Candidate Privacy Notice

In connection with your application for employment, we may collect the following types of personal data, depending on what is permissible by applicable law:

• Identification and Contact Information: Name, address, email address, phone number, photographs, date of birth.
• Application Information: CV/resume, cover letter, job history, qualifications, skills, and references.
• Employment Details: Current and past remuneration, benefits, and other employment-related information.
• Eligibility and Compliance Data: Work authorization details, including passport or ID documents, visa information, social security number, tests results, background checks, and any required accommodations for disabilities.
• Social Media profiles: LinkedIn or any relevant profile data
• Special Categories of Data (Sensitive Data): Health information for reasonable adjustments, voluntarily provided diversity information (e.g., race, ethnicity, gender), and criminal background information where permitted or required by law for background checks purposes.

Everest makes all employment-related decisions entirely on merit and qualifications (in accordance with applicable law). Consequently, you should only include personal data requested or relevant for the review of your employment application and avoid sharing personal data that is not requested including sensitive personal data such as your political or philosophical orientation, your religious beliefs, your union membership or your sexual orientation.

We collect data directly from you through application forms, CVs/resumes, interviews, assessments, and other communications. Additionally, we may obtain information from third parties, including:

• Publicly Available Sources: We may use publicly accessible platforms, such as LinkedIn, to identify and contact potential candidates.
• Third-Party Service Providers: Recruitment agencies, background check providers, and assessment providers.
• References and Previous Employers: With your consent, we may contact references or previous employers to verify information about your employment history, qualifications, and performance.

Please note that if you choose not to provide your personal data, Everest may be unable to process your application or consider you for employment opportunities.

Everest processes your personal data to:

• Evaluate Suitability for Employment: Assess your qualifications, skills, and experience for employment with Everest.
• Manage Recruitment: Schedule interviews, communicate with you, and manage the recruitment process.
• Verify Information: Confirm the accuracy of the information you have provided, including conducting background checks.
• Ensure Compliance: Comply with our legal obligations, such as verifying your eligibility to work.
• Fraud: To detect and prevent fraud
• Enrich Candidate Pool Database: Retain and analyse your data to build a database of qualified candidates and inform you about future job opportunities that may match your skills and experience.
• Improve Processes: Use aggregated data analytics to enhance our recruitment processes.
• Claims: Establish, exercise or defend legal claims, and to protect Everest’s brand or products and services.
• Security: to ensure network and information security, including preventing unauthorized access to our computer and electronic communications systems and preventing malicious software distribution.
• Lawful Basis for Processing

Our processing is based on one or more of the following legal grounds:

• Everest’s legitimate Interests:where it is necessary for our business purposes such as assessing your application, prevent fraud, enrich our candidate pool database, improve our process or protecting the security of our systems and networks.
• Contractual Necessity:To take necessary steps prior to entering into an employment contract with you.
• Legal Obligations: To fulfil our legal and regulatory requirements.
• Consent: Where required, we will obtain your explicit consent for processing your personal data notably sensitive data (e.g., diversity data, health information).

Special Categories of Data

In certain circumstances, we may need to process sensitive personal data to comply with legal obligations or to provide reasonable accommodations during the recruitment process.

Notably, in some jurisdictions, you will be asked to provide certain specific demographic information due to our obligation to collect information for equal opportunity compliance purposes. 

Data Sharing

Access to your personal data is limited to Everest employees involved in the recruitment and hiring process on a need-to-know basis, including HR personnel, recruiters, hiring managers and IT services.

In addition, your personal data may be disclosed to third parties if you have given your consent or if Everest is allowed to disclose it under applicable law, including to:

• Service Providers: We may use third-party service providers for various purposes including, but not limited to, obtaining employment verification and background checks, recruitment agencies, IT service providers, and assessment providers who process data on our behalf. These third-party service providers may be located outside of the country in which you live or the country where the position you have applied for is located.
• Governmental Authorities and legal and regulatory Bodies: Where required, we may disclose data to comply with legal obligations, such as regulatory reporting or responding to legal or investigation processes.
• Affiliated Companies: Everest entities in other regions may access your data for recruitment purposes, as permitted by law.

We require all our third-party service providers, by written contract, to implement appropriate security measures to protect your personal data consistent with our policies and any data security obligations applicable to us. We do not permit our third-party service providers to process your personal data for their own purposes. We only permit them to process your personal data for specified purposes in accordance with our instructions.

International Data Transfers

As a global organization with offices and operations throughout the world, your personal data may be transferred on an aggregated or individual level to various entities, branches, subsidiaries, and affiliated companies of Everest Group Ltd. around the world as well as to Everest third party providers for storage or service purposes. Therefore, your personal data may be transferred to countries outside your country of residence, including countries that may not have equivalent data privacy laws. Such transfer will always be subject to the applicable data transfer mechanism such as an European Union (EU) Commission or any government adequacy decision, an EU or any government approved certification mechanism or any standard contractual clauses including the EU Commission’s applicable standard model clauses. You can request a copy of the transfer agreements, which include the transfer of personal data.

Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, misuse, accidental loss, destruction, or damage. Access to your data is restricted to authorized personnel who are bound by confidentiality obligations. Storage of your personal data is managed on servers with secured facilities.

Everest retains your personal data for up to two years following our last interaction with you.

This retention period allows us to:

• Consider you to future employment opportunities that may match your profile;
• Maintain accurate recruitment records to comply with any of our legal and regulatory obligations.

In certain circumstances, we may retain your personal data for a longer period if necessary to address legal claims, resolve disputes, or comply with applicable laws and regulations.

At the end of the relevant retention period, your personal data will be securely deleted. If your application is successful, your data will become part of your employee record and will be retained in accordance with your applicable  Employee Privacy Notice.

Everest is committed to safeguarding your privacy and providing all candidates with the highest standard of privacy rights, regardless of your location.

You may request the following:

• Access: Request access to or a copy of your personal data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data when it is no longer necessary for the purposes for which it was collected, or when processing is unlawful.
• Restriction of Processing: Request that we limit the processing of your data in certain circumstances.
• Data Portability: Request the transfer of your data to you or a third party in a structured, commonly used, machine-readable format.
• Objection: Object to the processing of your data where we are relying on legitimate interests.
• Withdrawal of Consent: Withdraw your consent at any time where we are relying on consent to process your personal data.

To exercise your rights or if you are unsure about your rights or need assistance, please contact our Data Privacy Officer.

If you believe we have not adequately addressed your requests or concerns regarding your rights, you may have the right to lodge a complaint with your applicable data protection authority. Please note that this right may not exist in all jurisdictions, and we encourage you to consult with the applicable data protection authority for more information.