This Privacy Notice describes what personal data we, monday.com Ltd., and our affiliated companies (“monday.com”, “we”, “our” or “us”), collect and process regarding individuals (“Participants” or “you”) who: (i) visit or otherwise interact with our website available at: https://monday-u.com/, or any other website, webpage, e-mail, text message or digital ad related to monday U (collectively – “Sites”); (ii) are interested to apply to the various monday U programs (each, a “Program”); and/or (iii) participate in any of the Programs, why we collect it and how we use it. It also describes how Participants may exercise their rights to such data held with us.
Please read this Privacy Notice carefully and make sure that you fully understand and agree to it. You are not legally required to provide us with any personal data, and may do so (or avoid doing so) at your own free will. Your visit or interaction with the Sites, including application to any Program, will be deemed as your consent to the processing of your personal data for the purposes detailed in this Privacy Notice. If you do not wish to provide us with your personal data, or to have it processed by us or any of our Service Providers (defined below), please avoid any interaction with us.
In addition to participation in the Program, those who are eligible may be considered for a position at monday.com. You are not legally required to provide us with any personal data, but without it we may not be able to process your application to the Program or for a position at monday.com.
What data do we collect, how do we collect it, and how do we use it?
We collect data regarding the Participants. Such data is typically collected and generated through your interaction with our Sites, through automatic means, directly from you, or from other third parties. Specifically, we collect the following categories of data (which, to the extent it relates to an identified or identifiable individual, will be deemed “personal data”):
- Participant personal data – throughout the Program application process, and throughout your participation in the Program, if applicable, you may provide us (or we may otherwise have access to) personal data about you, such as your identifying data, contact details, resume/CV, work-related data, social media activity, etc. We may collect this data directly from you, as you provide it voluntarily through the Sites, your Program application process, through third-party services providers involved in the recruitment process, throughout participation in the Program, or from other sources such as job references. In addition, we might record lessons and online meetings, which may include your photo and/or video and other identifying personal details (such as full name, email etc.).
- Data automatically collected and generated – Such data mainly consists of connectivity, technical and aggregated usage data, such as IP addresses, data regarding the device, operating system, browser version, and locale settings used when interacting with the Sites, the cookies and pixels installed on such device and your activity (clicks and other interactions) in connection with the Sites.
- Data received from other third parties – We may receive your personal data from other sources. For example, if you participate in an event or webinar that we sponsor or participate in, we may receive your personal data from the event organizers. We may also receive your contact and professional details (e.g., your name, company, position, contact details and professional experience, preferences and interests) from our business partners or services provides, and through the use of tools and channels commonly used for connecting between companies and individuals in order to explore potential business and employment opportunities, such as LinkedIn, data enrichment and other networking or sourcing services.
We may use such data in order to assess your skills, qualifications and overall to verify, consider and process your candidacy for participating in the Program and/or any of our positions, and to communicate with you regarding such processes. We may also use it to manage risk and enhance our security and anti-fraud measures, and to create aggregated statistical or inferred data regarding Participants, for further development and improvement of our offering, our recruitment processes, or for our future use.
In addition, we may use it to act as permitted by, and to comply with, any legal or regulatory requirements. If we wish to conduct any additional activities that may require the use of your data, we will request your specific consent in advance.
If you reside in a territory governed by privacy laws which determine that “Consent” is the only, or most appropriate legal basis for processing your personal data (e.g. Israel), then your application to the Program will be deemed as your consent to the processing of your personal data for all purposes detailed in this Notice. If you wish to revoke such consent, please contact us by email at firstname.lastname@example.org. In such case, we may not be able to process your application.
We will never sell your personal data, regardless of their place of residence.
Where do we store Participants’ data?
Your personal data will be maintained, processed and stored by monday.com and our service providers in Israel, the United Kingdom, the United States of America, Australia, Brazil, Japan and additional locations in which we operate.
monday.com is headquartered in Israel, which is considered by the European Commission to be offering an adequate level of protection for the personal data of EU Member State residents.
While data protection laws in certain jurisdictions may be different than the laws of your residence or location, please know that monday.com, its affiliates and Service Providers (as discussed below) that store or process your personal data on our behalf are each committed to keep it protected and secured, in accordance with this Privacy Notice and industry standards, regardless of any lesser legal requirements that may apply in any jurisdiction.
For how long may we keep your data?
We may retain your data even after the Program is finished. This is done so that we can re-consider Participants for other positions and opportunities at monday.com; so that we can use their personal data as reference for future applications submitted by them; in case the Participant is hired, for additional employment and business purposes related to their work; and as reasonably necessary to comply with our legal obligations, to resolve disputes, prevent fraud and abuse, enforce our agreements or otherwise protect our legitimate interests.
How will we secure your data?
monday.com has implemented physical, procedural and technical security measures designed to protect the personal data of our Participant. We also regularly seek new ways and tools for further enhancing the security of our system and the integrity of the personal data that we hold. Please note however, that regardless of the measures we take and the efforts we make, we cannot and do not guarantee the absolute protection and security of any personal data stored with us. To learn more, please visit our security page.
Who will have access to your data?
monday.com will share your personal data with a number of selected service providers, whose services and solutions complement, facilitate and enhance our own. These may include candidate evaluation services, background checks providers, recruitment software providers, call and video conferencing tools, data and cyber security services, web analytics, and our business, legal, compliance and financial advisors (collectively, “Service Providers”). Such Service Providers may receive or otherwise have limited access to your personal data, depending on each of their particular roles and purposes in facilitating and enhancing our recruitment process, and may only use it for such purposes.
Additionally, we may disclose or otherwise allow access to any Participant personal data pursuant to a legal request, such as a subpoena, search warrant or court order, or in compliance with applicable laws, with or without notice to you, if we have a good faith belief that we are legally required to do so, or that disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud or other wrongdoing. We may also share your personal data with others, with or without notice to you, if we believe in good faith that this will help protect the rights, property or personal safety of monday.com, any of our customers or employees, or any member of the general public.
Furthermore, we may share personal data internally within our group of companies, for the purposes described above. In addition, should monday.com undergo any change in control or ownership, including by means of merger, acquisition or purchase of any or all of its assets, your personal data may be shared with the parties involved in such event.
Which tracking technologies do we use?
monday.com uses certain monitoring and tracking technologies, such as cookies and other downloaded data files, including ones offered by our Service Providers. These technologies are used in order to maintain, provide and improve our processes and operations on an ongoing basis, and in order to provide a better experience to our website visitors and Participants. For example, these technologies enable us to better secure our website and services and detect abnormal behaviors, to identify technical issues, and to monitor and improve the overall performance of our services and processes. In order to delete or block any cookies, please refer to the “Help” area on your internet browser for further instructions, or look for optional third party’s add-ons offering cookie management assistance. For example, you can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the website you visit.
Please note that we do not change our practices in response to a “Do Not Track” signal in the HTTP header from a browser or mobile application.
How can you access your data or request to delete it?
If you wish to exercise your right (to the extent available to you under applicable law) to request access to your data, to correct it, to delete it or to port it, or to restrict or object to its processing, please send us an e-mail to email@example.com, and we will respond within a reasonable timeframe and in accordance with applicable laws.
Please note that we may require additional information, including certain personal data, in order to authenticate and process your request.
Will this Privacy Notice be updated?
We may update this Privacy Notice to reflect changes in our privacy practices. If we make any changes that we deem as “material”, we will notify you (via this page or any of the communication means you provided us with) prior to the change becoming effective. We encourage you to periodically review this page for the latest data on our privacy practices.
What if you have any questions?
If you have any questions regarding this Privacy Notice, our data practices or the security of our services or job application processes, please feel free to contact us at: firstname.lastname@example.org.
VeraSafe has been designated as monday.com’s representative in the European Union for data protection matters pursuant to Article 27 of the GDPR. VeraSafe may be contacted only on matters related to the processing of Personal Data. To make such an inquiry, please contact VeraSafe through this contact form. If you are a GDPR-protected individual, you also have the right to lodge a complaint with an EU supervisory authority.
Effective Date: December 13, 2021