GLOBAL
PRIVACY
POLICY (the “Policy”)
This Policy describes how Lunker and its affiliates and subsidiaries (collectively “ LUNKER ,” “ we ,” “ our ,” or “ us ”) collect, use, transfer, and disclose your information. A list of our affiliates and subsidiaries is available from our Privacy Office as described below,
“ Personal Information ” is informatio n that identifies you as an individual or relates to an identifiable individual. This Policy describes our practices of processing Personal Information that we collect and use in connection with:
• Websites operated by us from which you are accessing this Policy (the “ Site ”);
• Software platforms and applications we make available for use on o r through computers or mobile devices (the “ Applications ”);
• Our social media pages from which you are accessing this Pol icy (collectively, our “ Social Media Pages ”);
• HTML-formatted email messages we send to you tha t link to this Policy;
• Communications, including via emails, SMS and/or text messages we send to yo u manually and from software that may qualify as autodialers (“ Texts ”); and
• Offline business interactions you have with us, including in person discussio ns, telephone conversations, and non-electronic communications.
Collectively, we refer to the services provided through the Site, Applications, Social Media Pages, email messages, and offline business interactions
as the “ Services .” Note, references in this Policy to “inc lude” or "including" mean "including without limitation."
WHO WE ARE & WHAT WE DO
Lunker is a global organizational consulting firm. We help comp anies design their organization – the structure, the roles and responsibilities, as well as how they compensate, develop and motivate their people. We also help organizations sel ect and hire the talent they need to execute their strategy.
Lunker provides a wide range of organizational consulting services to help companies s tructure their organization, and some of these Services involve the collection and use of your Personal Information. For certain Services, Lunker , including its subsidiaries as listed here: https://cdn. Lunker .com/privacy/ControllerEntities.pdf , is the company responsible (or the ‘controller’) for t he collection and use of your Personal Information. These Services are descri bed in this Policy. For other services, Lunker collects and uses your Personal Information as a service provider (or ‘processor’) on behalf of and under instructions from our clients. If you have any questions about the collection and use of y our Personal Information in the context of those services, please contact the company that is responsible for the collection and use of your Personal Information (e.g., the company where you applied for a position ).
The Services for which Lunker coll ects and uses your Personal Information as a controller (and which are covered by this Policy) are:
• Search Services. We maintain a talent pool t o help clients find talent at the board-level, chief executive, and other senior executive positions. We also offer search Services for clients to find talent for middle to uppe r-level management or temporary staff.
• Compensation and Benefit Analysis Products. We provide software products and consulting Services that our clients can use to conduct compensation and benefit analysis; job architecture and organizational structuring; and mapping t o Lunker ’s proprietary job profiles.
• Credential Network. We pa rticipate in a Credential Network: a distributed ledger network that enables trusted, private, and secured exchange of career credentials between individuals and organizations. We may issue you credentials, verify your credentials exc hanged
on the Credential Network, or receive credentials you disclose to us.
• Learning Services and Development Products. We provide a business-to-consumer version of a software product, called KF Advance, that users can use for coaching and job-hunting preparation. In addition, we may off er e-learning and training services for individuals from time - to - time .
• Our Site. We disclose research , whitepapers, and service information on the Site; provide access to KF Store to purchase books and products; and share issues of the B riefings Magazine.
For additional controller activities, see the Processing of Personal Information section below.
The services for which Lunker collects and use s your Personal Information as a processor are:
• Recruitment Process Outsourcing (RPO) Services. We provide recruitment process outsourcing and/or project recruitment servic es to help our clients attract top people. This involves Lunker recruiting individuals on the client’s behalf.
• Consulting Services. We help our clients implement their business strategy by consulting with them on st rategy execution and
organization design, talent strategy and work design, rewards and benefits, assessment and succession, leadership development, and other talent needs.
• Assessment and Survey Services. We help clients in their roles as the data controllers, conduct employee and candidate assessments and surveys.
• Software Products (other than Compensation and Benefit Analysis Products). In addition to the Compensation and Benefit Analy sis products mentioned above, we provide other software products that our clients can use, for example, to conduct assessmen ts, surveys, or career coaching. When we collect and use your Personal Information in relation to these software products other than the
Compensation and Benefit Analysis products, we do so as a processor for our clients.
COLLECTION AND PROCESSING OF PERSONAL INFORMATION
HOW WE COLLECT PERSONAL INFORMATION
We collect Personal Information in a variety of ways, including through our Services and from other sources, as set out in the grid below. If you do not provide the information requested, we may not be able to provide the Services. We will note which Personal Information is required to provide the Services at the time of its collection.
If you disclose any Personal Information relating to other people to us, you represent that you have the authority to do so and to permit us to use
the information in accordance with this Policy.
PROCESSING OF PERSONAL INFORMATION
Lunker collects Personal Information to provide Services to you, our clients, and to operate our business. The type of Personal Information we collect about you depends on the situation at hand. Please do not provide us with any Personal Information if you do not agree with this
Policy .
We use your Personal Information for legitimate business purposes as described in the overview below.
Providing our products and Services
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Providing our Search Services |
Searching for talent at the board- level, chief executive, other sen ior executive positions, middle to upper level management, or other temporary staff; identifying professional opportuni ties that we think may be of interest to you; contacting you from tim e to time regarding potential opportunitie s; contacting you from time to time for referrals; soliciting names of, or additional Personal Information regarding, potential candidates in connection with our Search Services to understand the market; confirming references and conducting educatio n and background checks as appropriate; and aggregat ing and disclosing diversit y and other statistical information regard ing our candidates and placement activities. To contact you about roles relevant to you, we may compare your skills and qualificatio ns against successful candi dates in similar roles. We may contact you for these purposes by Texts, where you have opted-in or where you have initiated contact wi th one of our recruiters via text messag e. You may opt out of Texts at any time by replying STOP to a message or by contacting us as set o ut below. |
Name & Contact Details; Business Contact Details; User Photog raphs and Videos; Professional Information; Candidate Introducti on Information; and, to the extent permitted by applicable law, Background Information. |
Performance of the contract, for example, the user agreement we enter into when you create a Lunker candidate account.
Legitimate interest, for example, to approach you regarding potential opportunities. |
Third parties who introduce candidates (e.g., headhunters who contact Korn Ferry) References (individuals who can attest to candidates ’ skills, experience, and personality put forward by the candidate) Networking activities Public databases Joint marketing partners Licensed databases Social media platforms Background check providers |
Your prospective or current employer (for internal candidates or if you include your current employer as a reference) Reference sources Third party service providers and/or sub-processors involved in delivering the Search Services As detailed in the Disclosure of Personal Information section |
|
|
|
|
|
|
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Providing our Compensation and Benefit Analysis Products |
Conducting surveys and compensation and benefits analysis (where permitted by law); consulting with you or our c lients on rewards and benefits; preparing thought leadership materials; research, publication, development, benchmarking and norms, validation, longitudinal studies, trend analysis, to improve and enhance our Services or to develop and market new Services. |
Name &
Contact
Details;
Preferences; Account Information; Marketing Data; and Professional Information. |
Performance of the contract, including the User Agreement we enter into when you create a Lunker account. Consent, for example, to share the outcome of your compensation a nd benefit analysis with a potential employer. Legitimate interests, such as to prepare thought leadership materials. Any publish ed product will refer only to larger aggregations of individuals and will not identify you persona lly or include any results attributable to you. |
Clients to whom we provide Services Third parties who participate in an survey or compensation advisory engagement. |
Clients to whom we provide Services
As detailed in the Disclosure of Personal Information section |
Participating in the Credential Network |
Lunker participates in a private and encrypted distributed ledger network that enables trusted, private, and secured exchange of career cre dentials between individuals. Lunker may issue digital credentials to you once you have completed a training course; verify credentia ls exchanged on the Credential Network (including credentials issued between other organizations on the Crede ntial Network); receive credentials you disclose to Lunker and o ther organizations; create a credential for you at your request; use credentials you disclose to Lunker as part of a recruit ment activity. |
Name & Contact Details; Digital Career Credentials; Course(s) Completed; Course Gra de/Score. |
Consent. |
N/A |
Any organization with whom you choose to share your credentials. As detailed in the Disclosure of Personal Information section |
|
|
|
|
|
|
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Customer service |
Administering customer - care services to facilit ate and address inquiries, requests, comments and complaints about any of our Services (such as in pe rson, through phone lines, Texts, email, or on Social Media Pages), for example, to send you doc uments or product information you request or assist you in using the Services. |
Name & Contact Details; Business Contact Detail s; Account Information; Bi lling Information; Relationship History; Transaction Informati on; Device Information; Telephone C all Recordings; and Preference s. |
Performance of the user agreement we enter into with you to provide the Services . Legitimate interests, such as responding to inquiries or complaints. Legal obligations 1 , such as when you submit a request to access your Personal Information. |
N/A |
As detailed in the Disclosure of Personal Information section |
Communicating important changes / Service messages |
Send you important information regarding our relati onship with you, our Services, any changes to our terms, conditions, policies and procedures, and/or ot her administrative informat ion via email, Texts, Social Media Pages, or other communication Applications . |
Name & Contact Details; Business Contact Details (e.g., telephone number and ema il address); Account Information; Preferences; Relations hip History; Transaction Informati on; Device Information; and Social Media Information. |
Legitimate interests, such as to ensure our Services are used in accordance with our terms, conditions, a nd policies. Performance of contract, where provided in our user agreement. Legal obligations 2 , such as to inform you of material changes to our user agreement to comply with applicable consumer and/or data protection laws. |
N/A |
As detailed in the Disclosure of Personal Information section |
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Operations and general business |
Administering online Services (including troubleshoo ting and diagnostic testing, condu cting performance analyses of our systems and Service s, testing new system features to evaluate their impact, system and log maintenance, technical support, system debugging, an d the hosting of data); employee training and managing work activities and personnel gene rally; and facilitating me rgers, acquisitions and oth er reorganizations and restructurings of our business (including
prospective transactions
).
3
|
Personal
Information as
relevant
for the specific business operation. |
Legitimate interests, such as responding to customer complaints and concerns. Legal obligations 4 , for example, relating to financial transactions, such as the obligation to maintain books and records. |
Third party organizations, when they share personal information with us to, for example, facilitate mergers, acquisitions and other reorganization and restructurings of our business. |
As detailed in the Disclosure of Personal Information section |
Candidate introductions by third parties |
Receiving information from a third party (such as headhunters, acquaintances, friends) about suitable candidates for a position in connection with our Recruitment Services. |
Candidate Introduction In formation, Name & Contact Details; Business Contact Details; Professional Information; and Resumes. |
Legitimate interest. Individuals who introduce candidates warrant they have the authority to share candidate personal information with Lunker . |
Third parties who introduce candidates. |
Your prospective or current employer. Reference sources. Third party service providers and/or sub-processors involved in delivering the Search Services.
As detailed in the Disclosure of Personal Information section |
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
KF Advance Mobile Application TrueDepth camera system |
The Lunker Advance mobile app is capable of receiving information from iPhone’s TrueDepth camera system (if available on the device, and if you enable this feature) . This information helps users practice interviewing by recor ding and counting the users’ blinks and smiles. Feedback on blinking and smiling from a practice session helps users communicate more effectively during an actual interview. The TrueD epth camera recording, and info rmation about the blinks and smiles during the recorded session, is uploade d and stored on the servers used to operate the app; except as otherwise specified in this Policy, such data will neither be disclosed by us to third parties, unless the user elects to share the data with their coach, nor used by us for any purposes other than the app’s functionality. |
Video recordings, inc luding insights and metrics derived from the recordings. |
Consent |
Third Party mobile operating system (e.g., Apple) |
Third party service providers and/or sub-processors involved in delivering the Search Services (e.g., Apple). As detailed in the Disclosure of Personal Information section |
Events and visitors
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Visits, conferences, and other online or in- person events |
Facilitate and participate in conferences and events , such as trade shows or bookings at our premises (including renta ls), and welcome guests and visitors to our premises. |
Name & Contact Details; Business Contact Details; Account Information; Billing Information; Relationship History; Transaction Information; Prefere nces; Visitor and Event Information; Market ing Data; and Event Photographs and Videos. |
Performance of a contract with you, such as collecting information regardin g a planned event in which you participate. Legitimate interests, such as responding to customer complaints or concerns relating to an event. |
Event management service providers. |
As detailed in the Disclosure of Personal Information section |
Marketing and engagement
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Marketing |
Send you promotional information about our Services, products, articles, whitepapers, newslet ters, conduct surveys, promot ions, offers and other news about Lunker . These materials may be sent by Texts, where you have opted-in. You may opt out of Texts at a ny time by replying STOP to a message or by contacting us as set out below. |
Name & Contact Details; Business Contact Details; Account Information; Relationship History; Transaction Information; Preferences; Marketing Data; Event Photographs and Videos; User Content; Device Information; and Social Media Information. |
Legitimate interests, such as to promote our Services and products. Consent, for example, where we would like to send you direct Texts and email marketing communications, but do not have an existing relationship with you, we will ask for and rely on your prior opt-in consent. Please note that if we obtained your Personal Information because you are using our Services at the request of your employer, you will not receive marketing materials as a result of the Personal Information we obtained from the Services. |
Publicly available databases. Marketing / advertising service providers. Data broker service providers. |
As detailed in the Disclosure of Personal Information section |
Relationship building and engagement |
Facilitate and respon d to any product reviews, social sharing, and posts on our Services. |
Name & Contact Details; Business Contact Details; Account Information; Marketing Data; Social Media Information; and User Content. |
Legitimate interests, such as engaging with individuals who post on our Social Media Pages. |
Marketing / advertising service providers. Data broker service providers. |
As detailed in the Disclosure of Personal Information section |
]
Personalization and impro ving our products and/or Services
Purpose |
Examples of Processing Activities |
Personal Information Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Personalizing our Services |
Personalize our interactions with you and provide you w ith information tailored to your interests, such as a tailored learning journey on our online Services as well as ou r website; deliver content via our Serv ices that we believe will be relevant and interesting to you. We may recommend your learning journey and development activities based on your assessment results. |
Name & Contact Details; Business Contact Details; Account Information; Marketing Data; Social Media Information; Relationship History; Transaction Information; Device I nformation; and Preferences. |
Consent, for example, where we would like to send you trainings tailored to your spec ific interests and/or behavior, and such tailoring of trainings may result in profiling. Legitimate interests, such as providing tailored Services based on past usage and/or preferences, and such tailoring would be based on basic and privacy-non-intrusive segmentation. |
Publicly available databases. Marketing / advertising service providers. Data broker service providers. |
As detailed in the Disclosure of Personal Information section |
Improving and developing new products and Services |
Conduct data analysis, for example, monitoring and analyzing usage of Services and using data analytics to improve the efficiency of our Service s; develop new products and Services; consider ways for enhancing, improving, repairin g, maintaining or modifying our current products and Services; identify usage trends, for example, understanding which parts of our Services are of most interest to users; determine the e ffectiveness of our promotional campaigns, so that we can adapt our c ampaigns to the needs and interests of our users; and operate and expand our business activities, for example, understandin g which parts of our Services are of most interest to our users so we can focus our energies on meeting our users’ interests. |
Name & Contact Details; Business Contact Details; Account Information; Relationship History; Transaction Information; Preferences; User Conte nt; Device Information; Telep hone Call Recordings; and Socia l Media Information. |
Legitimate interests, such as developing new Services and/or products. Consent, such as when we use cookies and similar technologies and the data collected by means of such technologies qualify as Personal Information. |
Publicly available databases. Marketing / advertising service providers. Data broker service providers. |
As detailed in the Disclosure of Personal Information section |
Purpose |
Examples of Processing Activities |
Categories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Pseudonymizing, key coding, aggregating and/or anonymizing Personal Information |
Pseudonymizing or key-coding your Personal Information, meaning information that may directly identify you is replaced with a code to minimize unwanted or unintended identification. Such key-coded information can be de- coded by using the key so that it identifies you again. Aggregating and/or anonymizing Personal Information so th at it will no longer be considered Personal Information. For example, we may use this information t o train our AI algorithms or test them for bias, generate norms by industry, geography, level, etc., enable us to understand where our Services are being utilized, conduct ongoing validation stu dies, compile reports, and publish journal articles to further the knowledge base of or ganizational and leadership science. |
Personal Information as relevant for the specific business purpose. |
Legitimate interests, such as to generate other data for our use. We may use and disclose such data for any purpose if it no longer identifies you or any other individual. |
N/A |
As detailed in the Disclosure of Personal Information section |
Security and legal reasons
Purpose |
Examples of Processing Activities |
Personal Information · Cat egories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
Fraud prevention and security |
Conduct audits, verify that our internal processes function as intended and are co mpliant with legal, regulatory, or contractual requirements; monito r for and prevent fraud; and security purposes, including system security and on-site securi ty of our premises. |
Name & Contact Details; Business Contact Details; Account Information; Billing Information; Device Information; Relationship History; Telephone Call Recordings; CCTV and Site Security Information; and Transaction Information. |
Legal obligations 5 , such as to detect and prevent cyberattacks. Legitimate interests, such as identifying and/or preventing fraudulent transactions. |
N/A |
As detailed in the Disclosure of Personal Information section |
Purpose |
Examples of Processing Activities |
Personal Information · Cat egories |
Legal Basis |
Third Party Sources |
Who Has Access to Your Personal Information |
|
|
|
|
|
|
Legal and compliance |
Fulfil our legal and compliance- related obligations , including complying with applicab le laws; complying with legal processes; responding to requests from public and government au thorities; meeting national security or law enforcement requirements. Enforcing our terms and conditions; protecting our operations; protecting Korn Ferry’s rights, privacy, or prop erty; and allowing us to pursue available legal remedies, de fend claims, and limit the damages that Lunker may sustain. |
Personal Information as relevant for the specific legal a ction, regulatory investigati on, and/or legal processes in question, w hich may include: Name & Contact Details; Business Contact Details; Account Information; Billing Information; User Content; Preferenc es; Marketing Data; Relationship History; Transaction Information; Visitor and Event Infor mation; User Photographs and Videos; Social Media Information; Event Photographs and Videos; CCTV and Site Security Information; Telephone Call Recordings; and Device Information. |
Legal obligations 6 , such as complying with legal processes. Legitimate interests, such as enforcing terms and conditions to protect trademarks and bringing or defending legal claims. |
Public
and/or
government and/or regulatory authorities, including courts, tribunals, regulator s, and government authorities. Third persons (legal or natural), as relevant for the specific legal action and/or processes in question (such as lawyers, auditors, insurers, advisory firms etc .). |
As detailed in the Disclosure of Personal Information section |
Emergency and incident response |
Ensuring the safety of on-site personnel and visitors; responding to, handling and documenting on- site accidents and medical and other emergencies; ac tively monitoring properties to ensure adequate incident prevention, response and documentation (including CCTV); requesting assistance from eme rgency services; and sending notifications and alerts in the event of incidents or emergencies (such as via Texts, email, call, audio-v isual device prompts , etc .). |
Name & Contact Details; CCTV and Site Security Information; and Visitor and Event Informa tion. |
Legal obligations 7 , for example, relating to health and safety regulations and documenting on - site accidents. Legitimate interests, such as monitoring properties through CCTV to ensure individuals’ safety. Protect individuals’ vital interests, such as contacting medical or emergency services where an individual’s life is at risk. |
N/A |
As detailed in the Disclosure of Personal Information section |
PERSONAL INFORMATION
We collect the following categories of Personal Information:
A. Personal Information we receive from you and examples of that Personal Information:
Name & Contact Details |
First and last name, nickname or alias, title, prefix, email address, telephone number, postal address, date of birth, gender, race, country of r esidence, citizenship. |
Phone number |
Your personal phone number (or any other number) at which you opt in/elect to receive Texts or calls . |
Business Contact Details |
Company name, business email address, business telephone number, busin ess postal address, country of business. |
Account Information |
Your chosen username and password, an d other information you share in your account. |
Billing Information |
Such as debit or credit car d details, bank account details, billing address. |
Digital Career Credentials |
Digital career credentials related to certifications, course completions, or education credentials. |
Professional Information |
Resume information, qualifications, professional experience, employment history, education, professional credentials, memberships in professional organizations, skills, information from former employers and other references, results of candidate assessments and related data, and compensation and benefits information (where permitted by applicable law). |
User Content |
Reviews about our products and Services, and other content you may create or share on our Services, including posts on our Social Media Pages, blogs, and comment sections. |
Preferences |
Language, interests, preferred means of communication, and other customer fee dback/preferences that you might express during your use of our Services. |
Marketing Data |
Your choices regarding our promotional emai ls, messages and other marketing displayed or provided to you, and preferred methods of s uch promotional communication. |
Relationship History |
Details of your communications with us, and details of your claims, complaints, and queries in general. |
Transaction Information |
Details of products and Services you have purchased from us. |
Visitor and Event Information |
Dietary restrictions, travel and accommodation details, issued identification pass to access the premises, and other details specific to a particular event or confe rence that you share with us. |
User Photographs and Videos |
Photos and videos submitted by you while using our Services or that y ou make publicly available on the Internet (e.g., LinkedIn). |
Telephone Call Recordings |
Audio recordings of telephone calls when you contact us. |
B. Personal Information we collect through your use of our Services or from other sources and examp les of that Personal Information:
Social Media, Industry and Professional Directories, and Job Board Information |
Profile pictures, social media account ID, and other social media and job board profile information, including lists of friends/followers on so cial media. |
Background Information |
Information on, or the verification of, your emplo yment or educational background, and behavior. |
Event Photographs and Videos |
Photos and videos taken at one of our e vents/conferences. |
CCTV and Site Security Information |
Images or video foot age captured or recorded by CCTV and other security measures on our premises. |
Device Information |
Information about your devices and your use of our Services, e.g., we may log cer tain statistics about the traffic on our Site like the users' domains and browser types. This includ es data obtained through cookies and similar technologies , as described in our cookies and similar technologies policy . |
Public Record Information |
Information from public busine ss records and industry directories, for example corporate registrations. |
Job Application information received fr om other Job Boards and Recruitment Service Providers |
Information included in your re sume or CV, for example, work experience, education, and skills. |
Candidate Introduction Information |
Name of the person who introduces a candidate, their professional relationship with the candidate, their opinion about the candidate’s skills, experience, and personality, and other recommendations and information provided in this context. |
Name & Contact Details |
First and last name, nickname or alias, title, prefix, email address, telephone number, postal address, date of birth, gender, race, country of r esidence, citizenship. |
Business Contact Details |
Company name, business email address, business telephone number, busin ess postal address, country of business. |
Professional Information |
Resume information, qualifications, professional experience, employment history, education, professional credentials, memberships in professional organizations, skills, information from former employers and other references, results of candidate assessments and related data, and compensation and benefits information (where permitted by applicable law). |
Disclosure Of Personal Information
From time to time, we also disclose Personal Information to our strat egic alliance partners and to our network of independent consultants who provide Services on Lunker ’s behalf.
• You can obtain a lis t of our strategic alliance partners by contacting our Privacy Office as described below.
Lunker discloses Personal Information to third-party service provide rs who provide support for our Services or business operation.
• Lunker works with third-party service providers who provide services that may include assessment services, including
assessment validation services, website hosting and IT consulting services, data analysis, resume verification, ba ckground checking, payroll services, public relations services, marketing services, attorneys, ac countants, and other administrative and back-up and security services.
• As part of providing services, these third-parties will be provided with access to Personal Information. In addition, our software development partners may us e Personal Information, like usage metrics or bug issues, to modify, improve, refine, and validate their technology, research and development.
Lunker may disclose certain Personal Information regardi ng candidates, including the results of candidate assessments and related data to your current (if applying for an internal pos ition) or prospective employer who has engaged Lunker to fulfill recruitment requests, or to
reference sources.
Lunker may disclose or transfer all or part of your Personal Information in the event of a sale of our company or one or more of our affiliates. We may also disclose or transfer all or part of your Personal Information in t he event of a merger, joint venture, assignment, or consolidation
involving our company or one or more of our affiliates. This may also occur if there is a sale or transfer or other disposition of assets or of any portion of our business or the business of one or more of our affiliates (in cluding in connection with bankruptcy or similar proceedings). You will be notified of any such business transaction and of possible changes to the processing of your Personal Information in accordance with
applicable law and the ‘ Updates To This Policy ’ section.
There may be other times that we disclose your P ersonal Information.
• Lunker may also use or disclose Personal Information (to comply with a legal obligation or because we have legitimate interest to do so) to: (i) co mply with applicable laws, (ii) respond to inquiries, requests or orders from public or government authorities, including those outsi de of your country of residence, or (iii) protect the rights, privacy, safety or property, of Lunker and our affiliates, you or others.
• We cannot and do not assume any responsibility for the actions or omiss ions of third parties, such as clients, including the way they use Personal Information received either from Lunker or from other independent sources.
Other Disclosures
We also disclose your Personal Information as neces sary or appropriate, in particular when we have a legal obligation or legitimate interest to do
so, as set out in further detail below.
Purpose |
Further Detail |
To comply with applicable law and regulations |
This may include laws outside your country of residence, which could give rise to a legal obligation requiring us to process your Personal Information, including: • Civil and commercial matters: where we are in receipt of a court order, motion to compel, or subpoena to disclose information for the purposes of court proceedings, such as under Regulation (EU) No 1215/2012 on juris diction and the recognition and enforcement of judgments in civil and commercial matters. • Criminal matters: to comply with requests and orders, including from US, EU and EU Member State law enforcement to provide information in relation to a criminal investigation in compliance with applicable local laws, or to take steps to report in formation we believe is important to law enforcement where required or advisable under applicable local laws. • Consumer matters: to comply w ith requests from competent authorities, including the FTC under US law or national authorities under EU or EU Member Sta te consumer protection law, under Directive (EU) 2019/2161 and its implementing laws in EU Member States. • Corporate and taxation matters: to comply with our obligatio ns under applicable corporate and tax legislation, such as where a national tax law requires collection of spec ific transactional personal information for tax purposes. • Regulatory matters: to respond to a request or to provide information we believe is necessary or appropriate to comply with our obligations to engage with regulators, including if relevant EU Member State data protection supervisor y authorities initiate investigation under the General Data Protection Regulation into Lunker or the Ca lifornia Privacy Protection Agency initiates an investigation under the California Consumer Pri vacy Act. These can include authorities outside of your country of residence. • Compliance and internal investigations: to comply with global whistleblowing requirements, including under State whistleblower protection laws in the US and Directive (EU) 2019/1937 and its implem enting laws in EU Member States. • Health and safety regulations : to comply with health and safety reporting obligations in accordance with applicable local laws, such as in relation to accidents involving members of the public on our premises. • Anti-discrimination laws: to com ply with diversity reporting obligations, including the Civil Rights Act of 1964 in the US. |
For other legal reasons |
• For dispute resolution purposes; • To protect our rights, privacy, safety or property, and/or t hat of our affiliates, you or others. |
In connection with a sale or business transaction |
We have a legitimate interest in disclosing or transferring your Personal Information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedi ngs). You will be notified of any such business transaction and of possible changes to the processing of your Personal Information in accordance with applicable law and the ‘ Updates To Thi s Policy’ section. |
SECURITY
Lunker seeks to use reasonable organizational, technical, and adm inistrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage sy stem can be guaranteed to be 100% secure.
• If you have reason t o believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you
might have with us has been compromised or your user credentials are no longer secure), please immediately notify us of the problem by contacting us as described in the “ Contacting Us ” section below.
RETENTION PERIOD
We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Policy unless a longer retention period is
required or permitted by law, for example, for the purposes o f satisfying any legal, regulatory, tax, accounting or reporting requirements.
• The criteria used to determ ine our retention periods include:
o The length of time we have an ongoing relationship wi th you or our client and provide the Services to you (for example, for as long as you have an a ccount with us or keep using the Services),
o A period beyond the time of the ongoing relationship if we have a legitimate internal operations need, such as a need to retain the information for analysis, record-keeping, and compliance with data retention schedul es,
o If there is a legal o bligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period before we ca n delete them), or
o If retention is advisable considering our legal position (such as regarding applicable statutes of limitations, litigation or regulatory investigations).
Where a legal obligation arises or retention is advisable in light of our legal position, in some circumstances, we will retain certain Personal
Information, even after your account has been deleted and/or we no longer provide the Services to you, for example:
• To cooperate with law enforcement or public, regulatory and government authorities: If we receive a preservation orde r or search warrant related to your Services account, we will preserve Personal Information subject to such order or warrant after y ou delete your Services account.
• To comply with legal provisions on tax and accounting: We may retain your Personal Information, such as Billing Information, Relationship History, Transaction Information, Customer Invoices as permitted by applicable laws and Lunker policies after you delete your Services account, as required by tax law and to comply with bookk eeping requirements.
• To pursue or defend a legal action: We may retain relevant Personal Information in the event of a legal claim or complaint, including regulatory investigations or legal proceedings about a claim related to your Personal Information, or if we re asonably believe there is a prospect of litigation (whether in respect of our relationship with you or otherwise) as permitted by applicable laws and Lunker policies after the dispute has been settled or d ecided by a court or tribunal from which there is no further right of appeal.
• To document security or fraud incidents: We may keep and archive records of incidents for internal purposes and as documentat ion of steps taken.
In some circumstances and subject to applicable law, we de-identify, aggregate, pseudonymize, and/or use o ther technical and operational
controls to anonymize your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, in which
case we may use this information indefinitely wit hout further notice to you.
THIRD PARTY SERVICES
This Policy does not address, and we ar e not responsible for, the privacy, information, or other practices of any other third parties, including any third party operating any website or service to wh ich the Services link.
• You may have the opportunity to follow a link from or to other websites maintained by Lunker affiliates, or other third parties. The
inclusion of a link to a third party site or service from our Services does not imply our endorsement of the linked site or service by us or by our affiliates. Because these other websites may not be hosted or controlled by Lunker , this Policy does not address the privacy
practices of those websites. We encourage you to review the privacy policies of each of those websites.
• Please note that we are not responsible for the information collection, use, disclosure, or security policies or practices (including the data security practices) of other organizations, such as LinkedIn, Facebook, Ap ple, Google, Microsoft, RIM, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including any
Personal Information you disclose to other organizations throug h or in connection with the Apps or our Social Media Pages.
SENSITIVE INFORMATION
Unless we request it, we ask tha t you not send us, and you not disclose, any sensitive Personal Information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal
background, or trade union membership) through the Services or othe rwise to us.
UPDATES TO THIS POLICY
Lunker reviews its privacy practices reg ularly, and those practices are subject to change. You can determine when this Policy was last
revised by checking the “ Last Updated ” legend at the bottom of the Policy. Any changes to the Policy will become effective upon posting of the
revised Policy on th e Internet.
USE OF SERVICES BY MINORS
The Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect Personal Information from individuals
under 16. We request that these in dividuals do not provide their Personal Information through the Services.
SUMMARIES OF POLICY
This Policy is the sole authorized statement of Lunker ’s practices with respect to the collection of Personal Information through the Services and the usage of Personal Information. Any summaries of this Policy generated by third party software or otherwise (for example, in connection with the “ Platform for Privacy Preferences ” or “P3P”) have no legal effect , are in no way binding upon Lunker , cannot be relied upon in
substitute for this Policy, and neith er supersede nor modify this Policy.
CONTACTING US
Lunker (including its subsidiaries as listed here: https:// cdn. Lunker .com/privacy/ControllerEntities.pdf ), located at 1900 Avenue of the Stars,
Suite 1500, Los Angeles , CA 90067, is the company responsible for collection , use , and disclosure of your Personal Information under this Policy .
To submit questions regarding this Policy or to contact our Data Protection Officer (DPO), use the following contact information: via email to Lunker at privacy @ Lunker . com or , if by postal mail to Lunker , 1900 Avenue of the Stars , Suite 1500, Los Angeles , CA 90067, Attn : Privacy Office.
Because email communications are not always se cure, please do not include credit card or other sensitive information in your emails to us.
For any inquiries regarding our compliance with EEA privacy laws and the content of this Privacy Policy, Please contact us at
ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS
Pursuant to the California
Consumer
Privacy Act of 2018
, as amended
by
the
California
Privacy
Rights
Act
(collectively
the
“
CCPA
”),
Lunker
is providing the following additional details regarding the categories of Personal Information that we collect, use and disclose about California
residents and California residents’ rights. This section supplements the above disclosures in this Policy.
Notice at Collection
The following chart details which categories of Personal Information about California residents we collect, as wel l as which categories of Personal
Information we have collected and disclosed for our operational b usiness purposes in the preceding 12 months. The chart also details the categories of Personal Information that w e “sell” (the term “sale” is broadly defined under the CCPA to include an exchange of Personal Information for valuable consideration of any kind, not simply for monetary compensation ), including within the preceding 12 months.
Categories of Personal
Information
|
Disclosed to Which Categories of Third
Parties for Operational
B
usiness
Purposes
|
Sold to Which Categories
of
Third
Parties
|
Identifiers, such as
name, contact
information,
IP address, and other online
identifiers
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
Clients (in exception
al
cases,
e.g.,
market
research
,
recruitment
strategy, or successio
n
planning,
Lunker
may sell
name
and
contact information to ou
r
clients)
|
Categories of Personal
Information
|
Disclosed to Which Categories of Third
Parties for Operational
B
usiness
Purposes
|
Sold to Which Categories
of
Third
Parties
|
Personal
information, as defined
in the
California customer re
cords
law,
such as
name, contact informatio
n,
medical
information,
insurance
information, education
information, employment information, and
government-issued
ID
numbers
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
Clients (in exception
al
cases,
e.g.,
market
research
,
recruitment
strategy, or successio
n
planning,
Lunker
may sell
name,
contact information,
and
employment
information to
our
clients)
|
Protected Class
Information, such as
age,
sex, disability stat
us,
primary
language, race,
citizenship, and
marital sta
tus, to the extent
required or
permitted by
applicable
law
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent cons
ultants;
required government agencies
|
Clients (in exception
al
cases,
e.g.,
market
research
,
recruitment
strategy, or successio
n
planning,
Lunker
may sell age,
sex,
primary
language, and
citizenship
to our
clients)
|
Commercial information, such as transaction
information and
purchase
history
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
None
|
Internet or network activity
information,
such
as
browsing history and
intera
ctions with
our
website
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
None
|
Geolocation data, such as
device
l
ocation and
approximate location derived from
IP add
ress
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
None
|
Audio, electronic, visual and similar
information, such as
photograph
s or audio
and
video recordings created
in
connection
with
our business
activities
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
None
|
Categories of Personal
Information
|
Disclosed to Which Categories of Third
Parties for Operational
B
usiness
Purposes
|
Sold to Which Categories
of
Third
Parties
|
Professional or employment-related
information, such as work
history and
prior
employer,
information
relating to
references,
details of qualifications, skills and exper
ience,
human resources data, and
data
necessary
for benefits and
related
administration
services
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
Clients (in exception
al
cases,
e.g.,
market
research
,
recruitment
strategy, or successio
n
planning,
Lunker
may sell
profess
ional
and employment-related
information to our
clients)
|
Inferences drawn from
any
of the
Personal
Information
listed above to create
a
profile
about, for example,
an
individual’s
preferences or abilities
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
None
|
Sensitive
Personal
Informa
tion
•
Personal
Information
that reveals
an
individual’s Social Security,
driver’s
license, state
identification card, or
passport number; account
log-in
in
combination with any
required secu
rity or
access code, password,
or
creden
tials
allowing access to an
a
ccount;
precise
geolocation;
racial or ethnic origin,
religious or philosophical
beliefs,
citizenship, or union
membershi
p; the
contents of mail, email,
and
Texts
unless
we are the
intended reci
pient
of the
communication;
•
Personal
Information collec
ted and
analyzed concerning an
indiv
idual’s
health;
•
Personal
Information collec
ted and
analyzed concerning an
individual’s
sex
life or sexual orientation
|
Our affiliated entities; tru
sted third-party
service providers; strate
gic
alliance
partners and
independent con
sultants
|
None
|
For information on the sources of these categories of Pers onal Information, please refer to the “ How we Collect Personal Information ” section in this Policy, above. For information on retention periods for Personal Information and Sensitive Personal Information, please refer to the
“ Retention Period ” section in this Policy, above.
For details on how we use your Personal Information, please refer to the chart under the “ Processing of Personal Information” section at the start
of this Policy. In addition, we collect, process, an d disclose Sensitive Personal Information for purposes of: providing goods or services as
requested; ensuring safety, security, and integrity; countering wrongful or unlawful actions; sh ort term transient use such as displaying first party, non-personalized advertising; performing services for our business, including maintaining and servicing accounts, providing customer service,
processing or fulfilling orders and transactions, verifying customer information, processing payments, providin g financing, providing analytic services, providing storage, or providing similar services on be half of our business; activities relating to quality and safety control or product improvement; and other collection and processing tha t is not for the purpose of inferring characteristics about an individual. We do not use Sensitive Personal Informatio n beyond these purposes.
You have the right to opt out of the “sale” of your Personal Information. For mo re information on this right and to exercise your right to opt-out of sale, plea se go to Lunker ’s California: Do Not Sell My Personal Information page located here:
https://www. Lunker .com/ccpa .
We do not “share” Personal Information, including Sensitive Pers onal Information, for purposes of cross-context behavioral advertising, as
defined under the CCPA, and we have not engaged in “sharing” in the 12 months preceding the date this Policy was updated. Without limiting the foregoing, we do not knowin gly “sell” or “share” Personal Information, including Sensitive Personal Information, of minors under 16 years of age .
If you are a California resident, you may request that we:
• Disclose to you the following information:
o The categories of Personal Information we collected about you and the categories of sources from which we collected s uch Personal Information;
o The specific pieces of Personal Information we colle cted about you;
o The categories of Personal Information about you that we sold and the categories of thir d parties to whom we sold such Personal Information;
o The business or commercial purpose for collecting or selling Pe rsonal Information about you; and
o The categories of Personal Information about you that we otherwise disclosed, and the categories of third parties with whom we disclosed or to whom we disclosed such Personal Information (if applicable).
• Delete Personal Information we collec ted from you.
• Access Personal Information about yourself.
• Correct inaccurate Personal Information ab out yourself.
• Opt-out of the future sale of your Personal Information. For more information on this ri ght and to exercise your right to opt-out of
We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the Personal Information subject to the request. In most cases, Lunker will verify your identity by confirming that: (1) you control the email address associated with your Personal Information; and (2) your description of y our interactions with Lunker matches our records. If necessary, we may require additional information to verify your reques t.
If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted
above. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an
authorized agent. In addition, we may require that you verify your identity as de scribed above or confirm that you provided the agent permission to submit the request.
You have the right to be free from unlawful discrimination fo r exercising your rights under the CCPA.
ADDITIONAL INFORMATION REGARDING MEXICO
Lunker M é xico , Sociedad Civil (“ Lunker Mexico ”), located at Prado Sur 274, Floor 3, Col . Lomas de Chapultepec , Zip Code . 11000,
Miguel Hidalgo, Mexico City, Mexico, is responsible for the processing of Personal Information that is subject to the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations (collectively, the “ Law ”). This Mexico addendum supplem ents this Policy, except that the information in this section replaces the information in the “Choices and Access ” section of the Policy. Questions regarding this addendum
should be directed to the Lunker Mexi co Privacy Office avisoprivacidad@ Lunker .com or, if by postal mail, at the Mexico City address above.
Lunker Mexico uses your Perso nal Information for the purposes outlined above in the “ How We Use The Personal Information We Collect ”
section. All these purposes, except for market ing, are necessary for maintaining your relationship with Lunker Mexico. If you would like to opt- out of receiving marketing communications from us, please email avisoprivacidad@ Lunker .com to have your contact information removed from our marketing databases.
Lunker Mexico transfers Persona l Information to third parties inside and outside Mexico, as described in the “ Who has Access to your
Personal Information ” section of the Policy. Such transfers do not require you r consent, with the exception of a transfer of Personal Information in the case of a merger, consoli dation, or sale of assets of Lunker Mexico or of an affiliate. Lunker will transfer your Personal Information in the event of a merger, consolidation, or sale of assets. Your u se of the Services means you accept this transfer. If you disagree, please email avisoprivacidad@ Lunker .com and inform us of your preference.
ARCO Rights: You may exercise your ARCO Rights by contacting the Lunker Mexico Privacy Office by email at avisoprivacidad@ Lunker .com or by telephone at 5096 0000. Your ARCO Rights are :
• Right of Access: You have the righ t to request to know what Personal Information Lunker Mexico holds about you and the purposes for which it is processed.
• Right of Rectificat ion: You have the right to request the correction of your Personal Information if it is outdated, inaccurate, incorrect, or incomplete.
• Right of Cancellation: You have the right to request the removal of y our Personal Information from Lunker ’s systems if you believe that it is not being used under the principles, duties and obligations set forth in the Law. If your cancellation request is grant ed, your ability to use the Services may be limited. Please note that to maintain consistency in our Services and operations, we retain backup systems. When you ask that your information be removed from Lunker ’s databases, we may not be able to delete residual copies from our systems or from our backup systems, but they will continue to be protected as required under this notice. We may also need to re tain certain Personal Information about you such as your e-mail address to honor opt-out or similar requests.
• Right of Objection: You have the right to object to Lunker ’s use of your Personal Information for specific purposes. If your objection request is granted, your ability to use the Services may be limited.
c
To exercise your ARCO
rights, you may:
• submit a printed request, with your handwritten signature, at t he address indicated in this section.
Please specify what right(s) you would like to exercise and include sufficient detail to validate your identity and locate your information in our systems. To that end, pleas e provide in your request:
• your name and a photocopy of your o fficial ID;
• the email address you used to register for Lunker Services;
• your user ID for Lunker Services and products, if applicable;
• your interactions with Lunker , including what Lunker Services you used, and whether you took an asses sment or survey, as well as a link to the assessme nt or surveys, if applicable;
• the names of Lunker c onsultants or other personnel with whom you worked or corresponded; and
• a clear description of the Personal Information to w hich your request pertains.
If we require additional information to validate your identity or unde rstand what information you would like to access, rectify, cancel, or object to, Lunker Mexico may ask you to provide it within 5 days after receiving your request. You will have 10 days to respond to our request, starting from the day following the day you receive it. I f you do not respond within that period, your request will be deemed not received. We will respond by email within 20 days of receiving your request or the additional information, as applicable. If applicable, we will fulfill your request within 15 days after our response.
ADDITIONAL INFORMATION REGARDING CHINA
If there is any incon sistency between the below and the above Policy, the following will prevail in respect of the PRC.
Legal Basis for Processing ; Consent
Notwithstanding anything contained in the above Policy to the contrar y, we collect and process Personal Information about you in accordance with the legal bases provided for under the applicable laws. We will obtain your consent (where applicable, separate consent) to collect, use, share, overseas transfer, disclose or otherwise process your Persona l Information if and to the extent required by the applicable laws. If we
collect and process Personal Information based on your consent (where applicable, separate consent), yo u may withdraw your consent (where applicable, separate consent) at any time by contacting us at privacy @ Lunker .com.
Sensitive Personal Information
We generally do not request sensitive Personal Information about you except in li mited cases (such as when you voluntarily answer our
demographic survey questions). Sensitive Personal Inf ormation means Personal Information the leakage or illegal use of which might lead to the infringement of your personal dignity or harm to personal or property safety. We may co llect and process the following sensitive Personal
Information as defined in the PRC laws:
• racial or ethnic origin, gender identity, religious or other beliefs, political opinions;
• facial photos, to the extent that the photos could reveal your biometri c features; and/or
• undisclosed criminal records.
The processing of sensitive Personal Infor mation is necessary to achieve the purposes described in the Policy and will be conducted in a way that would have the leas t impact on personal rights and interests.
International Data Transfers
For the purposes described in the above Policy and for the provision of the Services worldwide, we may, with your separate consent (if required by applicable laws), transfer your Personal Information to Lunker affiliated entities (the latest list of which is available at
https://cdn. Lunker .com/privacy/subsidiariesalliances.pdf ) and third party vendors outside of mainland China, who will process your Personal
Information for the purposes and in the manner as described in this Policy. Lunker will take appropriate measures to ensure that cross-border data transfer and the processing of your Personal Information complies with the requirements of applicable laws and that such mechanisms are aimed at ensuring an adequate level of protection as regards your Personal Information under the applicable laws. If you wish to exercise your rights with respect to your Personal Information, please refe r to the “Choice and Access” section of this Policy.