Riot

Privacy Notice at Collection for CA employees

Last updated: June 27, 2023

1. About this Notice. This privacy notice sets out how The McGraw Group of Affiliated Companies collects and uses personal information about you in compliance with our obligations under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). This Notice supplements all other privacy policies we have in place.

We take the privacy of our employees and applicants very seriously. Please read this notice carefully as it contains important information on the personal information that we collect, why we collect it, how long we keep it, and that it is not sold to third parties.

2. Key Terms. The following key terms are used in this notice:

• We, us, our. The McGraw Group of Affiliated Companies.
• Personal information. Any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular individual.
• Sensitive personal information. Personal information revealing an individual’s social security number, driver’s license and passport numbers, account numbers and credentials, precise geolocation, racial or ethnic origin, religious beliefs, or union membership, personal information concerning a consumer’s health, sex life, or sexual orientation, contents of a consumer’s mail, email and text messages where the business is not the intended recipient, genetic data, and biometric information.
• Biometric Information. An individual’s physiological, biological, or behavioral characteristics, including information pertaining to an individual’s deoxyribonucleic acid (DNA), that is used or is intended to be used singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

Other terms used but not defined will have the meaning set forth in the CCPA, as amended by the CPRA, Cal. Civ. Code §§ 1798.100—1798.199.100, and accompanying regulations set forth under Cal. Code Regs. tit. 11, § 7000 et seq.

3. Personal Information We Collect About You. We may collect and use the following categories of personal information about you:

Categories of Personal Information Collected

• Identifiers: Name, alias, postal address, email address, phone number, account name, social security number, driver’s license number, passport number, or other similar identifiers.
• Employment-related information such as your job title, salary, benefits information, emergency contact information, references, qualifications, skills and experience.
• Personal information as defined in Customer Records law: Name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, education, professional license number employment history, bank account number, other financial information, medical information, and/or health insurance information.
• Characteristics of protected classifications under California or federal law such as race, age, sex, familial status, and disability.
• Audio, electronic, visual, or similar information such as photographs and call recordings
• Background check information such as your criminal and credit history
• Inferences are not drawn from any of the information identified above to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

4. How and Why We Use Your Personal Information. We use your personal information for the following purposes:

Purposes for Collecting and Using Your Personal Information

Managing Human Resource Functions:

• Recruiting, hiring, and onboarding
• Performing background checks
• Implementing diversity and inclusion initiatives
• Training and career development
• Assessing performance
• Determining promotions, transfers, salary, awards, and bonuses
• Managing disciplinary matters
• Managing payroll and business expenses
• Administering leave requests
• Employee communications
• Administration of benefits
• Promoting employee health and safety

Conducting business operations:

• Budgeting
• Recordkeeping and reporting requirements
• Managing infrastructure and company assets
• Strategic planning
• Maintaining security and risk management
• Emergency response and business continuity
• Conducting audits
• Pursuing or defending legal or administrative claims

Monitoring:

• Compliance
• Use of company resources
• Any other monitoring activities permitted by applicable laws

Compliance with:

• Legal and regulatory obligations
• Court or other government directives
• Internal policies and procedures

Investigating:

• Reports of wrongdoing
• Policy violations
• Internal complaints

5. Whether Personal Information Will Be Sold or Shared. We do not sell or share the personal information of employees.
6. How Long Your Personal Information Will Be Kept. We will keep your personal information for as long as is necessary while you are employed by us. Thereafter, we will keep your personal information:

• To respond to any questions, complaints or claims made by you or on your behalf or;
• To keep records required by law. In California, this is currently and generally a minimum of four (4) years.

We will not retain your personal information for longer than necessary for the purposes set out in this notice. Different retention periods apply for different types of personal information.

When it is no longer necessary to retain your personal information, we will delete or anonymize it.

7. If you have any questions or concerns about this notice or the information we collect about you, please contact send an email to privacy@pacificspecialty.com.