Extreme Reach, Inc.; Extreme Reach Talent, Inc; Extreme Reach Services Group, LLC; CMC Crew Services, Inc; and Extreme Reach Payroll Solutions, Inc.; Slate and Extreme Reach UK Limited (collectively “Extreme Reach”) are committed to respecting and protecting your privacy.

This Privacy Policy describes how we collect, use, disclose, store and otherwise process information in relation to Extreme Reach’s recruiting. For information related to other contexts or particular Services, please see the relevant policy posted on the right of this screen.

Information We Collect

In order to facilitate job recruiting, Extreme Reach collects a variety of information, including work history, education and other qualifications, skills, current and prior home address, date of birth, driver’s license, social security number, and correspondence regarding your application. If you visit us online in order to apply, we may also collect details of your visits to our website (or our partners’), including, but not limited to, traffic data, location data, weblogs, and other communication data. By submitting such information in association with applying for a position with Extreme Reach, you consent to Extreme Reach processing your personal data for the purpose of assessing your job application. Other than those categories of data listed in this section and the section below, Extreme Reach does not collect any other personal information.

Information We Collect From Other Sources

Workable provides Extreme Reach with the ability to link the data you provide to us, with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media profiles.

Workable’s technology allows Extreme Reach to search various databases – some publicly available and others not, which may include your personal data (include your CV or Resumé), to find possible candidates to fill Extreme Reach job openings. Where Extreme Reach utilizes this ability, we will obtain similar categories of personal data as listed above from these sources. We may also receive your personal data from a third party who recommends you as a candidate for a specific job opening.

How Collected Data Is Used

Information collected during the job application process is used to evaluate your potential employment and to communicate with you regarding recruitment.

In the event of hiring, your information will also be used to establish your records in Extreme Reach systems. We do not use your data for any automated decision-making.

Information Disclosed to Outside Parties

As set out above, Extreme Reach passes your information to our third-party service providers, including Workable, who use it only in accordance with our instructions and as otherwise required by law.

Where you have applied for a job opening through the Indeed Apply functionality and where you have consented to this disclosure, Extreme Reach will disclose to Indeed certain personal data that we hold, including but not limited to a unique identifier used by Indeed to identify you, and information about your progress through our hiring process for the applicable job opening, as well as tangible, intangible, visual, electronic, present, or future information that we hold about you, such as your name, contact details and other information involving analysis of data relating to you as an applicant for employment (collectively “Disposition Data”). Indeed’s Privacy Notice in respect of Indeed’s use of the Disposition Data is available on Indeed’s website.

Where you have applied to a job opening through another service provider, we may disclose data similar to the Disposition Data defined above to such service provider. The service provider shall be the data controller of this data and shall therefore be responsible for complying with all applicable laws in respect of the use of that data following its transfer by us.

We do not otherwise sell, trade, or transfer collected information to outside parties unless we believe release is required to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.

How We Protect Your Information

Security of all information is of the utmost importance for Extreme Reach. We use technical and physical safeguards to protect the security of your personal information from unauthorized disclosure. We also make all attempts to ensure that only necessary people and third parties have access to personal and confidential information.

We require that our third-party service providers (1) use confidential information only to perform their obligations and (2) otherwise maintain the confidentiality of such information. These third-party service providers are obligated to maintain privacy and security protections that are consistent with Extreme Reach’s privacy and information security policies.

Your Rights

You have a variety of rights you may exercise with respect to your personal information.  While legislation only requires that we honor certain requests from people who live in certain jurisdictions, we believe in your privacy rights regardless of where you live and, therefore, allow anyone (including agents) from anywhere to exercise any of those same rights. We will not discriminate in any way against anyone for doing so.  

As such, you can exercise the following rights with respect to your personal information that we have: (1) access your information, (2) correct or update your information, (3) delete your information (except where we have legal obligations to maintain such data), (4) Do Not Sell or Share directive (unnecessary because we do not ever sell or share applicant information), (5) receive, transfer or port your information to someone else, (6) find out who we’ve disclosed your information to, and (7) unsubscribe or opt-out. To exercise any of these rights, please click here. Due to the nature of the data (job applicant related), there are some requests we may not be able to comply with due to our legal obligations.

GDPR

Extreme Reach is committed to protecting your data in compliance with the General Data Protection Regulations (GDPR). Extreme Reach is the controller of data collected you provide to us as a job applicant. Should you have any issues with how we handle your data, we request that you contact us first so that we can make every effort to address your concerns. You also have the right to lodge a complaint with a local data supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at http://ico.org.uk/concerns/ or telephone: +44303-123-1113.

For further information on your rights under GDPR, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

CPRA

If you are a California resident, California law provides you with particular rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws. To exercise any such rights, please click the link above within the “Your Rights” section.

For data regarding Data Requests we received and responded to in 2023, please see Consumer Data Request Report.

International Transfers

We store and process data in the United States, Canada, and the UK, depending on your location. The data we collect from you may be transferred to and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for Extreme Reach or for one of our service providers. By submitting your personal data to Workable, you agree to this transfer, storing, or processing.

In particular, your data may be (i) accessible to Workable’s staff in the USA or (ii) stored by Workable’s hosting service provider on servers in the USA and in the EU. The USA does not have the same data protection laws as the United Kingdom and EEA. A Data Processor Agreement has been signed between Workable Software Limited and its overseas group companies and between Workable Software Limited and each of its data processors. These data processor agreements are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data.

If you would like further information, please contact us (see “Contact Information” below).

EU-US Data Privacy Framework Compliance

Extreme Reach complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Extreme Reach has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  Extreme Reach has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

In compliance with the DPF Principles, Extreme Reach commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our policy or data privacy actions should first contact Extreme Reach at privacy@extremereach.com.

Extreme Reach is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its use of your data. Under certain conditions, you may have the right to invoke binding arbitration regarding your privacy rights. If Extreme Reach wrongly transfers your private data to third parties, it may be liable to you for damages.

ER has further committed to refer unresolved privacy complaints under the EU-U.S. DPF Principles to an independent U.S.-based third party dispute resolution provider. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Data Retention

Information we collect is retained for a period of four (4) years. If hired, information will be retained for seven (7) years after your last day of employment. We do not retain any category of personal information referred to above for longer than necessary for the purposes for which it was processed.

Changes to This Policy

Extreme Reach reserves the right to change, modify, add or remove portions of this Privacy Policy at any time without notice (except when legally obligated to provide notice). Any changes to this Privacy Policy will become effective when we post the revised version on our website.

Legal Basis

Your consent and our legitimate interest (recruiting employees) are the legal bases for collecting and processing your data.  By submitting your job application to us, you are providing your consent to process your data in the manner described herein. You have the right to withdraw or decline your consent at any time by contacting Extreme Reach (see Your Rights above or Contact Information below). Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal. Withdrawing consent will terminate your job application processing.

Contact Information

You can contact us at privacy@extremereach.com or 1-800-324-5672 if you have questions about this privacy policy, or for requests related to your privacy rights.

Last updated: August 21, 2023 to update EU-US DPF Compliance.