”) of your personal information and, where applicable, that of your dependents, is for the purpose of managing our employer-employee relationship.
For former employees, we process your personal information for, among other limited purposes explained below, legal compliance.
If you are a contractor, the personal information that we process is that which is necessary to maintain our engagement with you and facilitate your interaction with StreamSets’ systems and its customers’ systems.

In the case of candidates for employment or for an independent contractor engagement, we limit the processing of your personal information to that which is necessary to conduct recruitment, hiring, and onboarding where appropriate. This includes, as further explained below, consideration of your application (for example, evaluations, scheduling and conducting interviews, and conducting background checks once we have extended an offer for employment that you accept).

For additional information on the purposes for collection and use, see Section 4, below.

2.1 Categories of Information: Over the previous 12 months, StreamSets has collected the following categories of personal information:

Identifiers including name and contact information, including, for example, real name, alias, home address, mailing address, phone number(s), personal email address, social media links, beneficiary and emergency contact real name and contact information.

Characteristics of protected classes including demographic information, including, for example, race/ethnicity, date of birth, gender, veteran/military status, disability status and accommodations provided, preferred pronouns, and health information.

StreamSets Employment information, including, for example, job title, location of job site, salary information, work commencement and termination dates, work email address, offer letters and termination letters, performance evaluations and disciplinary records, training and certification history, interview notes, leaves of absence, sick time, and vacation records.

Healthcare and financial benefits information, including, for example, certain financial products and services that you request pursuant to retirement benefits offered by us through our service providers; healthcare benefits and plans for which you register pursuant to your employment healthcare benefits.

Content of certain communications, including, for example, the content of certain communications including email messages (through our administration of Google Workspace, which provides our company email services) and internal instant messages (through use of Slack), in both instances where we are the intended recipient and otherwise.

Feedback information, including, for example, responses to employee engagement surveys that include personal sentiments and feedback about managers, direct supervisors, and company leadership.

Background check information, including, for example, address history, employment history (including employer, title, and dates of employment) education history including degrees obtained and year(s) of completion, criminal records data, answers to screening questions, and information disclosed to us in your résumé or curriculum vitae (CV).

Government identifiers and classifications, including, for example, Social Security Number (SSN), Individual Taxpayer Identification Number (ITIN) where applicable, passport number, state driver’s license number, citizenship status, residency, and work permit status.

Video, voice and image information, including, for example, video and audio recordings of you, where you consent and such records are authorized by law.

Financial information, including, for example, bank account information (primary bank, account and routing numbers), tax information (including W-2s, exemption status, and withholding status), retirement account information, expenses, travel-related records.

Internet and other electronic network activity, including workplace activity and device usage, including, for example, device data including machine name (either created by us or by you), user account name, your StreamSets account login credentials (including name and password), Wide Area Network Internet Protocol (WAN IP), Media Access Control address (MAC address). When entering a StreamSets office, we may collect video or image data and your employee badge identification used to obtain access.

Special notice regarding information collected about consumers under age 16. StreamSets does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age. We collect personal information on consumers under age 16 where it is necessary and applicable for the proper administration of benefits that we provide our employees.

3. From where does StreamSets obtain your personal data?

Much of the personal information that we collect about you is obtained from you, but we may collect additional information through the application and engagement processes. Please see the categories of sources from which StreamSets collects your personal information:

3.1 – Information that you provide

You directly provide us with most of the personal information that we collect about you. Specifically, when you apply as a candidate for direct employment or an independent contractor engagement, you provide us with information that is used in assessing your qualifications. When you are offered and accept an employment opportunity with us, we collect your personal information for purposes of on-boarding you as an employee and subsequently administering the employer-employee relationship, including providing benefits to you and your dependents. .

3.2 – Information that we collect from third-party sources

In limited circumstances, we collect information about you from third-party sources including data brokers (an example is ZoomInfo), publicly available sources including social media platforms (an example is Linkedin), and recruitment agencies.

3.3 – Information that we collect automatically from your interaction with StreamSets

In circumstances where you interact directly with StreamSets information technology systems (for example, through the usage of a computer that we assigned to you under an employment agreement or by simply accessing our website), we collect certain personal information including Internet Protocol addresses and applications that you use. The personal information we collect through this source is described above in Section 2.1 at Internet and other electronic network activity, including workplace activity and device usage. In visiting our website, we may also use third party cookies to learn more about your interaction with our website. More information can be found in section 3.3 of our Privacy Policy.

4. Purposes for collection and processing of your personal information

As stated above in section 3 of this CA HR Privacy Policy, StreamSets collects and processes your information for its business operations. StreamSets does not sell or share, as those terms are defined by the CCPA, your personal information. Please see the relevant section below for a further description and explanation of why we collect and process your personal information.

4.1 – Current employees: StreamSets collects and processes your personal information to honor its commitments as your employer, including: remitting wage payments; administering health and retirement benefits for you and your dependents (where applicable); managing your vacation and sick leave; communicating with you; and tax reporting requirements. We also use your personal information to manage the employer-employee relationship, which includes collection and retention to comply with state and federal law.

4.2 – Current Independent Contractors: StreamSets collects and processes your personal information to honor its contractual obligations to you, including: payment of your contractually owed compensation; remitting of payments to you for expenses you incurred in your performance of obligations under the applicable contract; and to provide you with access to necessary information technology systems (both ours and those of our customers) to perform your obligations.

4.3 – Former employees and Independent Contractors: StreamSets processes your personal information for a number of reasons, including: legal compliance where we must retain certain records pursuant to applicable state or federal law; to maintain customer and business relationships where your personal information is processed in that endeavor; to ensure continuity of corporate management or product development; or to establish or defend a legal claim.

4.4 – Current and Former Candidates for Employment or Independent Contractor Engagement: StreamSets processes your personal information to administer the recruitment process, including evaluating your qualifications and credentials, conducting interviews and generating notes and evaluations during the same, setting up a human resources file, and generally managing your application. If your application is not successful in that you do not receive an employment offer, we will retain your information for a period of time afterwards for a number of reasons, as indicated in our Notice at Collection, including in the event we reasonably expect a legal challenge in response to a recruitment decision or to consider you for other positions at StreamSets. If you would not like us to retain your application materials for additional consideration, please email us at hr@streamsets.com, including the information requested in section 8 of this Policy.

Without limiting the above, we also process your information as necessary or appropriate: (i) under applicable law, (ii) establish or defend legal claims or otherwise preserve our rights, (iii) comply with or respond to lawful requests from public or government authorities, (iv) protect our business operations and those of our affiliates, and (v) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.

5. StreamSets neither shares with, nor sells to, third parties your personal information, and has not done so in the preceding twelve (12) months. Our service providers and contractors collect your personal information at our direction.

StreamSets does not sell or share your personal information, and only processes your personal information as described in sections 2 and 4 of this Policy. To the extent that your information is disclosed to third parties (or collected by third parties on our behalf), it is to StreamSets service providers and contractors that are under obligations to limit their use and further disclosure of your personal information. These service providers collect this information to, for example, administer numerous business operations for us, and to help us meet our commitments and obligations to you. These third parties include human resources services providers (like payroll processors), benefits administrators (including retirement services and healthcare providers), and recruitment platforms.

5.1 – Categories of personal information disclosed to service providers or contractors, or collected by them on our behalf, for a business purpose.

All the categories of personal information that we collect about you, set forth in Section 2.1 of this Policy, are shared with, or collected on our behalf by, service providers and/or contractors as described above in section 5.

6. Use of your Sensitive Personal Information.

We limit our use of sensitive personal information collected about you to that which is necessary to perform the services described in this Policy and in other agreements applicable to you.

7. Your rights under the CCPA, as modified by the California Privacy Rights Act (“CPRA”), and how you may exercise them.

Under the CCPA, California consumers (which include California-based employees and independent contractors under the California Privacy Rights Act (“CPRA”)) are conferred certain rights to protect their personal information and control how their personal information is used. If you would like to exercise your right to know under this paragraph, email hr@streamsets.com and please include information we need to process your request per section 8.1, below.

7.1 – The right to know what personal information we have collected about you, including: the categories of information and the categories of sources from which we collected the personal information; the business purpose for collecting and processing that personal information, and whether we disclosed any personal information to third parties; and, the right to know specific pieces of personal information we’ve collected about you.

7.2 – The right to delete personal information that we have collected from you, subject to certain exceptions.

7.3 – The right to correct inaccurate personal information that we maintain about you.

7.4 – The right to opt-out of the selling or sharing of your personal information. As noted above, StreamSets does not sell or share your personal information, and has not done so during the preceding twelve (12) months. StreamSets uses Cookies, as explained further in our Privacy Policy, that collect and use your personal information. To give you control over the collection and use of your personal information, we provide you with the right to Opt-In to such collection via an Opt-In link located at the footer of our website. If you do not Opt-In, we will only store those Cookies on your device that are essential for our services. Please see section 3.3 of our Privacy Policy for more information.

7.5 – The right to limit the use of sensitive personal information, except where the business does not collect or process your sensitive personal information for purposes of inferring characteristics about you. As explained in section 6 of this Policy, we limit such use to that which is necessary, and do not provide the ability to further limit the use of your sensitive personal information.

7.6 – The right not to receive discriminatory treatment by us in the event you exercise one of the rights conferred upon you by the CCPA, including an employee’s, applicant’s, or independent contractor’s right to not be retaliated against for the exercise of your CCPA rights.

8. How can you exercise your rights under the CCPA?

8.1 – How we verify your request. You may exercise your rights by submitting a request to do so via the email address referenced above. Once we receive your request to exercise your rights under the CCPA, we will confirm the validity of the request to the appropriate degree of certainty taking into account the nature of the right exercised and the personal information implicated. Accordingly, in your email, please include: (i) identifying information sufficient to determine your name; (ii) whether you are submitting the request on your own behalf or as the authorized agent of another consumer; and (iii) the right or rights you are exercising under the CCPA. Depending on the nature of the request, we may seek additional information as required by the CCPA.

8.2 – Your right to use an authorized agent. Under the CCPA, you may elect to use an Authorized Agent to exercise your rights on your behalf. In order for us to accept a request from an Authorized Agent, it must be accompanied by a writing, signed by you as the requesting consumer, wherein you authorize the Agent to act on your behalf. Upon receipt, we will contact the requesting consumer using the contact information that we possess and maintain for verification purposes. When confirmed, we will proceed with your request according to our internal procedures and as required by the CCPA.

9. Notice at Collection for Candidates for Employment or Independent Contractor Engagement.

Prior to collecting any of your personal information, we are required to provide you with notice to adequately apprise you of the categories of your personal information to be collected, the purposes for which your personal information is collected and used, and whether that information is sold or shared. By continuing, you acknowledge that you understand this Notice and agree to the terms of this Policy.

9.1 – Categories of personal information to be collected and used about candidates, the business purposes for each category, and the retention period:

We will collect and use the following categories of personal and sensitive personal information for the specified business purposes:

Category of Personal Information collected:	Business Purpose for collection:	Retention Period (or, if not identifiable, the criteria used to determine retention period):
Contact and identification information including, for example, name, phone number, mailing and/or physical address, and email address	Our own operational purposes, namely the evaluation of a candidate for an employment position or an independent contractor engagement, and compliance with corresponding state and federal laws	24 months (potentially longer retention timeline where we have an ongoing relationship with you, legal compliance needs, or to establish or defend legal claims)
Employment and background information including, for example, employment history, background check (address and criminal history)	Our own operational purposes, namely the evaluation of a candidate for an employment position or an independent contractor engagement, and compliance with corresponding state and federal laws (we only request a background check following the issuance of an offer of employment)	24 months (potentially longer retention timeline where we have an ongoing relationship with you, legal compliance needs, or to establish or defend legal claims)
Certain demographic information including, for example, race/ethnicity*, veteran status, disability status	Our own operational purposes, namely the implementation of our diversity initiatives and compliance with federal laws	24 months (potentially longer retention timeline where we have an ongoing relationship with you, legal compliance needs, or to establish or defend legal claims)
Social media information including, for example, links to social media profiles (LinkedIn)	Our own operational purposes, namely the evaluation of a candidate for an employment position or an independent contractor engagement	24 months (potentially longer retention timeline where we have an ongoing relationship with you, legal compliance needs, or to establish or defend legal claims)
*Denotes Sensitive Personal Information

9.2 – We do not sell or share your personal or sensitive personal information that we collect and use set forth in this Policy and identified in this Notice.

9.3 – Our comprehensive CA HR Privacy Policy can be found here.

9.4 – Through the use of Cookies, we allow third parties to collect certain information that is considered personal information under the California Consumer Privacy Act (“CCPA”). You may reject these Cookies through our use of an Opt-Out Link contained at the footer of our website. Please see the Cookie policy contained in our Privacy Policy, which can be found here.

10. Notice at Collection for Employees and Independent Contractors (which applies to those who have accepted offers of employment from us, their beneficiaries and emergency contacts)

10.1 – Categories of personal information to be collected and used about employees, the business purposes for each category, and the retention period:

Category of Personal Information collected:	Business Purpose for collection:	Retention Period (or, if not identifiable, the criteria used to determine retention period):
Contact and Identification Information* including, for example, Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN), passport number	Our own operational purposes, namely administering your employment relationship and honoring our contractual commitments to you; legal compliance requirements	No defined period. For the duration of the employment relationship and subsequently as required by law or to defend or establish legal claims.
Healthcare and financial benefits information* including, for example, retirement and healthcare benefits you obtain through employment	Our own operational purposes, namely administering your employment relationship and honoring our contractual commitments to you; legal compliance requirements	No defined period. For the duration of the employment relationship and subsequently as required by law or to defend or establish legal claims.
Communication information* including, for example, email and instant messages sent as our employee or independent contractor to us	Our own operational purposes, namely administering your employment relationship and honoring our contractual commitments to you; legal compliance requirements	No defined period. Criteria to determine retention include maintaining customer relationships, continuity of corporate management, and product engineering needs.
Financial information,* including, for example, your bank account and routing number, and certain tax information	Our own operational purposes, namely administering your employment relationship and honoring our contractual commitments to you; legal compliance requirements	No defined period. For the duration of the employment relationship and subsequently as required by law or to defend or establish legal claims.
Employment information, including, for example, employee evaluations, performance reviews, and disciplinary records	Our own operational purposes, namely administering your employment relationship and honoring our contractual commitments to you; legal compliance requirements	No defined period. For the duration of the employment relationship and subsequently as required by law or to defend or establish legal claims.
*Denotes Sensitive Personal Information

10.2 – We do not sell or share your personal or sensitive personal information that we collect and use set forth in this Policy and identified in this Notice.

10.3 – Our comprehensive CA HR Privacy Policy can be found here.

10.4 – Through the use of Cookies, we allow third parties to collect certain information that is considered personal information under the CCPA. You may reject these cookies through our use of an Opt-Out Link contained at the footer of our website. Please see the Cookie policy contained in our Privacy Policy, which can be found here.

11. Policy Updates

StreamSets may change this Policy at any time. When we do, we will amend the “Update Date” at the top of this Policy and revise the version number. In the event we make material changes to this Policy, we will use reasonable efforts to apprise you of that, and may post notice of said update in Confluence or send you a notification directly.

12. Contact us with any questions

If you have any questions about this Policy or our Information Practices generally, please contact us using the information below:

For candidates for employment or independent contractor engagements, email us at privacy@streamsets.com with the subject line: “CCPA HR Policy”

For employees, former employees, and their dependents, email us at hr@streamsets.com with the subject line: “CCPA HR Policy”