Candidates Privacy Notice

Last Updated: December 2023 

We at Lokalise are committed to protecting the privacy and security of your personal information. This Candidates Data Privacy Notice (the "Privacy Notice," the "Notice") explains how Lokalise Inc. and its affiliate, SIA Lokalise ("Lokalise," "we," "us") collects and handles your personal data and what privacy rights you have.  

The term "you," "Candidate" in this Notice refers to anyone who applies for a job role or open position at Lokalise or uses our careers websites, including our career page.

It is important that you read all this Notice carefully. Please note that this Candidate Privacy Notice does not create or form part of any employment contract or otherwise. 

This Notice is set out in this document and:

·       for those Candidates in the EEA and the UK, the "Additional GDPR Disclosures" annexed to this document; 

·       for those Candidates who are residents of California, the "Additional CCPA Disclosures" annexed to this document.

1. What Personal Data we collect

When you apply for a position at Lokalise, we collect and process information that may include, but is not limited to:

·       Identifiers such as name, surname, date, and place of birth;

·       Contact information such as an address, email address and telephone number;

·       CV/resume which typically includes past employment history (previous employers, job titles and contact information for references), qualifications, education; 

·       Links to your professional profile at LinkedIn and optional links to your professional pages;

·       Citizenship or immigration information, such as tax residency, nationality, IDs/passport, social security/insurance numbers, visa status;

·       Data for diversity monitoring, such as veteran status, gender, race, ethnicity, and disabilities; 

·       Any other information you voluntarily disclose throughout the recruiting process, such as contact information of references, compensation history, and personal situation.

You are under no statutory or contractual obligation to provide data during the recruitment process. However, suppose you do not provide sufficient information necessary for us to assess your application (such as proof of qualifications or work experience). In that case, we may not be able to process your application properly or at all.  

We rely on you to transmit complete, current, and accurate information about yourself. Please update your personal information if changes arise or contact us at privacy@lokalise.com to correct your information accordingly.

2. Sensitive data processing 

We do not generally collect special or sensitive personal data about you during the recruitment process unless you provide it to us voluntarily. That is information about your race or ethnicity, political opinion, religious or philosophical belief, trade union membership; genetic data; biometric data for unique identification; or information on your health, sex life, or sexual orientation. 

However, under certain circumstances, we are required or permitted by law to process sensitive personal information. For example, Lokalise may collect data about your racial/ethnic origin, gender, and disabilities to ensure compliance with anti-discrimination law or conduct equal opportunities monitoring. Likewise, information about your physical or mental condition may be collected to consider special equipment you might need for a subsequent job role. 

3. What sources we use to get personal data about you

We may collect personal data about you from the following sources to the extent permitted by law:

Third-Party Sources and Public Information. Employment screening agencies, background check agencies, talent acquisition agencies, recruiters, service providers, referees you named, former employers and/or schools and educational institutions, publicly available information on websites or social media, applicant tracking systems, and others where they are legally allowed to share your personal information with us. 

Individuals Who Refer You. Other individuals may give us your personal information when recommending you as a candidate for a specific position or our business generally.

Combining Personal Information from Different Sources. We may combine the personal information we receive from other sources with personal information we collect from you and use it as described in this Notice.

4. Legal basis and purpose of processing

We collect your personal data during various stages of the recruiting process (application, testing, interviews) because it is necessary for our hiring decisions. We collect and use your personal data for reasons related to your application and always following applicable data protection laws. We outline the main legal grounds and purposes of your data processing in Annex 1. Scroll down to see details.  

5. Personal information sharing 

Lokalise may have to share your data with third parties, including third-party service providers and our affiliated entities. Because we operate as part of a global business, we may transfer, store, or process your personal data in a country different from where you reside. We require all recipients to respect the security of your data and to treat it per the law. 

We may disclose your personal information to the following parties or in the following circumstances (where applicable):

Internally. Lokalise's personnel involved in the recruiting and hiring processes (for instance, hiring managers, HR coordinators, in-house lawyers). 

Service Providers. Applicant tracking systems and recruiting software providers, job boards, online testing, and recruitment analytics vendors, recruiting agencies, professional employment organizations, background check companies, talent acquisition and administration providers, data hosting providers, and other organization that process data on our behalf to help manage our recruitment process. 

Professional Advisors. Lawyers, tax and immigration consultants, financial / audit, management consultant ants, insurance, health and safety, security advisors in the course of professional services they provide us. 

Public or Government Authorities. National and/or international regulatory or enforcement bodies, courts, government departments, and other statutory or public bodies any other legitimate recipient of communications, when required to do so by law, regulation, court order, or legal process (like a subpoena). 

Business Transactions. Investors, governmental agencies, professional advisors, and other interested third parties during a corporate transaction like a merger, financing series, or sale of our assets, or as part of the due diligence for such contemplated transactions. If a corporate transaction occurs, we will notify you of any changes to control of your personal information and choices you may have.

Consent. We may share your personal information in other ways if you have asked us to do so or have given consent.

Some of the above circumstances for processing will overlap. There may be several circumstances that justify our use of your personal information.

6. Automated decision-making 

We do not make any automated decisions concerning your application without human involvement. Our hiring decision will be made considering a combination of factors such as your education, job experience, qualifications, and cultural fit.

We may use pre-employment automated tests, cognitive, numerical reasoning, and behavioral tests to measure your suitability for a specific position. The test results are never used as the sole determining factor in the recruitment process. 

7. How we protect your personal information 

We take your security seriously and take reasonable steps to protect and secure your personal information. We have implemented adequate technical and organizational measures to protect your data against unauthorized, accidental, or unlawful destruction, loss, alteration, misuse, disclosure, access, and other unlawful forms of processing. 

We limit access to your personal data on a genuine business need-to-know basis. Lokalise personnel accessing your data acts under our internal data protection rules and processes. Third parties will only process your personal information in an authorized manner following our instructions and subject to a confidentiality duty.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means. Therefore, any transmission remains at your own risk.

8.  Your Rights

Depending on your location, you have certain rights concerning your personal information. Those rights may include:

Request access to your personal data – you have the right to request a copy of the personal data we hold about you and verify if we are lawfully processing it.

Request correction of your personal data – you have the right to request correction of any incomplete or inaccurate data we hold about you.

Request erasure of your personal data - you have the right to request us to delete or remove personal data where there is no good reason for us to continue its processing. You are also entitled to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).

Object to processing of your personal data – you have the right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party), and you have some reasons or circumstances that make you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

Request the restriction of processing of your personal data – you have the right to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy or the reason for processing it.

Request the transfer of your personal data to another party.

Lodge a complaint. You may file a complaint with a supervisory authority in your country of residence if you believe the collection and use of your personal data infringe this Notice or applicable law.

If you would like to exercise any of your rights, or if you would like more information about these rights or the rights which may apply in your country, please send a request to privacy@lokalise.com. 

We may need to request specific information from you to confirm your identity and ensure your right to access the information (or to exercise any of your other rights). 

You will not be expected to pay a fee to obtain your personal data unless we consider that your access request is unfounded or excessive. In these circumstances, we may charge you a reasonable fee or refuse to comply with your request. We may charge a reasonable fee if you request another copy of the information already provided to us. 

9. Consent Withdrawal 

We are unlikely to rely on consent as a ground for the processing. However, if we do, you may withdraw consent at any time — though if you do so, that will not affect the lawfulness of what we have done before you withdraw consent. For this purpose, please notify us at privacy@lokalise.com. 

Once we receive your consent withdrawal, we will no longer process your information for the purpose you originally agreed to unless storing your data is required by law.   

10. How long we retain your personal information 

In general, we might keep personal data about you as long as it is necessary for the purpose for which we collected it. 

Where you are a successful candidate, personal data provided by you or obtained by Lokalise throughout the job recruitment process will be retained by us for as long as you are an employee of Lokalise (plus a reasonable period after your employment ends) to facilitate your employment. Our privacy notices for teammates will be available to you once you start onboarding at Lokalise. 

Where you are an unsuccessful candidate, Lokalise will retain your personal data for a period of 12 months after we have communicated to you our hiring decision. We would like to keep your personal data collected during the recruitment process for an additional retention period of 365 days following the expiration of the initial 12 months provided you prior consent to the extension. 

We will retain your personal data to consider you for any suitable alternative role that arises during this period. We further retain your personal data for that period to demonstrate that we have not discriminated against candidates on prohibited grounds in the event of a legal claim and that we have conducted the recruitment process fairly and transparently. 

After this period, we will securely delete or anonymize your personal data when it is no longer necessary for the aforementioned purposes. If you prefer us to delete your personal data, feel free to send your request at privacy@lokalise.com.

We will review your request at the earliest convenience and delete your data unless we are not required by law to keep it for a longer period. If deletion is impossible, we will securely store your personal data and isolate it from any further processing until deletion is permitted.

11. How to contact us

We have appointed a data privacy officer to oversee compliance with this Privacy Notice. If you have any questions, requests, or complaints regarding the use or disclosure of your personal data or if you would like to review, delete or update information about you, please contact our data protection officer by email: privacy@lokalise.com. 

12. Your complaints

We are committed to working with you to resolve any data protection concerns fairly. However, suppose you believe that we have not been able to resolve the issue. In that case, you have the right to make a complaint to the data protection authority in the country where you reside. A list of contact details for the EU data protection authorities is available here. 

13. Updates to this Privacy Notice

This Privacy Notice may be subject to updates and modifications from time to time. We will post any changes to this Notice on this page. Each version of this Notice is identified at the top of the page by its version date.

If you have any questions about this privacy notice, feel free to contact us at privacy@lokalise.com. 

Additional GDPR Disclosure

Under the General Data Protection Regulation (EU Regulation 2016/679) (the "GDPR"), if you are a Candidate in the UK or the European Economic Area (EEA), we are required to provide you with additional information about our processing of your personal information. These disclosures should be read in conjunction with the Privacy Notice.

Controller of your personal information

If you are a Candidate located in the UK or EEA, the Lokalise entity to which you are applying is the controller of your personal information. Lokalise Inc., Delaware, the USA, will be a data controller when you are applying for an open position on our career page. As a data controller, Lokalise Inc. is responsible for ensuring that your personal information processing complies with applicable EU data protection law. 

Legal basis for processing your personal information 

Our legal basis for collecting and using your personal information will depend on the information concerned. However, for this Notice, we will process your personal information, as summarized in Annex 1 below. The examples in Annex 1 cannot, of course, be exhaustive. 

Data transfers outside of the EEA

The countries outside of the European Economic Area (EEA) may have data protection laws that are different and some potentially less protective than your own country's laws. Lokalise has and will continue to implement measures with any recipients of your personal data to ensure it remains protected under this Privacy Notice and the applicable data protection laws. 

We comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (together, the “DPF”), and we have certified to the U.S. Department of Commerce that we adhere to the DFP Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF (together, the “DPF Principles”). A full list of all participating organizations is available on the U.S. Department of Commerce’s dedicated DPF website. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Lokalise commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/eu-us-data-privacy-framework for more information or to file a complaint.  The services of JAMS are provided at no cost to you.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Lokalise commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship. If your DFP complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not otherwise resolved by other redress mechanisms. For more information about binding arbitration, please follow this link.

The Federal Trade Commission has jurisdiction over Lokalise’s compliance with the DPF.

If you are located in the EEA, UK or Switzerland, we comply with applicable laws to provide an adequate level of data protection for the transfer of your Personal Data to other countries outside of the EEA, UK or Switzerland (“Third Countries”). Please note that some Third Countries, and certain entities within the USA who are not certified under the DPF, do not guarantee an adequate level of data protection. Transferring data to these Third Countries may therefore involve additional risks for your privacy rights. For example, the enforcement of your rights can be more difficult in these Third Countries.

However, we use our best efforts to ensure that an international data transfer to Third Countries, or a transfer to a non-DFP certified US entity, is governed by an adequate data transfer mechanism based on a risk assessment (comparable to a data protection impact assessment) regarding the transfer. We rely on one or more of the following mechanisms: EU and or UK Standard Contractual Clauses with a data recipient outside the EEA or UK (as the case may be), verification that the recipient has implemented Binding Corporate Rules and/or verification that the European Commission has adopted an adequacy decision in accordance with Art. 45 GDPR for the respective Third Country.

In the event of a legal obligation, we reserve the right under Article 6 (1) c) GDPR to disclose information about you if we are required to surrender it to competent authorities or law.More information on the topic is available here.

Onward Transfer

Lokalise may disclose personal information to subcontractors and third-party agents who assist Lokalise in providing its services. Before disclosing personal information to a subcontractor or third-party agent, Lokalise will obtain assurances from the recipient that it will: (a) use the personal information only to assist Lokalise in providing the services; (b) provide at least the same level of protection for personal information as required by the DPF Principles; and (c) notify Lokalise if the recipient is no longer able to provide the required protections. Upon notice, Lokalise will act promptly to stop and remediate unauthorized processing of personal information by a recipient. Lokalise will remain liable for onward transfers to its subcontractors and third-party agents.

Additional CCPA Disclosures

Under the California Consumer Privacy Act ("CCPA"), if you are a resident of California, we are required to provide you with additional information about how we collect, use, and disclose personal information. These disclosures should be read in conjunction with the Privacy Notice. 

For purposes of this Notice, the term "Personal Information" has the meaning given in the California Consumer Privacy Act of 2018 (the "CCPA") but excludes information exempted from the CCPA's scope. Please note that the terms of personal information and personal data are interchangeable for the purposes of this Notice. 

The categories and sources of the Personal Information we collect are described above in Section 2 of this Notice. 

The purposes for which we use Personal Information are described in Annex 1 of this Notice. 

The categories of third parties with whom we share personal information are described in Section 5 of this Notice. 

The specific pieces of personal information we have collected about you might be requested at

privacy@lokalise.com. 

Please note that we do not sell your personal information to third parties. 

California privacy rights 

You have the right not to be discriminated against by us because you exercised any of your rights under the CCPA.

However, your rights under California law may differ from the rights described in Section 8 "Your Rights" of the Notice to the extent they apply to Personal Information. We reserve the right to deny requests to exercise such rights as permitted by California law.

Annex 1

Under data protection laws, there are various grounds on which we can rely when processing your personal data. In some contexts, more than one ground applies. Three of those grounds can be summarised as Legal Obligation, Legitimate Interests, and Consent. We outline what those terms mean in the below table: