CCPA Notification of Collection for California Resident Job Applicants
In accordance with the California Consumer Privacy Act (CCPA), Denali Therapeutics Inc. (“Denali”) is providing this CCPA Notification to California Resident Job Applicants (“Notice”) to California resident job applicants (including prospective independent contractors) to describe to you the categories of Personal Information Denali will collect about you and your rights under the CCPA.
Personal Information We Collect and Disclose. Under the CCPA, “Personal Information” is defined as “information that identifies, relates to, or could reasonably be linked with you or your household.” We collect and disclose the following categories of personal information about our job applicants who are California residents:
- Personal and online identifiers such as first and last name, email address, Social Security number, driver’s license number, or unique online identifiers
- Characteristics of protected classifications under California or federal law such as race, sex, or gender
- Geolocation information such as home or current work address
- Professional or employment-related information such as your employment history and resume
- Education information such as your education history and information included in transcripts
- Audiovisual information such as audio or video collected through recordings
- Internet or other electronic network activity information such as interactions with our website and emails
- Other information about you that is linked to the Personal Information above (such as work authorization status)
We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Categories of Sources of Your Personal Information. As permitted by law, we may collect Personal Information about job applicants from the following categories of sources: 1) you; 2) employment references; 3) recruiters, including individuals who refer you to Denali; 4) social media; 5) educational institutions; and 6) background check providers.
Categories of Third Parties to Whom We Disclose Personal Information. We may disclose the Personal Information we collect to the following categories of recipients:
- Service providers. We disclose the Personal Information we collect to our service providers, such as those who help us manage the application process.
- Recruiters. We may disclose personal information to recruiters, such as to convey the status of your applications.
- Employment references. We may disclose personal information to references, such as to confirm the information you provided to us.
- Background check providers. As legally permitted, we may disclose personal information to background check providers to obtain a background check.
- Government entities. As legally required, we may provide personal information to government entities.
We do not sell the Personal Information we collect about job applicants or share such information for targeted advertising purposes.
How We Use Your Personal Information. Denali will process your Personal Information for the following purposes: 1) processing, evaluating, and communicating with you about your application, including to check references or your background, and communicate with you about other jobs that may interest you; and 2) to comply with relevant legal obligations of Denali.
How We Disclose Your Personal Information. We may disclose your Personal Information to the categories of a third parties listed above for a business purpose. For purposes of job applicant information, our business purposes include, but are not limited to: 1) business operations; 2) ensuring the security, safety and protection of workers and resources; and 3) legal, regulatory and audit obligations.
When we disclose Personal Information to a third party for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.
We may also disclose your Personal Information to another company as part of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets to that company.
How Long We Retain Personal Information. Denali retains Personal Information about you for business purposes; this information is retained pursuant to our Records Retention Schedule. Our customary retention of job applicant information is a period of 4 years after a hiring or contracting decision is made or, if engaged by Denali, after an individual terminates or retires from working for Denali except when a legal obligation to preserve information exists.
Your Rights. As a California resident, you have certain rights under the CCPA related to Personal Information Denali collects about you. You may be able to exercise the following rights, subject to certain exceptions and limitations:
- The right to access Personal Information which we may collect or retain about you. You also have the right to receive your Personal Information in a structured and commonly used format so that it can be transferred to another entity (“data portability”).
- The right to know the categories and specific pieces of Personal Information we collect, use, and disclose about you, the categories of sources from which we collected Personal Information about you, our purposes for collecting of disclosing Personal Information, and the categories of third parties with which we have disclosed Personal Information;
- The right to request that we delete the Personal Information we have collected from you;
- The right to correct inaccurate Personal Information we maintain about you;
- The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA;
To exercise any of the above rights, please contact Denali using the following information and submit the verifying information, as further described below:
- By email to: [email protected]
Verification Process and Required Information. In some cases, we may need to request additional information from you to verify your identity or understand the scope of your request. If we suspect fraudulent or malicious activity related to your request, we will not comply with your request until we perform further verification to determine whether your request is authentic, and you are the person about whom we have collected the Personal Information
Contact Us. For questions or concerns about Denali’s privacy practices, please contact us at [email protected].