Calico Worker and Applicant Privacy Notice
Effective Date: September 25, 2024
Scope
This Privacy Notice applies to employees, contractors, contingent and other personnel (collectively, “Workers”) and applicants and prospective Workers (collectively, “Applicants”) whose Personal Information Calico may collect and process during its Human Resources operations, from submission of an application, throughout the course of an individual’s tenure with the Company, and following such employment or services (collectively, the “Human Resources Operations”). As used in this Privacy Notice, “Personal Information” refers to information that can be used to identify you as an individual, includes the term “personal data,” and has the meaning given to it under the law where you live. Our activities taken with respect to your Personal Information are referred to as “processing.”
The terms “Calico,” “we,” “us,” and “our” means Calico Life Sciences LLC. This Privacy Notice explains the kinds of Personal Information we may collect, how we intend to use and share that information, and the rights you may have related to these processing activities.
An Important Note: This Privacy Notice only applies to data that we collect and process when interacting with you in your capacity as an Applicant or Worker. Unless otherwise indicated on a specific website page or form, this Privacy Notice does not apply to any of the Personal Information that we process through your use of our public-facing websites, applications, or services, which are subject to our user Privacy Policy governing those properties.
Personal Information We Collect
Calico collects Personal Information from Applicants and Workers as described below.
Personal Information We Collect from You Directly. We may collect the following Personal Information that you provide to us directly or through our service providers:
- Profile/Demographic Information. Name, address, phone number, email address, date of birth, passport number, driver’s license number, driving record, Social Security number or other government-issued identification number, employment history, education information, professional qualifications, salary information, financial information related to credit checks, bank details for payroll, language abilities, contact information of third parties in case of an emergency, beneficiaries under any benefit program, and other information that you may provide on a resume/CV or application form. We may also collect sensitive Personal Information to facilitate benefits, honor or adjust working accommodations, comply with mandatory reporting obligations, or to help provide insight into our equity and inclusion objectives. Examples of sensitive Personal Information include s details of health and disability, medical information, health insurance information, mental health, medical leave, maternity leave; information about national origin or immigration status; and demographic information such as race or veteran status.
- Communications with Us. Personal information such as personal contact information when an Applicant or Worker communicates with us, for example to inquire about employee benefits.
- Intra-Group Communications. Calico may offer, enable, or require Workers to utilize Calico-provided intra-company accessible sites, video-enabled meetings, pages, messaging channels, apps, blogs, or forums (“Intra-Company Communication Channels”). Calico and other individuals who use the Intra-Company Communication Channels may collect Personal Information and other information you submit or make available when using or participating in the Company Communication Channels. Personal Information collected or generated about you when using Intra-Company Communication Channels may be considered “public” and may not be subject to the same privacy protections set forth herein. We expect all Workers to follow our Code of Conduct and other policies.
Personal Information We Collect Automatically
- Worker Use of Calico Information Technology Systems and Networks. Calico may collect certain information automatically through the course of its Workers’ employment or services, such as Internet protocol (IP) address, inferred location based on IP address or activities, device identifiers associated with a computer or device (whether owned or authorized by us), activity logs, and other information about activities Workers may engage in on Calico property, equipment, accounts, systems and networks. Calico may monitor and review Workers’ uses of Calico equipment, accounts, information technology systems and networks, including its phone networks, computer networks, including those used to access the Internet, videoconferencing systems and other Intra-Company Communications Channels. Calico may access and review Workers’ video-recordings, transcripts, electronic files, chat and other forms of real-time messages, and emails sent or stored on its information technology systems, including accounts, computers and devices provided to Workers, or on Workers’ devices on which Calico systems or tools are enabled subject to Calico’s internal IT terms and policies. Workers should have no expectation of privacy while on Calico premises or using Calico information technology systems, devices, networks, and electronic communication tools regardless of location.
- CCTV Footage. Calico may monitor its premises using CCTV cameras.
- Feedback. From time to time, we may ask you to give us your feedback, opinion, or participate in optional surveys or polls. If you decide to participate, you may be asked to provide certain information, which may include Personal Information.
Information from Other Sources. We may collect or receive information about Applicants and Worker from other sources, including through third-party services and organizations to supplement information provided by you. For example, where relevant to the role in question and as permitted by law, we may conduct background and credit checks on Applicants prior to employment with Calico.
Miscellaneous Information. We may receive or collect other miscellaneous information (for example, information an Applicant chooses to disclose during the interview process, whether in oral or written form, opinions generated during the interview process, and information provided to us during performance reviews).
How We Use Your Information
We process Personal Information for a variety of business purposes including:
- To assess your suitability, aptitude, skills, qualifications, and interests for employment with or provision of services to Calico;
- To communicate with you about the application process and/or your application;
- To assist you with obtaining an immigration visa or work permit (where required and requested by you);
- To take steps at your request prior to entering into a relationship with you (for example, after we have sent you an offer, to process certain Personal Information to enter into and commence employment);
- Workflow management, including assigning, managing and administering projects;
- Human Resources Operations administration and communication;
- Payroll and the provision of benefits;
- Compensation, including bonuses and long-term incentive administration, stock plan administration, compensation analysis, including monitoring overtime and compliance with labor laws, and company recognition programs;
- To pursue our legitimate interests (for example, fraud prevention, network and information security, disclosure to affiliated organizations for administrative tasks, Worker monitoring for safety or management, whistleblowing schemes, enforcement of legal claims, and research purposes);
- Job grading activities;
- Performance and Worker development management;
- Organizational development and succession planning;
- Benefits and personnel administration;
- Absence management;
- Helpdesk and IT support services;
- Internal and/or external or governmental compliance investigations;
- Internal or external audits;
- Where it is necessary for the establishment, exercise or defense of legal claims;
- Diversity and inclusion initiatives;
- Restructuring and relocation;
- Emergency contacts and services;
- Worker safety;
- To comply with our legal obligations;
- Processing of Worker expenses and travel charges;
- Acquisitions, divestitures, and integrations; and
- As you otherwise offer, agree or consent.
How We Disclose Your Information
We may share Personal Information as described in this Privacy Notice (e.g., with our third-party service providers; to comply with legal obligations; to protect and defend our rights and property) or with your permission.
Vendors and Service Providers. Calico may share Personal Information we receive pursuant to this Privacy Notice with vendors and service providers. The types of service providers to whom we entrust Personal Information include service providers for: (i) maintaining our Human Resources Operations; (ii) offering and facilitating worker benefits and elective support services, and (ii) the provision of IT and related services.
Corporate Parent and Affiliates. Calico may share Personal Information with our parent and corporate affiliates for our and their internal business purposes.
Other Calico Workers. If Workers elect to share Personal Information or other information through Intra-Company Communication Channels, other Workers may be able to see some or all this information. In addition, Worker name and photo may be made available through the Intra-Company Communication Channels to facilitate collaboration and workplace communications.
Disclosures to Protect Us or Others. We may access, preserve, and disclose your Personal Information if we believe doing so is required or appropriate to: (i) comply with law enforcement or national security requests and legal processes, such as court orders or subpoenas; (ii) protect your, our, or others’ rights, property, or safety; (iii) enforce our policies or contracts; (iv) collect amounts owed to us; or (v) assist with an investigation or prosecution of suspected or actual illegal activity.
Merger, Sale, or Other Asset Transfers. If we are involved in an actual or proposed merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another entity, your information may be transferred as part of such a transaction as permitted by law and/or contract.
International Data Transfers
All information collected from Applicants or Workers on behalf of, or by, Calico to carry out our Human Resources Operations may be transferred, processed, and stored anywhere in the world, including, but not limited to, in the United States. We take all commercially reasonable measures to safeguard Personal Information consistent with the requirements of applicable laws.
Data Privacy Framework. Calico complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Calico has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Calico has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms of this Privacy Notice, the terms and the DPF Principles, the DPF Principles shall govern. Calico is subject to the investigatory and enforcement powers of the US Federal Trade Commission. To learn more about the DPF and to view Calico’s certification, please visit the DPF website.
If you are an EU, UK or Swiss individual, where we transfer your Personal Information to third party service providers (as described above in the “How We Disclose Your Information” section of this Privacy Notice) who perform services for us or on our behalf, we are responsible for the processing of that data by them, and shall remain liable if they process your Personal Information in a manner inconsistent with the EU-GDPR, UK-GDPR, or Swiss-FADP, as applicable, or the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.
If you are an EU, UK or Swiss individual you may use any of the methods set out in this Privacy Notice to request access to, receive (port), object to processing (including in some cases automated decision making and/or profiling), restrict processing, seek rectification, or request erasure of Personal Information held about you by Calico.
If Personal Information covered by this Notice is to be used for a new purpose that is materially different from that for which the Personal Information was originally collected or subsequently authorized, or is to be disclosed to a non-agent third party in a manner not specified in this Notice, Calico will provide you with an opportunity to choose whether to have your Personal Information so used or disclosed. Requests to opt-out of such uses or disclosure of Personal Information should be sent to us as specified in the Contact Us section below.
Certain Personal Information, such as information about medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs is considered “Sensitive Personal Information.” Calico will not use Sensitive Personal Information for a purpose other than the purposes for which it was originally collected or subsequently authorized by you unless Calico has received your affirmative and explicit consent (opt-in).
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Calico commits to resolve DPF Principles-related complaints about our collection and use of your Personal Information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of Personal Information received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Calico’s Privacy Officer by email at privacy@calicolabs.com or by calling US +1 (855) 950-1034. We will respond to your inquiry promptly. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, in compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Calico commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms as described on the Data Privacy Framework Program’s site here.
Individual Rights in Personal Data
In accordance with applicable law, you may have the right to:
- Access to and portability of your Personal Information, including: (i) confirming whether we are processing your Personal Information; (ii) obtaining access to or a copy of your Personal Information; (iii) receiving an electronic copy of Personal Information that you have provided to us, or asking us to send that information to another company (the “right of data portability”);
- Request correction of your Personal Information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your Personal Information, or we may refer you to the controller of your Personal Information who is able to make the correction;
- Request deletion of your Personal Information, subject to certain exceptions prescribed by law; and
- Request restriction of or object to our processing of your Personal Information, including the right to (i) withdraw your consent to processing, (ii) object to, or restrict, processing of your sensitive Personal Information for certain purposes, or (iii) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you, if applicable, where each such requests are permitted by law.
If you would like to exercise any of these rights, contact us as set forth below. We will process such requests in accordance with applicable laws. To protect your privacy, Calico will take measures to verify your identity before fulfilling your request. You have the right to not receive discriminatory treatment or be retaliated against for exercising these rights. An agent authorized to act on your behalf, may make a verifiable consumer request to exercise the rights described above related to your Personal Information. You may also make a verifiable request on behalf of your minor child. To authorize an agent, provide written authorization signed by you and your designated agent and contact us as set forth in the Contact us section below for additional instructions.
Data Retention
Calico retains the Personal Information we receive as described in this Privacy Notice for as long as necessary to fulfill the purpose(s) for which it was collected, carry out our Human Resources Operations, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, comply with applicable laws, or based upon other criteria, including, but not limited to, the sensitivity and volume of such data. Additionally, we endeavor to retain all such Personal Information in accordance with legal requirements.
Security of Your Information
We take steps to ensure that your information is treated securely and in accordance with this Privacy Notice. Unfortunately, we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.
Third-party Websites/Applications
Various resources and sites at Calico may contain links to third party websites/applications and other websites/applications may reference or link to Calico that we do not control. We do not control these third-party services. We encourage Applicants and Workers to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.
Changes to Our Privacy Notice and Practices
We may revise this Privacy Notice from time to time at our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue your employment with or services to the Calico after the new Privacy Notice takes effect.
SUPPLEMENTAL NOTICE FOR RESIDENTS OF SPECIFIC US STATES
The following table describes the categories of Personal Information Calico has collected and the categories of third parties to which such information has been disclosed:
Category of Personal Information Collected by Calico | Category of Third Parties to which Personal Information is Disclosed |
---|---|
Identifiers, such as your name, address, email, IP Address, Social Security number, and other similar identifiers. | • Government entities • Service providers • Other Calico Workers (directory information only) • Calico’s parent, Alphabet, Inc. |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as your name, signature, Social Security number, telephone number, identification information (for example a driver’s license or passport), information about your education and employment history, and financial/benefits information (e.g., bank account number, health insurance selections). | • Government entities • Service providers • Other Calico Workers (name only) • Calico’s parent, Alphabet, Inc. |
Protected classification characteristics under California or federal law, such as your age, sex/gender/sexual orientation, citizenship, race, marital status, any medical disabilities or conditions, and veteran/military status. | • Service providers • Calico’s parent, Alphabet, Inc. • Government entities |
Sensory data, such as audiovisual information and electronic information (e.g., via email communications and meetings) | • Service providers • Calico’s parent, Alphabet, Inc. |
Professional or employment-related information, such as your current or past job history and performance evaluations. | • Service providers • Calico’s parent, Alphabet, Inc. • Government entities |
The categories of sources from which we collect Personal Information are described above in the section titled “Personal Information We Collect.”
We use the data we collect about you for the business purposes described above in the section titled “How We Use Your Information.” In addition, we may share any data we hold about you with the parties described above.
Your Personal Information is not (i) “sold” or (ii) “shared” (for purposes of targeted advertising) by us, nor do we have actual knowledge that we share or sell Personal Information of persons under 16 years of age.
Data Retention. The Data Retention section above outlines the criteria we utilize for determining how long to retain data.
Sensitive Personal Information. Processing of sensitive Personal Information is carried out exclusively for the purposes outlined above, to the extent permitted under law. This processing activity may include service providers and government entities.
Contact us
If you have any questions about our privacy practices or this Privacy Notice, please contact us by email at privacy@calicolabs.com