About this Notice
Tableau values the privacy of our applicants. This Privacy Notice covers how we use, store and share the personal data you provide us as a part of applying to work at Tableau. It applies to all prospective employees and interns of Tableau Software who are based in the EU –relevant entities are listed here, along with contact details. Please read this Privacy Notice carefully to understand how we handle your personal information.
Tableau Software, Inc. as well as the EU Tableau entity to which you are applying are the "data controllers" of your personal data. This means that they are both responsible for deciding how your personal data is held and used.
Data protection principles
We will comply with applicable data protection and privacy laws. These say that the personal data we hold about you must be: used lawfully, fairly and in a transparent way; collected only for valid purposes that we have explained to you; relevant to the purposes we have told you about and limited to those purposes; accurate and kept up to date; kept only as long as necessary; and kept securely.
The information that we hold about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data which cannot be linked to an individual in any way (anonymous data). "Special categories" of sensitive personal data require a higher level of protection which we have set out in more detail below. It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes.
We may collect, store and use the following personal information about you:
Personal Details. Name, title, personal email address, home address, phone number, identification numbers, birth date, driver’s license and vehicle plate details, citizenship information, place of birth, and information needed for right to work or residency requirements.
Employment information. Employment history, including previous titles and supervisors, promotions, disciplinary actions, transfers, background checks, compensation and benefits history, dietary requirements; written and electronic communication and documents; system and application access data or login information; other resume or CV information, such as skills analysis, references, training, and memberships.
Miscellaneous information: CCTV or security footage (if interviewing on site); and information that you submit or input in to our systems through completion of forms.
How is your information collected?
We will receive most of this personal information from you directly, including through the application and recruitment process. We may also receive this information from third parties, such as recruitment agencies, social media or online searches (including LinkedIn), job boards, former employers, credit reference agencies or other background check providers, and public agencies.
Your personal data is a necessary requirement of entering into an employment contract. If you fail to provide your personal data, we will not be able to enter into a contract with you.
Use of your personal information
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. We process your personal data for a number of purposes, including for recruitment and appointment, management and operation of the employment relationship and workforce, and our business and legal purposes, such as accounting and legal compliance.
We may use your personal information where:
- it is necessary for complying with our legal obligations, particularly as your propsepctive employer/engager;
- it is necessary for the purposes of our legitimate interests or the legitimate interests of a third party. These include recruitment, employment decisions and administration; business management and data analytics; and to provide corporate services, including communication tools and work-related applications; or
- in limited circumstances, when we have your consent.
There may be more than one grounds that form the basis of our use of your personal information. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
In the event our processing is based on your having provided consent, you have the right to withdraw your consent at any time. To withdraw your consent, please contact privacy@tableau.com.
Sensitive personal data
Sensitive personal data (called, 'special categories'), such as gender, race and medical information, requires higher levels of protection. In addition to the grounds outlined above, we may process special categories of personal data where it is needed in the public interest, such as for equal opportunities monitoring, where allowed by the local laws. Less commonly, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the information public.
We do not need your consent if we use special categories of personal data in accordance with this Privacy Notice to carry out our legal obligations or exercise specific employment rights. In limited circumstances, we may ask you for your written consent to allow us to process certain particularly sensitive data. As stated above, consent may be withdrawn at any time by contacting privacy@tableau.com.
How we share your personal information
We may share your data with third parties, including third-party service providers and other entities in the Tableau group. We require third parties to respect the security of your data and to treat it in accordance with the law.
Your personal information will be made available to Tableau employees, temporary staff and contractors in the course of administering your application. It may also be shared with any company that is a member of our group, which currently includes Tableau Software Inc. based in the US, and our entities in Germany, Ireland, France, UK, Sweden, Canada, India, China, Japan, Singapore, and Australia, to comply with a legal obligation or where it is in our legitimate interests to do so for internal administrative purposes, incluidng where they provide products and services to us, such as information technology systems, data hosting, HR services, legal support, payroll and benefits administration and recruitment, and for management purposes.
If we provide any personal information about you to any non-EEA members of our group (including Tableau Software Inc) or third-party data processors, we will take appropriate measures to ensure they protect your personal information, and that any transfer of personal data is legally compliant
We may share your personal information with the following categories of third parties:
- other parties such as legal and regulatory authorities (including police and immigration authorities), accountants, auditors, lawyers and other outside professional advisors;
- companies that provide products and services to us, such as: human resources services, including for pre-employment checks and credit checks; applicant tracking providers; information technology systems suppliers; telecommunications suppliers, back-up and disaster recovery and cyber security services; and other outsourcing providers.
We will also disclose your personal information to third parties if we have a duty or legal obligation to disclose your information and as may be required to meet national security or law enforcement requirements or prevent illegal activity; to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity.
Other than as we have set out in this Privacy Notice, we will never sell or rent any of your personal information to any third party without notifying you and/or obtaining your consent.
Retention of personal information
We collect and maintain personal information on prospective employees and interns for legitimate corporate business purposes, such as collecting resumes to fill vacant positions, and booking travel for interviews.
We keep your personal information for no longer than necessary for the purposes for which it is processed and will delete it after that time except where we need to keep any personal information to comply with our legal obligations or any reporting or accounting requirements; resolve disputes; or to pursue or defend any claims. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, accounting or reporting requirements. In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Your rights
You have certain rights in relation to your personal information. In certain circumstances, you have the right to request that we:
- provide you with a copy of any personal information which we hold about you;
- update any of your personal information which is out of date or incorrect or incomplete;
- delete any personal information which we hold about you if it is no longer necessary in relation to the purposes for which it was collected or processed (or, in some instances, where you have withdrawn your consent or objected to the processing);
- restrict the way that we process your personal information;
- provide your personal information to a third party;
- consider any valid objections which you have to our use of your personal information (where we are relying on our legitimate interests (or those of a third party) as the basis for the processing or that the processing is in the public interest);
- provide a copy of any agreement under which your personal data is transferred outside of the EEA; and
- (in France) comply with your instructions regarding the management of your personal data after your death.
If you want to exercise any one of these rights, please contact privacy@tableau.com. We will consider all such requests and provide our response within the time period stated by applicable law. Please note, however, that certain personal information may be exempt from such requests in certain circumstances, which may include if we need to keep processing your personal information for Tableau's legitimate interests or to comply with a legal obligation. There will be certain circumstances where the right does not apply to you under law and we will review this when we consider a request.
We may request you provide us with information necessary to confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. You will not have to pay a fee exercise any of your rights, however, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request.
Security
Tableau is committed to protecting personal information from loss, misuse, disclosure, alteration and unauthorised access and takes all appropriate precautions to safeguard the confidentiality of personal information. However, the transmission of information over the internet is not completely secure. As such, you acknowledge that we cannot guarantee the security of your personal information transmitted to us over the internet that any such transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to prevent unauthorised access. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. Where we have given you (or where you have chosen) a password which enables you to access any account with us, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Criminal convictions
We will collect information about criminal convictions where appropriate given the nature of the role and subject to applicable legal requirements in the country in which you work. Where appropriate, we will collect information about criminal convictions as part of the recruitment process (this does not apply in France) or we may be notified of such information directly by you in the course of you working for us.
Less commonly, we use information relating to criminal convictions where it is necessary in relation to legal claims, where we ask you for your written consent to allow us to process such data, where it is necessary to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the information public.
>Monitoring
We reserve the right to monitor, audit, copy, store or delete any network traffic over our systems. This includes a right to retrieve or access the contents of messages, inboxes or to undertake searches of our email systems for the purposes of monitoring or investigating wrongful acts, to comply with any of our legal or regulatory obligations, or to ensure the effective operation of our business. All monitoring activities will be undertaken in accordance with the laws that apply to us.
Automated decision-making
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you. We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.
Further questions
This Privacy Notice does not form part of any contract and we may amend it from time to time. If you have any queries or complaints or if you wish to exercise any of your rights in relation to your personal information, please contact privacy@tableau.com. Tableau Software Inc and the local data controller (i.e. the EU Tableau entity to which you applied) will work together to manage and answer your request. You may also make a complaint to the data protection supervisory authority in the member state where you are based. Contact information for these authorities is below. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
The practices described in this Privacy Notice statement are current personal information protection policies, as of 25th May 2018.
Data Protection Authorities
Contact Information
| UK | Information Commissioner’s Office Wycliffe House, Water Lane Wilmslow Cheshire SK9 5AF www.ico.org.uk Tel: 0303 123 1113 |
| Germany | German Data Protection Regulators (link) |
| France | Commission Nationale de l’Informatique et des Libertés 3 Place de Fontenoy TSA 80715 – 75334 PARIS CEDEX 07Tél : 01 53 73 22 22 Fax : 01 53 73 22 00 Online form: https://www.cnil.fr/fr/plaintes |
| Netherlands | Autoriteit Persoonsgegevens Postbus 93374 2509 AJ DEN HAAGTel: (+31) – (0)70 – 888 85 00 Fax: (+31) – (0)70 – 888 85 01 |
| Sweeden | Datainspektionen Box 8114 SE-104 20 Stockholm Sweden Office address: Drottninggatan 29, 5th floor Stockholm Tel: +46 8 657 61 00 |