About this Privacy Notice

Valtech will process the personal data of individuals who apply or are being considered for roles within our business. We may process this information in any format including electronically physical medium or otherwise.

Valtech recognise the requirement to treat all personal information in a lawful and appropriate manner and incompliance with applicable legislation. To that end, Valtech have put together this Privacy Policy and Notice at Collection for California Residents (“Privacy Notice”) to describe the rights of consumers under the California Privacy Rights Act of 2020 (“CPRA”).

This Privacy Notice applies solely to job applicants, who reside in the State of California (“applicants” or “you”) to the extent that Valtech collects and processes their personal information as a business.

For the purposes of this Privacy Notice:

• The term “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. It may include contact details, other personal information including CV’s/resumes, photographs, expressions of opinion about you or indications as to our intentions about you.
• “Processing” means doing anything with the data, such as collecting, accessing, disclosing, storing, selling, sharing, destroying or using the data in any way.

 

1. Personal Information that Valtech collect

Valtech collect and have collected the following categories of Personal Information from applicants in the past twelve (12) months.

Category	Examples	Collected	Retention Period
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	YES	Data can be retained for 4 years
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES	Data can be retained for 4 years
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	YES	Data can be retained for 4 years
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	NO	N/A
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	N/A
F. Internet or other similar network activity.	Browsing history, search history, internet or application use.	YES	Data can be retained for 4 years
G. Geolocation data.	Physical location or movements.	YES	Data can be retained for 4 years
H. Sensory data.	Audio, electronic, visual, or similar information.	YES	Data can be retained for 4 years
I. Professional or employment-related information.	Current or past job history or performance evaluations, professional qualifications.	YES	Data can be retained for 4 years
K. Inferences drawn from other personal information.	Valtech may accumulate your personal information to make decisions concerning your employment related qualifications consistent with applicable law.	YES	Data can be retained for 4 years

 

2. Where your personal data may come from

Valtech obtain the categories of personal information listed above from the following categories of sources:

• Directly from you in any form, such as verbal, physical, or electronic,
• From third parties related to the recruitment process, such as recruiters, referees, etc.
• Through interactions with our website or other recruitment-related platforms,
• From your interactions with us, including interviews, communications, skills assessments, or tests etc.
• If you visit our offices or other locations associated with us,
• From publicly available sources, including professional networking sites such as LinkedIn and/or other social media platforms you direct us to.

 

3. Why we may need your Personal Data

We may collect or obtain your personal data to achieve the following purposes:

• identify and evaluate candidates for potential employment, as well as for future roles that may become available,
• communicate with candidates based on current and/or future recruitment needs,
• consider your application for a role you have applied for or other roles that may suit your profile,
• maintain records related to recruiting and hiring,
• foster diversity and inclusion programs and practices at Valtech,
• conduct analytics to improve our recruitment and hiring process and enhance our ability to attract talents,
• conduct analysis or for research purposes using aggregated/pseudonymized data.

 

4. How we may share or disclose your Personal Data

We may share your personal data:

• Internally within Valtech Group: your personal data may be shared with other Valtech group entities for recruitment purposes,
• Suppliers and Service Providers: we disclose your personal data only to suppliers who use it only in accordance with our instructions and as required by law,
• Authorities: Valtech may share your personal data with authorities to fulfil legal obligations or execute decisions.

Valtech will not sell your personal data to third parties.

5. Valtech Do Not Sell or Share Your Personal Information

Valtech do not (i) “share” your personal information with third parties for cross-contextual behavioral advertising purposes; or (ii) sell your personal information to third parties. Valtech have not shared with or sold any categories of your personal information to third parties in the last twelve (12) months.

6. Your CPRA Privacy Rights

The CPRA provides consumers with specific rights regarding their personal information. This section describes your CPRA rights and explains how to exercise those rights.

6.1. Right to Know and Data Portability Rights

You have the right to request that Valtech disclose certain information to you about our collection, use and disclosure of your personal information. Your request may pertain to the personal information collected about you on or after January 1, 2022. If your request covers a time period beyond twelve (12) months from the date of your request, Valtech may deny your request as to that time period where it would be impossible for Valtech to provide you with the information or involve disproportionate effort. Once Valtech receive and confirm your verifiable consumer request, Valtech will disclose to you:

• The categories of personal information Valtech collected about you.
• The categories of sources for the personal information Valtech collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom Valtech disclose that personal information.
• The specific pieces of personal information Valtech collected about you (also called a data portability request).

Valtech may deny your request to search for certain information under certain circumstances (e.g., where Valtech retains the information solely for legal and compliance purposes and satisfies other statutory exemptions).

6.2. Deletion Request Rights

You have the right to request that Valtech delete any of your personal information that Valtech collected from you and retained, subject to certain exceptions. Once Valtech receives and confirms your verifiable consumer request, Valtech will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

Valtech may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• To complete or fulfill any agreement with you.
• Debug to identify and repair errors that impair existing intended functionality.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.

6.3. Exercising Right to Know, Data Portability, and Deletion Rights

To exercise the right to know, data portability, and deletion rights described above, please submit a verifiable consumer request to us by using the contact details under the “Contact Information” heading below. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To the extent that you wish to use an authorized agent to make requests concerning the rights set forth above, you will need to provide Valtech either with a power of attorney or, alternatively, with signed authorization to communicate with your authorized agent, and directly confirm that you provided the authorized agent with permission to submit the request.

You may only make a verifiable consumer request to know or data portability twice within a twelve (12) months period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom Valtech collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
• Valtech cannot respond to your request or provide you with personal information if Valtech cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Valtech will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

6.4. Response Timing and Format

Valtech will acknowledge receipt of your requests within 10 working days. Valtech endeavors to respond to a verifiable consumer request within forty-five (45) days of its receipt. If Valtech requires more time (up to ninety (90) days), Valtech will inform you of the reason and extension period in writing.

The response Valtech provides will also explain the reasons Valtech cannot comply with a request, if applicable. For data portability requests, Valtech will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance. Valtech are only obligated to respond to any requests twice in a twelve (12) months period.

Valtech does not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If Valtech determines that the request warrants a fee, Valtech will tell you why Valtech made that decision and provide you with a cost estimate before completing your request.

7. Non-Discrimination

Valtech will not discriminate against you for exercising any of your CPRA rights. Any concerns related to Anti-Harassment, Discrimination and Bullying should be raised to us in the “Contact Information” section below.

Valtech prohibits any form of retaliation against any individual for filing a bona fide complaint or for assisting in a complaint investigation.

8. Retention

Personal information will be retained for as long as necessary to fulfill Valtech’s disclosed purpose of use for personal information, this can vary according to different variables, however, limits its retention as set out within this notice.

9. Changes to this Privacy Notice

Valtech reserves the right to update or change this Privacy Notice from time to time (at least once every twelve (12) months).

10. Contact Information

To ask questions or comment about this Privacy Notice and our privacy practices or if you need to update, change, or remove your personal information or exercise any other rights:

• Via Email: GL.privacy@valtech.com
• Via Telephone: +1 877 567 7440

 

Effective date: 27^th May 2025