Innoviz Notice for Job Applicants

1. Introduction.

1.1. The purpose of this Privacy Notice for Job Applicants (the “Notice”) is to inform individuals who inquire about and/or apply for employment with Innoviz Technologies Ltd. or its affiliates (the “Company”, “Innoviz”, “we” or “us”) of the categories of Personal Information (as defined below) that we collect from such individuals, the purposes for which we use such Personal Information, and our retention periods for such information. Please also see our general privacy policy at https://innoviz.tech/privacy-policy which supplements this Notice (the “Privacy Policy”).

1.2. If you are in a jurisdiction where the legal basis is consent, such as Israel, when you apply for a position in the Company, you agree to the processing of your Personal Information in accordance with the terms of this Notice and our Privacy Policy.

1.3. This Notice applies only to candidates and does not apply to individuals who have become employees of Innoviz. If you are an employee or any other Data Subject, you may contact us at the above email address for the privacy policy applicable to you.

2. Submission of Applications. In order to streamline and simplify the application process, we provide you with the option to upload your resume and other information via an online form on the website which is linked to an information management system provided to us by a third party, Spark Hire, Inc. (formally known as Comeet Inc.) (“Comeet”). Comeet serves as Innoviz’s processor, and is bound by proper Data Processing Agreement as required by all appliable laws. The use of Comeet’s platform is subject to this Privacy Policy.

3. No Legal Obligation. If you are an Israeli candidate, please note that you are under no legal obligation to provide us with Personal Information about yourself, including your resume. By submitting the Personal Information at your own free will, you agree that the Company will use it to assess your suitability for the position to which you have applied; you understand that without providing your contact information, your resume, and relevant information related to your professional experience, the Company will not be able to review your application and/or contact you in order to give you details and/or provide you with a response regarding your application.

4. Definitions. For purposes of this Notice, the following terms shall have the meanings below:

4.1. “Personal Information” is information that relates to an identified or identifiable person and any information or data defined as such under applicable data protection laws. Personal Information does not include de-identified, aggregated, or combined information (which includes data that is not reasonably capable of identifying you or being linked to you). In addition, for US candidates, this Notice does not apply to Personal Information if we already protect that information under certain other laws, such as the Gramm-Leach-Bliley Act (GLBA), the California Financial Information Protection Act, the Health Insurance Portability and Accountability Act (HIPAA), the Fair Credit Reporting Act (FCRA), and/or the Driver’s License Protection Act.

4.2. “Sensitive Personal Information” is (a) “Sensitive Information” as defined under the Israeli Privacy Protection Law, 1981 and as listed in the annex to the Privacy Protection Regulations (Information Security), 2017; (b) “Special Categories” of data as defined under GDPR; (c) for California residents: (1) Personal Information that reveals: (A) a person’s social security, driver’s license, state identification card, or passport number; (B) a person’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (C) a person’s precise geolocation; (D) a person’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (E) the contents of a person’s mail, email, and text messages unless the business is the intended recipient of the communication; (F) a person’s genetic data; and (2) (A) the processing of biometric information for the purpose of uniquely identifying a person; (B) Personal Information collected and analyzed concerning a person’s health; and (C) Personal Information collected and analyzed concerning a person’s sex life or sexual orientation.

5. Types of information we collect and purposes of processing.

5.1. Personal Information Collected from Job Applicants. To apply for any position published on the website or otherwise, you are required to provide us with certain Personal Information about yourself. You may also choose to provide us with additional information or documents. Please do not provide us with any Personal Information which is not required for the role you wish to apply for. We may collect the following categories of Personal Information about you when you inquire about and/or apply for employment with us. If you are a US resident, please note that we do not sell nor share candidate’s Personal Information as defined under the CCPA/CPRA. Furthermore, we do not make automated decisions that produce legal or similarly significant effects on you. We may collect and use such information for the purposes identified below, and we may retain such information as identified below.

Category of Personal Information

EU Legal Basis

Purposes for Collection or Use of Personal Information

Personal Contact Information, such as name, home addresses, home telephone numbers and personal email addresses, online identifier, Internet Protocol address

Entry into a contract
  • to open and maintain your applicant records
  • to communicate with you
  • to assess your personal and professional capability and suitability for the position, including to assess your ability to perform the proposed job
  • to determine your eligibility to work and suitability for certain jobs or benefits (to the extent permitted or required by law)
  • to address our legal obligations to you
  • to conduct equal opportunity and diversity monitoring (where permitted or required by law)
  • to respond to law enforcement and governmental agency requests, to comply with applicable legal and regulatory requests and obligations (including investigations)
  • to exercise legal and contractual rights, and initiate or respond to, or establish, exercise and defend, legal and contractual rights claims
  • for security purposes, including:
    • to prevent, detect or investigate fraud, suspected or actual illegal activity, violations of Company policy or rules, or other misconduct
    • to investigate security breaches and misuse of computer equipment and systems
    • to protect our property from theft, vandalism and damage
  •  to analyze and improve our recruitment process and tools.
  • to seek advice from lawyers, auditors and other professional advisers
  • Retaining the Personal Information for the purpose of offering other positions, if requested and subject to your specific consent provided after the cessation of the recruitment process.

Internet or other similar network activity information, such as your IP address, log-in information or information regarding your interaction with a website, application or advertisement.

Legitimate interest of the company

 

Business Contact Information, such as name, job title, business addresses, business telephone numbers and business email addresses

Entry into a contract

 

Job-Related Information and Qualifications, such as education, awards, qualifications, certificates, licenses, professional memberships, compensation and salary information, and any other information you choose to provide in your resumes and/or applications

Entry into a contract

 

 

Results of Background Checks and Screening, such as education verification, criminal records, driving license checks, and credit checks (depending on the jurisdiction, in Israel most of this information is not collected)

Legitimate interest of the company

 

References, such as letters, opinions and comments of any previous employers

Legitimate interest of the company

 

Performance and Development Records, such as training records, records of courses and training undertaken, performance reviews, reference letters, GPAs and assessments

Legitimate interest of the company

 

Monitoring Information, such as recordings from surveillance cameras on our business premises

Legitimate interest of the company

 

Inferences drawn from other personal information, such as a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.

Legitimate interest of the company

 

Other: Job interview notes, responses to screening questions, assessment results, and any other information you provide in connection with the recruitment process.

Entry into a contract

 

5.2. Sensitive Personal Information Collected from Job Applicants. During the recruitment process, we generally do not collect or process any Sensitive Personal Information. However, there are circumstances in which we are required or permitted by applicable law to process Sensitive Personal Information provided, however, any processing of your Sensitive Personal Information in connection with your job application is based on your explicit consent. We do not collect or process Sensitive Personal Information with the purpose of inferring any characteristics about California residents. We use Sensitive Personal Information solely for recruitment-related and compliance purposes, not for profiling or unrelated processing. We may collect the following categories of Sensitive Personal Information about you when you inquire about and/or apply for employment with us. You may also provide, on a voluntary basis, other Sensitive Personal Information. If you are a US resident, please note that we do not sell nor share candidate’s Personal Information as defined under the CCPA/CPRA. Furthermore, we do not make automated decisions that produce legal or similarly significant effects on you. We may collect and use such information for the purposes identified below, and we may retain such information as identified below.

Category of Sensitive Personal Information

EU Legal Basis

Purposes for Collection or Use of Sensitive Personal Information

National Identification Information, such as the country where you are a registered national or citizen, your identification number or social secuirty number and any visa or other right to work

Entry into a contract
  • to conduct equal opportunity and diversity monitoring (where permitted or required by law)
  • to comply with applicable legal and regulatory requests and obligations (including investigations)
  • to ensure safe environment in the place of work, specific to roles engaging in manufacturing processes 

 

Diversity Information, such as your ethnicity/race, disability status, veteran status, gender, and sexual orientation

Legal obligations

Health and Disability Records, such as information relating to any disability or health condition that is relevant to your job, including the results of any pre- employment physical or screening examination, alcohol and/or drug testing (in those jurisdictions in which this is premitted)

Legal obligations

Health Screening Information, such as your temperature or responses to health screening questionnaires

Legal obligations

Any information that you store on our equipment and computer systems, such as documents that you create or upload to our systems in the recruitment process, i.e. exams

Legitimate interest of the company

 

5.3. However, if the Personal Information is required by the Company for legitimate business reasons or the Company is under a legal obligation to do so – the Company shall retain the Personal Information for the period required by applicable laws. Information on a hired candidate becomes, from the date of his or her employment, subject to the Privacy Policy applicable to the Company’s employees.

5.4. When you use Comeet`s platform, Comeet will collect statistical and analytics information about your use of the platform, and de-identified information about your candidacy, including the IP address from which you accessed the platform, time and date of access, type of browser used, language use, links clicked, actions taken while using the platform, de-identified information about your skills, education and experience, your salary expectations, and your recruitment process.

6. How We Collect Personal Information. We may collect Personal Information about you when you browse our website, when you voluntarily upload your resume and/or documents containing Personal Information, and/or when you enter Personal Information directly into the online form on the system or on the “Contact Us” online form on our website or by contacting us by phone, email, or otherwise. In addition, we may receive Personal Information about you from recruitment agencies, job boards, social media, internal referral campaigns or when conducting any assessment tests as well as from previous employers and educational institutions and any other sources as directed by you.
We may combine Personal Information that we receive from the various sources described in this Notice, including third party sources and public sources, and use or disclose it for the purposes set forth in this Privacy Notice.

7. Legal Basis for Use Personal Information: the legal basis for collecting the Personal Information in the EU is as provided in the table above. For Israeli candidates, by uploading the resume or other Personal Information into our website you confirm your informed consent to the collection and processing of the Personal Information for the purposes defined herein. For other jurisdictions, the legal basis of processing is performance of our obligations towards you in the recruitment process, legal obligation and our legitimate interests.

8. Data Retention: We only keep your Personal Information for as long as is needed to fulfill the purposes identified in this Privacy Policy, unless otherwise required or permitted by law and to establish, exercise or defend our legal rights. In determining the appropriate retention period for your Personal Information we consider such factors as the nature of the information, the purposes for which the Personal Information is collected and retained, appropriate security measures, relevant technical constraints and applicable legal requirements.

9. Transfer of Personal Information Outside of Your Country of Residence: we use the Comeet platform to process your Personal Information. Comeet transfers your Personal Information from within Israel, the United States or the European Union to locations outside Israel, United States and/or the European Union, which may offer a lower level of protection than in your country. Comeet is located in the United States and is involved in processing your data there, subject to the EU Commission Standard Contractual Clauses. Innoviz may also access your Personal Data and process it by other affiliates from various jurisdictions, subject to an intercompany data processing agreement. To the extent permissible in your jurisdiction, by uploading the resume or other Personal Information onto our website you confirm your consent to the processing of the Personal Information outside your country as aforementioned.

10. Security of Your Personal Information: As mentioned above, Comeet acts as our data processor and is contractually obligated under a Data Processing Agreement (DPA) to implement and maintain industry-standard security measures designed to protect your Personal Information against unauthorized access, disclosure, alteration, or destruction.
While Innoviz ensures that Comeet is contractually bound to uphold appropriate safeguards, Comeet controls and operates the technical and organizational security of its platform. Accordingly, Innoviz relies on Comeet’s security framework and ongoing compliance with applicable data protection laws and standards.
We also regularly review our engagement with Comeet to ensure that its security practices remain adequate and consistent with legal requirements. However, no system can be guaranteed to be completely secure, and we cannot promise that unauthorized access or misuse will never occur.
If information is stored on systems within Innoviz’ control, please note that we use administrative, physical and technical security safeguards to protect the Personal Information that we collect and process, in accordance with all applicable laws (including the Israeli the Protection of Privacy Regulations (Data Security), 2017 (“Data Security Regulations”)). Our security controls are designed to maintain the confidentiality, integrity and availability of your Personal Information and to protect against reasonably anticipated threats. We also regularly monitor our systems for possible vulnerabilities and threats. However, we do not promise nor guarantee that any Personal Information will be absolutely protected from unauthorized disclosure or use, due to the nature of cybersecurity risks.

11. Sharing the Information with Third Parties: We will not sell (and have not done so over the last twelve (12) months) or otherwise disclose Personal Information for monetary or other consideration to any third parties. We will not share your Personal Information for cross-contextual behavioral advertising and have not done so over the last twelve (12) months. We may disclose your Personal Information to the following third parties for the following purposes:

11.1. Service providers, such as assessment and placement agencies; IT vendors, and other service providers, including lawyers, accountants, insurance providers. We will share Personal Information with service providers only to the extent necessary to receive services from these parties and subject to the commitment of these parties to maintain the confidentiality and privacy of the candidates’ Personal Information according to terms essentially equivalent to this Notice and our Privacy Policy.

11.2. With our affiliates in various countries.

11.3. On the legal requirement of duly authorized government bodies, such as law enforcement agencies.

11.4. During a change in the Company’s structure, corporate reorganization, or upon the acquisition of the Company by a third party.

12. Your Rights. Please note that under certain circumstances and depending on your jurisdiction, you are entitled to specific rights regarding your Personal Information (subject to some exceptions). This section describes your rights and explains how to exercise those rights.

12.1. If you want to exercise any of your rights regarding Personal Information processed and stored in the Company’s Databases, you must send a written request to the email specified in section ‎13 below and the Company will act to fulfill your request in accordance with its obligations under the applicable laws.

12.2. If you are a data subject in Israel, you have the right to access, update or delete your Personal Information if it is incorrect, incomplete, unclear, or outdated.

12.3. If you are a data subject in the EU, (i) you have a right of access and to receive a copy of your Personal Information that is stored on the platform; (ii) you have a right of rectification or erasure of your Personal Information; (iii) You are also entitled to obtain from Us the Personal Information you provided us in a structured, commonly used, and machine-readable format, and have the right to transmit it to another data controller; (iv) You have the right to opt-out of our processing of your Personal Information or to restrict processing, unless We demonstrate that We have compelling legitimate interests which override your rights and freedoms; (v) You have a right to object to decisions made solely based on automated decision making; (vi) You have a right to submit a complaint to the relevant local supervisory data protection authority.

12.4. If you are a California resident, the CPRA provides you with the following rights regarding your Personal Information: (i) the right that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. (ii) the right that we correct Personal Information that is inaccurate. (iii) the right that we delete the Personal Information that we have collected about you. (iv) You may have certain rights over the processing of your Sensitive Personal Information. We will not discriminate against you for exercising any of your CPRA rights. If we deny your request, you may appeal our decision by contacting Legal@innoviz-tech.com or ac@innoviz-tech.com.

12.5. If you are a Thailand Resident, you have the following rights under the Thailand Personal Data Protection Act B.E. 2562 (2019): (i) right of access – you have the right to access and obtain a copy of your Personal Information that we hold about you, or to request disclosure of how we obtained your Personal Information, unless we have a lawful ground to refuse your request; (ii) right to rectification – you have the right to request correction of your Personal Information to ensure that it is accurate, up-to-date, complete, and not misleading; (iii) right to erasure (“right to be forgotten”) – you may request the deletion, destruction, or anonymization of your Personal Information where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to the processing and we have no overriding legitimate grounds to continue; (iv) right to restrict processing – You have the right to request that the use of your Personal Information be suspended or restricted under certain circumstances (for example, while accuracy or lawful basis is being verified); (v) right to data portability – you are entitled to obtain a copy of the Personal Information you provided to us in a readable or commonly used format, and to request the transfer of such information to another data controller where technically feasible; (vi) right to object – you may object to the collection, use, or disclosure of your Personal Information where such processing is based on legitimate interest, direct marketing, or for scientific, historical, or statistical research, unless we can demonstrate a legitimate ground that overrides your rights; (vii) right to withdraw consent – where processing is based on your consent, you may withdraw such consent at any time, provided that the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal; (viii) right to lodge a complaint – You have the right to submit a complaint to the Thai Personal Data Protection Committee or another competent authority if you believe that our processing of your Personal Information violates the PDPA.

13. Contact Us and Data Controller’s Details. If you have any comments or questions regarding this Privacy Policy or wish to exercise any of your rights, please contact us at:

By Postal Mail:
Innoviz Technologies Ltd – HQ
5 Uri Ariav st. Building C, Nitzba 300 Rosh Ha’Ayin
4809202, Israel For the attention of: Data Protection Officer.
By Email: privacy@innoviz-tech.com

If you are an EU resident, please note that our privacy representative in the EU is our wholly owned subsidiary,
Innoviz Technologies GmbH, located at:
Marcel-Breuer-Strasse 15
80807 Muenchen
Germany