Legal
Smartsheet Candidate Privacy Notice
This notice applies with respect to personal data we collect from applicants for employment, internships, and independent contracting opportunities via our application forms, website, referrals, or other recruitment channels.
International Transfers and Privacy Shield Notice
Personal Data We Collect
From You
- Identification and contact details. This includes information such as your name, address, email address, phone number and other contact information, as well as your gender, date of birth, nationality or nationalities, and national identifiers (for example, national ID, passport, or social security number).
- Employment history. This includes information about your previous employers and job titles.
- Background information. This includes information like your academic and professional qualifications, education, details included in your CV or résumé (some of which could include details about memberships or interests that reveal sensitive personal information about you), transcripts and employment references.
- Reference information. This includes information about your professional references that you share with us (including their name, contact information and job title, though it is your responsibility to get your references’ consent to share their personal information with us), as well as information we receive from background checks (when we have them completed for a role), and information provided by other third parties.
- Previous applications and roles with us. This includes information about any prior applications you may have made for a position with us or any previous employment history with us.
- Your immigration or visa status. This includes information that would let us know if you are authorized or able to become authorized to work for one of our group companies.
- Other information you voluntarily provide. This includes information that you may provide throughout the recruitment process, including, for example, through assessment exercises and interviews.
Unless permitted or required by law, there are certain types of information that we generally try to avoid collecting. For example, information that reveals race or ethnicity, religious, political or philosophical beliefs or trade union membership; genetic or biometric data; or information concerning your health/sex life ("Sensitive Personal Data"). We may collect some Sensitive Personal Datafrom you for legitimate recruitment and employment-related purposes, including meeting compliance obligations; providing accommodations for disabilities; equal opportunity monitoring; for anti-discrimination purposes; and to satisfy reporting obligations. Separately, you may choose to disclose, voluntarily, Sensitive Personal Data during the recruitment process. If required by law, we will request your consent if we collect Sensitive Personal Data.
From Third Parties
We may gather Personal Data about you from third parties, including:
- Professional references
- Background info provided or confirmed by academic institutions and training or certification providers
- Background checking agencies and other external database holders
- Recruitment or executive search agencies
- Publicly available sources, including social media such as LinkedIn or other information available online (as part of this, we may contact any mutual connections that are evident from publicly available information)
Automatically
We automatically gather personal data from our Site’s “Careers” page. The Careers page is available for you to visit and search for open positions. For more details about the personal data we collect through our Sites, please see our Cookie Notice.
How We Use Personal Data
We rely on these legal bases for the processing of personal data we collect under this notice. Where we rely on a legitimate business interest to process such information, we use the personal information in furtherance of legitimate business interests that include:
Registering Office Visitors. To register visitors to our offices and to manage non-disclosure agreements that visitors may be required to sign, to protect Smartsheet’s offices and confidential information against unauthorized access.
Protect Legal Rights and Prevent or Address Misconduct. To protect Smartsheet employees and other individuals; prevent unauthorized access to Smartsheet; and where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the safety of any person.
Comply with Legal Obligations. To comply with the law or legal proceedings; for example, we may disclose information in response to lawful requests by public authorities, including responding to national security or law enforcement disclosure requirements.
General Business Operations. Where necessary to the administration of our general business, accounting, recordkeeping, employment, and legal functions.
Special Note Regarding European Union Applicants. For the personal data from the European Union that we process, the relevant legal bases for such processing under the General Data Protection Regulation ((EU) 2016/679) (and local implementing laws of EU member states) include: (i) our legitimate business interests*; (ii) with your consent; (iii) compliance with law; and (iv) to establish, defend, or protect our legal interests. These bases do not limit or modify the obligations, rights, and requirements under the privacy laws of non-EU jurisdictions.
*For the personal data from the EU, the processing is in our legitimate interests, which are not overridden by your interests and fundamental rights. Marketing to EU data subjects is done only with opt-in consent.
How We Share Personal Data
To Our Service Providers. We use third party service providers to process your personal data to assist us in business and technical operations. Smartsheet has data processing agreements with such service providers limiting their use of and access to personal data to specific purposes. They provide services relating, but not limited to performing services on our behalf and only in accordance with our instructions, or to comply with legal requirements.
To Affiliates. We may share your personal data with our affiliates for employment opportunities and positions.
As Required by Law. We release information about you if we believe we must do so to comply with the law or a subpoena, bankruptcy proceeding, or similar legal process. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
To Protect Rights. We may disclose information about you, such as your name and contact information, to enforce our agreements with you or to protect the rights and safety of Smartsheet, our customers and users, and the general public, or as evidence in litigation in which we are involved.
In a Business Transaction. If Smartsheet is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred to the acquiring entity as part of the transaction (provided that we inform the buyer it must use your personal data only for the purposes disclosed in this notice), and may also be reviewed as part of the due diligence review for the transaction (e.g.,we may need to provide a list of all customer accounts and payment histories).
Last Updated: October 2019