DiDi Applicant and Candidate Privacy Notice
2. Personal information we collect
2.1 Information we collect directly from you or obtain throughout your employment
2.2 Information we collect from other sources:
2.3 Special categories of personal data
3. How and why we collect and use your Personal Information
4. Automated decisions about you
5. Data recipients and international data transfers
6. Information Security and Retention of Personal Information
7. Your rights
8. Changes to the Policy
This Privacy Notice describes how DiDi Research America, LLC any of its affiliates or subsidiaries or other DiDi group entities (collectively, “DiDi”, “we” or “us”) collect, use and otherwise handle your “Personal Information” in relation to any application you make to us for employment or other engagement. “Personal Information” is information about you which can be used alone, or combined with other information, to identify you personally.
This Privacy Notice applies to the Personal Information of job applicants, potential candidates for employment, and our optional recruiting programs and events.
We will process your Personal Information in accordance with this Privacy Notice, unless such processing conflicts with the requirements of applicable law, in which case, applicable law will prevail.
2. PERSONAL INFORMATION WE COLLECT
We usually collect Personal Information directly from you when you apply for a role with us, such as your name, address, contact information, work and educational history, achievements, and test results (if applicable). We also may collect Personal Information about you from third parties, such as professional recruiting firms, your references, prior employers, DiDi employees with whom you have interviewed, employment screening agencies or publicly available registers (as allowed by law), to the extent permitted by applicable law.
The types of Personal Information that we request from you and the ways that we process it are determined by the requirements of the country in which the position is located, and not the country in which you reside. Should you apply to more than one location or should the role to which you apply be available in more than one country, the types of Personal Information we request from you and the ways that we process it are determined by the requirements of all the countries in which the position is located.
2.1 Information we collect directly from you or obtain throughout application or recruitment process:
The categories of information that we collect directly from you during the application or recruitment process are:
(a) Your name, address, email address, telephone number and other contact information;
(b) Your resume or CV, cover letter, previous and/or relevant work experience or other experience, education, transcripts, or other information you provide to us in support of an application and/or the application and recruitment process;
(c) Information from interviews and phone-screenings you may have, if any;
(d) Details of the type of employment you are or may be looking for, current and/or desired salary and other terms relating to compensation and benefits packages, willingness to relocate, or other job preferences;
(e) Details of how you heard about the position you are applying for;
(f) Any sensitive and/or demographic information obtained during the application or recruitment process such as gender, information about your citizenship and/or nationality, medical or health information and/or your racial or ethnic origin;
(g) Information relating to any previous applications you may have made to DiDi and/or any previous employment history with DiDi;
(h) Any other Information your provided through our Career Website or other our designated channels;
(i) Information about your educational and professional background from publicly available sources, including online, that we believe is relevant to your application or a potential future application (e.g. your LinkedIn profile); and/or
(j) Information related to any assessment you may take as part of the interview screening process.
2.2 Information we collect from other sources:
The categories of information that we collect about you from other sources are:
(a) background check information (including criminal records) from employment screening agencies or publicly available registers (as allowed by law), or references obtained during recruitment;
(b) publicly available professional profiles on websites or social media (e.g. LinkedIn).
2.3 Special categories of personal data
Special categories of Personal Information is a subset of Personal Information and includes ethnicity, health, trade union membership, philosophical beliefs, sexual orientation, as well as other categories as prescribed by law. We do not seek to obtain and will not collect such data about a candidate unless permitted to do so by applicable laws.
3. WHY WE COLLECT AND USE YOUR PERSONAL INFORMATION
We collect and use your personal information to:
(a) carry out and support human resources administration including recruitment, employee vetting, performance evaluation, promotions, training, payroll administration, pension and insurance, IT analysis, compliance, legal/audit/ accounting or other internal control process, reporting and management;
(b) conduct investigations and resolve disciplinary or grievance issues;
(c) comply with legal obligations to which we are subject (such as compliance with our health and safety and occupational health obligations) and cooperate with regulators and law enforcement bodies (for example to make disclosures to tax authorities if required by law);
(d) deal with your enquiries and requests;
(e) create anonymous recruitment statistics
(f) ensure we can provide you with reasonable adjustments required for you due to disabilities or any other special condition.
4. AUTOMATED DECISIONS ABOUT YOU
We may process your personal information by automatic means and without human intervention to make decisions or conduct ‘profiling’ about you. This involves using software that is able to evaluate your personal aspects and predict risks or outcomes. We carry out this automatic processing to ensure that we treat all candidates fairly when assessing your eligibility for a role, promotion or bonus. The significance of our actions in this connection is that depending upon the outcome of the processing you may not be eligible for a particular role, promotion, bonus. We base our decisions on criteria explained at the time that you apply for a particular role or promotion.
We will only make these kinds of automated decisions about you where:
- such decisions are necessary for entering into or performing a contract of employment with you.
- such decisions are required or authorized by law, for example for fraud prevention purposes
- you give your consent to us carrying out automated decision-making.
If you require further information about automated decision-making, you want to object to our use of automated decision-making, or request an automated decision to be reviewed by a human being please contact us at the details below and we will explain to you what your rights are in relation to the processing in question.
5. DATA RECIPIENTS AND INTERNATIONAL DATA TRANSFERS
We may share your Personal Information with third parties under the following circumstances:
- Service providers and business partners. We may share your personal information with our service providers and business partners for purposes of business operations and human resource management, for example, IT hosting and maintenance, professional advices provided by law firms or accountants, and etc.
- We work closely with other businesses and companies that fall under the DiDi group. We may share your employment information with other DiDi group entities for human resource management and internal reporting purposes.
- Any law enforcement agency, court, regulator, government authority or other third party. We may share your Personal Information with these parties where we believe this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.
Other than set out above, no personal information will be released to a third party without your express authorization. Because we operate as part of a global business, your Personal Information may be transferred to, stored, and processed outside the jurisdiction in which you are located. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected.
6. INFORMATION SECURITY AND RETENTION OF PERSONAL INFORMATION
We implement technical and organizational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the on-going integrity and confidentiality of personal information and preventing your personal information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties on a need to know basis only. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. We evaluate these measures on a regular basis to ensure the security of the processing.
If you apply for a job at DiDi and your application is unsuccessful (or you withdraw from the process or decline our offer), DiDi will retain your information for a period after your application that enables us to:
- Consider you for other current or future jobs at DiDi;
- Help us better understand, analyze and improve our recruitment processes;
- Maintain business records for analysis and/or audit purposes;
- Comply with record retention requirements under the law;
- Defend or bring any existing or potential legal claims;
- Deal with any queries or complaints you may have.
We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.
7. YOUR RIGHTS
In accordance with applicable data protection laws, you have a right to request a copy of the Personal Information we hold about you and details of how we use that information. If any of the information held about you is incorrect or out of date, you have the right to amend or rectify it. Please follow the process outlined below and we will amend our records where appropriate. You also have the right to require us to erase your Personal Information, stop processing your Personal Information, restricting the processing of your Personal Information, right of portability of your Personal Information and/or to withdraw your consent to processing. This may not apply if there are other legal justifications to continue processing.
If you think we may have incorrect Personal Information, or would like a copy of the Personal Information we hold on you, if you have any other questions or concerns regarding the way in which your Personal Information has been used, please contact our Human Resources team at the following email address: DiDiPrivacyUS@didiglobal.com.
You also have a right to lodge a complaint with your local supervisory authority.
8. CHANGES TO THE POLICY
You may request a copy of this privacy notice from us using the contact details set out above. We may modify or update this privacy notice from time to time.
If we change this privacy notice, we will notify you of the changes. Where changes to this privacy notice will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g. to object to the processing).
DATE: May 2019