Effective Date: April 1, 2024
Alvarez & Marsal Holdings, LLC, together with its subsidiaries (“A&M”, “we”, “us” or “our”) respects your privacy.
This Recruitment Privacy Notice applies solely to the extent A&M has not published a recruitment privacy notice specific to the country of your residence, in which case that country-specific notice will apply instead of this one.
This Recruitment Privacy Notice applies with respect to the collection, use, storage, transmission, disclosure, and/or disposal of personal data by A&M about you in the context of your role as a job applicant to A&M (collectively, “application-related information”). For purposes of this Recruitment Privacy Notice, the term “job applicant” includes individuals who (i) apply for a position with A&M, (ii) join the A&M Talent Network without applying for a specific position, (iii) are recruited by A&M, (iv) are presented as candidates to A&M by external parties, such as executive recruiters or staffing agencies, or (v) contact A&M to enquire about potential roles.
If you enter into a relationship with us as an employee, officer, manager, director, owner, partner, independent contractor, or other category of worker, then a separate Workplace Privacy Notice will be provided to you.
This Recruitment Privacy Notice describes:
- The identity of the data controller.
- The categories of personal data we collect.
- The categories of sources from which we collect personal data.
- Our use of personal data.
- Our disclosure of personal data.
- International transfers of personal data.
- Confidentiality and security of personal data.
- Your privacy rights to your personal data.
- Retention of personal data.
- Changes to this notice.
- How to contact us.
This Recruitment Privacy Notice does not constitute or form any part of an employment, directorship, ownership, partnership, independent contractor, or any other type of agreement with us, or confer any contractual right on you or place any contractual obligations on us.
1. Data Controller
Where applicable privacy and data protection laws include the concept of a “data controller”, then depending on the nature of our processing activity the data controller of your personal data will be (i) the local A&M entity to which you are applying or being considered as a job applicant, (ii) our top-level entity within your country of residence, (iii) one or more A&M affiliates in other countries, and/or (iv) Alvarez & Marsal Holdings, LLC, which is our top-level parent in the United States. For ease of reading, as used in this Recruitment Privacy Notice, the terms “A&M”, “we”, “us” or “our” refer to the relevant data controller, where applicable.
2. Categories of Personal Information We Collect
As used in this Recruitment Privacy Notice, the following definitions shall apply:
- “Personal data” means any information that identifies or relates to or is reasonably capable of being associated with a Data Subject.
- Personal data includes “sensitive personal data”.
- Except where otherwise specified by applicable laws, personal data does not include publicly available information, or anonymized or de-identified information.
- “Data subject” means an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identify of that natural person.
- “Sensitive personal data” means personal data that is afforded a higher level of protection under applicable laws due to its sensitive nature and the elevated risk of harm to Data Subjects if improperly used or disclosed. Examples include, without limitation: (i) race; religion; ethnicity; sex life or practices or sexual orientation; health or medical information; genetic information; biometric information uniquely processed for the purpose of identifying a person (e.g., retina, palm, or voice recognition); or religion; (ii) passport number; driver’s license number, or other government-issued identification number; (iii) background check information, or judicial data such as criminal records; (iv) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (v) username and password; (vi) precise geolocation information; (vii) citizenship or immigration status; or (viii) information about a minor.
- “Process” or “Processing” means any operation or set of operations performed on personal data, whether in whole or in part by automated means, such as collecting, recording, organizing, storing, modifying, using, disclosing, transferring, or deleting such data.
Except where prohibited by (and subject to the requirements of) applicable laws, we may collect the following categories of personal data:
- Personal Details – e.g., name, contact details (address, telephone, email), age, date of birth, gender, passport or other government ID, proof of eligibility to work and details of any work permit application.
- Photographs – e.g., your “headshot” and other photographs (including those incorporated into other documents).
- Education and Professional Qualifications – e.g., resume/CV and any cover letter, professional history, education, qualifications, references, licenses and certifications, language skills, professional affiliations, and other information you provide as part of the recruitment process.
- Work Experience – e.g., job title, office (country, city), business unit, job description, dates of service, category (e.g., full/part-time), reporting lines, travel, relocations, and terms and conditions of your employment, partnership, or other agreement, each in relation to your current and prior employer(s), as the context requires.
- Background Checks – e.g., education, employment, government sanctions and enforcement, identify verification, adverse media, conduct, address verification, directorships, professional qualifications, credit history, and civil litigation and criminal records.
- Demographic, Family and Household Data – e.g., marital / familial status, dependent information, language, family composition, veteran or military status, and family education, employment, and income history. We may also, on a purely voluntary basis in the context of diversity, equity & inclusion initiatives, collect race, ethnicity, national origin, religion, gender (including gender identity or expression), sexual orientation information.
- Interview or Assessment Data – e.g., any information you provide to us or generated during an interview or assessment, such as recordings made or taken during live or online interviews, responses to online or written tests, and business plans.
- Compensation, Benefits and Other Financial Data – e.g., information relating to your compensation and benefits with prior employers, and to your expectations at A&M.
- Health and Medical Data – e.g., disability status and vaccination status.
- Office Access Control Systems and CCTV Data – e.g., logs and security camera footage relating to A&M office access and restricted zones.
3. Sources of Personal Data
Except where prohibited by (and subject to the requirements of) applicable laws, we may collect personal data about you from multiple sources, including:
- Directly from you: We collect information directly from you during the recruiting process and throughout the course of your candidacy or application to A&M, including if you (i) apply for a position with A&M, (ii) join the A&M Talent Network without applying for a specific position, (iii) are recruited by A&M, (iv) are presented as a candidate to A&M by external parties, such as executive recruiters or staffing agencies, or (v) contact A&M to enquire about potential roles.
- External parties: We collect information from our suppliers (e.g., recruitment / staffing agencies, qualifications testing consultants, criminal and credit background check providers, clients, former employers, universities, named referees, professional certifications, and others. If you cause your job application or other personal data to be shared with us through a third-party application (e.g., LinkedIn or a job board), we consider that information as having come from an external party.
- Electronic means: We collect information from logs and security camera footage relating to building, office and restricted zone access.
- Government entities: We collect information from courts, regulators, and other government
4. Use of Personal Data
Except where prohibited by (and subject to the requirements of) applicable laws, we may collect and use your personal data for the purposes set forth below.
- Background and reference checks (pre-hire).
- Recruiting / talent acquisition (including managing our talent network; managing the application, interview, candidate assessment, and job offer processes; maintaining a pool of qualified candidates to consider for future opportunities; and, maintaining a record of our recruitment decisions).
- Diversity and inclusion, including non-discrimination in hiring, equality of opportunity or treatment, promoting and maintaining a diverse workforce, and reporting statistics to government agencies.
- Ensuring compliance with laws and A&M policies, including but not limited to non-discrimination and equal opportunity employment.
- Establishment, exercise, or defense of legal claims.
- Managing and monitoring access to A&M offices and restricted zones.
- In connection with the sale of all or a part of our business, our assets, or a reorganization or combination of our organization with another organization.
- Any other lawful purpose reasonably related to your role as a job applicant to A&M.
Where applicable privacy and data protection laws require us to have a lawful basis to process your personal data, our lawful bases may include consent, performance of contract, compliance with laws, legitimate interests, or such other lawful basis as recognized under applicable law.
5. Disclosure of Personal Data
Except where prohibited by (and subject to the requirements of) applicable laws, we may disclose your personal data to:
- Other members of our group of companies for the purposes set out in this Recruitment Privacy Notice and as necessary to perform our employment contract with you and to administer our business.
- Our employees, partners, independent contractors, and other personnel, in accordance with their roles and responsibilities.
- Our service providers, including but not limited to information technology / operating systems and platforms; job application / recruiting platforms; background screening providers; etc.
- Government entities, including courts, regulators, law enforcement, or tax authorities, or to other constituents in a litigation. In some cases, in accordance with applicable law, it may not be possible to notify you in advance about the details of such disclosures. A&M will use reasonable efforts to disclose the minimum personal data necessary in such cases.
- Our accountants, lawyers, and other professional advisors.
- Other third parties where reasonably related to your role as a job applicant to A&M.
- Other persons or entities in connection with the sale of all or part of our business, or a reorganization or combination of our business with another organization.
Disclosures to service providers are made pursuant to written agreements that establish the purposes of processing, prohibit the service provider from processing personal data for any additional purposes, and include appropriate confidentiality and security provisions. Where applicable, such agreements also include appropriate restrictions on cross-border transfers of personal data.
6. International Transfers of Personal Data
Except where prohibited by (and subject to the requirements of) applicable laws, A&M may transfer your personal data outside of the country of your residence to other jurisdictions in which the privacy laws may provide different levels of privacy protection, as necessary to perform our employment contract with you and for the purposes set out in this Recruitment Privacy Notice.
The measures that we use to protect personal data are subject to the legal requirements of the jurisdictions to which we transfer personal data, including lawful requirements to disclose information to law enforcement and government agencies in those countries.
7. Confidentiality and Security
We have implemented physical, technical, and organizational security measures reasonably designed to limit access to your personal data to only those A&M personnel and third parties who have a legitimate need to know and use your personal data, and to protect your personal data against accidental loss and unauthorized access, use, alteration, or disclosure.
8. Your Privacy Rights
Depending on the law of the country and/or state in which you reside, you may have rights under privacy and/or employment laws, such as the right of access or deletion. This Recruitment Privacy Notice does not limit or govern those rights. A&M will make reasonable efforts to accommodate your requests, but A&M is under no obligation to honor any specific request absent a legal requirement. Subject to the foregoing limitations, to exercise any of your privacy rights, or to submit any request or complaint regarding the processing of your personal data, please contact us in writing using any of the contact methods provided in Section 11.
Please note, to help protect your privacy and maintain security, we may take steps to verify your identity before complying with your request. For example, we may require you to provide your name, additional contact details, and the nature of your relationship with A&M. In addition, if you ask us to provide you with specific pieces of personal data or to delete information that we deem to be sensitive, we may require you to sign a declaration under penalty of perjury that you are the data subject whose personal data is the subject of the request. If you designate an authorized agent to exercise your privacy rights on your behalf, we may require proof (your signed permission) demonstrating that you authorized the agent to act on your behalf; and, further, we may require you to verify your own identity and confirm that you authorized the agent to submit the request on your behalf. We may deny any request submitted by an agent that does not meet these requirements. Where permitted by applicable law, we may charge you a fee to access your personal data; however, we will notify you of any fee in advance.
If we cannot honor your request or under no legal obligation to do so, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
9. Retention of Personal Data
We may retain your personal data for as long as reasonably necessary to fulfill the purposes for which we collected it. Typically, we will retain your personal data for the duration we are considering your candidacy or application. If your candidacy or application is successful, we will retain and use your personal data in accordance with any employment-related privacy notices we provide to you. If your candidacy or application is unsuccessful for any reason, we will retain your personal data for purposes of maintaining a record of our recruitment decision, and to consider you for future opportunities (provided, subject to Section 8, you may request deletion from our candidate pool at any time by contacting us as specified below).
We will retain your personal data for the longer of the applicable statutes of limitations (to enable us to establish, exercise or defend against legal claims) or any mandatory periods specified by applicable laws (including but not limited to labor and employment laws).
Following these retention periods, we will securely destroy your personal data in accordance with our deletion policies and procedures.
Under some circumstances we may anonymize your personal data so that it can no longer be associated with you. We reserve the right to use such anonymized and de-identified data for any legitimate business purpose without further notice to you or your consent.
10. Changes
We may update this Recruitment Privacy Notice from time to time at our discretion. If we intend to use your previously collected personal data for a new purpose that is incompatible with the purposes described in this Recruitment Privacy Notice or at the time of collection, we will provide you with additional notice and, where legally required, seek your consent.
11. Contact Us
For any questions or concerns about this Recruitment Privacy Notice, you may contact us by any of the following methods:
|
A&M Talent Acquisition |
|
|
Online / webform |
Click here |
We kindly request that you do not contact A&M’s Data Protection Office with non-privacy related inquiries.
