UBER CANDIDATE PRIVACY NOTICE

This notice describes how Uber and its affiliates/subsidiaries (collectively “Uber”) collect, use, disclose, and otherwise process the personal data (“Candidate Data”) of individuals who apply or are considered for a position with Uber (“Candidates”).

SCOPE AND APPLICATION

This notice governs Uber’s processing of Candidate Data anywhere in the world in connection with our recruitment of Candidates for positions at Uber.

Except as indicated below, this notice does not apply to Uber’s processing of personal data in connection with the use of its products or services. For information on such processing, please see Uber’s Privacy Notice.

COLLECTION OF CANDIDATE DATA

We collect the following categories of Candidate Data directly from you:

• name, address, email address, telephone number, or other contact information
• resumes/CVs, cover letter, academic transcripts, and other statements of experience and education, including in video/audio format
• the position(s) for which you wish to be considered, desired salary, willingness to relocate, and other job preferences
• how you heard about the position
• prior employers, dates of employment, positions held and/or job titles
• referral names and contact information for referrals
• name and contact information for references (it being solely your responsibility to obtain consent from references before providing their personal data)
• any other personal data that you provide during the job search, application, or interview process with Uber, including medical/disability, information submitted in connection with skills assessments, additional information regarding work or educational experiences, information about employment offers from other companies, and reason(s) for acceptance/rejection
• whether and why you have previously been deactivated from using Uber’s apps or services (whether as a rider, driver, delivery recipient, delivery person or as a user of any other Uber app or service). Uber may verify any information you provide, including by accessing your Uber account(s) to determine whether and why you may have been deactivated from using Uber’s apps or services.

We may also receive the following categories of information from other sources:

• where permitted by law, background check data, potentially including your criminal history records.
• information concerning your prior employment, including (where permitted by applicable law) compensation and your educational and academic degrees, from employment agencies, publicly available sources, social media websites, former employers and/or educational institutions
• information provided by references that you provide

In addition, if you apply for a position in the United States, or in another country that permits such voluntary data collections, you will have the opportunity to provide information about your gender, race/ethnic origin and/or veteran status in order for us to conduct equal opportunity monitoring. Where permitted by law, we may also infer some of this information for past Candidates in order to improve our recruitment process. The provision of this information is entirely voluntary, and where required by law (including in the European Economic Area (“EEA”)), we only collect such information with your express consent. If you decline to provide this information, your application(s) will not be affected in any way. If you choose to provide this information, you consent to our using it for equal employment opportunity monitoring purposes. This information will be held and stored anonymously and will not be used to evaluate your application for employment.

USE OF CANDIDATE DATA

Uber uses your Candidate Data in connection with our Candidate recruitment process. For example, we use your Candidate Data to:

• evaluate and verify your education, skills, experiences and other qualifications and interests in connection with open roles at Uber. We may use automated processes, including AI, for this purpose.
• communicate with you regarding the interview process, and inform you of potential career opportunities
• prepare offers of employment, including as it relates to compensation
• improve our recruitment process, including by generating anonymized data and analysis using Candidate Data
• perform pre-employment background checks where permitted by law

If you are hired, Uber will maintain your Candidate Data as part of your employee records.

If you are not hired for the position for which you were initially considered, we may use your Candidate Data to identify and contact you regarding other positions for which you may want to be considered. If you do not wish for Uber to use your data for this purpose, you may request that we delete your Candidate Data as explained below.

In addition, if you provide Uber with the contact information of your references, Uber may use that information to contact your references (and not for any other purpose). Information provided by such references will be used to evaluate your candidacy, and will otherwise be treated in accordance with this notice.

SHARING OF CANDIDATE DATA

We may share your Candidate Data:

• with Uber subsidiaries and affiliates.
• with an Uber employee who has referred you to inform them about the status and outcome of the referral.
• with vendors, consultants, and other service providers who need access to such information to carry out work relating to the recruitment process on our behalf.
• in connection with, or during negotiations of, any merger, sale of Uber assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
• with law enforcement officials, government authorities, or other third parties if we believe it is required by applicable law, regulation, operating agreement, legal process such as subpoenas or court orders, or governmental request, if we believe your actions are inconsistent with our policies, or if we believe such sharing is necessary to protect the rights, property, or safety of Uber or others.
• in an aggregated and/or anonymized form which cannot reasonably be used to identify you.

Uber does not sell Candidate personal data.

COOKIES AND THIRD PARTY TECHNOLOGIES

We may allow others to provide online audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify your device when you visit our site, including Uber’s Careers page. For more information about these technologies and service providers, please refer to our Cookie Policy.

CANDIDATE DATA RETENTION AND DELETION

Uber retains your Candidate Data for as long as you are under consideration for a position with Uber. Thereafter, Uber retains your data in accordance with the laws in the countries where you live. These laws may require Uber to retain your information for periods defined in such laws, or to delete it after periods defined in those laws. Unless otherwise required by such laws, Uber will retain your Candidate Data for 3 years after it ceases to consider you for a position with Uber, and will thereafter delete your Candidate Data except for historical information regarding the positions for which you were considered (e.g., the position(s) for which you applied and the dates of your application(s)), and the decisions made by Uber with respect to your candidacy (which may include the grounds for the decision). In some cases, we may ask for your consent to retain your Candidate Data for longer than the period otherwise permitted under applicable laws.

You may also request deletion of your Candidate Data at any time. Unless otherwise required by law, or where Uber may have a legitimate interest that justifies continued retention, Uber will delete your Candidate Data after receiving such request, except for historical information regarding the positions for which you were considered, and the decisions made by Uber with respect to your candidacy.

YOUR RIGHTS

You have the following rights with respect to Uber's handling of your Candidate Data:

• access your personal data
• correct any errors regarding your personal data
• erase or delete your Candidate Data under the terms above
• object to or restrict certain processing of your Candidate Data
• receive your Candidate Data in a usable electronic format and transmit it (data portability)
• withdraw your consent to the processing of your Candidate Data
• request human review of any recommendations regarding your candidacy that are provided by automated systems or processes, including AI

To exercise these rights, please see below or submit your request here. Please note that in certain instances, exercising your rights to object to or restrict processing of your Candidate Data, or to withdraw consent relating to the processing of your Candidate Data, may impact our ability to consider you for a position with Uber. Candidates will not be discriminated against for exercising these rights.

In addition, if you are a resident of the EEA, you also have the right to lodge a complaint with your local data protection authority or regulatory body relating to Uber’s handling of your Candidate Data.

INFORMATION FOR CANDIDATES IN THE EUROPEAN ECONOMIC AREA

Uber processes your personal data pursuant to one or more of the following legal bases:

• The processing is necessary to take steps, at your request, relating to potentially entering into an employment contract with you.
• The processing is necessary to comply with our legal obligations, such as retaining records relating to the recruitment process for periods required under applicable laws.
• The processing is necessary in connection with Uber’s legitimate interests in recruiting and hiring the best candidates. For example, we process your Candidate Data to measure and improve the effectiveness of our recruitment process, or maintain historical records of the recruitment process and the outcomes of that process.
• We may also seek your consent to process or retain your Candidate Data in certain circumstances. For example, we may ask for your consent to retain your data so that you may be considered for future employment opportunities with Uber.

INTERNATIONAL TRANSFER OF CANDIDATE DATA

Candidate Data is transferred to, and stored on, servers located in the United States, and may be accessed by employees of Uber and/or affiliated companies in or outside the United States.

We transfer your Candidate Data on the basis of Standard Contractual Clauses, the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), as set forth by the U.S. Department of Commerce. Such data remains subject to the GDPR or equivalents after such transfer.

Uber Technologies Inc. (“UTI”) has certified to the United States Department of Commerce that it adheres to (1) the EU-US Data Privacy Framework Principles regarding the processing of Candidate Data received from EEA member countries in reliance on the EU-US DPF, and from the UK (and Gibraltar) in reliance on the UK Extension to the EU-US DPF; and (2) the Swiss-US Data Privacy Framework Principles regarding the processing of personal data received from Switzerland in reliance on the Swiss-EU-US DPF. In the event of a conflict between this notice and the Principles mentioned above, the Principles shall govern. In the event that the EU-US DPF or the Swiss-EU-US DPF are invalidated, Uber will transfer Candidate Data that is subject to these certifications in reliance on the other data transfer mechanisms described above.

If you live in the EEA, UK or Switzerland, please note the following:

• Scope. Uber’s DPF certification applies to personal data originating from the EEA, UK or Switzerland.
• Rights to access, to limit use, and to limit disclosure. You have the right to access your Candidate Data that is subject to Uber’s DPF certification, to limit the use of your Candidate Data for purposes materially different from the ones described in this notice, and to limit disclosure of your Candidate Data to a third party. For information on how to exercise this right, please see “Your Rights” above.
• Onward transfer. Uber is responsible for the transfer of Candidate Data, subject to its certification to third parties. For information regarding the parties to whom Uber may transfer personal data, please see “Sharing of Candidate Data” above.
• Request from law enforcement. Uber is required under applicable law to share user data, including that which may be subject to Uber’s certification, pursuant to legal process or governmental request, including from law enforcement.
• Investigation and enforcement. Uber is subject to the investigatory and enforcement powers of the US Federal Trade Commission.

• Questions and disputes. In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, Uber commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of Candidate Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. You may contact us with questions regarding our compliance with these Principles. You may also refer a complaint to your local data protection authority, and Uber will work with that authority to resolve that complaint. In certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.

Employees can learn more about the EU-U.S. DPF and Swiss-U.S. DPF on Uber’s User Privacy Notice and view Uber’s certification, including the scope of data subject to our certification, here.

If you live in the United Kingdom, we transfer your Candidate Data on the basis of the International Data Transfer Addendum.

UPDATES TO THE NOTICE

We may change this notice from time to time. Any changes to this notice go into effect upon the effective date of the revised notice.

QUESTIONS AND COMMENTS

If you live in the EEA, you may submit questions and comments about this notice to:

Uber B.V.
Attn: Data Protection Officer
Burgerweeshuispad 301, 1076 HR
Amsterdam, the Netherlands

If you live outside the EEA, you may submit questions and comments about this notice to:

Uber Technologies, Inc.
Attn: Legal - Privacy
1725 3rd Street
San Francisco, CA 94158
United States