Effective January 1, 2023
Scope of This Notice
This Privacy Notice is for California residents who apply for employment with CoastHills Credit Union. It describes how CoastHills may collect, use, and disclose your Personal Information in connection with considering you for a position of employment. It also explains related rights, and how you can exercise them, under the California Consumer Privacy Act of 2018, as amended (the “CCPA”). The CCPA broadly defines a “consumer” as a resident of California.
“Personal Information” means information that can reasonably be linked to a particular individual or their household. Your Personal Information includes your unique identifiers (full name, phone number, email address, username, etc.), and information about your characteristics, conditions or behavior that is associated with one of your identifiers or could otherwise reasonably be linked to you. “Non-Personal Information,” on the other hand, has been anonymized, aggregated or de-identified such that it cannot reasonably be linked to a particular individual or their household. Personal Information does not include publicly available information, as defined in the CCPA, or information that is otherwise exempt under the CCPA.
Personal Information Collected and How We Collect It
- Identifiers, such as full name, signature, home address, phone number, and email address.
- Demographic Information, such as age, gender, date of birth, race, ethnic origin, current and past citizenship status, marital status, disability and veteran or military status. Demographic information may include legally protected classifications.
- Professional or Employment Information, such as your current employment information, job title, position, hire dates, salary expectations, visa sponsorship needs, work authorization status, work history, academic and professional qualifications, references, interview notes.
- Education Information, such as your transcripts and other educational records.
- Social Media and Online Information, if you choose to provide it, as well as any other information about you that is publicly available on the internet.
- Internet or Network Activity, such as data about your interactions with our online job applications.
- Background Check Information, which is information gathered as part of a background check conducted on our behalf for safety and security purposes and may include criminal records.
Sources and Methods of Collection
We may collect Personal Information from you, including when you submit an online or paper job application and any associated documents, such as a cover letter or resume, and in the course of subsequent communications and/or interviews following submission of your application. We may also collect Personal Information via automatic means, such as Internet or Network Activity when you interact with our recruiting system, or an application portal maintained by us or by a vendor on our behalf. We may also receive Personal Information from third parties, with your consent, where required by law, such as through a background, employment, or reference check; from a recruiter; from a staffing agency; or from public sources such as LinkedIn.
How CoastHills Uses Employee Personal Information
- We may use your Personal Information for the following purposes:
- To process your application for employment.
- To communicate with you about the recruitment process and your application.
- To take steps necessary to establish an employment relationship with you.
- To secure our network, online applications or recruitment channels against fraud or malicious activity.
- To comply with our legal obligations.
- To analyze or improve our application and recruitment process.
- In any other way we may describe when we collect the information.
- For any other purpose with your consent.
We may use Non-Personal Information for any purpose.
Typically, we retain job applicants’ Personal Information for the period necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required or permitted by law. Please note that in many situations we must retain all, or a portion, of your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, to protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.
Sale, Sharing or Disclosure of Applicant Personal Information
Under the CCPA, you can request to opt-out of the “Sale” of your Personal Information—which the CCPA defines very broadly to include some transactions or arrangements that do not involve the exchange of data for money—and the “Sharing” of your personal information, which the CCPA defines as sharing with third parties for purposes of cross-site targeted advertising. We don’t Sell or Share job applicant Personal Information.
Within the past 12 months, we disclosed the categories of Personal Information collected, for a business purpose, to our service providers, who provide services to us such as data storage and transmission, among other things.
In addition to disclosing your Personal Information to service providers for a business purpose, we may disclose your Personal Information in the following contexts:
Mandatory Disclosures and Legal Proceedings:
Change In Control or Merger:
We may transfer your information in the event of the sale of substantially all the assets of our business to a third-party or in the event of a corporate merger, consolidation, acquisition, or reorganization. However, in such event, any acquirer will be subject to the provisions of our commitments to you, or we will not disclose your information.
With Your Direction or Consent:
We will share your Personal Information with other third parties as you may direct or otherwise consent.
Your Rights as a Californian
Consumers (California residents) have the right to make the following requests to covered businesses. The requests may be made by a consumer, by a consumer on behalf of the consumer’s minor child, or by a person authorized by the consumer to act on the consumer’s behalf. CoastHills may decline to honor any request if doing so would conflict with its rights or obligations under applicable law, including but not limited to California or federal employment law or regulations.
Right To Request Information About Collection, Disclosure, Sale or Sharing
You have the right to request that a business disclose to you: (i) the categories and specific pieces of Personal Information the business has collected about you within the past 12 months, (ii) the categories of sources from which the Personal Information is collected, (iii) the business or commercial purposes for collecting, Selling or Sharing Personal Information, and (iv) the categories of third parties to whom the business discloses Personal Information.
If a business Sells or Shares Personal Information, or discloses it for a business purpose, you also have the right to request that the business disclose the following with respect to the 12-month period preceding your request: (i) the categories of Personal Information that the business Sold or Shared about you and the categories of third parties to whom the Personal Information was Sold or Shared, and (ii) the categories of Personal Information that the business disclosed about you for a business purpose.
This type of request may be referred to as a “Request to Know.” Before we can honor a Request to Know, we need to verify that the person making it is the consumer whose Personal Information we have. Our method for verifying any particular request weighs information we receive as part of the request, the sensitivity of the consumer information at issue, and the risk of harm to the consumer from unauthorized disclosure.
Right to Request Deletion
You have the right to request that a business delete any Personal Information that the business has collected from you. This type of request may be referred to as a “Request to Delete.”
Before we can honor a Request to Delete, we need to verify that the person making the request is the consumer whose Personal Information we have. Our method for verifying any particular request weighs information we receive as part of the request, the sensitivity of the consumer information at issue, and the risk of harm to the consumer from unauthorized deletion.
We are not required to delete Personal Information if we still need it in order to perform a contract with you, comply with a legal obligation, or accomplish any other objective recognized as an exception to the right to deletion under applicable law.
Right to Request Correction
You have the right to request that a business correct inaccurate Personal Information about you. This type of request may be referred to as a “Request to Correct.”
Right to Opt-Out of Sale or Sharing
You have the right to direct a business that Sells or Shares Personal Information about you to third parties not to Sell or Share your Personal Information. This type of request may be referred to as a “Request to Opt-Out.”
Right to Limit Use and Disclosure of Sensitive Personal Information
If a business collects Sensitive Personal Information* for the purpose of inferring characteristics about you, you have the right to request that the business limit its use and disclosure of your Sensitive Personal Information to that use and disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such goods and services. (CoastHills does not collect Sensitive Personal Information for the purpose of inferring characteristics about you within the meaning of the CCPA.)
*Sensitive Personal Information includes social security number; driver’s license or state identification number; complete account log-in credentials; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, email and text messages (unless the business is the intended recipient of the communication); genetic data; biometric information; health information; and information concerning sex life or sexual orientation.
Right to Non-Discrimination
You have the right not to receive discriminatory treatment by a business for the exercise of your privacy rights under the CCPA.
How to Exercise Your Rights with CoastHills
How to Submit a Request To “Know,” “Delete” or “Correct”:
You can submit a Request to Know, Delete or Correct to [email protected]. The request must state “CCPA Request” and include:
- Your first and last name.
- An email address at which you can be reached for purposes of the request.
- The date and manner in which you applied for a position.
- The California county in which you reside.
- For a Request to Know, the disclosure(s) you are requesting.
- For a Request to Delete, a clear statement that you want us to delete your Personal Information.
- For a Request to Correct, an explanation of why you believe the Personal Information we have about you is incorrect.
If you are submitting a request on behalf of a job applicant as their authorized representative, you must include the foregoing information about the applicant and provide proof of permission from the applicant to make the request.
After confirming receipt of your request, we’ll contact you if we need more information in order to verify it. If we can’t verify a request, we may deny it.
Changes to this Notice
We reserve the right to update or change this Notice at any time and you should check them periodically. If we make any material changes, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.
For Further Information
If you have any questions or concerns about this Notice, please contact us via [email protected].