Organizational Development Specialist

Effective date: December 04, 2023

NEOGOV PRIVACY POLICY

Contents

1. 1.Introduction; Scope of this Policy.
2. 2.Where We Are a Service Provider.
3. 3.Personal Data We Collect About You and Why.
4. 4.Cookies and Similar Tracking Technologies.
5. 5.Online Analytics and Advertising.
6. 6.Information We Disclose.
7. 7.International Users.
8. 8.Your Data Rights and Choices.
9. 9.Notice to California Residents.
10. 10.Your Rights and Control under EU GDPR.
11. 11.Data Security and Integrity.
12. 12.Retention and Removal.
13. 13.Right to Revise.
14. 14.Contact Details.
15. 15.Privacy Contacts.

Introduction; Scope of this Policy.

The purpose of this Privacy Policy (the “Policy”) is to describe how we collect, use, store, protect, and disclose personal data online and offline either via our websites or related applications. This Policy applies to personal data we collect or use, and applications owned or controlled by Govermentjobs.com, Inc. (DBA “NEOGOV”), including our related brands NEOGOV.com, NEOED.com, PowerDMS.com, Governmentjobs.com, Schooljobs.com, and our mobile app(s) (collectively referred to as the “Services”), or affiliated companies (collectively referred to herein as “Governmentjobs”, "Schooljobs", “NEOGOV”, “NEOED”, “PowerDMS”, “we”, “us”, or “our”).

By using any part of the Services you agree that you have read this Policy, your personal data will be processed as described herein, and you agree to be bound by this Policy. This Policy is incorporated into our Terms of Use. Definitions not explicitly defined herein shall retain the meaning as prescribed in the Terms of Use. Any dispute related to privacy is subject to the Terms of Use and this Policy, including limitations on liability.

This Policy does not apply to (1) personal data controlled by our Customers (employers that utilize our Services, described further below), which is governed by our separate agreements and related data processing agreements with such Customers; (2) personal data collected by unaffiliated sites that link to or are accessible from our Services; (3) personal data our partners may collect directly from you and control; (4) personal data collected and processed by us about our employees or job applicants responding to our job offers; and, (5) non-personal data derived from personal data, including any data that is aggregated, de-identified, or anonymized, statistical data, insights, or other predictive data that is sufficiently different from your personal data that it cannot be reversed engineered through reasonable means, or otherwise identified from analysis or further processing of the derived data (collectively referred to as the “De-Identified Platform Data”). We use De-Identified Platform Data to provide Customers with useful and relevant insights, build features and data services, and improve our Services. Because De-Identified Platform Data does not identify you personally, we can use and disclose it in our discretion.

We are the controller for the personal data discussed in this Policy, except as noted in the “Where We Are a Service Provider” section below.

Where We Are a Service Provider

Our Customers are organizations such as federal, state, local, tribal, or other municipal government agencies (including administrative agencies, departments, and offices thereof), private businesses, and educational institutions (including without limitation K-12 schools, colleges, universities, and vocational schools), who use our Services to evaluate job applicants and/or manage their relationship with their personnel. When we provide our Services to our Customers, the Customer generally controls and manages the personal data (which may include sensitive personal data such as biometric information for timeclock tracking, your precise geolocation information, health information, and demographic information like race and ethnicity related to the employment relationship), and we process personal data as a "data processor" or "service provider" (as these terms are defined in applicable data protection laws). Our legal obligations as a processor and service provider are set out in our Customer contracts and policies. Our Customers, and not us, decide what types of personal data to collect to manage their relationships with you.

For instance, if you apply to a job or your employer utilizes our Services to manage their relationship with you, the personal data collected about you is generally controlled by the employer (our Customer). This Policy does not describe the processing of your personal data by our Customers, and we encourage you to visit the Customer’s privacy policy for information about their privacy practices. For example, if you applied to a job at a local state agency, you should contact that agency with any questions you may have relating to the personal data processing by that state agency within our Services.

Where we serve as a data processor or service provider, our Customer contracts and policies require us to either instruct you to contact our Customer, or redirect your inquiry to our Customer.

Personal Data We Collect About You and Why.

In this Section we set out general categories of personal data we may collect and the purpose for using your personal data, including the personal data collected and processed over the past year. We collect and process personal data to provide you the Services, fulfill our contractual responsibility to deliver the Services to our Customers, fulfill your requests, and pursue our legitimate interests and our business and commercial purposes. We also automatically collect data during your usage of the Services and collect other personal data about you from other sources. Your personal data will only be collected and used for purposes stated herein, where you provide additional consent, or as required by law or regulation - including national security or law enforcement requirements.

Information Provided by You.

We collect personal data from you directly when you visit our Services from either your computer, mobile phone, or other device, attend one our events, or communicate with our personnel. The categories of personal data we collect from you, involve the following:

Types of Personal Data Why the Personal Data is collected Identification, account, and contact data, including your name, username and password, professional or personal email address, professional or personal telephone phone number, and account preferences.

• Create your account, perform and manage our relationship with you and our Customers, and facilitate the relationship between you and our Customers for their hiring and employment purposes.
• Communicate with you and send you information as part of the Services regarding your questions, comments, requests for information, contests you entered into, upcoming events, newsletters and surveys, technical notices, security alerts, statements and invoices, support and administrative messages, significant updates to the Services or policies, as well as relevant notifications regarding your account.
• Notify you about our Services and events that we believe will interest you, for our legitimate interests in conducting direct marketing, or to the extent you’ve provided your consent. If you purchased or sent us an inquiry regarding our Services, we may send you information about similar Service you may be interested in. To learn how to manage these communications, see the “Your Data Rights and Choices” section of this Policy.
• Provide support services, answer your requests, comments, and questions, troubleshoot, and diagnose problems with our Services.
• Verify your identity, respond to legal requests, enforce our legal agreements where applicable, prevent fraud or potentially illegal activities, maintain security, and screen for and prevent undesirable or abusive activity.

Profile and employment data including your name, professional or personal postal address, professional or personal e-mail or telephone number, employer name and general location, job title or area of expertise, work experience and performance data, search history, job interest cards, education history, skills, certificates, and licenses.

• Perform and manage our relationship with you and our Customers, and facilitate the relationship between you and our Customers for their hiring and employment purposes.
• Provide you personalized recommendations of content, features, and Services, including to enable you to search and apply for jobs, match you with employers and job listings, help our Customers find and contact you, and display targeted notices and messages from our Customers.
• Make improvements, enhancements, or modifications to the Services through data analysis and research of usage trends, and feedback sessions.
• Conduct research on social, economic, and sectoral employment and hiring trends.
• Provide support services, answer your requests, comments, and questions, troubleshoot, and diagnose problems with our Services.
• Verify your identity, respond to legal requests, enforce our legal agreements where applicable, prevent fraud or potentially illegal activities, maintain security, and screen for and prevent undesirable or abusive activity.

Communications and publication data including communication content within emails, phone and other voice recordings, online forms, chats, forums including our Customer Community, date and time of the communication, and the communication method.

• Make improvements, enhancements, or modifications to the Services based on your feedback collected through feedback sessions or content you post within our Services or the Customer Community about your experience using our Services.
• Determine Services, events, newsletters, or contests that we believe will interest you and notify you.
• Provide support services, answer your requests, comments, and questions, troubleshoot, and diagnose problems with our Services.
• Verify your identity, respond to legal requests, enforce our legal agreements where applicable, prevent fraud or potentially illegal activities, maintain security, and screen for and prevent undesirable or abusive activity.

Contact preferences data including marketing content preferences, and the status of whether you opted-out of our marketing notices.

• Manage and track your preferences for communications you receive from us, identify trends in the interactions with our Services, and measure the performance of our communications.
• Make your profile viewable to employers, depending on your settings.

Transaction and billing data including the Service purchased, billing details, financial data corresponding to your selected method of payment (e.g. a credit card or a bank account number), which is collected by third-party payment processors on our or our customer's behalf.

• To facilitate your payment and billing for Services, facilitate payroll and tax Services for our Customers, and detect and prevent fraud.

You may voluntarily submit other personal data to us through our Services that we do not request and are not required for the relevant data processing activity.

Information Collected Automatically.

With the help of our Service Providers, we may also automatically collect personal data about you and your device and how you interact with our Services. Categories of personal data collected automatically include the following:

Types of Personal Data Why the Personal Data is collected

Usage data including Services you purchase, IP address, webpages visited, what you click on, features you use, how often and when you use the Services (including the date and time of your access or use), general location of usage, jobs performed, Service configurations, browser type and version, browser language, internet service provider, domain name, error logs, e-mails you view, and the subject of the ads you click or scroll over; and,

Device data including device address or other unique device identifying numbers, type of device, software and hardware attributes, your operating system, system and performance data, and mobile application permissions including cellular data, general geolocation, access to photos, camera, calendars, and reminders.

• Perform and manage our relationship with you and our Customers, and facilitate the relationship between you and our Customers for their hiring and employment purposes.
• Track your preferences and provide you personalized recommendations of content, features, and Services.
• Make improvements, enhancements, or modifications to the Services.
• Produce De-Identified Platform Data and conduct research on social, economic, and sectoral employment and hiring trends.
• If our Customer utilizes our mobile application or our time and attendance services where you clock in and out of your job, we may collect data based off your fingerprint or facial ID. For more information regarding our use of Biometric data, please see our Biometric Data Notice.
• Verify your identity, respond to legal requests, enforce our legal agreements where applicable, prevent fraud or potentially illegal activities, maintain security, and screen for and prevent undesirable or abusive activity.

General Location data including your device’s location through data that indicates a country, state, city or postal code, and in certain instances, by tracking the latitude and longitude of your IP address, Wi-Fi address, or device.

• Where one of our Customers utilizes our time clock features and you use it to punch in and out of your work shifts.
• Verify your identity, respond to legal requests, enforce our legal agreements where applicable, prevent fraud or potentially illegal activities, maintain security, and screen for and prevent undesirable or abusive activity.

Log and other automatic data collection including data about the nature of each access, IP address, ISP, files viewed, content changes in certain cases, operating systems, device type and timestamps, pages you view, links you click, touch stream data, movement, scroll, keystroke activity, browser type, access times, and third-party sites and services you were using before and after interacting with our Services.

• Track your preferences and provide you personalized recommendations of content, features, and Services.
• Make improvements, enhancements, or modifications to the Services.
• Ensure you can use our Services in conjunction with other services and facilitate your use of integrations.
• Produce De-Identified Platform Data and conduct research on social, economic, and sectoral employment and hiring trends.
• Verify your identity, respond to legal requests, enforce our legal agreements where applicable, prevent fraud or potentially illegal activities, maintain security, and screen for and prevent undesirable or abusive activity.

Cookies, pixel tags (“web beacons”), HTML Storage Objects, web tags, and embedded scripts within our communications and on our Services to collect data related to usage, location, device and logs.

• Among other reasons, we use various cookies and other tracking technologies to provide our Services, authenticate users when visiting our Services, for security purposes (e.g., to prevent fraudulent use of the Services and protect our Services generally), track your preferences, provide personalized recommendations of content, features, and Services, deliver more relevant ads to you as you browse the web, including ads on websites and applications other than on our Services, and help us understand how our websites and communications are being used. For more information on Cookies see the “Cookies and similar Tracking Technologies; “Do Not Track” section immediately below.

Cookies and Similar Tracking Technologies

We and our service providers may use a variety of technologies to collect information about your device and use of our Services as discussed immediately above. Most web browsers can be programmed to accept or reject the use of some or all of these technologies, although you must take additional steps to disable or control other technologies. Among these technologies include:

• A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser and device you use to access our Services. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies may be either “persistent” cookies or “session” cookies. A persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
• A web beacon (also called a web bug or clear GIF) is a graphic on a webpage or in an email message that is designed to monitor who is reading the page or message. Web beacons are often invisible because they are typically only 1-by-1 pixel in size. Web beacons are often used alongside cookies to track activity. Web beacons may be used to add data to a profile about a site visited, provide an independent accounting of how many people have visited a website, gather statistics about usage, among other things.
• HTML Storage Objects are program code that collects data about your activity on our Services. The HTML is temporarily downloaded onto your device while you are connected to our Services.

Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the "Help" section of your browser for more information (e.g., Microsoft Edge, Google Chrome, Mozilla Firefox, or Apple Safari). By blocking any or all cookies, you may not have access to certain features or offerings of the Services.

Online Analytics and Advertising

Online Analytics

We may use third-party web analytics services on our Services, such as those of Google Analytics, Hubspot, LinkedIn, Hotjar, and others. These service providers use the sort of technology previously described in the “Personal Data We Collect About You and Why” section to help us analyze how users use the Services, including by noting the third-party website from which you arrive. The information collected by the technology will be disclosed to or collected directly by these service providers, who use the information to evaluate your use of the Services. We also use Google Analytics for certain purposes related to advertising, as described in the following section. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Tailored Online Advertising

We may personalize the content and advertising that you see when using the Services through the use of third-party advertising technologies that allow for the delivery of relevant content and advertising on the Services, as well as other websites you visit and other applications you use. These third-party advertising technologies may include Google Ads, DoubleClick, Twitter, AddThis, ShareThis, and others. The ads may be based on various factors such as the content of the page you are visiting, information you provide such as your age and gender, your searches, demographic data, and other information we collect from you. These ads may be based on your current activity or your activity over time and may be tailored to your interests.

We neither have access to, nor does this Policy govern, the use of cookies or other tracking technologies that may be placed on your computer, mobile phone, or other device you use to access the Services by non-affiliated, third-party ad technology, ad servers, ad networks or any other non-affiliated third parties. Those parties that use these technologies may offer you a way to opt out of ad targeting as described below. If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link or the Digital Advertising Alliance’s Consumer Opt-Out link to opt-out of receiving tailored advertising from companies that participate in those programs. You can also use the options below in the "Rights Regarding Your Information" section below.

Please note that you may still receive advertisements even if you opt out of tailored advertising. In that case, the ads will just not be tailored. Also, we do not control any of the above opt-out links and are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.

Information from Other Sources

We also receive your personal data described in this Policy from third party sources, including from your employer (our Customer), third party companies from which we purchase personal data, partners (including but not limited to partners listed on our Marketplace), accreditation agencies, and co-organizers and sponsors for our events and webinars.

Partners. We collect and use personal data originally collected by partners for joint product and marketing opportunities. For example, we receive profile data about the status of background checks and assessments you participate in, updates from payment processors regarding your purchases, receipts and analytics for text communications and emails you send and receive, or other profile data from integrated systems employers choose to connect with our Services. If you sign into our Services with Facebook or other single sign on services, we import the requested data from your account.

Data brokers. We purchase additional contact data to supplement and correct the contact and employment data we collect, including your name, professional or personal email address, professional or personal telephone phone number, employer name and location, job title or area of expertise.

Public sources. We collect personal data from publicly accessible websites and government sources, including your name, email address, and other profile data such as job title, employer name, and professional expertise.

We combine personal data about you from your use of the Services with other personal data we obtain about you from third parties and use such information in accordance with this Policy.

If you believe that your personal data was improperly collected or provided to use by one of the sources described above, please contact us at privacy@neogov.com.

Information Collected When Using the PowerLine Application

The PowerLine Application (“App”) is an app designed to help maximize your mental wellbeing by providing information and connecting you with others that have had similar life experiences. If your employer has sponsored your access to our App, we will collect the minimum personal information necessary to set up your access to the App (name, email address). Your interactions on the App will be anonymous with respect to other users, as other users will only know you by an anonymous identifier. Be careful what you share with others through the App, especially regarding your personal data.
As you use the App, we collect information only insofar as is necessary or appropriate to fulfill the purpose of your interaction with the App. We may collect the following types of usage data when you use the App:

• Measurement data produced by the Apps. We may collect the Apps version, device hardware model, device operating system (OS) version, language and region settings, or timestamp.
• Apps crash reports. When the App crashes, we may collect information relating to the crash including device state, device hardware model, device OS version, and software processes that triggered the crash.
• Apps usage and interactions. We may collect statistics about the behavior of users of the App to understand how they interact with the App and for error reporting.

Information We Disclose.

We disclose personal data with other parties for the purposes stated herein or as required by law. The following lists the categories of entities we’ve disclosed personal data with, including over the past year.

To Customers.

We disclose personal data to our Customers (your current or potential employer) that utilize our services. For instance, if you are a job applicant and you respond to a job posting, we will disclose your personal data to the employer in order to facilitate the job search and hiring process. If your current or former employer uses one of our Services, personal data you input into those Services is accessible by that employer’s end users - subject to the security and access controls set up by the employer. In addition, if you sign up for an Access membership, we may disclose your personal data with Customers and their designated agents for recruitment purposes. You may cancel your Access membership at any time.

To Service Providers.

We disclose personal data to services providers to provide services on our behalf. For instance, we use service providers to facilitate our support services, data security, email, web hosting, research and analytics, data enrichment services, deliver and help us track our marketing and advertising content, process credit card payments, deliver payroll processing and disbursements, coordinate our customer conferences, and manage our sales and customer relations.

Research and Event Partners/Sponsors

We work with other entities to perform research, under controls that are designed to protect your privacy. We publish or allow others to publish insights, presented as either aggregated, anonymized, de-identified, or non-personal data.

If you download or access content on our Services or attend an event or webinar we host or co-host, we may disclose your personal data to sponsors of the event or webinar. The sponsor may also be a controller of your personal data in this instance, and processing of your personal data will be subject to the sponsors’ privacy statements as well.

To Advertising Partners

As explained in detail above in the "Online Analytics and Advertising" section, we may disclose your information to third parties that assist in tailoring and serving advertisements that are relevant to you. We may also allow third-party advertising technologies (e.g., ad networks and ad servers) to use cookies and similar technologies on the Services to deliver relevant and targeted content and advertising to you on the Services and other websites you visit and applications you use.

To other parties when you give your consent.

We may also disclose personal data where you provide your consent or post your personal data publicly. Where required by law, additional consent is obtained before personal data is transferred to us or forwarded to other parties. For example, we disclose personal data with background check providers if a job applicant consents and we are instructed to do so by our Customers.

During your use of the Services, you may have the opportunity to visit or link to other websites, including websites by third parties unaffiliated with us. We have no relationship or control over unaffiliated websites. These websites might collect personal data about you, and you should review the privacy policies of such other websites to see how they treat your personal data.

To other third parties where required by law.

We also disclose personal data or data in order to meet any applicable law, regulation, legal process or enforceable governmental request, investigate violations and enforce policies (including our Terms of Service, this Policy and other contracts with you), detect, prevent, or otherwise address fraud, protect against harm to the rights, property or safety of our users or the public, protect your vital interests or the vital interests of another natural person; and where disclosure is necessary for establishment, exercise or defense of legal claims or where there is reasonable belief that disclosure is required by law or regulations

Mergers, Acquisitions, Dissolutions, Affiliates.

We may transfer or disclose personal data to another entity who acquires or may acquire any or all of our business units, whether such acquisition is by way of merger, consolidation or purchase of all or a substantial portion of our assets, or bankruptcy. We disclose personal data to our affiliates with our Customers’ consent in order to facilitate any Service transition or implementation services.

International Users

Please be aware that we are based in the United States and the information we collect will be transferred to, processed, and stored on our servers in the United States in accordance with this Privacy Policy and applicable laws. The data protection laws and regulations applicable to your information transferred to the United States may be different from the laws in your country of residence. We take appropriate steps to protect, process, and transfer your information only in accordance with this Privacy Policy and applicable law, which may include using standard contractual clauses or other transfer mechanisms.

Your Data Rights and Choices

Marketing Communications

In accordance with applicable law, we may send you marketing and promotional emails. If you would like to opt out of email marketing, notify us at privacy@neogov.com or follow the unsubscribe instructions in the email. Please note that even though you may opt-out of r