Current as of December 11, 2023
This page explains how we at Pipedrive collect, use and protect your personal data during the recruitment process with us. Please read the information carefully and if you have any questions about how we protect or use your data, email us at [email protected].
If you are a California resident, please review the section of this Privacy Notice for California residents.
“Personal data” is information that we collect during the recruitment process which could personally identify or be linked to you.
“Processing” means any operation or set of operations performed with personal data, such as collecting, retaining, disclosing, and deleting it.
“Sensitive personal information” means credit or debit card numbers; financial account numbers or wire instructions; government-issued identification numbers (such as Social Security numbers, passport numbers), biometric information, personal health information (or other information protected under any applicable health data protection laws), personal information of children protected under any child data protection laws, and any other information or combinations of information that falls within the definition of "special categories of data" under GDPR or any other applicable law relating to privacy and data protection.
Certain data protection laws and regulations, such as the EU GDPR, typically distinguish between two main roles for parties processing personal data: the “Data Controller”, who determines the purposes and means of processing; and the “Data Processor”, who processes the data on behalf of the Data Controller.
Pipedrive is typically the “Data Controller” of its candidates’ and employees’ personal data, and assumes the responsibilities of Data Controller under applicable law and as set forth in this Privacy Notice. In such instances, our Service Providers processing such data will assume the role of “Data Processor”.
You provide your personal data when applying to work with us; such data may include, but is not limited to your name, email address and phone number, location, citizenship and work permit, employment and education history, and salary expectations. This also includes any other information you provided to us in connection with a job you are applying to, including information collected as part of the hiring process such as assessments and aptitude tests. Any aptitude tests are taken from part of the application process but are not solely determinative of your outcome or success.
We may also receive your CV from recruiters and the results of verification and vetting checks from background checking providers.
Additional personal data about you may be gathered from publicly available sources, external partners, or references you have provided, as well as inferences drawn from any of the above information.
Pipedrive will collect and process your Personal Data to recruit you, assess and evaluate your skills and qualifications, comply with legal requirements, and send information about positions at Pipedrive that may be of interest to individuals.
We may also use it to evaluate the effectiveness of our hiring practices and support our efforts to develop and maintain a fair and varied workforce.
Except as described in this Notice, we will not intentionally disclose the personal data that we collect or store to third parties without your consent. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:
Your personal information may be disclosed internally to those who are involved in Pipedrive’s recruitment process.
We disclose your personal information to our private equity sponsor, Vista Equity Partners, and its affiliates, including Vista Consulting Group (collectively, “Vista”), for administration, research, database development, workforce analytics and business operation purposes, in line with the terms of this Privacy Policy. Vista processes and shares your personal information with its affiliates, including other Vista portfolio companies, on the basis of its legitimate interests in managing, administering and improving its business and overseeing the recruitment process and, if applicable, your employment relationship with Pipedrive. If you have consented to us doing so, we also share your personal information with other Vista portfolio companies for the purpose of being considered for other job opportunities in the pooling system, both inside and outside the EEA. Please find a full list of all Vista portfolio companies at https://www.vistaequitypartners.com/companies/ and Vista’s privacy policy at https://www.vistaequitypartners.com/privacy/.
Where this requires us to transfer your personal information outside of the EEA, please refer to Section 6 of the Privacy Notice for further details on cross-border transfers. In connection with the recruitment process your personal data may be transferred outside of the EEA to Pipedrive, Hirebridge, LLC and Criteria Corp., which provide applicant tracking and evaluation services. Hirebridge, LLC and Criteria Corp. have agreed to comply with the EU Standard Contractual Clauses to ensure that your personal information is adequately protected whilst outside of the EEA.
Pipedrive will share your personal information with Lever, Inc., a cloud services provider in the United States, to assist in managing its recruitment and hiring process.
Additionally, your personal data may be transferred outside of the EEA to Criteria Corp. for applicant tracking services. Sterling (EMEA) Ltd. may also have access to your data for employment screening and background checks.
Where this requires us to transfer your personal information outside of the EEA, please refer to section 6 for further details on cross-border transfers.
Pipedrive may transfer your Personal Data to countries other than the one in which you live, including transfers to the United States. To the extent that Personal Data is transferred abroad, Pipedrive will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with Pipedrive’s obligations.
In particular, we use the following safeguards if Pipedrive transfers personal data from jurisdictions with differing data protection laws:
European Commission’s Standard Contractual Clauses. Pipedrive uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to countries not subject to an adequacy decision by the European Commission or your local legislature and/or regulator.
EU-US Data Privacy Framework; Pipedrive participates and complies with the EU-U.S. Data Privacy Framework (EU - US DPF) set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information of individuals in the European Union. Pipedrive Inc. has been certified by the Department of Commerce that it adheres to the Data Privacy Framework Principles, including the onward transfer liability provisions. Please note that we do not rely on the EU-US Data Privacy Frameworks as a data transfer mechanism. To learn more about the Data Privacy Framework program and to view our certification, please visit Digital Privacy Framework.
You can get more information on the appropriate safeguards by contacting [email protected].
At Pipedrive, we are dedicated to providing a free and secure recruitment process for all candidates. This includes no fees or charges at any point during the application process and a commitment to protecting any personal information shared with us. Our talent acquisition team will only communicate through our official company email address or recognized job websites, such as LinkedIn, Xing, and Glassdoor. Additionally, we do not work with any recruitment agencies that charge candidates for their services. We take the security of your Personal Data very seriously and will never request or share sensitive information on social media platforms like WhatsApp, Facebook, and Instagram.
In the event that you are asked to make a payment for recruitment services or are asked to share personal information on social media, please inform [email protected] immediately.
We may retain this Personal Data for as long as is needed for the purpose(s) for which it was collected and no longer than is relevant and reasonably necessary. Our retention periods vary based on business, legal and regulatory needs.
Once the retention period is over, Pipedrive will remove any identifying information from your personal data in our applicant tracking system, maintaining data about your recruitment process without any identifying details. Any assessment or background check data will also be deleted after the retention period.
If you are hired for a position at Pipedrive, we will retain the information provided during the recruitment process as part of your employment record.
You have the right to request access to any Personal Data collected about you as well as information about where the personal information came from, why it was collected, and who it has been shared with. You also have the right to request corrections to any inaccuracies in the information, and in certain circumstances to request that we delete personal information that we have collected directly from you. You are also at all times protected from discrimination for exercising these rights and have the right to file a complaint with relevant supervisory authorities.
You have the right to request, in certain circumstances, that we limit the processing of your sensitive personal information.
However, we strive to only process sensitive personal information related to job applicants for reasons allowed by applicable law and only as much as necessary and appropriate for those reasons. These reasons may include providing services, preventing security incidents, protecting against harmful or illegal activities and holding those responsible accountable, monitoring customer interactions, temporary use, ensuring quality and safety, conducting internal research for technological advancements, and identifying and fixing technical issues.
Please note, that Pipedrive does not use sensitive personal information relating to job applicants for the purposes of inferring characteristics of an individual.
If you have any questions regarding the processing of your personal data, you can contact Pipedrive’s Data Protection Officer at [email protected]
Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have certain rights to understand and request that we disclose details about how we handle their personal data. To learn more about how we collect, use, disclose, and share your Personal Data, please see below.
In the preceding 12 months, we have collected the following categories of personal data about California consumers. We may collect this personal data directly from you, from third parties, and from your interactions with us.
Biographical and contact information, such as an address, telephone number, employment, and employment history;
professional or employment-related information, such as your employer and job role;
education information and details such as education history, certifications, and qualifications;
any other information you provide to Pipedrive in connection with a job application, such as information contained in a cover letter, information disclosed in an interview, or other information you volunteer during the application process; and
inferences drawn from any of the above information.
Sensitive Personal Information
In addition to the categories of personal data listed above, we may collect certain categories of Sensitive personal information from you as that term is defined under CCPA, if you choose to provide it. In the preceding 12 months, we may have collected the following categories of Sensitive personal information from California consumers:
Personal health information (result of aptitude assessments by Criteria corp);
Background checks results (done by Sterling (EMEA) Ltd.
We may retain this personal data for as long as is needed for the purpose(s) for which it was collected and no longer than is relevant and reasonably necessary. Our retention periods vary based on business, legal and regulatory needs.
We collect and process personal data related to job applicants to recruit and hire, assess and evaluate a job applicant’s skills and qualifications, comply with legal obligations, and send information about positions at Pipedrive that may be of interest to individuals.
The law also requires us to list the categories of third parties to whom we “sell” or “share” personal information. Under the CCPA, a business “sells” personal information when it discloses personal information to a company for monetary or another benefit.
Please note that Pipedrive does not sell any personal information relating to our job applicants, regardless of their place of residency.
The CCPA gives you certain rights regarding the personal data we collect about you:
Right to Know About Personal Data Collected, Disclosed, or Sold. You have the right to request to know what Personal Data we collect, use, disclose, share and sell about you.
Right to Request Deletion of Personal Data. You have the right to request the deletion of your Personal Data collected or maintained by us as a business.
Right to Opt-Out of the Sale or Sharing of Personal Data. You have the right to opt-out of the sale of your Personal Data by us as a business. Pipedrive shares Personal Data as described above, which may be considered a “sale” of Personal Data under the CCPA.
You may opt out by clicking here on the “Cookie notice” link at the bottom of our website (www.pipedrive.com) and selecting your preferences on that page. You may also opt out by broadcasting an opt-out preference signal like the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only. If you wish to learn more about the GPC and how to use a browser or browser extension incorporating the GPC signal, you can visit the GPC website here.
Right to Limit the Use and Disclosure of sensitive personal information. In some instances, we may use or disclose your sensitive personal information for legitimate business purposes as outlined under the CCPA, and for any other purposes as set forth in Section 10.2, above.
Right to Correct Inaccurate personal data. You have the right to request the correction of your personal data if it is inaccurate and you may submit a request as further described below.
Right to Non-Discrimination for the Exercise of Your Privacy Rights. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.
You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent has written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your personal information.
Financial Incentives. We do not provide any financial incentives tied to the collection, sale, or deletion of your personal data.
If you would like to make a request and exercise your rights described above, please contact us via [email protected]
Please revisit this page periodically to stay aware of any changes to this Notice, which we may update from time to time. The updated Privacy Notice will be effective as of the time of posting, or such later date as may be specified in the updated Privacy Notice.
Please contact us with any questions or comments about this Notice, your Personal Data, our use and disclosure practices, or your consent choices by email at [email protected]. If you have any concerns or complaints about this Notice or your Personal Data, you may contact Pipedrive’s Data Protection Officer by email at [email protected].
The addresses of our offices, where Pipedrive, Inc. and our affiliates are located, can be found at https://www.pipedrive.com/en/about.