EUROPEAN PRIVACY NOTICE FOR CANDIDATES
1. Scope of Notice
This data protection notice (“Notice”) applies to all candidates applying for roles at Yahoo in the EEA and/or UK to provide you with information about how we process your personal information when you provide information directly to us (for example, via a job application or to a recruiter), when an existing Yahoo employee refers you to us, or when you make your information publicly available (for example, on career networking and job search sites).
The controller of your personal data is the Yahoo company that proposes to employ or engage you and will collect necessary information to process your employment application with the Yahoo company or other affiliated Yahoo entity seeking your employment in the EEA and/or UK (collectively, “Yahoo” “we”, “us” or “our”). An “affiliate” is any company that is controlled by or under common control with Yahoo Inc., Yahoo Holdings Inc., Yahoo Ad Tech LLC, AOL Media LLC, AOL Membership Services LLC, Yahoo Finance LLC, and AOL Holdings (HR), Inc. For a list of Yahoo’s major contact brands, please visit Yahoo brands.
2. Information we collect
We collect information from the following sources or directly from you or from an employment agency. In order to consider you for roles at Yahoo, we need to process certain personal information about you which includes, but is not limited to, the following:
- your personal details and contact information, which may include your name, address, email, telephone number and proof of identity;
- your recruitment and applications details, which may include information contained in CVs or letters of application, data related to your work history, education, qualifications, compensation, skills, nationality and your right to work, occupational interests, reference information, etc.
- assessment details: for example, if we ask you to attend for interview (either in person or by telephone or video) or ask you to complete assessments, including online 3rd party assessments, we may generate information about you;
- results of pre-employment checks and vetting (for example, if we make you a conditional offer of employment, we will consider the results of these checks where permitted by local law);
If voluntarily disclosed or required by law, information about your health or disability status (which are considered to constitute special categories of personal data) relating to an accommodation that is disclosed during the recruiting process.
In addition, Yahoo may view and process information you make publicly available on various career networking and job search sites, such as LinkedIn. This information may be considered when assessing your employment application with Yahoo.
Yahoo will request information related to the position you’re applying for. Please ensure the information you provide is accurate and is not in any respect misleading, deceptive or likely to mislead or deceive. If we make you a conditional offer of employment, where permissible by local law, we will verify the information provided by you as part of the recruitment process and any resulting employment may be withdrawn/terminated if it is inaccurate.
While the application process is voluntary, the provision of certain information is mandatory (and may be required under applicable law or in accordance with a contractual requirement). The collection of any such information will be made clear at the time of collection of the information. If you choose not to submit this information to Yahoo, this may affect your application.
3. Why we use your information and our legal basis of processing
The above information will be processed for the purposes of progressing your application and assessing the suitability of candidates for employment at Yahoo. In doing so, Yahoo is pursuing its legitimate business interests of hiring suitable candidates and seeking assurances from previous employers and referees as to candidates’ work performance and reliability.
We may also use your information to analyse and improve the recruiting process and as required to comply with applicable legal or regulatory requirements. For example, if we make a conditional offer of employment, we may be required to confirm the identity of our personnel and their right to work in a particular country under immigration and employment rules.
Where required by applicable law and/or where necessary in Yahoo’s legitimate interests to hire trustworthy candidates, we may also carry out pre-employment screening and background check investigations.
Yahoo will use your personal data when it is necessary in Yahoo's legitimate interest to preserve or defend its rights in court, to respond to law enforcement or government agency requests or discovery procedures, or where required or permitted by applicable laws, court orders, government regulations, or government authorities (including tax and employment) which may include lawful access by courts or governmental authorities outside your country of residence.
Yahoo will also request information needed to comply with the laws of the country where the position is located. Where this is required, you may be asked to provide a response to the information requested, which may include, but is not limited to, voluntary information on gender, ethnic or racial background. This information constitutes special categories of personal data. This information is processed in certain countries to enable Yahoo to comply with its equal employment opportunities legal requirements. This information is not available to Yahoo employees making candidate selection decisions, but is available to those responsible for accessing this kind of information to comply with the relevant legal requirements.
We may process special categories of personal data (for example, if you voluntarily disclose data about any disability or health condition which you may have) where necessary for the establishment, exercise or defence of a legal claim by us or where necessary for the purpose of carrying out our obligations and for the exercising of our rights or your rights in the field of employment or social security law. You may also provide explicit consent to Yahoo to enable Yahoo to process this type of data as part of the hiring process.
4. How we share this information
Yahoo, when necessary and in accordance with the purposes of processing set out in this Notice, will share your information with affiliates and third parties in order to progress your application and to conduct and improve the recruiting process. For example, we share information with the following categories of third parties:
- Recruitment service providers (including online recruitment platforms)
- Pre-employment screening service providers
- Applicant tracking system providers
- Applicant/recruitment assessment providers
- Immigration and employment lawyers and consultants
When we outsource the processing of your personal data to third parties or affiliates or provide your information to third party service providers or affiliates to process it on our behalf, we require those third parties to protect the personal data they are provided with appropriate security measures and prohibit them from using information for their own purposes or from disclosing the information to others.
When you use third-party apps, websites or other products integrated with our systems to apply for a role, they may collect information about you subject to their own terms and privacy policies.
5. Data security
Yahoo maintains appropriate technical and organisational security measures (including IT system monitoring and website blocking) to protect personal data against accidental or unlawful destruction, or accidental loss, alteration, unauthorised disclosure or access, in compliance with applicable law. The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.
6. Data Transfers
Yahoo is part of a global service so it shares information with affiliates and third parties based outside the European Economic Area (“EEA”) for the purposes described in this Notice. The United States and other non-EEA countries all have different laws on data protection and rules in relation to government access to information. If you are based in the EEA, when your data is moved from your home country to a third country outside the EEA some of these countries may not have the same data protection safeguards as your home country. These transfers are necessary for Yahoo’s recruitment operations.
When your information is transferred outside of the EEA, Yahoo EMEA Limited relies on adequacy decisions if the recipient is in a country that is considered ‘adequate’ by the EEA. In other cases, Yahoo relies on Standard Contractual Clauses which have been approved by the European Commission (and UK) to transfer your personal data for the purposes described in this Notice, or another appropriate transfer mechanism under the applicable law.
When your information is transferred to Yahoo Inc, other certified Yahoo affiliates, or any other company certified under the EU-US Data Privacy Framework (EU-U.S. DPF), we rely on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, as described below, which the European Commission (and UK) has recognised provides an adequate level of protection for personal data.
To learn more about the Data Privacy Framework (DPF) program, and to view Yahoo Inc’s certification, please visit https://www.dataprivacyframework.gov/. For additional information about Yahoo’s Standard Contractual Clauses please contact Yahoo’s Data Protection Officer at dpo@yahooinc.com.
Data Privacy Framework
Yahoo Inc. (and its US affiliates listed in Yahoo Inc.’s DPF Certification) complies with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce regarding Yahoo Inc.’s processing of personal data of candidates for employment or engagement by a Yahoo company established in the EEA and UK as described in this Notice.
Yahoo Inc. has certified to the U.S. Department of Commerce that it adheres to the Data Privacy Framework Principles (DPF Principles).
Yahoo Inc. is also liable for onward transfers to third parties that process personal information in a manner that is inconsistent with the DPF Principles unless it can prove that it was not responsible for the event giving rise to any alleged damage.
If there is any conflict between the terms in this Notice and the EU-U.S. DPF Principles, the DPF Principles shall govern.
If you have any queries or complaints about our collection and use of your personal information, we invite you to contact Yahoo’s Data Protection Officer at dpo@yahooinc.com. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Yahoo Inc. commits to comply with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA) with regard to unresolved complaints concerning our handling of candidate and human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF in the context of Yahoo’s recruitment processes. If your complaint remains unresolved you may also invoke binding arbitration as described in Annex 1 of the DPF.
Yahoo Inc.’s compliance with the DPF is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
7. Data retention
If you are successful in your application, the information you provide during the application process will be retained as part of your employee file. We will retain this information for as long as is required in order to comply with our legal obligations and to resolve disputes and to enforce our agreements.
If you are unsuccessful, and unless you object to this, we will retain the information you provided for a 12-month period to contact you about other current and future positions, to resolve any disputes that may arise in connection with your application. If relevant and so that we can contact you about current and future positions at Yahoo, we may ask if we can retain information about you for a longer period of time. We will only do this with your express consent and you may request for your information to be removed at any time.
8. Your Rights
You have a number of rights as regards the information we collect and hold about you for the purposes set out in this Notice. These rights include the right to access or port your personal information, correct inaccuracies in your personal information, the right to restrict or limit the way in which we use your personal information.
In certain circumstances, you have the right to object to the processing of your personal data held by us. You can request that we delete the personal data that we hold about you and we will carry out this request, except for where exceptional circumstances exist that require us to hold on to certain information.
If you have any questions about this Notice, or if you require further information about our use of your personal data or you wish to avail of any of your rights set out herein, please contact Yahoo’s Data Protection Officer at dpo@yahooinc.com. If you would like to contact the controller of your candidate information, Yahoo EMEA Limited, by post, please write to: Yahoo EMEA Limited, Attention: Data Protection Officer, ####Dublin-v2address#### Ireland.
Finally, you also have the right to lodge a complaint with a supervisory authority in the EU member State in which you are based. The following provides a link to EDPB Our Members.
9. Changes to this Notice
This Notice may be updated from time to time. If we make changes that are material, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification.
Updated September 2024