Candidate And Employee Privacy Notice

Your privacy is important to us, and maintaining your trust is our priority.

This One Step GPS, LLC Candidate and Employee Privacy Notice (this "Privacy Notice") describes how One Step GPS, LLC and its affiliates companies and subsidiaries (collectively, "One Step GPS," "Company," or "we") will collect, process, and use the personal data you submit when applying for a position with Company or one of our affiliates, or as a present or past employee of Company. This Privacy Notice supplements the One Step GPS Privacy Policy. One Step GPS, LLC and its affiliated companies and subsidiaries respect your privacy, and we request that you read this Privacy Notice.

California Residents: CALIFORNIA LAW REQUIRES THAT WE PROVIDE YOU A NOTICE ABOUT THE COLLECTION AND USE OF YOUR PERSONAL DATA. IF YOU ARE A RESIDENT OF CALIFORNIA, YOU SHOULD REVIEW THE SECTION BELOW ENTITLED "SUPPLEMENTAL CALIFORNIA DATA PROCESSING NOTICE."

This Privacy Notice explains how we process your personal data during the recruitment and hiring process in order to progress your application, which may culminate in entering into a contract with you. If the Company engages you as an employee, contingent worker, contractor, or other non-employee personnel, you will find more information on the policies and practices governing your employment in our Employee Handbook. To request a copy, please email hr@onestepgps.com

Although it will vary by the nature of the role for which you apply, we may collect, process, and use the following types of personal data that you provide as part of your initial submission or otherwise make available to us as part of the application process:

If your application progresses, we may also collect and process the following:

Depending on several other factors, we may also collect:

Employee Data Collection & Processing:

Once hired, One Step GPS collects, processes, and stores additional personal data to administer employment, ensure legal compliance, and support business operations. The categories of personal data we collect during employment include:

Performance & Workplace Monitoring:

Used for productivity management, performance evaluations, and workplace security.

Collected to meet legal, regulatory, and workplace safety requirements.

Collected to manage IT security, protect company assets, and support operations.

In response to your application or your interest about job positions, your information will be used by the us as necessary to:

• Verify your information and conduct relevant and appropriate legally permitted pre-employment and eligibility verification checks, as well as to assess your skills, qualifications and experience;
• Comply with local, national or international laws, obligations and legal requirements;
• Communicate with you about Company events, careers opportunities, and the recruitment process including any interviews;
• Contact you for other, future roles which may be of interest to you and aligned to your skillset;
• Complete the selection process;
• Conduct surveys and research activities with the objective of improving our recruiting process;
• Perform analysis of our applicant pool to better understand who is applying to positions at the Company and how to attract top talent; and
• Where legally permissible, we may ask you to voluntarily disclose your disability, ethnicity, gender, and nationality, to help the Company with its diversity and inclusion programs (such as to assess the Company workforce, promote benefits and inclusive policies for the related population).

By submitting your application, you authorize us to store your personal data in the Company's recruitment tools for the secure storage of your data while your application is assessed and otherwise as set out above.

If you are given and accept an offer of employment by us, the personal data collected during your pre-employment period may become part of your Company employment record, to be retained throughout and for a period of time after your employment with us (specific periods vary). If the Company does not employ you, we will retain your personal data according to the document retention policy after which your personal data will be erased from the Company recruitment systems.

In some jurisdictions, the lawful handling of personal data is subject to a justification, sometimes referred to as legal basis. The legal bases that we rely on for the lawful handling of your personal data vary depending on the purpose and stage of the recruiting, hiring, or employee onboarding process you are in, and applicable law.

The different legal bases that we may use are:

Necessary for the performance of a contract with you
We rely on this legal basis to process your personal data for the purposes of preparing to enter into an employment contract with you.

Necessary for the purposes of the Company's legitimate interest
We rely on our legitimate interests when processing your personal data for the purposes of sourcing suitable talent for the Company's workforce.

Consent
The processing of your personal data is based on your consent where we request this or when consent is required by applicable law.

Legal obligation
We rely on this legal basis to process your personal data due to obligations stemming from, for example, local labor or tax laws when preparing to begin an employment relationship with you.

Your information may be accessed by and shared with Company recruiters, our recruitment outsourcing vendors, our Human Resources (HR) Team, and employees of the Company who are involved in the recruitment process on a need-to-know basis, such as the interviewers and hiring manager, as relevant and necessary for your application for the role you are being considered for.

In some cases, the Company shares your personal data with third parties, if legally required or allowed, to achieve the purposes informed above. Depending on the geography, these third parties may include, but are not limited to, suppliers of human resource information systems used by us, immigration and background check suppliers, and suppliers related to occupational health and safety management services systems.

Your information may be shared with government officials where legal reporting requirements may exist, or law enforcement agencies or private litigants in response to a valid law enforcement process (warrant, subpoena, or court order).

We maintain organizational, physical and technical security arrangements designed to protect all the personal data we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake.

In accordance with the laws of certain countries, you may have certain rights when it comes to the handling of your personal data. Information regarding these rights, including information on how to make a complaint, can be found in our Privacy Policy.

Please be aware that depending on the circumstances, if you request that we delete or otherwise stop processing your personal data, we may not be able to proceed with your application, as it may depend on the use of such personal data.

You declare and confirm that the information you have provided as part of your application is true and complete. You must promptly update any information you have provided as and when there are changes. You understand that any misrepresentation or deliberate omission of fact may lead to the Company's termination of your employment or consideration for employment.

This section applies to residents of California and describes how we collect, use, and disclose personal information of California residents and the rights such residents may have with respect to their personal information. These rights are not absolute, and in certain cases we may decline your request as permitted by law.

For purposes of this Supplemental California Data Processing Notice, "personal information" and "sensitive personal information" have the meanings given in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CPRA").

Your Privacy Rights.

• Information. You can request the following information about how we have collected and used your personal information during the past 12 months:
  • The categories of personal information that we have collected.
  • The categories of sources from which we collected personal information.
  • The business or commercial purpose for collecting, selling or sharing personal information.
  • The categories of third parties with which we disclose personal information.
• Access. You can request a copy of the specific pieces of personal information that we have collected about you.
• Deletion. You can ask us to delete the personal information that we have collected from you, subject to certain exceptions.
• Correction. You can ask us to correct inaccurate personal information that we have collected about you.
• Opt-out of sales or sharing of personal information. California residents can opt-out of any "sale" or "sharing" of personal information as such terms are defined under the CPRA. We do not sell or share personal information subject to this Privacy Notice and have not done so in the preceding 12 months. However, we encourage you to review our Privacy Policy for information about the sale or sharing of personal information that may occur when you interact with us in the same manner that a customer or other non-employee candidate or non-employee may interact with us.
• Opt-out of profiling/automated decision making. You can opt-out of automated processing or profiling performed on personal information to evaluate, analyze, or predict personal aspects related to a person's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
• Limit processing of sensitive personal information. You can ask us to limit the processing of any sensitive personal information we collect as necessary for our (1) Service delivery and operations, (2) compliance and protection, (3) research and development, or (4) Service improvement and analytics purposes. However, we do not use or disclose sensitive personal information in ways subject to the right of California residents to limit its use.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CPRA, including exercising such rights without retaliation.

How to Exercise Your California Privacy Rights.

You may submit requests to exercise your rights to our human resources department at hr@onestepgps.com or by calling us at (818) 659-2031. We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. We reserve the right to confirm your current California residency.

Your authorized agent may make a request on your behalf upon our verification of the agent's identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to California Probate Code Sections 4000-4465. If you have not provided your agent with such a power of attorney, you must provide your agent with written and signed permission to exercise your CPRA rights on your behalf, provide the information we request to verify your identity, and provide us with confirmation that you have given the authorized agent permission to submit the request.

California Categories of Personal Information.

California law requires that we describe the categories of personal information we collect by reference to certain categories described in California law. All categories described in the "What personal data do we process?" section in this Privacy Notice include "identifiers," "professional or employment information," and "inferences," as defined under California law.

Additionally,

• Experience information includes "education information";
• Application information includes "education information," "sensory information," "medical information," and "financial information";
• Video system information includes "sensory information" and "internet or network information";
• Information collected as part of the interview process includes "sensory information" or "education information";
• Background check information includes "education information" and "medical information";
• Recommendations provided on your behalf by others include "education information";
• Banking information includes "financial information" and
• Information required to initiate employment includes "financial information" and "medical information."

Sensitive Personal Information.

With the possible exception of "identification information," all of the categories described in the "What personal data do we process?" section include or contain information from which it may be possible to infer sensitive personal information and characteristics of protected classifications under California or federal law if applicable, such as racial or ethnic origin and religious or philosophical beliefs. However, we do not use or disclose sensitive personal information in ways subject to the right of California residents to limit the use of sensitive personal information under the CPRA.

We reserve the right to make corrections, changes or amendments to this Privacy Notice at any time. The revised Privacy Notice will be posted on this website. For more information, see "Changes to this privacy statement" section of our Privacy Policy.

One Step GPS controls what personal data is collected and how it is used. See https://www.onestepgps.com/contact-us for a list of One Step GPS Office Locations. The "How to Contact Us" section of the One Step GPS Privacy Policy provides more information on how to contact One Step GPS.