Dear Candidate,
Below, you can find details about how your personal data is processed during the recruitment process. You have the option to quickly review this Privacy Notice using the Overview but we encourage you to read the Full Privacy Notice for more comprehensive information.
OVERWIEW
To make this Privacy Notice more accessible, we've created a quick overview for easy reference. If you need detailed information on specific topics, simply click on the links provided for each section.
This Privacy Notice applies globally to all candidates applying for position at Verifone, including employees, contractors, and similar roles, across Verifone locations. It encompasses every stage of the recruitment process, from application submission to post-hiring procedures.
For more details, refer to Section 1 - Introduction
The name and other identification details of the relevant data controller (i.e., the Verifone entity that could become your employer if you are a successful candidate) will be communicated to you based on the specific role for which you applied.
For more details, refer to Section 2 - Details of the Controller and the DPO.
The recruitment process implies the collection and use of the following categories of personal data:
- Identification data: name, date of birth, gender, etc
- Contact details: email, phone number, home address, etc.
- Professional information: resume, qualifications, and work history.
- Background checks: criminal records, credit checks (when applicable).
- Sensitive data: may include race, disability status, and health information (as required by law).
The data collected will be utilized to assess candidates' qualifications and determine their suitability for the role. Candidate data is processed in accordance with legal obligations, legitimate interests, consent, and, where applicable, pre-contractual arrangements (such as prior to extending a job offer).
Background checks are conducted only after obtaining the candidate's consent through a specialized third-party provider. These checks may include verification of employment history, criminal records, and other relevant details, as required by the role and applicable local laws. Additionally, further information on the processing of sensitive data, including background checks, automated decision-making, and related processes, is available for clarification in Section 5. - How do we use Your personal data, Section 6. - Why we may use special categories of personal data, Section 7. - Background checks and Section 8. Automated decision making.
Data is typically retained for a period up to-12(twelve)months following the recruitment process unless a longer retention period is required (e.g., if the candidate is selected and the information collected during the recruitment process is incorporated into the employee's personal file and shall be kept according to the applicable law) or where consent has been provided for extended retention.
For more details, refer to Section 12. - How long we retain your personal data.
All personal data processed is shared with authorized personnel, other Verifone companies, and third parties such as service providers, contractors, and legal authorities to support recruitment, operational needs, and legal compliance. Data may also be transferred internationally with safeguards in place to ensure protection.
For more details, refer to Section 9. Who do we share your personal data with, why and how and Section 10. Where your personal data is held.
As a data subject, specifically as a candidate, you are entitled to several rights, including access to your personal data, rectification, erasure (in certain cases), data portability, and the ability to restrict or object to data processing. These rights may vary depending on the jurisdiction (e.g., EU/EEA, UK, US, Brazil, Turkey). You also have the right to lodge complaints with local data protection authorities. To exercise these rights, please contact Verifone at privacy@verifone.com. For more details, refer to Section 13. - Your privacy rights and Section 14. - How to exercise your privacy rights.
To ensure all candidates understand how their personal data is processed, this Privacy Notice is available in English as the reference version. However, upon request, we will provide a translation of this Privacy Notice in a language relevant to your location or native language, where reasonably possible and required by applicable law.
To request a translation, please contact us as mentioned in Section 15. Contact details. We will make reasonable efforts to respond promptly and provide the necessary translation or explanation. If discrepancies arise between the English version and a translated version of this Privacy Notice, the English version shall prevail unless otherwise required by applicable local laws.
If you have any questions or concerns, you can contact Verifone's Data Protection Officer (DPO).
The Privacy Notice is updated regularly.
For more details, refer to Section 15. Contact details and Section 16. - Updates.
FULL PRIVACY NOTICE
And from here, you can continue to read the full Privacy Notice
I. GENERAL INFORMATION
1. Introduction
VeriFone Inc. an American company, with it's registered office in United States of America, 2744 N University Drive, Coral Springs, Florida 33065, and its direct and indirect parent and subsidiary companies listed here (collectively, "Verifone Group", "Verifone", "Company" "we", or "us") act as data controllers and are committed to protecting the personal data and respecting the privacy of individuals who apply to work with us as an employee or to cooperate with us as a contractor, volunteer, trainee and alike ("you", "candidate").
This Privacy Notice explains how we process your personal data throughout the recruitment process and afterwords when the recruitment process is closed. In particular, we explain what personal data we collect about you, why we collect it, what we do with it and on what basis. You will also find information about your rights that you may exercise with respect to your personal data and how you can contact us.
Verifone seeks candidates through its internal HR departments and external partners, including employment agencies, recruitment specialists and other third parties that help Verifone to fill its job vacancies. Information about opportunities to join us and how to apply can be found on our websites and public online channels (e.g., Google, LinkedIn), as well as on third-party platforms (e.g., Glassdoor, Best jobs, Hipo, Smart recruiters etc.), at campuses and job fairs, or in conversations with friends. Regardless of how you found out about us or which application channel you use to apply to join us, this Privacy Notice applies to you. Verifone may also adapt local supplementary notices and will notify you on such notices, if applicable to you.
If you apply to join Verifone's company located in the EEA: We will process your personal data in accordance with the provisions of EU Regulation No. 679/2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"), the national laws of the relevant EEA member state implementing any EU directive applicable (in whole or in part) to the processing of your personal data (such as for example Directive 2002/58/EC (the "e-Privacy Directive"), along with the applicable local laws, including local laws implementing GDPR and the applicable employment law regulations ("EEA Privacy laws").
If you apply to join Verifone's company located in the UK: We will process your personal data in accordance with the provisions of the United Kingdom General Data Protection Regulation applicable by virtue of section 3 of the European Union (Withdrawal) Act 2018 ("UK GDPR") and the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 as it continues to have effect under section 2 of the European Union (Withdrawal) Act 2018 ("PECR"), along with the applicable local laws, including employment law regulations ("UK Privacy laws").
If you apply to join Verifone's company located in Brazil: We will process your personal data in accordance with the provisions of the General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13,709/2018 - "LGPD") which governs the processing of personal data, along with the applicable local laws, including employment law regulations ("Brazil Privacy laws").
If you apply to join Verifone's company located in the United States of America: We will process your personal data in accordance with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act ("CCPA"), the California Privacy Rights Act ("CPRA"), the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Delaware Personal Data Privacy Act, the Florida Digital Bill of Rights, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act, where applicable, along with the applicable local laws, including employment law regulations ("US Privacy laws").
If you apply to join Verifone's company located in Turkey: We will process your personal data in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), which governs the processing of personal data, along with applicable local laws and employment regulations ("Turkey Privacy Laws").
If you apply to join Verifone's company located in China: We will process your personal data in accordance with the Personal Information Protection Law ("PIPL"), which governs the processing of personal data in China, along with applicable local laws and employment regulations ("China Privacy Laws").
If you apply to join Verifone's company located in Taiwan: We will process your personal data in accordance with the Personal Data Protection Act ("PDPA") of Taiwan, along with the applicable local laws, including employment regulations ("Taiwan Privacy Laws").
If you apply to join Verifone's company located in Singapore: We will process your personal data in accordance with the Personal Data Protection Act 2012 ("PDPA"), along with the applicable local laws, including employment law regulations ("Singapore Privacy Laws").
If you apply to join Verifone's company located in South Korea: We will process your personal data in accordance with the Personal Information Protection Act ("PIPA"), along with the applicable local laws, including employment law regulations ("Korea Privacy Laws").
If you apply to join Verifone's company located in India: We will process your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), once in force, along with the applicable local laws, including employment law regulations ("India Privacy Laws").
If you apply to join Verifone's company located in Australia: We will process your personal data in accordance with the Privacy Act 1988, along with the applicable local laws, including employment law regulations ("Australia Privacy Laws").
If you apply to join Verifone's company located in South Africa: We will process your personal data in accordance with the Protection of Personal Information Act ("POPIA"), along with the applicable local laws, including employment law regulations ("South Africa Privacy Laws").
If you apply to join Verifone's company located in the Philippines: We will process your personal data in accordance with the Data Privacy Act of 2012, along with the applicable local laws, including employment law regulations ("Philippines Privacy Laws").
If you apply to join Verifone's company located in other country: We will process your personal data in accordance with the provisions of the applicable local laws, including the applicable data protection and employment law regulations.
It is important to note that this Privacy Notice applies globally, but not all the processing activities described will take place at all Verifone locations.
In addition, local data protection and privacy laws may provide individuals with additional rights or remedies and Verifone with additional restrictions. Verifone may also adopt local policies which will supplement this Privacy Notice.
Important note:
All applications are reviewed by our internal HR team and, if necessary, by external agencies we partner with to fill vacant positions. Please be aware that regardless of the application channel, your personal data may be transferred outside your country of residence.
We process your information to connect you with the most suitable job opportunities at Verifone and to assess if you are the best fit for a specific role. To manage Verifone's candidate selection and recruitment processes, we may include your information in our recruitment database.
Verifone may invite you to participate in assessments to evaluate your knowledge, skills, and suitability for a position. In assessing your suitability, Verifone may review your assessment results and other information made available by you or others through various media or networking channels.
If you are identified as a suitable match, please note that we may be required to conduct background checks. These checks will be performed by specialized third-party providers who will contact you directly to request your consent.
If you are selected for a role at Verifone, your information will be also used to facilitate the hiring process. Depending on your region, additional information about our use of background check data may be outlined in the relevant privacy notices and/or policies of our background check service provider.
If you are offered and accept a role at Verifone, your personal data collected during the recruitment process will become part of your employee file and will be governed by Verifone's Worker Privacy Notice, a copy of which will be provided to you before you start your role.
2. Details of the Controller and the DPO
The Verifone entity seeking a candidate-whether by posting a job opportunity on its website, through recruitment agencies, or via online platforms-acts as the "controller" responsible for processing the candidate's personal data for recruitment purposes.
If you are unsure which Verifone company is the controller of your personal data and what regulations may apply to you, you can contact the relevant HR department, disclosed in the job description announcement, to obtain more information.
If you have any questions about this Privacy Notice or how we process your personal data, please contact our Data Protection Officer ("DPO"). The DPO's email address is: privacy@verifone.com.
II. WHAT PERSONAL DATA WE COLLECT AND WHAT WE USE IT FOR
3. Categories of personal data we collect about you
We collect, store and use certain information about you to properly assess your qualifications and decide whether to make you an offer to work with us. Please note that the exact extent of the personal data we collect about you during the recruitment process may be limited by local employment laws. We never ask for or collect more personal data than permitted under applicable laws. Depending on the location, we may collect and use the following personal data about you:
We also may collect special or sensitive categories of data – such as social security, driver's license, state identification card, or passport number (which are considered sensitive type of personal data under certain US data privacy acts, e.g., the California Privacy Rights Act), race or ethnic origin (optional), nationality (optional), ethnicity (optional), medical conditions (optional), military or veteran status (optional), and disability (optional) - to the extent it is necessary to comply with local employment and other applicable laws (e.g., to ensure your safety in the workplace) or to provide appropriate workplace adjustments. We may also ask you to provide us with details of your extract of the criminal records and credit checks.
This type of sensitive information will only be processed where required under applicable privacy and data protection laws. Additional information is provided below in Section 6 - Why we may use special categories of personal data, and Section 7 - Background checks.
If we request for you to provide any additional information not described above, we will notify you at the time of collection why we are asking for it and how we will process it.
While you are not legally obligated to provide us with your personal data, failing to do so may prevent us from carrying out an assessment of your application and other essential activities related to our legal obligations.
In certain specific scenarios, your personal data may be utilized for purposes unrelated to your assignment on a voluntary basis (e.g., surveys, sustainable actions, marketing, newsletters related to vacant positions etc.). Refusing to provide personal data for the following purposes will not impact on the job application process.
It's important that the personal data we maintain about you remains accurate and current. Thus, we can recommend or expressly request, at successive intervals, the reconfirmation of personal data provided by the candidates for the purposes outlined below.
4. How we collect your personal data
We may collect your personal data in different ways as permitted by applicable laws:
- Directly from you when you submit your application or when you provide further information to us as a part of the recruitment and interview process.
- From third parties such as professional or sanctions registries, background information provided or confirmed by academic institutions and training or certification providers, recruiting or executive search agencies, online job platforms and portals.
- From other individuals, such as references during the application process, including your current or past employers, contractors, coworkers, or friends. We may also collect personal data about you if you are referred for a role at Verifone according to our internal referral program.
- From publicly available sources, such as the internet, where permitted (e.g., information that you have made publicly available on professional networking sites such as LinkedIn), public registers of individuals and companies, public registers of sanctioned persons and entities, public lists of Politically Exposed Persons, registries of beneficial owners.
We may combine information that we receive from the various sources described in this Privacy Notice and use or disclose it for the purposes described below.
5. How do we use your personal data
We use your personal data only when we have a legal basis to do so, and we do not keep your data longer than is necessary to achieve the purposes for which we collected information about you. In the table below we provide details of how we use your data, what is a legal basis we rely on when using your data and how long we keep your data.
Evaluation of your application, including:
- determination of your qualifications for a position within Verifone;
- evaluation of your application and communicating with you about the application process;
- organization and performance of interviews with you, including arranging accommodation;
- preparation of an offer, if we decide to offer you a position within Verifone;
- reviewing information provided by recruiting or executive search agencies.
Performing of operational management activities, such as:
- reviewing the information related to you made available through various media or networking channels, websites, forums or platforms related to your professional activities (e.g., LinkedIn, website of yours and your current employer);
- recording your image as CCTV footage at Verifone physical office locations, issuing badge entry (including badge photo), recording your entry and exit information and recording interviews, to the extent allowed under applicable laws;
- protection of the safety, security, and integrity of ours or other parties' property (including our databases and other technology assets);
- detection, prevention, and responding to security incidents or other malicious, deceptive, fraudulent, or illegal activity;
- improvement of our recruitment process, including promotion of diversity, equity, and inclusion;
- establishment, exercise or defense of legal claims of yours, Verifone, or a third party.
Verification of your legal standing and eligibility to work with us, namely:
- verification of your citizenship and visa and immigration information, if applicable;
- carrying out obligations or exercising specific rights of Verifone or yours imposed by local employment, social security or social protection laws – applicable to processing of special categories of data (e.g., information about your disability, health issues, sex orientations, etc.);
- offering equal opportunities and compliance with anti-discrimination laws or government-reporting obligations;
- responding to requirements of the competent authorities (e.g., tax authorities, supervisory authorities), law enforcement agencies, regulators, government agencies, courts or other third parties where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
- performing checks under the relevant AML procedure, including checking the sanctions lists, Political Exposed Persons' lists, beneficial owners' registries, official commercial registries and other publicly available databases, if applicable.
Conducting candidates' management onboarding activities, namely:
- account creation in HR recruiting platforms (e.g. Green House).
- performing background checks, including criminal and credit checks, if applicable;
- reviewing references provided or confirmed by academic institutions and training or certification providers;
- providing information on a voluntary basis (e.g., information such as hobbies or compensation history);
- contacting you about other job opening roles for which you may be fit;
- informing you about our recruitment events in which you choose to participate;
- fulfilling a referral request when you are referred to for a role with us by one of our worker using our referral process, as permissible, including using the provided contact information to reach out to you;
- participation in surveys;
- sending you communications about Verifone's job postings, careers fairs, newsletters, and related corporate communications.
Ensuring security and protection of yours and other individuals, including:
- protection of the rights of those who interact with us or others;
- where necessary for reasons of public health or as required by applicable law;
- prevention of the spread of contagious diseases;
- calling for medical emergency assistance.
We will only use your personal data for the purposes for which we collect it, unless we reasonably conclude that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for unrelated purposes, we will notify you and we will explain the legal basis which allows us to do so.
6. Why we may use special categories of personal data
As noted above, some processing may involve special categories of personal data, such as race or ethnic origin, gender identity, sexual orientation, nationality, ethnicity, medical conditions, military or veteran status, and disability. This type of sensitive information will only be processed where permissible both under applicable privacy and data protection laws and other applicable laws (e.g. health and safety of workers, employment requirements, etc.). We may use special categories of personal data related to your:
- Health or disability status to the extent it is necessary to comply with local employment and other applicable laws (e.g., to ensure your safety in the workplace), to provide appropriate health – related adjustments or benefits, to manage occupational health and safety risks, and to comply with public health authorities' requirements.
- Race or ethnic origin to the extent it is necessary to ensure equal employment opportunities, comply with anti-discrimination laws, and promote diversity and inclusion initiatives within our organization. This may include monitoring and reporting on our diversity metrics and the effectiveness of our diversity programs.
- Military or veteran status to the extent it is necessary to comply with applicable laws and to provide appropriate recognition and accommodation for your service, as well as to ensure that we meet any obligations we have towards supporting veterans' employment.
- Nationality or immigration status to the extent it is necessary to ensure compliance with immigration laws and employment eligibility verification processes.
By processing these categories of personal data in a lawful and sensitive manner, we aim to create a safe, inclusive, and equitable workplace that respects the diverse needs and backgrounds of all our employees.
We may also use your sensitive data, which is considered sensitive personal data under certain US data privacy acts, e.g., the California Privacy Rights Act, such as social security, driver's license, state identification card, or passport number. We do it only to the extent allowed by the applicable local privacy laws.
7. Background checks
As part of our global recruitment process, Verifone may conduct background checks to ensure the integrity, reliability, and suitability of candidates for specific roles. These checks are limited to what is necessary, proportionate, and relevant for the role in question. They may include employment verification, education history, criminal record, or financial checks depending on the nature of the position and applicable legal requirements. Such checks are only initiated after receiving your explicit, informed consent and are performed in compliance with local data protection and employment laws.
ONLY if you are identified as a suitable match, you may be asked to complete a background check.
Please be informed of the following:
- background checks are conducted by a background check service provider. The background check service provider is required to obtain your prior consent before initiating the checks and will inform you about the process and the types of checks performed (e.g., education, professional experience, credit report, civil and criminal records, reference checks, etc.).
- the external third party will initiate the background check process by emailing you a link to an online form. Please use the provided link to promptly and fully complete the online questionnaire to ensure a smooth process.
- please review your email filter settings to ensure your background check invitation and future emails are not deleted or placed in your spam/junk folder.
If you are undergoing the background check process, please ensure the accuracy of the information you submit. Providing inaccurate information that cannot be substantiated, either on the information forms or the resume submitted to Verifone, may disqualify you from further consideration for employment with Verifone.
Depending on your region, additional details regarding our use of background check information about you may also be specified in the applicable privacy notices and/or policies of our background check service provider.
For additional details regarding the obligations applicable to your application, please contact your local recruiter.
8. Automate decision making
We do not envisage that any decisions will be taken about you solely using automated means. However, Verifone may use data analytics and algorithms to help recruiters sort through candidate and application information. Algorithms help reduce the application or resume review time and assist in identifying candidates based on professional qualifications, skills, and experience commensurate with the relevant requisition. The algorithms analyze that data and compare it to our historical data on successful and unsuccessful candidates. Automated results are always evaluated by our internal and/or external recruiters and are never the sole source of considering a candidate for employment.
We do not envisage that any decisions will be taken about you solely using automated means. However, Verifone may use data analytics and algorithms to assist recruiters in efficiently processing applications.
If, in the future, fully automated decision-making is introduced that produces legal effects or similarly significant impacts on you, we will inform you and provide safeguards as required by applicable law. These include your right to request human intervention, express your point of view, and contest the decision, in line with Article 22 GDPR and similar local provisions.
III. SHARING YOUR PERSONAL DATA
9. Who do we share your personal data with, why and how
In the management of our business and where relevant, we may share your personal data with the following recipients:
- authorized personnel within Verifone;
- other companies within the Verifone Group. Personal data may be shared with another Verifone office as needed to ensure the efficient operation and management of our Company, including services, operations, human resources administration and health/safety;
- suppliers, vendors, service providers and contractors who perform services and process your personal data based on our instructions for a specific purpose or service, such as:
- external recruitment companies;
- jobs marketplaces and online platforms;
- organizers of job fairs and other related events;
- background check service providers;
- anti-fraud services providers;
- IT and system administration;
- telecommunication services;
- building, network, system, or other security services;
- travel and relocation service;
- consultants, and other professional services;
- lawyers and auditors;
- competent authorities (e.g., tax authorities, supervisory authorities), law enforcement agencies, government agencies, courts or other public bodies and/or third parties where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
- other third parties to protect against harm to the rights, property or safety of Verifone, our workers, customers or the public, as required or permitted by law;
- other third parties, in connection with any proposed purchase, merger, reorganization, acquisition, dissolution or liquidation of any part of our business, if we inform the third party that it must use your personal data only for the purposes disclosed in this Privacy Notice;
- any other person with your specific consent to the disclosure.
The list of the key service providers that support Verifone's recruitment activities, along with the country in which your personal data may be stored or processed cand be found here.
10. Where your personal data is held
As part of our global operations and for the purposes described in this Privacy Notice, we may transfer your personal data to countries other than the country in which you are resident. These countries may have data privacy laws that differ from those in your country (and in some cases may not provide such protection).
However, we have taken all appropriate safeguards, legal and organizational, to ensure that your personal data, if transferred, will remain legally protected as described in this Privacy Notice.
If you are applying from the European Economic Area, the United Kingdom or Switzerland, where we transfer your personal data to other countries, we rely on:
- a) the European Commission adequacy decisions, which acknowledge that the non-EEA countries listed here have national laws that protect personal data to a substantially similar standard required by European Union law (for data transfers from the EEA countries);
- b) the European Commission's 2021 Standard Contractual Clauses, which require non-EEA recipients of personal data to continue to protect the personal data they receive to the standard required by European Union law (for data transfers from the EEA countries);
- c) International data transfer agreement and the international data transfer addendum have the legislation that guarantees an appropriate level of protection (for data transfers from the United Kingdom);
- d) the Swiss Federal Data Protection and Information Commissioner Standard data protection clauses, which require recipients of personal data to protect personal data they receive to the standard required by the Swiss data protection legislation (for data transfers from Switzerland); or
- e) other lawful data transfer mechanisms or derogations from data transfer restrictions, including an intra-group data transfer agreement in respect of transfers within our Verifone Group.
If you are applying from other countries, the transfer of personal data will be conducted in accordance with the applicable local laws and regulations governing personal data protection.
More detailed information, including copies of the safeguards in place, can be provided upon request. Please refer to the contact information in Section 15 - Contact details - questions or complaints.
IV. HOW WE PROTECT YOUR PERSONAL DATA AND HOW LONG WE RETAIN IT
11. How we protect your personal data
Verifone has implemented corporate safeguards, as well as technical and security measures to ensure compliance with this Privacy Notice and your rights relating to privacy and data protection.
We take data protection and privacy seriously. We maintain appropriate organizational, technical and physical safeguards designed to protect personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. To help prevent unauthorized access to personal data, we have implemented security measures and procedures on how personal data is stored, how it is used and who can access it. Verifone's information security policies and procedures establish the standards to keep personal data protected and secure. In addition, all Verifone workers have an obligation to maintain confidentiality and may not disclose your personal data illegally or unnecessarily.
When personal data is processed by third-party service providers, they must adhere to standards at least equivalent to those set by Verifone and by applicable law.
12. How long we retain your personal data
We will retain your personal data for as long as necessary to fulfill the purposes stated above.
Generally, we keep your data for the duration of the recruitment process and up to 12 (twelve)months after the completion of the selection process. If you agree to be contacted about similar positions, your data may be retained for a longer period. However, exceptions apply under the following conditions:
- Employment: if the candidate is offered and accepts a role, their recruitment data becomes part of their employee file and is governed by the Employee Privacy Notice. This notice will be provided to the new employee at the time of signing the employment agreement.
- Consent for future job opportunities: if the candidate is not a good fit but agrees to be contacted about other job openings, their personal data (e.g., CV, assessment results) will be retained for 12 (twelve) months from the application date.
- Legal claims: data may be retained for the duration necessary to establish, exercise, or defend legal claims. Retention will be aligned with the requirements of relevant legal processes.
- Withdrawal of consent: if the candidate withdraws their consent for processing personal data (e.g., voluntarily shared information such as hobbies or compensation history), their data will be deleted or anonymized without delay, and no later than 1 month from the withdrawal date. The withdrawal of consent will not affect the lawfulness of processing based on consent prior to withdrawal.
- Greenhouse platform: if the candidate registers in the Greenhouse platform, all personal data entered or uploaded will be retained as follows:
- Account details will be retained if the account is active. An account is considered active if the user interacts with it (e.g., applies for a job, updates their profile, or reconfirms their profile) at least once every 3 years.
- Accounts inactive for 3(three) years will be considered dormant, and all associated data will be deleted.
- If the candidate deletes their Greenhouse account, all personal data associated with the account will be deleted immediately.
V. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM
13. Your data privacy rights
Verifone is committed to safeguarding your privacy, and as part of this commitment, we want to assure you that under no circumstances will we engage in the sale of your personal data.
Please note that we may refuse to act on requests to exercise data protection rights in certain cases, such as when providing access might infringe on someone else's privacy rights or impact on our legal obligations.
(UE Member States and Switzerland, Norway, Iceland and Lichtenstein)
- Right to be informed about the collection and use of your personal data.
- Right to access and request copies of your personal data.
- Right to rectification and to request inaccurate or outdated personal data be updated or corrected.
- Right to be forgotten/Right to erasure, namely the right to request the deletion of your personal data. Note that this is not an absolute right. It can only be granted if one of the grounds provided for in Article 17 of the GDPR applies, for example when your personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed by us. Furthermore, Verifone may not respond favorably to a request for deletion in certain cases. This will be the case, for example, if Verifone is required to retain personal data in order to comply with a legal or regulatory obligation or if the processing of your personal data is necessary to establish, exercise or defend legal claims.
- Right to data portability, namely, to ask for your personal data to be provided to you in a structured, commonly used and machine-readable format or transferred to another controller. Note that this right only applies to the processing of personal data based on the performance of a contract and which is carried out using automated processes (thus excluding manual or paper-based data processing). This right concerns only the personal data that you provide to Verifone, and therefore does not include derived or inferred data, which personal data has not been communicated by you but created by Verifone. The exercise of the right to portability may not prejudice the rights and freedoms of third parties.
- Right to restrict processing of your personal data.
- Right to withdraw consent to process your personal data at any time. This withdrawal will not affect past processing activities conducted legally prior to your withdrawal, nor will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.
- Right to object, at any time, to the processing of your personal data for marketing purposes.
- Right to object right at any time, for reasons relating to your situation, to the processing of your personal data whose legal basis is Verifone legitimate interest.
Other Rights: Depending on the local law of the jurisdiction in which you are located, you may have additional rights in relation to your personal data.
You have the right to lodge a complaint with a local data protection authority if you have concerns about how we handle your personal data. For authority contact details in the European Economic Area, please refer to the directory available here. If you would like to lodge a complaint with the Swiss Data Protection Authority, you may file it using the form available herev.
All the rights listed above regarding European Union/Economic European Area are applicable for you if you are a resident of the United Kingdom, since the UK's privacy rights are aligned with those under the European Union's General Data Protection Regulation (GDPR). Residents in the United Kingdom have the right to:
Under the US Data Privacy laws specific data privacy laws enacted by several US States, including but not limited to the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Colorado Privacy Act (CPA), the Delaware Personal Data Privacy Act (DPDPA), the Connecticut Data Privacy Act (CTDPA) and the Virginia Consumers Data Protection Act (CDPA), residents of those US States (including but not limited to California, Colorado, Delaware, Connecticut and Virginia) hold specific rights concerning their personal data processed by Verifone.
All the rights listed above regarding European Union/Economic European Area are available to you. In addition, you have the right to:
- opt out from sale or sharing your personal data (i.e., you can instruct us to cease selling or sharing your personal data).
- limit use and disclosure of your sensitive personal data.
- no retaliation following opt out or exercise of your other rights as described in this Privacy Notice.
We do NOT sell or share your personal data for monetary or other valuable consideration.
- Right to Appeal – California and Colorado: if Verifone does not act on your privacy rights request within the stipulated response period, we will provide a written explanation of the reasons for not taking action. You have the right to appeal against our decision, and we will provide details on how to do so.
- Right to Appeal – Virginia and Connecticut: you have the right to appeal a refusal to act on your privacy rights request within a reasonable period. Within 60 days of receiving an appeal, Verifone will inform you in writing of any action taken or not in response to the appeal, including reasons for the decisions. If your appeal is denied, we will provide you with instructions for contacting the Attorney General of Virginia or Connecticut to file a complaint.
- California and Delaware "Do Not Track" disclosures: privacy regulations in the United States, including California and Delaware laws, necessitate Verifone to disclose whether it honors your browser's "Do Not Track" settings concerning targeted advertising.
All the rights listed above regarding European Union/Economic European Area are applicable to you if you are a resident of Brazil, since the Brazilian privacy rights are aligned with those under the European Union's General Data Protection Regulation (GDPR).
In addition, residents in Brazil have also the following rights according to the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, LGPD):
- Right to anonymization: You have the right to request the anonymization of personal data that is unnecessary, excessive, or processed in violation of the law, ensuring that your data can no longer be linked to you or any other individual.
- Right to lodge a complaint: you can lodge a complaint with the National Data Protection Authority (ANPD) here.
All the rights listed above regarding European Union/Economic European Area are applicable to you if are a resident of Turkey, since the Turkish privacy rights are aligned with those under the European Union's General Data Protection Regulation (GDPR).
In addition, residents in Turkey have also the following rights according to the Turkish Personal Data Protection Law (KVKK):
- Right to anonymization: You have the right to request the anonymization of personal data that is no longer necessary or processed in violation of the law, ensuring that your data can no longer be associated with you or any other individual.
- Right to lodge a complaint: You have the right to lodge a complaint with the Turkish Data Protection Authority (KVKK).
All the rights listed above regarding the European Union/European Economic Area are applicable to you if you are a resident of China, as the Chinese Personal Information Protection Law (PIPL) grants comparable rights. In addition, you have the following rights under PIPL:
- Right to object to decisions made solely by automated processing that have a significant impact on you (e.g., automated hiring or performance scoring). You may also request a human explanation.
- Right to data portability under conditions specified by national authorities, allowing you to request the transfer of your data to another organization.
- Right to de-register user accounts and request deletion of associated personal data, unless retention is required by law.
- Right to lodge a complaint with the Cyberspace Administration of China (CAC).
All the rights listed above regarding the European Union/European Economic Area are applicable to you if you are a resident of Taiwan, as the Taiwanese Personal Data Protection Act (PDPA) ensures similar protections. In addition, you have the following rights under the PDPA:
- Right to request cessation of collection, processing, or use of your personal data, similar to the GDPR's restriction and objection rights.
- Right to object to the use of your personal data for direct marketing purposes.
- Right to withdraw consent, when consent is the legal basis for processing.
- Right to lodge a complaint with the Preparatory Office of the Personal Data Protection Commission (PDPC).
The following rights apply to you if you are a resident of Singapore under the Personal Data Protection Act (PDPA):
- Right to access and request copies of your personal data, and to be informed how it has been used or disclosed.
- Right to rectification and to request inaccurate or outdated personal data be updated or corrected.
- Right to withdraw consent to process your personal data at any time. This withdrawal does not affect processing conducted before your withdrawal.
- Right to data portability (upcoming, not yet in force), which will allow you to request the transfer of your data to another organization.
- Right to lodge a complaint with the Personal Data Protection Commission (PDPC).
All the rights listed above regarding the <European Union/European Economic Area are applicable to you if you are a resident of South Korea, since the Korean Personal Information Protection Act (PIPA) grants similar protections.
In addition, residents in South Korea have the following rights under PIPA:
- Right to request the suspension of processing of your personal data, equivalent to the right to restrict processing.
- Right to delete your personal data once the retention period expires or the purpose of collection is fulfilled.
- Right to lodge claims for damages resulting from the unlawful processing of your personal data.
- Right to lodge a complaint with the Personal Information Protection Commission (PIPC).
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights:
- Right to access a summary of your personal data being processed, the processing activities undertaken, and the recipients of your data.
- Right to request correction of inaccurate or misleading personal data and completion of incomplete data.
- Right to request erasure of your personal data when it is no longer necessary for the purpose it was collected or when consent has been withdrawn.
- Right to grievance redressal by the organization (Data Fiduciary) processing your data. If unsatisfied with the response, you may escalate the complaint to the Data Protection Board of India.
- Right to nominate another person to exercise your rights in the event of your death or incapacity.
- Right to lodge a complaint with the Data Protection Board of India, once it becomes operational . Until then, updates are provided by the Ministry of Electronics and Information Technology (MeitY).
Under the Privacy Act 1988, you have the following rights:
- Right to be informed about the collection of your personal information, including the purpose, how it will be used, and to whom it may be disclosed.
- Right to access personal information that an organization holds about you.
- Right to request correction of your personal information if it is inaccurate, out of date, incomplete, irrelevant, or misleading.
- Right to complain if you believe your personal information has been mishandled.
- Right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Under the Protection of Personal Information Act (POPIA), you have the following rights:
- Right to be informed when personal information is collected and the purpose of collection.
- Right to access your personal information held by a responsible party.
- Right to request correction, deletion, or destruction of personal information that is inaccurate, irrelevant, excessive, outdated, incomplete, or obtained unlawfully.
- Right to object to the processing of your personal information under certain circumstances (e.g. for direct marketing).
- Right to lodge a complaint regarding interference with your personal information.
- Right to lodge a complaint with the Information Regulator of South Africa.
Under the Data Privacy Act of 2012, you have the following rights:
- Right to be informed about the collection and processing of your personal data.
- Right to access your personal data held by a personal information controller.
- Right to rectification of inaccurate or incomplete data.
- Right to object to processing, especially for marketing, profiling, or automated processing.
- Right to erasure or blocking of personal data that is no longer necessary, unlawfully obtained, or if consent is withdrawn.
- Right to data portability, allowing you to obtain and reuse your personal data across different services.
- Right to lodge complaints and be indemnified for damages due to inaccurate, incomplete, outdated, false, or unlawfully obtained data.
- Right to lodge a complaint with the National Privacy Commission (NPC).
We don't use algorithms to make important decisions about you without human review. If this changes, we will inform you in advance and explain your rights, including your right to obtain human intervention, express your point of view, and contest any decision made solely by automated means.
14. How to exercise your privacy rights
For any request relating to the exercise of your rights, you may send your request to the following e-mail address: privacy@verifone.com, please submit a request here, providing proof of your identity by any means. The request must also include the correspondence address and/or email address to which the requested information should be sent.
In case of reasonable doubt concerning your identity, you may be asked to provide proof of your identity. We may ask you to prove your identity by providing a copy of a valid identification document to comply with our security obligations and to prevent unauthorized disclosure of data. We will consider any requests or complaints we receive and will respond in a timely manner.
VI. CONTACT & UPDATES
15. Questions or complaints
If you have questions about this Privacy Notice, including your data rights, or would like to make a complaint, you can send an email to privacy@verifone.com. Alternatively, you can ask questions or raise concerns with the local HR department, legal department or Data Protection Officer (DPO).
We will cooperate with the relevant and competent data protection authorities to review and resolve complaints relating to this Privacy Notice. We will also seek to comply in good faith with the advice of these authorities, including any remedial measures they may advise.
16. Updates
This Privacy Notice was updated and published on the date listed above. To ensure that it remains relevant and up to date we carry out regular reviews and update this Privacy Notice on a regular basis. We post the current version of this Privacy Notice on www.verifone.com,