PRIVACY NOTICE FOR CALIFORNIA EMPLOYEES, CONTRACTORS, AND APPLICANTS
Effective Date: January 1, 2020
Last Updated: January 1, 2023
Contents
PURPOSE AND SCOPE
In accordance with the California Consumer Privacy Act and the Consumer Privacy Rights Act (collectively, the "Acts"), the Isuzu Companies (each, a "Company," "we," and/or "our") are providing this Privacy Notice to describe the categories of personal information that we collect about employees, contractors and job applicants who reside in the State of California (collectively, "Personnel") and the purposes for which such information may be used, retained, collected, or shared.
We may change this Privacy Notice from time to time. If we make changes, we will notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to IsuzuNA.com or isuzu.com/careers or sending you a notification). We encourage you to review this Privacy Policy whenever you access the Careers page or otherwise provide us with personal information to stay informed about our information practices and the choices available to you.
COLLECTION OF INFORMATION
We collect information about you from different sources and in various ways:
Information You Provide to Us
We collect information you provide directly to us. For example, we collect information when you create an account, get a quote, request information, communicate with us via third-party platforms, request customer support, or otherwise communicate with us. The types of information we may collect include your name, email address, postal address, telephone number, fax number, credit card information, unique identification numbers associated with you (such as a social security number when a dealership employee registers for an incentive program), VIN and serial numbers, and any other information you choose to provide. When you create an account, we collect passwords and answers to security questions and may collect additional information including your age and gender. When you communicate with us, we may collect your communications, such as emails, customer service requests, survey responses, or social media posts or messages.
Information From Your Devices
When you access or use our websites and online services, we automatically collect information about your activities, including:
- Activity Information: We collect information from you automatically when you use certain websites the Company operates for Personnel. This information may not identify you directly. For example, we may collect your IP address, browser or operating system information, and referring website.
- Device Information: We collect information about the device you use to access our websites, including the type of device, hardware model, operating system and version, unique device identifiers, and mobile network information such as mobile network provider and IP address.
- Device Location: In accordance with your device permissions, we may also collect information about the precise location of your device.
- Information Collected by Cookies and Similar Tracking Technologies: We (and our service providers) use tracking technologies, such as cookies and web beacons, to collect information about you.
Information We Collect Through Technology on Company-Owned Property
We may collect your personal information from technology we provide for use during your employment and technology that we use at the workplace, such as desktop or laptop computers or facility cameras. We may operate cameras on company property for security and operational purposes. Additionally, we may collect telematics data in Company-owned vehicles. Telematics data involves the use of installed hardware to collect and transmit data about a vehicle which may include the vehicle’s location, use, and maintenance needs.
Information We Collect from Other Sources
We also obtain information from other sources. For example, we may collect information from employment background agencies for the purpose of conducting a background check. Examples of the types of information contained in a background check may include your criminal, employment, and educational history, as well as information about your character, general reputation, personal characteristics, mode of living, credit standing, and more. Before requesting a background check, we will obtain your informed and specific consent by asking you to sign a release form. We also collect information from references you provide to us. We may also receive information from publicly available social media or career site profiles.
Information We Derive
We may combine and derive information or draw inferences about you based on the information we or our partners collect.USE OF INFORMATION
The Company uses Personnel personal information to support our human resources activities and for other legitimate business purposes, including, for:
- Personnel management purposes, such as monitoring assignments, evaluating performance, training, and responding to Personnel requests, inquiries, and comments;
- Recruiting purposes, such as receiving, evaluating and processing job applications, verifying information and conducting background and reference checks, communicating as part of the recruitment process, and scheduling interviews;
- Operational purposes, such as administering payroll, updating personnel files, conducting audits, and providing IT support and other troubleshooting;
- Benefits administration purposes, such as administering and maintaining group health insurance benefits and additional wellness programs, retirement plans, life insurance, disability insurance, leave programs, and other Company-offered benefit programs;
- Grievance or disciplinary purposes, such as to investigate and resolve any grievances, complaints, misconduct, breaches of contracts or policies by or involving Personnel or where necessary to take disciplinary action against Personnel;
- Legal and compliance purposes, such as implementing internal policies, responding to suspected fraud, illegal, or other activity that violates Company policies; protecting the Company’s and others’ rights and property; and complying with laws, legal processes, or governmental requests. Additionally, and as permitted by applicable law, Company reserves the right to monitor and audit any network traffic or information in its environments and managed services. As such, Personnel connecting to these environments and managed services have no expectation of privacy when using computing and information services, whether from a Company-owned device or a personal device. Similarly, Personnel have no expectation of privacy when on premise as such locations may be subject to monitoring;
- Defending and protecting our rights and interests and those of third parties, including when managing and responding to employee and other legal disputes, obtaining legal advice or establishing or defending our legal rights, handling legal claims, legal proceedings, inquiries and investigations of governmental, judicial or regulatory authorities, and otherwise establishing, defending or protecting our rights or interests, or the rights, interests, health or safety of others;
- As necessary in order to protect the vital interests of Personnel or of another natural person, such as during an emergency where the health or security of Personnel is in danger, or to prevent imminent physical harm or financial loss;
- As necessary for the performance of a contract or in order to take steps at the request of our Personnel prior to entering into a contract, such as to arrange for payments; and
- Other uses that are reasonably aligned with expectations of Personnel based on our work relationship and/or that are compatible with the context in which the information was provided to Company.
CATEGORIES OF PERSONAL INFORMATION
The Company collects personal information from Personnel. In the preceding 12 months, we have collected and/or disclosed the following categories of personal information:
| Categories | Examples | Collected? | Disclosed for Business Purposes? |
|---|---|---|---|
|
A real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. | Yes | Yes |
|
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. | Yes | Yes |
|
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | Yes | Yes |
|
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | Yes |
|
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, face prints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | No | No |
|
Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement. | Yes | Yes |
|
Physical location or movements. | Yes | Yes |
|
Audio, electronic, visual, thermal, olfactory, or similar information. | Yes | Yes |
|
Current or past job history or performance evaluations. | Yes | Yes |
|
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | Yes | No |
|
Inferences drawn to create a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes | Yes |
|
|||
| Nonpublic personal information that reveals: a person’s social security, driver's license, state identification card, or passport number; a person’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; a person’s precise geolocation; a person’s racial or ethnic, origin, religious or philosophical beliefs, or union membership; the contents of a person’s mail, email, and text messages (unless the business is the intended recipient); or a person’s genetic data. | Yes | Yes | |
| Biometric information when processed for the purpose of uniquely identifying a person. | No | No | |
| Personal information collected and analyzed concerning a person’s health. | Yes | Yes | |
| Personal information collected and analyzed concerning a person’s sex life or sexual orientation. | No | No |
For examples of the precise data points we collect and the categories of sources of such collection, please see COLLECTION OF INFORMATION section above. We collect personal information for the business and commercial purposes described in USE OF INFORMATION section above.
SALE AND SHARING OF INFORMATION
California law requires that we provide transparency about personal information we "sell" or "share" with third parties. For the purposes of the Acts, sell broadly means scenarios in which Isuzu has disclosed personal information to third parties in exchange for valuable consideration and share means scenarios in which Isuzu has disclosed personal information to third parties for cross-context behavioral advertising. Isuzu does not "share" personal information as that term is defined by the Acts. The Acts distinguishes sale or sharing of personal information to third parties from disclosure of personal information to service providers and contractors who process personal information provided by Isuzu or have access to personal information while providing services to Isuzu.
In the preceding 12 months, we have not "sold" or "shared" the personal information of Personnel for business or commercial purposes:
In the preceding 12 months, we have disclosed personal information for business purposes to the following categories of recipients:
- Our affiliate companies,
- Government entities where required by law,
- Service providers, contractors, and subcontractors to our service providers and contractors,
- Other entities/ for whom we have obtained your permission to disclose your personal information.
We may use or disclose sensitive personal information for purposes other than those specified in section 7027, subsection (l), of the Acts. California residents have the right to limit the use of their sensitive personal information at any time by submitting your request here or clicking on the "Limit the Use of My Sensitive Personal Information" button.
RETENTION OF INFORMATION
We will keep the personal information we collect from you for as long as necessary or appropriate to carry out the purposes set forth in this Privacy Policy or any other notice provided at the time of data collection, such as fulfilling requests and obligations related to your employment, maintaining records related to your employment, supporting our business functions and operations, enabling us to communicate with you, and conducting research, or to satisfy our legal or contractual obligations. Where required, we will dispose of the information we collect when we no longer need it for the purposes described in this Privacy Policy or any other notice provided at the time of data collection, in accordance with our retention policies and procedures.
We typically retain each category of personal information in accordance with the following schedule:
| Categories | Retention Period |
|---|---|
|
Isuzu retains categories of personal information for (1) 4 years; (2) duration of employment plus 4 years; or (3) as long as it is legally required to retain the personal information, whichever is longest. Isuzu also may retain certain personal information on archived or backup systems until deleted in accordance with Isuzu’s usual business practices. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
LINKS TO OTHER SITES
We may provide links to third-party websites, services, and applications, that are not operated or controlled by Isuzu. This Privacy Policy does not apply to third-party services, and we cannot take responsibility for the content, privacy policies, or practices of third-party services. We encourage you to review the privacy policies of any third-party service before providing any information to or through them.
YOUR CHOICES
Applicant, Employee, or Contractor Information
You may update, delete, or correct certain information you provide to us at any time by logging into your HR Connect account, accessing your application on our website, or contacting us as set forth in the CONTACT US section below. Note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you.
Cookies
Cookies are small data files stored on your hard drive or in device memory that help us improve our websites and your experience, see which areas and features of our websites are popular, and count visits. Web beacons (also known as "pixel tags" or "clear GIFs") are electronic images that may be used in our websites or emails and help deliver cookies, count visits, and understand usage and campaign effectiveness. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our websites.
Communications
Personnel may elect to receive certain communication relating to their work or application for employment through email, phone, text message, and/or physical mail. Teams that manage Personnel information may communicate with you in various ways, so you may need to review your communications choices in several different places. You may opt out of receiving communications via emails, postal mail, or phone calls from Isuzu by following the instructions in those communications or by contacting us using a method in the CONTACT US section below.YOUR CALIFORNIA PRIVACY RIGHTS
Subject to certain limitations, California residents have the right to:
(1) know what personal information we have collected , including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected;
(2) request deletion of your personal information ;
(3) correct inaccurate personal information that we maintain ;
(4) opt out of any "sales" or "sharing" of your personal information that may be occurring ;
(5) limit use or disclosure of sensitive personal information ; and
(6) not to be discriminated against for exercising these rights.
California residents may make these requests by contacting us by:
- Calling our privacy line at (800) 255-6727;
- Contacting our Human Resources Department at hr@isuzu.com; or
- Submitting an online request by clicking on one of the links in (1), (2), (3), (4), or (5) above.
Your request to know, request to delete, or request to correct must (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we have collected personal information, and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. To verify your request, we may ask you to provide information which we possess about you, such as a date of birth or social security number. We will not be able to respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you.
If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us using a method in the Additional Information section below. Personal information that is archived or in a backup system will be deleted or corrected when such information is restored to an active system.
ADDITIONAL INFORMATION
The Company may change this Privacy Notice from time to time. Each version of this Privacy Notice is identified by its effective date. We encourage all Personnel to review this Privacy Notice from time to time to stay informed about our information practices.
Where we refer to "Personnel," "employment," or "engagement" in this Privacy Notice, we do so for convenience only and these terms should in no way be interpreted as purporting to confer employment status on non-employees to whom this Privacy Notice also applies. This Privacy Notice does not form part of any contract of employment or engagement, confer any employment status or contractual right on any Personnel, or place any contractual obligation on Company.
We may provide different or additional privacy policies that further describe our information handling practices. If you have any questions about this Privacy Notice, please contact Manami Hunt (hr@isuzu.com).