Huis Lightspeed Systems Privacybeleid voor sollicitanten en werknemers
Lightspeed Systems Privacybeleid voor sollicitanten en werknemers
Dit privacybeleid voor sollicitanten en werknemers (“Het beleid”) beschrijft hoe Lightspeed Systems (“Lightspeed”, “Bedrijf”, “wij”, “ons”, “onze”) collects, uses, and discloses personal information as defined under applicable law from and about (1) job applicants and (2) our employees and contractors (and their beneficiaries and emergency contacts) in the context of our recruiting and working relationship with the relevant individuals. We may update this Policy at any time. We may also provide you with additional privacy notices regarding our collection, use, or disclosure of information. If you are a resident of the United Kingdom, please also refer to the additional notice at the bottom of this Policy (the “UK Notice”).
Dit beleid maakt geen deel uit van een arbeidsovereenkomst of contract om diensten te verlenen. Als u ons diensten verleent via of in verband met een ander bedrijf, zijn wij niet verantwoordelijk voor de privacypraktijken van dat bedrijf.
Dit beleid is niet van toepassing op onze verwerking van gegevens die over u zijn verzameld in uw rol als gebruiker van onze consumentgerichte diensten. Wanneer u met ons communiceert zoals in die rol, Lightspeed Privacybeleid is van toepassing.
1. Soorten persoonlijke informatie die we verwerken en hoe we deze informatie gebruiken
We verzamelen, bewaren en gebruiken verschillende soorten persoonlijke informatie via het sollicitatie- en wervingsproces of tijdens de relevante opdracht of dienstverband bij ons. We verzamelen dergelijke informatie rechtstreeks van u of (indien van toepassing) van een andere persoon of entiteit, zoals een uitzendbureau of adviesbureau, een antecedentenonderzoeker of andere verwijzingsbronnen.
A. Aanvragers
Information we verzamelen. Het type informatie dat we over u verzamelen, kan zijn:
- Identification and contact information such as full name, physical address, telephone number, and email address.
- Professional or employment-related information, including:
- Recruitment, employment, or engagement information such as application forms and information included in a resume, cover letter, or otherwise provided through any application or engagement process.
- Career information such as job titles; work history; work dates and work locations; information about skills, qualifications, experience, publications, speaking engagements, and preferences; and professional memberships.
- Education information such as institutions attended, degrees, certifications, training courses, publications, and transcript information.
- Assessment information such as performance on applicant personality and cognitive assessments.
- Audio or visual information such as CCTV footage as well as other information relating to the security of our premises; and photographs submitted.
- Other information that you voluntarily choose to share with us in connection with your application.
How we use this personal information. We collect, use, share, and store personal information from job applicants for our and our service providers’ business and operational purposes in our recruitment and hiring process such as: processing your application; assessing your skills, qualifications, and interests; tracking your application through the recruitment process; contacting references; conducting background checks you authorize; evaluating you for current and future job opportunities, including matching your skills and interest to applicable job requirements; communicating with you throughout the hiring process; making hiring decisions; and fulfilling your requests. We will also use job applicant information for internal analysis purposes to understand the applicants who apply and to improve our recruitment process, including improving our diversity and inclusion efforts. We may sometimes need to use applicant information for legal purposes, such as in connection with any challenges made to our hiring decisions.
B. Werknemers en aannemers
Informatie die we verzamelen. Het soort informatie dat we over u hebben (en mogelijk uw begunstigden en contactpersonen voor noodgevallen) hangt af van uw rol bij ons en kan, indien van toepassing, het volgende omvatten:
- Identification and contact information and related identifiers such as full name, date and place of birth, citizenship and permanent residence, home and business addresses, telephone numbers, email addresses, and such information about your beneficiaries or emergency contacts.
- Professional or employment-related information, including:
- Recruitment, employment, or engagement information such as application forms and information included in a resume, cover letter, references, or otherwise provided through any application or engagement process; and copies of identification documents, such as driver’s licenses, passports, visas, and other government-issued documents; and background screening results and references.
- Carrière informatie zoals functietitels; werk geschiedenis; werkdata en werklocaties; arbeids-, service- of verlovingsovereenkomsten; beoordelings- en prestatie-informatie; informatie over vaardigheden, kwalificaties, ervaring, spreekbeurten en voorkeuren (bijv. mobiliteit); afwezigheids- en verlofregistraties; Professionele Lidmaatschappen; disciplinaire en klachteninformatie; en beëindigingsinformatie.
- Financial information such as salary, payroll, pension or retirement contribution information; and bank account and tax information.
- Business travel and expense information such as travel itinerary information, corporate expenses and Company credit card usage.
- Education information such as institutions attended, degrees, certifications, training courses, publications, and transcript information.
- Internet, electronic network, and device activity and device information and related identifiers such as information about your use of the Company network, information, and communication systems, including user IDs, passwords, IP addresses, device IDs, web logs, and audit trails of system access.
- Geolocation information for device recovery if you use a Company-issued device and when you handle Company property.
- Audio or visual information such as CCTV footage, as well as other information relating to the security of our premises; recorded meetings or presentations in which you participate; call recordings from Company system; photographs submitted from and photographs taken at Company functions.
- Potentially protected classification information such as race, sex/gender, gender identity/expression, sexual orientation, marital status, military service, nationality, ethnicity, request for family care leave, political opinions, criminal history, and other information to help us monitor compliance with equal opportunity legislation.
- Health information about you, and, if applicable, your beneficiaries, such as medical conditions and other information provided in statement of health forms, disability status, health and safety incidents or accidents, sickness records, and health issues requiring adaptations to your working environment or working practices.
How we use this personal information. We collect, use, share, and store personal information for the Company’s and our service providers’ business purposes, which include, where applicable:
- HR management and administration including training, compensation and benefits, invoices, leave, scheduling, career development, performance appraisals and recognition, investigating and resolving inquiries and complaints, providing references, succession planning, organizational changes, fraud prevention and investigation, preparing analyses and reports, and communicating with our workforce about updates or relevant information about perks, benefits and discounts, and changes to Company products and services.
- Performance of business operations, including providing and monitoring IT systems for any lawful purpose, maintaining accounts and internal directories, crisis management, protecting occupational health and safety, participating in due diligence activities related to the business, business succession planning, and conducting internal analyses and audits.
- Recruitment, including interviewing, selecting and hiring new staff.
- Security operations, including detecting security incidents, debugging and repairing errors, preventing unauthorized access to our computer and electronic communications systems and vehicles and preventing malicious software distribution, and monitoring and controlling access to company premises and locations (including through use of CCTV).
- Safeguarding Lightspeed and the service, including the protection of the Company, our workforce, users, partners, and others.
- Legal compliance, such as complying with anti-bribery, tax, social security, and immigration obligations, and responding to and cooperating with legal or regulatory requests and investigations.
- At your request, in order to fulfil your requests.
2. Met wie we persoonlijke informatie delen
We zullen persoonlijke informatie van sollicitanten, werknemers en aannemers bekendmaken aan de volgende soorten entiteiten of in de volgende omstandigheden (indien van toepassing):
- Internally: to people within the Company and its affiliates to carry out the purposes described in this Policy, including to human resources and personnel involved in the recruiting and hiring process, and (if you are hired) your manager, as well as personnel within the Company, such as payroll, IT, legal and finance.
- Service Providers: technology service providers, travel management providers, human resource suppliers, group benefit plan carriers, background check companies, and employment agencies or recruiters, where applicable as well as service providers such as compensation and benefits providers, tax and other professional advisors, technology service providers, corporate card issuers, travel management providers, travel providers, human resources suppliers, group benefit plan carriers, background check companies, and employment businesses (in relation to contractors or agency workers).
- For business operations: to provide another entity (such as a potential or existing business counterparty or customer) with a means of contacting you in the normal course of business, for example, by providing your contact details, such as your phone number and email address.
- Legal advice and compliance: to seek legal advice from our external lawyers, or when required to do so by law, regulation, or court order or in response to a request for assistance by the police or other law enforcement agency, including to meet national security requirements.
- Business transaction purposes: in connection with the sale, purchase, or merger of a business.
- At your request: in order to fulfil your requests.
3. Hoe u contact met ons kunt opnemen over dit beleid?
Als u vragen heeft over dit beleid, kunt u een e-mail sturen naar de afdeling Privacy op: [email protected]
4. Additional Notice for Residents of the UK
This UK Notice for residents of the UK is provided in order to satisfy certain obligations that Lightspeed has under the UK GDPR and the UK Data Protection Act 2018 (as amended from time to time) and any relevant transposition of, or successor or replacement to, that regulation (together, the “Data Protection Legislation”).
Volgens de toepasselijke wetgeving wordt Lightspeed beschouwd als de "gegevensbeheerder" van de persoonlijke informatie die we volgens dit beleid verwerken. Met andere woorden, wij zijn verantwoordelijk voor het beslissen hoe we deze informatie verzamelen, gebruiken en vrijgeven, met inachtneming van de toepasselijke wetgeving. Onze contactgegevens staan in dit Beleid.
Juridische grondslagen
Wetgeving inzake gegevensbescherming kan van ons verlangen dat we u uitleggen wat de rechtsgronden zijn voor onze verzameling, verwerking en gebruik van uw persoonlijke gegevens. Onze rechtsgronden zijn onder meer:
- om op uw verzoek stappen te ondernemen voorafgaand aan het aangaan van een arbeidsovereenkomst of andere overeenkomst met u of de uitvoering van een arbeidsovereenkomst (bijvoorbeeld voor het beheren van salarisadministratie en secundaire arbeidsvoorwaarden);
- onze legitieme belangen (bijv. personeelsbeheer; bij het beheer van onze bedrijfsactiviteiten en informatietechnologiebronnen, zoals het beheren van interne mappen en het verbeteren van cyberbeveiliging; bij de bescherming van Lightspeed, zijn werknemers, klanten en anderen; geschillenbeslechting; fysieke beveiliging, IT en netwerkbeveiliging; veiligheid op de werkplek; en bij het beheren van de arbeidsrelatie met u, zoals prestatiebeoordelingen, trainingen en promoties; interne onderzoeken);
- het aanpakken en naleven van wettelijke vereisten en verplichtingen (met name op het gebied van arbeids- en arbeidsrecht, socialezekerheids- en socialebeschermingsrecht, gegevensbeschermingsrecht, belastingrecht en corporate compliance-wetten);
- de bescherming van vitale belangen van u of van een ander persoon (bijvoorbeeld in een medische noodsituatie);
- uw toestemming (uitdrukkelijke toestemming indien vereist), in overeenstemming met de lokale wetgeving inzake gegevensbescherming.
Where the collection of personal information is required to comply with legal or contractual obligations, or to manage the employment relationship, the provision of personal information generally is mandatory. In all other cases, provision of requested personal information is optional; however, failure to provide the information may result in your inability to fully participate in the activity or benefit for which the personal information is requested, such as an optional benefit program. If you have any questions regarding whether provision of personal information is mandatory and the consequences for withholding such data, please contact us using the contact information in this Policy.
The personal information that we collect and process may also contain sensitive data relating to your race or ethnic origin, physical or mental health or condition, trade union membership, commission or alleged commission of criminal offences and any related legal actions. For example, Lightspeed may process health information in accordance with applicable laws, such as information on disabilities for purposes of accommodations in the workplace and for the purpose of arranging employee medical benefits. We only collect and process sensitive data where and to the extent permitted in accordance with applicable data protection laws.
Overdracht van persoonlijke informatie
Your personal information may be transferred to countries which may not have the same or equivalent data protection laws as the United Kingdom. Where required, we make such transfers in compliance with Data Protection Legislation, such as through the use of model contractual clauses (as published by the European Commission) incorporated with the UK International Data Transfer Agreement (as published by the UK Information Commissioner’s Office).
Bewaren van persoonlijke informatie
We may retain personal information for so long as necessary for the purposes described above, unless a longer retention period is required or permitted by applicable law. To provide security and business continuity for the activities described in this notice, we may make backups of certain data, which we may retain for longer than the original data.
Beveiliging van persoonlijke informatie
We nemen technische, administratieve, fysieke en procedurele beveiligingsmaatregelen om het risico te verkleinen dat persoonlijke informatie in ons bezit en beheer onbedoelde of onwettige vernietiging, verlies, wijziging of ongeoorloofde openbaarmaking of toegang zal ondergaan. Bezoek onze Vertrouwenspagina voor meer gedetailleerde informatie over onze gegevensprivacy- en beveiligingspraktijken.
Rechten en keuzes
Waar de wetgeving inzake gegevensbescherming van toepassing is, hebt u bepaalde wettelijke rechten om toegang te vragen tot en rectificatie of verwijdering van persoonlijke informatie die we over u hebben.
In some cases, you are entitled to receive, in portable form, a copy of the personal information you have provided to us or to request that we transmit it to a third party. You may also object to our processing of your personal information or request certain restrictions on the processing. You may withdraw any consent you have provided for the processing of personal information (which will not affect the legality of any processing that happened before the request takes effect). All such rights may be exercised by contacting the applicable entity listed below or by contacting Lightspeed as described above, who will handle or route the request as appropriate. These rights are subject to legal exceptions and limitations, which we must consider when addressing the request.
If you have any questions, concerns or complaints relating to our handling of personal information, please contact us as described in this Policy. You may also contact the relevant governmental authority (e.g., the UK Information Commissioner’s Office for UK individuals) with a complaint related to our handling of your personal information. However, we invite you to give us a chance to resolve the situation directly. Your privacy is important to us, and we will do our very best to address your concerns.
Contact opnemen met Lightspeed
To exercise your rights in this UK Notice or under the Data Protection Legislation (including to request further information on the mechanisms we have put in place in relation to personal information transfers outside the UK), to notify us of your preferences, please contact us as follows:
Functionaris voor gegevensbescherming: John Genter
Lightspeed Systems Privacyafdeling
12013 Fitzhugh Rd.
Austin, TX 78736
E-mail: [email protected]
General Data Protection Regulation (GDPR) – UK Representative
Op grond van artikel 27 van de VK AVG heeft Lightspeed Systems EDPO UK Ltd aangesteld als haar VK AVG-vertegenwoordiger in het VK. U kunt contact opnemen met EDPO UK met betrekking tot zaken die betrekking hebben op de Britse AVG:
- door het online aanvraagformulier van EDPO te gebruiken: https://edpo.com/uk-gdpr-data-request/
- by writing to EDPO UK at Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London, N1 7UX, United Kingdom
5. Data Privacy Framework (DPF) van het Amerikaanse ministerie van Handel
The EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF), were respectively developed in furtherance of transatlantic commerce by the U.S. Department of Commerce, the European Commission and the UK Government to provide U.S. organizations with reliable mechanisms for Personal Data transfers to the United States from the European Union/ European Economic Area and the United Kingdom, while ensuring data protection that is consistent with EU and UK laws.
Kaderconformiteit
Lightspeed Solutions, LLC, which conducts business under the name “Lightspeed Systems”, complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. Lightspeed Systems has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of human resources data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this Policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
This certification applies solely to human resources data transferred from the European Union and the United Kingdom in the context of the employment relationship.
Lightspeed Systems is onderworpen aan de onderzoeks- en handhavingsbevoegdheden van de Federal Trade Commission (FTC).
Choice
If Personal Data covered by this Policy is to be used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized, or if it is to be disclosed to a non-agent third party in a manner not specified in this Policy, Lightspeed Systems will provide you with the opportunity to choose whether your Personal Data may be so used or disclosed before such use or disclosure occurs. You may exercise this choice by contacting the Privacy Department using the contact information provided in Section 3 – How to Contact Us About This Policy.
Because this Policy governs applicant and employee data, Lightspeed Systems may process Sensitive Information as defined under the EU-U.S. Data Privacy Framework Principles and the UK Extension to the EU-U.S. Data Privacy Framework. Lightspeed Systems will not use or disclose Sensitive Information for a purpose other than the purpose for which it was originally collected or subsequently authorized unless it first obtains the individual’s affirmative, explicit (opt-in) consent.
Verantwoordelijkheid voor verdere overdracht
In the event Lightspeed Systems transfers personal data covered by this Policy to a third party acting as a controller or an agent, we will do so consistent with any notice provided to Data Subjects, any consent they have given, and only if the third party has given us contractual assurances that it will (i) process the Personal Data for limited and specified purposes consistent with any consent provided by the Data Subjects, (ii) provide at least the same level of protection as is required by the EU-U.S. Data Privacy Framework Principles, and notify us if it makes a determination that it cannot do so; and (iii) cease processing of the Personal Data or take other reasonable and appropriate steps to remediate if it makes such a determination. If Lightspeed Systems has knowledge that a third party acting as a controller or an agent is processing Personal Data covered by this Policy in a way that is contrary to the EU-U.S. Data Privacy Framework Principles, Lightspeed Systems will take reasonable steps to prevent or stop such processing.
Lightspeed Systems remains liable under the EU-U.S. Data Privacy Framework Principles if an agent processes Personal Data covered by this Policy in a manner inconsistent with the Principles, except where Lightspeed Systems is not responsible for the event giving rise to the damage.
Vragen/klachten
If you have any questions, concerns or complaints relating to our handling of personal information, please contact us as described in this Policy. You may also contact the relevant governmental authority (e.g., the UK Information Commissioner’s Office for UK individuals) with a complaint related to our handling of your personal information. However, we invite you to give us a chance to resolve the situation directly. Your privacy is important to us, and we will do our very best to address your concerns.
Onder bepaalde omstandigheden kan een individu het recht hebben om bindende arbitrage in te roepen wanneer andere procedures voor geschillenbeslechting zijn uitgeput, op voorwaarde dat het individu bindende arbitrage heeft ingeroepen door hiervan kennisgeving te doen aan Lightspeed Systems en de procedures en voorwaarden te volgen die zijn uiteengezet in Bijlage I van de DPF-beginselen.
Human Resources Complaints
In overeenstemming met de EU-VS DPF en de Britse uitbreiding op de EU-VS DPF, verbindt Lightspeed Systems zich ertoe samen te werken en respectievelijk te voldoen aan het advies van het panel dat is opgericht door de gegevensbeschermingsautoriteiten (DPA's) van de EU en het Britse Information Commissioner's Office (ICO ) met betrekking tot onopgeloste klachten over onze omgang met personeelsgegevens die zijn ontvangen op basis van de EU-VS DPF en de Britse uitbreiding van de EU-VS DPF in de context van de arbeidsrelatie.
6. Aanvullende kennisgeving voor inwoners van Californië
Deze sectie is alleen van toepassing op inwoners van Californië en is bedoeld als aanvulling hierop
beleid met informatie vereist door de wet van Californië.
Voor gedetailleerde informatie over de categorieën verzamelde gegevens, doeleinden van het verzamelen/openbaar maken van gegevens en ontvangers van openbaarmakingen, verwijzen wij u naar secties 1 en 2 van dit beleid.
Uitoefening van uw rechten: Als u een inwoner van Californië bent, zijn er mogelijk enkele aanvullende rechten die voor u beschikbaar zijn onder de California Consumer Protection Act (“CCPA”) en de California Privacy Rights Act (“CPRA”), waaronder:
- Het recht om informatie op te vragen over hoe wij uw persoonlijke gegevens verwerken;
- Het recht om toegang te vragen tot de specifieke persoonlijke gegevens die we over u hebben verzameld;
- Het recht om te verzoeken dat wij onjuiste informatie corrigeren;
- Het recht om te verzoeken om verwijdering van de persoonlijke informatie die wij over u bewaren; En
- Het recht om te verzoeken dat wij het gebruik van uw gevoelige persoonlijke gegevens beperken.
Als u uw rechten wilt uitoefenen, neem dan contact met ons op zoals beschreven in dit beleid. Geef details over het soort verzoek dat u indient. Om uw gegevens te beschermen tegen ongeoorloofde toegang of verwijdering, kunnen wij van u verlangen dat u aanvullende informatie verstrekt om uw identiteit te verifiëren. Als we uw identiteit niet kunnen verifiëren, kunnen we niet voldoen aan uw verzoeken om uw gegevens te kennen, in te zien, te corrigeren of te verwijderen. U zult niet worden gediscrimineerd vanwege het uitoefenen van uw privacyrechten onder de CCPA/CPRA.
Contact opnemen met Lightspeed
To exercise your rights in this UK Notice or under the Data Protection Legislation (including to request further information on the mechanisms we have put in place in relation to personal information transfers outside the UK), to notify us of your preferences, please contact us as follows:
Functionaris voor gegevensbescherming: John Genter
Lightspeed Systems Privacyafdeling
12013 Fitzhugh Rd.
Austin, TX 78736
E-mail: [email protected]
This policy was last updated 07/30/2026. Effective date: 08/01/2026