LYFT PLATFORM MEXICO, S. DE R.L. DE C.V. CANDIDATE PRIVACY NOTICE (Mexico)

Last Updated: August 17, 2020

español

This notice sets out the basis on which Lyft Platform Mexico, S. de R.L. de C.V., a company incorporated in Mexico with registered address of street Cordoba 42, 8th floor, office 807, Roma Norte, Cuauhtemoc, 06700 in Mexico City (“Company”, “we”, “us” or “our”) processes any information that you provide to us through the Lyft candidate portal (the “Portal”) and any information we receive from you or third parties (such as personal or professional references) in connection with your job application, or at recruiting events. Please read the following carefully to understand our views and practices regarding your data and how we will treat it.

Scope and definitions

  1. “Candidates” is used in this Notice to refer to anyone who applies for a job role, or who otherwise seeks to work with or for us (whether on a permanent or non-permanent basis);
  2. “Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Candidate, and otherwise as may be defined or limited by applicable Privacy Law; and
  3. “Privacy Law” means any applicable statute or other law relating to the collection, use and disclosure of Personal Information, including the Federal Law for the Protection of Personal Data Held by Private Parties and its Regulations.

The Company will comply with the requirements of the applicable Privacy Laws. This policy does not apply to our processing of your personal information as a Lyft user (i.e. rider or driver). When you interact with us as a Lyft user, those interactions will be governed by our general Privacy Policy.

The types of information we collect

We may collect the following personal information directly from you and from other sources:

  • Information you provide to us. We collect information you provide us by using our Portal to apply for a role or by corresponding with us by phone, email, or otherwise. This information we may collect includes information you provide to us, such as your name, contact information, work experience, educational qualifications, current salary (voluntarily disclosed), compensation expectations, employment start date, ability to work in the country for which you are applying for employment, and any information you choose to submit or upload to the Portal (such as information from a CV).
  • Information from third parties. We may also receive information from third parties in connection with your application. Third parties that provide us this information may include personal or professional references, recruiters, organizations, and recruiting tools and services. Information we collect from them may include the types of information listed above.

How we use your information

We only use your personal information where applicable law permits or requires it in connection with carrying out our application and recruitment process. We may use your information to:

  • communicate with you;
  • identify, source, and evaluate your suitability for employment positions;
  • send you notifications about new positions that match your profile;
  • validate the information that you provided and your qualifications for employment;
  • if you are a successful candidate, create an employment record;
  • conduct employment and diversity monitoring, to the extent permitted or required by applicable law; and
  • comply with applicable law or other obligations, such as auditing or financial obligations.

How we share your information

On a need-to-know basis, we may also share your information as follows:

  • With Portal providers, which we use to collect and process your information, and with other services providers that provide us with services and tools related to managing our recruiting and hiring practices;
  • With your references, prior employers, and other organizations, to identify you so they can provide a reference and/or information about your work history;
  • Within the corporate group (to the extent applicable); and
  • With regulators, courts, law enforcement, tax authorities, in the course of litigation, or with other entities in circumstances where the Company is under an obligation to do so by law.

Your rights (ARCO rights)

Under applicable law, you have certain rights in relation to the personal data we hold about you. Depending on the circumstances, these include the rights: (i) to access the personal data held by the Company about you and certain information about how we use it and who we share it with, and (ii) to request correction of any personal data held about you that is inaccurate as well as completion of data that incomplete (including by the provision of a supplementary statement). In certain circumstances, you may also have the rights: (i) to receive or ask us to provide your personal data to a third party in a structured, commonly-used and machine-readable format, (ii) to erase the personal data we hold about you, (iii) to require the Company to stop processing the personal data we hold about you other than for storage purposes, and (iv) to restrict or object to our processing of your personal data.

You have the right to withdraw your consent where you have provided personal data voluntarily, or otherwise consented to its use.

Please note that we may require you to verify your identity before responding to any requests to exercise your rights. To exercise any of your rights or to provide any feedback regarding our processing of your personal data, please contact our privacy team at the following email address: DPC@lyft.com.

In case you decided to exercise your ARCO Rights, our privacy team may inform you of: (i) the information that you will need to provide for identification purposes as well as the documents you may need to enclose with your request; (ii) the expected timeframe for receiving a response from the us regarding your request; (iii) how to submit your request, including the forms that you will be required to use, if available; and (iv) the form in which we will deliver your information to you (which usually may be copies of documents or digital files).

Storage and Safeguards

Your personal information is retained for as long as needed to reasonably fulfil the purpose(s) for which it was intended and for legal or business purposes, in accordance with our record retention policies and applicable law.

The Company has implemented reasonable physical, organizational, and technological security measures to safeguard the personal information in our custody or control. These include safeguards to protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.

Changes to this Notice

This notice may be amended from time to time at the Company’s discretion or in accordance with applicable laws. Please check this page frequently to see any updates or changes to this policy.

Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please email: DPC@lyft.com.