Your privacy is important to Signify.

We have drafted this Privacy Notice (also referred to as “Notice”) in an easy and comprehensible way, in order to help you understand who we are, what Personal Data we collect about you, why we collect it, and what we do with it during our recruitment process. Keep in mind that ”Personal Data” (in this Notice also referred to as “Data” or “your Data”) means any information or set of information from which we are able, directly or indirectly, to personally identify you, in particular by reference to an identifier, e.g. name and surname, email address, phone number, etc.

Please keep in mind that since Signify is an international company, this Notice may be replaced or supplemented in order to fulfil local requirements, as well as in order to provide you with additional information.

We strongly encourage you to take some time to read this Notice in full. If you do not agree to this privacy notice, please do not provide us with your data. Please note that your election not to provide any of your Data as required or requested in the context of the recruitment procedure, may have effect on your ability to participate in the recruitment process. Any information you share with us as part of your application procedure must be true, complete and not misleading to avoid the risk of a rejection of your application during the application process or disciplinary action including immediate termination of employment.

This Notice covers how we collect and use your Data in the context of our recruitment process. For example, when we contact you for job opportunities or when you apply for a job offered by us, use our recruitment channels, visit our career websites, create a profile, join our recruitment events, join our talent community, apply for a specific job opportunity, or otherwise interact with us in your capacity as candidate or job applicant.

By engaging in our recruitment process (where legally required) including organizing the selection process and applications, you expressly consent to our collection, storage, use, transfer, and disclosure of your Data, including any sensitive information you elect to submit (as described in this Privacy Notice).

Signify is the world leader in lighting. We provide professional customers and consumers with quality, energy-efficient LED lighting. And our lights, when connected, bring data to devices, apps and people – redefining what light can do and how you use it. Today, our innovations, such as LiFi – internet connectivity through light – and UV-C, solar and horticultural lighting, contribute to a safer, smarter, more sustainable world.

When this Notice mentions “we,” “us,” or the “Company,” it refers to the controller of your Personal Data under this Notice, namely the Signify Affiliate which may be interested in offering you a position or that otherwise decides which of your Data are collected and how they are used, as well as Signify Netherlands B.V. (Registration number 17061150 - High Tech Campus 48, 5656 AE, Eindhoven, The Netherlands). Please note that the Signify Affiliates include the subsidiary companies in which Signify N.V. has control, either through direct or indirect ownership. You may obtain a list of the Signify’s Affiliates by contacting the Signify Privacy Office (you will find the contact details in the below section “What are your choices?”).

Below you will find an overview of the categories of Data that we may process during the recruitment process:

Information you provide to us directly

We value diversity and inclusion. In order to ensure equal employment opportunities as permitted or required by local law we may also gather Data of a sensitive nature, including your nationality, racial and/or ethnic origin, gender and disability. Equal employment opportunities mean we offer equal treatment to all applicants. You can choose to provide this information on a voluntarily basis. Where we have a mandatory legal obligation to process aforementioned Data, the relevant job vacancy will indicate if it is mandatory or voluntary.

If you provide us with personal data of a reference or any other individual as part of your application, it is your responsibility to obtain consent from that individual prior to providing the information to us. It is your responsibility to ensure that information you submit does not violate any third party’s rights.

Information we collect automatically

When you apply for a job offered by us, join our talent community, use our recruitment channels, or visit our career websites, in addition to the information you provide to us directly, we may collect information sent to us by your computer, mobile phone or other access device.  For example, we may collect:

• Device information: such as your hardware model, IMEI number and other unique device identifiers, MAC address, IP address, operating system version, and settings of the device you use to access the Services;
• Log information: such as the time and duration of your use of our channel;
• Location information: for example, a location derived from your IP address or data that indicates where you are located, such as at a city or postal code level;
• Other information: about your use of our digital channels, such as the apps you use or the websites you visit.

For more information on how we use cookies and other tracking technologies, read the Signify Cookie Notice which can be found in the website of the Signify Privacy Center, see “Legal information” section. You can control your cookie settings via the cookie preference choices.

Lastly, if you visit our premises, for security reasons and in line with local requirements we might also record your Data through video or other electronic, digital, or wireless surveillance system or device (e.g. CCTV).

Information we may collect from other sources

To the extent permitted by applicable law, in addition to our recruitment channels or career websites, we may also obtain information about you from other sources, such as through your interactions with Signify personnel or from third parties, such as recruiters, recruitment agencies, LinkedIn or other websites on the Internet (subject to such third partys privacy notices), or from a background check report. For example, you may choose to provide us with access to certain data stored by third parties such as business and employment-oriented social media sites.

We may use your Data for the purposes of carrying out your application and the entire recruitment process. Below you will find an overview of the purposes for which we may process your Data during the recruitment process:

In order to be able to process your Data, we may rely on different legal bases, including:

• Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your Personal Data, you may withdraw your consent at any time; or
• The necessity to establish a contractual relationship with you; or
• The necessity for us to comply with legal obligations and to establish, exercise, or defend our self from legal claims; or
• The necessity to pursue our legitimate interests, including;

- to ensure that our networks and information are secure;

- to administer and generally conduct business within the Company and across Signify; and

- to prevent or investigate suspected or actual violations of law, breaches of the terms of employment or non-compliance with the Signify Integrity code or other Signify policies; and

- the necessity to respond to your requests (such as responding to your requests regarding the handling of, deletion of, or changes to your Personal Data); and

- to optimize your job opportunity search across Signify and communication relevance.

• The necessity to protect the vital interests of any person; or
• Any other legal basis otherwise permitted by local laws;

If you would like to request more details about our legal bases on which we process your data for a particular purpose you can contact the Signify Privacy Office (you will find the contact details in the below section “what are your choices?”).

We do not share any of your Personal Data except in the limited cases described here.

To fulfil the purposes for which your Personal Data has been collected (for details on these purposes, see above section “How do we use your personal information?”) we may disclose your Personal Data to the following entities. 

1. Signify Affiliates: Due to our global nature, your Personal Data may be shared with certain Signify Affiliates. Access to Personal Data within Signify will be limited to those who have a need to know the information, for the purposes described in this Notice, and may include your interviewers, the relevant manager(s) of the respective job offer and other selected personnel within Signify.

2. Service Providers: Like many businesses, we may outsource certain Personal Data processing activities to trusted third party service providers to perform functions and provide services to us, such as:

-  ICT service providers

- Recruitment- or assessment provider 

- Consulting providers

-  Background check provider 

- Travel-, security- and safety provider           

3. Public and Governmental Authorities.  When required by law, or as necessary to protect our rights, we may share your Personal Data to entities that regulate or have jurisdiction over Signify.

4. Professional advisors and others.  We may share your Personal Data with other parties including professional advisors, such as:

-  Banks

-  Insurance companies

-  Auditors

-  Lawyers

-  Accountants

-  Other outside professional advisors

5. Other parties in connection with corporate transactions. We may also, from time to time, share your Personal Data in the course of corporate transactions, such as during a sale of a business or a part of a business to another company, or any reorganization, merger, joint venture, or other disposition of Signify’s business, assets, or stock (including in connection with any bankruptcy or similar proceeding). 

We will also, upon your request in case of a personal data portability request, share your Personal Data with the party you indicate

Due to our global nature, the Personal Data you provide to us may be transferred to or accessed by Signify Affiliates and trusted third parties from many countries around the world for purposes described in this privacy notice. As a result, your Personal Data may be processed outside the country where you live if this is necessary for the fulfilment of the purposes described in this Notice.

If you are located in a country member of the European Economic Area, we may transfer your Personal Data to countries located outside of the European Economic Area.  Some of these countries are recognized by the European Commission as providing an adequate level of protection.  With regard to transfers from the European Economic Area to other countries that are not recognized by the European Commission as providing an adequate level of protection, we have put in place adequate measures to protect your Data, such as organizational and legal measures (e.g. binding corporate rules and approved European Commission standard contractual clauses, or similar frameworks). You may request more details, and where applicable obtain a copy, of these measures that we have in place in respect to transfers of personal data by contacting the Signify Privacy Office. You will find the contact details in the below section “What are your choices?”

We keep your Personal Data for the period necessary to fulfil the purposes for which it has been collected (for details on these purposes, see above section “How Do We Use Your Personal Data?”) and we may retain and use your Data to consider you for other positions.

The criteria used to determine our retention periods include:

•  How long is the Personal Data needed to provide you with a job offer?
• Do you have an account with us? In this case we will keep the Data while your account is active or for as long as needed to provide services to you.
• Have you indicated that we can retain your Data to consider you for other positions?
• Are we subject to a legal, contractual, or similar obligation to retain the Personal Data? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve Data relevant to an investigation, or Data that must be retained for the purposes of litigation.

If you have decided to participate in our optional live and/or on demand video interview during the recruitment process, videos of your interview will be retained for 90 days from their creation, after which they will be deleted unless local law requires differently and/or we have overriding company interest (e.g. the necessity for us to comply with legal obligations and to establish, exercise, or defend our self from legal claims or  to pursue our legitimate interests).

Your Persona Data processed is used to improve your experience with us, and is retained for as little time as possible, after which we anonymize or delete it, when there is no longer a talent acquisition purpose, legal or business need for your data to be retained.

If you would like to find out how long we keep your data for a particular purpose you can contact the Signify Privacy Office (you will find the contact details in the below section “what are your choices?”). Of course, if you do not want to be considered for other positions or would like to have your Data removed, you can contact us at: careers@signify.com, or through your application profile.

To protect your Data, we will take appropriate measures that are consistent with applicable privacy and data security laws and regulations, including requiring our service providers to use appropriate measures to protect the confidentiality and security of your Personal Data. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. Depending on the state of the art, the costs of the implementation and the nature of the data to be protected, we put in place technical and organizational measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure of, or access to your Data. If you have reason to think that your interaction with us or your Data is no longer processed in a secure manner, please reach out immediately in accordance with “WHAT ARE YOUR CHOICES?” as described below.

We would like to remind you that it is your responsibility to ensure, to the best of your knowledge, that the Data you provide us with are accurate, complete, and up-to-date. Furthermore, if you choose to share Personal Data of other people (such as dependents) with us, it is your responsibility to collect such Data in compliance with local legal requirements. For instance, you should inform such other people, whose Personal Data you provide to the Company, about the content of this Notice and obtain their consent (provided they are legally competent to give consent) for the use of that Personal Data by the Company as set out in this Notice (including transfer and disclosure).

For any other questions or your reasonable inquiry related to the protection of your Personal Data by Signify or regarding this Notice in general, you can contact the Signify Privacy Office at:

- Mail: Signify - Attn: Privacy Office – Herikerbergweg 102, 1101 CM Amsterdam Zuid Oost, The Netherlands; or

- Online: Signify Privacy Center, “Privacy request” section.

Please keep in mind that email and online communications are not always secure. Therefore, please do not include sensitive information in your emails to us.

We will do our best to address your request in time and free of charge, except where it would require a disproportionate effort. In certain cases, we may ask you to verify your identity before we can act on your request.

If you are unsatisfied with the reply received, you may then refer your complaint to the relevant regulator in your jurisdiction.

The Brazilian General Law on Data Protection (the "LGPD") provides any person located in Brazil and/or any personal data that has been collected or is processed within Brazil with specific rights over their personal data. In addition to the above, this section describes your LGPD rights and explains how to exercise those rights.

The following does not apply to information or data that cannot identify you or another person, taking into account the use of reasonable and available technical means at the time of its processing.

As described above in this Notice, it may be necessary for Signify to transfer your Personal Data internationally.

We may transfer your Personal Data to countries located outside of Brazil. Some of these countries do not have an adequate level of protection for personal data, as determined by the General Data Protection Law. If the international transfer of Personal Data occurs to countries that do not have personal data protection laws at the same level as the LGPD, we will adopt appropriate measures to protect your Personal Data, such as organizational and legal measures (e.g. binding rules and standard contractual clauses for such transfer).

You have the right to request: (i) confirmation whether we process (or not) your Personal Data; (ii) access to your Personal Data processed by us; (iii) rectification of your Personal Data; (iv) portability of your Personal Data; (v) anonymisation, blocking or deletion (erasure) of unnecessary or excessive data or data processed in breach of the provisions of the LGPD; (vi) deletion of personal data processed based on your consent, with the exceptions provided for in the LGPD; (vii) the information of public and private entities with which Signify has carried out shared use of personal data; (viii) information on the possibility of not providing consent and the consequences of refusal; (ix) revocation of consent, under the terms of the LGPD. In certain circumstances, you have the right to object and restrict the processing of your personal data and/or request a review of automated decisions affecting your interests. Our Privacy Notices set out full information on how you can exercise these rights, how we share personal data with third parties, how we protect your personal data and how we ensure that your data is adequately protected if it is processed outside of Brazil. To contact Signify, please check the "What are your choices" section in the Notice above. You also have the right to contact the National Data Protection Authority ("ANPD") directly.

The California Consumer Privacy Act (‘CCPA’) provides California consumer residents (definition of consumer includes employees who reside in California) with specific rights regarding their personal information. In additional to the above this section describes your CCPA rights and explains how to exercise those rights.

The following is not applicable to de-identified or aggregated personal information or data publicly available.

Mindful and respecting the three primary exemptions as defined in AB 25 CCPA, we inform you that when visiting our Career website and/or in the context of our recruitment we collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (defined as “data”). In particular, we might collect and/or have collected and disclosed for the aforementioned purpose within the last twelve (12) months prior to the effective date of this Notice the following categories of data from you:

We disclose your data for a business purpose to the following categories of third parties:

• Signify Affiliates.

• Service providers.

• Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

We do not respond to “Do Not Sell” requests as we do not track your data across third party websites, nor do we sell your data to third parties to provide targeted advertising. Nonetheless, we aim to make your online experience and interaction with our websites as informative, relevant and supportive as possible. One way of achieving this is to use cookies or similar techniques, which store information about your visit to our site on your computer. For more information on how we use cookies and other tracking technologies, read our Cookie Notice (see section “How do we use cookies and other tracking technologies”). In the twelve months prior to the effective date of this Privacy Notice, we have not sold any personal information of consumers, as those terms are defined under the CCPA.

“Right to Know”: You may have the right to request that we disclose to you what personal information of yours that we collect, use, and/or disclose.

“Right to Delete:” You may have the right to request the deletion of your personal information collected or maintained by us. Depending on your choices, certain offerings may be limited or unavailable.

If you have questions about the foregoing or how to execute your Right to Know and/or Right to Deletion in our Privacy Notice or specifically with regard to categories and specific data processed, categories of sources from which your data is collected by us, categories of third parties with whom we share your data in the preceding 12 months of its collection, and the business and/or commercial purpose for collecting,  please contact our Privacy Office (see section “What are your choices?”). You may also make a verifiable request to exercise your rights by contacting us via the contact details in the vacancy.

If we cannot verify your identity (or your authority to act on behalf of another person) we have the right to deny requests. While verifying your identity we shall generally avoid requesting additional information from you for purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information from you, which shall only be used for the purposes of verifying your identity while you are seeking to exercise your rights under the CCPA, and for security or fraud-prevention purposes. We shall delete any new personal information collected for the purposes of verification as soon as practical after processing your request, except as required to comply with applicable legislation.

An “authorized agent” means a natural person or a business entity registered with the Secretary of State that you have authorized to act on your behalf provided you have:

1. Provided the authorized agent written permission to do so and we could verify this; and

2, Verified your own identity directly with the business.

Subsection 1 does not apply when you have provided the authorized agent with a valid power of attorney.

We endeavour to timely respond to a verifiable individual, free of charge and in a portable format unless it is excessive, repetitive or materially unfounded. If we require more time, we will inform you of the reason thereof and extension period in writing.

We will not discriminate against you for exercising your rights under the CCPA. Unless permitted by applicable regulations, we will not charge different prices or rates, deny products or services, provide different products or services or level of quality and/or suggest you may receive the foregoing mentioned.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

This Notice might change from to time.

The most current version of this Notice will govern our use of your Personal Data and can be found in the website of the Signify Privacy Center, see “Legal information” section. If we make any significant changes to our privacy notice, we will take additional steps to inform you of these.

We will keep prior versions of this privacy notice in an archive for your review.

- Signify -