Careers at InDrive

This notice describes how inDrive (“inDrive”, “we”, “us”) processes personal data of job applicants (“you”).

What information we collect

Information you provide (through our careers webpage, job websites, etc.):

Identification data and contact details: full name, age or date of birth, email address, phone number, language, photo, gender;
CV/resume data: education and job experience details, certifications and professional licenses, city/country, citizenship, language skills, interests and other information included in your CV and cover letter;
Information collected during interview process: interviews and assessments results, position(s) you wish to be considered, professional goals, readiness for relocation and other job preferences;
Country-specific data for equal opportunity. If you apply for a position in a country that sets equal employment opportunity regulations, you may provide data about your gender, disability, age, race/ethnic origin, and veteran status. We will use this data to conduct equal opportunity monitoring only and compliance. If you don’t provide this information, your application(s) will not be affected in any way.
References: name and contact information for references, if you provide them.
Cookies and tracking technologies. If you submit your application through inDrive careers website we collect information through the use of cookies, pixels, tags and other similar tracking technologies (“сookies”). Please see our Cookie Policy.

The provision of your personal data is voluntary, however please note that if you choose not to provide it or if you provide incorrect information, we may not be able to process it for the recruitment purposes specified in this notice.

Information we obtain from other sources:

Open sources and job websites. We can find your CV and related information on job websites, publicly available sources, social media websites. We collect and assess only publicly available information that is directly related to recruitment process;
Recruitment agencies. We can receive your CV, information on interview results and recommendations from employment agencies we cooperate with;
Recommendations and referrals. inDrive employees can recommend you for employment. We ask them to do so only after contacting you and asking for your permission. Some information about you can also be provided by references and former employers that you have indicated in your application.

We may also collect some data as part of our pre-employment background check and onboarding procedures. Before we proceed with them, we will notify you and provide necessary details on our personal data processing activities.

How we use your information
We use the personal information for the following purposes:

Recruitment for a particular position: to consider your application, communicate with you and conduct interviews, evaluate and verify your education, skills, experience and other information you provided; to contact your references to evaluate your candidacy (if applicable);
To contact you regarding other positions: to notify you and communicate regarding other inDrive job opportunities. You can unsubscribe from such communications at any time.
Improve our recruitment process: to measure and improve the effectiveness of our recruitment process;
Compliance: we can store limited data after the close of a job opportunity, if it’s necessary to comply with legal or regulatory requirements, and to protect our legal rights and interests.

We do not use personal data to make automated decisions relating to your recruitment.

Information for applicants from EEA: we rely on the following legal basis for processing data:

taking steps at your request prior to potential entering into an employment contract;
our legitimate interests in recruiting the best candidates fit for the position; to measure and improve the effectiveness of our recruitment process; to keep records to protect our legal rights and interests; to keep data for future positions in case you consented to such storage before;
your consent to retain data to contact you regarding other positions;
compliance with our legal obligations.

How we share your information

Within the corporate group. We operate in different countries and you may apply to one or several of our entities. In the course of the recruitment process we may share your personal data with a parent, subsidiary, or an affiliate of our corporate group.
With service providers. We may share your information with our service providers (e.g., recruitment agents, consultants, hosting service providers) in order to carry out work relating to the recruitment process on our behalf or as a partner, or to support our business function. Our agreements with third parties include obligations to keep personal data confidential and take appropriate security measures to protect your data.
In connection with a business transfer. We may transfer personal data in connection with a substantial corporate transaction in which personal data is among the assets to be transferred.
For legal reasons. We may disclose your personal information when it is necessary to protect rights and comply with legal obligations.

We do not sell your personal data or publish it in public resources.

Cross border data transfer
To support our global operations, we may share your information with members of inDrive corporate group and other entities outside of your country of residence as described in the above section “How we share your information”. When doing so, we implement appropriate safeguards under applicable law, such as the Standard Contractual Clauses approved by the European Commission.

We will take reasonable steps to ensure that any overseas recipient deals with your personal information in a manner consistent with how we deal with it. Please contact us, if you need more information on cross-border transfer and underlying safeguards.

Your rights and choices
As an applicant, you have certain rights in terms of privacy. Depending on your geographic location, the scope of rights may vary. Below we summarized commonly acknowledged rights. Please consult your local law for any limitations:

Accessing and receiving your information: You may contact us about the personal information we hold about you, e.g. to obtain confirmation as to whether or not we process your personal data, ask for details on processing, including third parties (public and private entities) we share your personal data with. You may also request a copy of all information on you which we process. You may request your data in a structured, commonly used and machine-readable format to the extent such data has been processed by automated means.
Updating your information: you may request us to correct any inaccurate, incomplete or outdated personal data.
Deleting your data, objecting or opposing to processing, cancellation and withdrawal of consent, opt-out. You also have the right to object to us processing your information and opt-out from any communication we send. You can withdraw your consent to processing at any time where processing is based on your consent. You can request the deletion of your data by contacting us as specified below. In case you understand that your data is not being processed in accordance with the applicable data protection law or in an excessive way, you can request us to anonymize, block or delete unnecessary or excessive data. We will fulfill your request and delete and stop processing your data, unless we are required or permitted by law to keep processing, e.g. there is a legitimate basis for such retention (see section “How we store your information”).
Restrictions. In certain circumstances, you may request that we limit our use of your data. This e.g. applies when you contest the accuracy of the data or when you believe that the processing is unlawful. We may continue to process your data after such a request to the extent required or permitted by law.
Right to complain to the supervisory authority. Under the local law, you may have the right to file a complaint with your local supervisory authority. In Mexico, for instance you have the right to apply to the National Institute of Transparency Access to Information and Protection of Personal Data (INAI) to assert any disagreement related to your right to the protection of personal data. In Brazil, you have the right to petition before the National Data Protection Authority (ANPD).
Right to compensation of damages. Under the local law, you may have the right to claim damages from us in case we breach the applicable data protection legislation, for any damages such breach may cause.

If you wish to exercise any of these rights or have any other questions, please contact us using the contact details provided below.

How we store your information
We will store your personal data for no longer than is necessary to achieve purposes set out in this notice, namely:

Recruitment for a particular position: as long as you are under consideration for a job opportunity;
To contact you regarding other positions: for 3 years after the consent and(or) last communication.
Compliance: the period set by applicable law. Otherwise, a general term is 3 years.

You may also request deletion of your personal data at any time. We will delete all data upon your request, unless we are required to keep it by law, or we have solid legitimate interest that justifies continued retention.

How we protect your information
We take reasonable and appropriate technical, legal, and organizational security measures to protect your personal information from any unauthorized action including access, disclosure, alteration, or destruction leading to loss, theft, or misuse of your data. All applicants’ data is stored in a secure environment and any access to this data is limited, so that unauthorized third parties cannot access it.

We regularly review our security measures to consider available new technology and methods. Since absolute security does not exist either on or off the Internet, we cannot guarantee the absolute security of your information, especially against maliciously intended acts by third parties where the cost for the successful attack multiplies several times the value of the data possibly compromised. Nevertheless, we make commercially reasonable efforts to keep your information safe.

If any kind of security incident occurs that affects your data and may generate risk or relevant damage to you, we will notify you if permitted or required under the applicable law.

Changes
We may update this policy from time to time to reflect the changes in laws or in how we operate. When we update this policy, we will notify you by updating the “Last Updated” date at the top of this page and by posting the new Privacy Policy and providing any other notice if required by applicable law.

Contact
To allow you to effectively exercise your data subject rights we set the united channel for all our companies: please send all your questions, comments and requests to career@indrive.com.

We will make sure that the request is assigned to the appropriate company and person.

We respond to all requests in accordance with applicable data protection laws. You may be asked to verify your identity. If your designated authorized agent or representative applies on your behalf, we may need to verify the rights of such an agent or representative.

inDrive is a group of companies located in different countries. By default, a data controller is a company you apply for a job opportunity at. Please also see the inDrive entity, specified in the Privacy Policy in your country.