Great Place To Work CPRA Notice
- Information that we collect:
- Categories of PI we collect:
- Categories of Sources from which we collect PI
- Purposes for Collection:
- Retaining Your PI:
- Categories of Partners with Whom We Share Your PI:
- Your California Rights:
- Asserting Your Rights - Submitting a Request to Know or Delete:
- Changes to this Notice
- Contact Information
Effective March 20, 2023
We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), the California Privacy Rights Act of 2020 effective January 1, 2023 (“CPRA”), and other California privacy laws. Any terms defined in the CCPA and CPRA have the same meaning when used in this Notice. This California Privacy Notice (“Notice”) applies to individuals who reside in the State of California (“Consumers”), as defined under the law, and fulfills the obligations of Great Place To Work Institute, Inc., and its respective affiliates and subsidiaries (collectively, “GPTW”, “we” and/or “us”), to provide Consumers with a California-specific Privacy Notice. Effective March 20, 2023, this section supplements the information contained in our existing Privacy Notice. In the event of a conflict with any other portion of our general Privacy Notice, this Notice shall control and prevail in relation to GPTW’s obligations and a Consumer's right under the CCPA.
Information that we collect:
We collect Personal Information (“PI”), as defined under the CCPA, which includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked directly or indirectly, with a particular consumer or household.
Please review the below to learn more about (1) the categories of PI that GPTW has collected about Consumers over the previous twelve (12) months, (2) the categories of sources from which the PI was collected, (3) the business or commercial purpose(s) for collection and/or disclosure, and (4) the categories of partners with whom we share PI.
Categories of PI we collect:
Website Information: As a visitor, you may be asked or choose to provide us with your personal information on some areas of our Site, such as:
- First name
- Last name
- Business email
- Telephone number
- Company name
- Job level
- Functional role
- Street address
Online Identifiers:
- IP address
- Government-issued identifiers.
GPTW Events Information: If you register to attend a GPTW-sponsored Event, we may require certain data, including:
- First name
- Last name
- Business email
- Telephone number
- Company name
- Emergency contact (in some instances)
- Dietary preferences (in some instances)
- Health and safety information (in some instances)
- Billing information (such as billing name, billing address, and credit card number)
Categories of Sources from which we collect PI
Below are examples of categories of personal information that GPTW collects, including but not limited to:
1. Directly from a Consumer, employee, applicant or prospect, when you provide us with your PI
1. Ex: When you contact GPTW via our website, email, phone or other similar method
2. Directly or indirectly from vendors, service providers or other third parties
1. Ex: Our Customers (in the provision of services)
2. Ex: Information the Consumer has voluntarily made public (i.e. for our use in background checks)
3. Ex: Information you have shared on social media platforms, specifically publicly visible accounts (i.e. LinkedIn)
3. From your use, visit or activity on any of our websites
1. Ex: Directly (through your submission of information, for a webinar)
2. Ex: Indirectly (through information disclosed by your device or browser, such as IP address)
Purposes for Collection:
1. To fulfill the purpose(s) for which the information was collected/provided
1. Ex: To provide the Services or Products contracted for with our Customers, at their direction
2. Ex: To provide you with information, products, or services you have requested from us or that may be of interest to you
3. Ex: To provide customer service and support
4. Ex: Legitimate purposes including, but not limited to, human resource business reasons such as personalized job opportunities, payroll processing, tax purposes, and the provision of employment benefits
2. To improve our website, services and products, through testing, research, analysis and product development
3. For security purposes, including to prevent unauthorized access or disclosure, to maintain data accuracy, to protect the confidentiality, integrity and availability of your PI and to allow only the appropriate use of your PI
4. To comply with all applicable legal obligations, including, but not limited to, the CCPA.
Retaining Your PI:
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which we process your personal information, and whether we can achieve those purposes through other means, and the applicable legal requirements.
Categories of Partners with Whom We Share Your PI:
1. Service Providers
2. Affiliates/Subsidiaries and Related Entities
3. Contractors to whom you or your agents authorize us to disclose your PI in connection with Products or Services we provide to you
4. External advisors, such as auditors or outside legal counsel
5. Governmental, legal, regulatory, or other similar authorities and/or local government agencies, upon request or where required
Your California Rights:
The CCPA provides individuals with various privacy-related rights (“Rights”) relating to their PI. This section provides you with information regarding these Rights.
The CCPA provides a Consumer with the right to opt-out of the sale or share (as defined under the law) of his/her PI. GPTW does not sell PI, and thus does not provide you with a mechanism for opting out.
Right to a Notice: At or before the point of collection of PI, Consumers, Employees, Job Applicants and other individuals residing in the State of California are entitled to a notice that provides the categories of PI collected about them, and the purposes for that collection.
Right to Know: A Consumer has the right to request information regarding our collection, disclosure, sale, share, and/or use of their PI over the previous twelve (12) months. A Consumer may request that GPTW disclose:
- Categories of PI that we have collected about you;
- Categories of sources from which your PI is collected;
- Categories of PI about you that we have sold, shared, or disclosed for a business purpose;
- Categories of to whom the PI was sold, shared, or disclosed for a business purpose;
- The business or commercial purpose for collecting or selling PI; and
- Specific pieces of PI that we have collected about you.
When providing you with your information electronically, we will, to the extent possible, deliver the information in a portable manner that allows you to transfer the information to another entity.
We may reject your request to know if your identity cannot be verified (your request is not a verifiable consumer request), or if the information has already been provided twice within a twelve (12) month period. We may also refuse to provide you with specific pieces of information that we have collected about you if disclosure creates a substantial, articulable, and unreasonable risk to the security of that PI, your account with GPTW or the security of our systems.
Right of Deletion: A Consumer has the right to request the deletion of any PI that we collected from them, or that we maintain about them. Following our receipt of your verifiable consumer request, we will delete (and direct our Service Providers to delete) your PI, subject to the exceptions permitted under the CPRA, and any legal obligations that we have to retain that information.
Right to Non-Discrimination: GPTW will not discriminate against a Consumer in response to the decision to exercise any of the privacy rights granted to you under the CPRA.
Asserting Your Rights - Submitting a Request to Know or Delete:
As previously stated, we may reject your request if we cannot verify your identity. Please follow the instructions below and provide the requested information to allow us to adequately address your request.
If you are a current or former employee, or previously applied for employment with GPTW, residing in the State of California, you may submit your request via email at privacy@greatplacetowork.com.
Current or Former Employees: For current or former GPTW employees, please indicate the right you are exercising. In order to verify your identity, your request must include the following:
- Your full name and email address associated with your profile;
- Your preferred contact number; and
- Your hire date, which can be found by current or former employees (up to one year following termination) within your profile, or on your offer letter. We require your hire date to be provided in the MM/DD/YY format.
Previous Applicants: If you previously applied for employment with GPTW, please indicate the right you are exercising. In order to verify your identity, your request must include the following:
- Your full name and email address associated with your profile;
- Your preferred contact number; and
- The number of employment opportunities you have applied for with GPTW, as well as the Job Title and Job Code associated with each application, which can be found in your profile, under the Applications tab.
If you are a current or former employee, or have previously applied for employment with GPTW, and reside in the State of California, please send an email to privacy@greatplacetowork.com to exercise your rights with respect to your PI.
If you are a current or former employee or job applicant of one of GPTW’s customers, please contact your employer/former employer directly.
If you have provided GPTW with your information via our website (i.e. through a Webinar or for a Whitepaper) and reside in the State of California, please contact privacy@greatplacetowork.com.
Authorized Agents: You may exercise your right to know or your request for deletion of your PI, through the use of an authorized agent. A request from an authorized agent on your behalf will only be accepted if the authorized agent provides us with satisfactory written proof they are authorized to act on your behalf. We may also first require the authorized agent to verify their identity, before accepting the request. GPTW may deny requests from authorized agents that fail to provide proof of their status as an authorized agent or verification of their identity.
Changes to this Notice
The practices described in this California-specific Notice are the current practices approved on March 20, 2023. GPTW reserves the right to modify or amend this Notice at any time. We encourage you to periodically review this page for the latest information on our privacy practices.
Contact Information
At any time, you may contact GPTW with questions or concerns about this Notice at privacy@greatplacetowork.com. Written responses may also be submitted to:
General Counsel
Great Place To Work® Institute, Inc.
1999 Harrison Street, Suite 2070
Oakland, CA 94612