Employee privacy notice
LAST UPDATED ON JULY 15, 2025
In this Employee Privacy Notice (“Notice”), AutoRABIT Holding, Inc. and its subsidiaries and affiliates (collectively, “AutoRABIT”, “we”, or “us”) describe our privacy practices with respect to our current and former employees (“you”, “your”, “they”, or “their”). Specifically, this Notice explains the types of Personal Information (as defined herein) that we process, how we collect and use that information, and how we may disclose that information. We also explain the rights you may have with respect to your Personal Information and how you may contact us with questions about this Notice or your privacy.
Provisions of this Notice dealing with individuals employed with AutoRABIT are not applicable until they begin working for us.
If you provide us with the Personal Information of any third parties, including emergency contacts and beneficiaries of certain employment benefits, you are responsible for sharing this Notice with such persons.
1. PERSONAL INFORMATION WE COLLECT.
We may collect a range of Personal Information. “Personal Information” means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you. It encompasses the terms “personal information” and “personal data” as used in relevant data protection laws. We collect the categories of personal data listed in Annex I
2. WHERE WE OBTAIN YOUR PERSONAL INFORMATION
2.1 Directly From You. We collect Personal Information that you provide to us directly, which may include but is not limited to, when you submit an employment application, provide payroll or tax information, enroll in employment benefits, provide us emergency contact details, or provide information necessary to establish you as a third-party beneficiary of certain benefits.
2.2 From Third Parties. We may collect Personal Information from third parties, which may include but is not limited to, Service Providers (as defined herein) that we use, recruiters, benefits administrators, social media platforms, background check services, former employers, government authorities/agencies, and other third parties that we choose to collaborate or work with; and.
2.3 Automatically Through Our Systems. We may collect Personal Information through the use of certain computer and software systems, which may include but is not limited to, CCTV/video security technologies on our premises, information security, and management software.
3. PURPOSES FOR WHICH WE COLLECT PERSONAL INFORMATION.
We process your Personal Information as described in this Notice for the following purposes:
3.1 To Communicate with You. We may use your Personal Information to provide information to you, to respond to your questions, to notify you of changes to your compensation and benefits program, or to notify you of emergencies.
3.2 To Manage the Onboarding Process. Upon being hired by AutoRABIT, we will collect Personal Information when you complete new hire paperwork to assist us in administering salary and benefits and to assist us with complying with governmental and legal requirements.
3.3 To Manage the Onboarding Process. Upon being hired by AutoRABIT, we will collect Personal Information when you complete new hire paperwork to assist us in administering salary and benefits and to assist us with complying with governmental and legal requirements.
3.4 To Administer Compensation and Benefits Programs. We will use the Personal Information you provide to process payroll, pay taxes, help employees address employment related-tax issues, administer benefits (for both employees and their third-party beneficiaries) and handle work related expense reimbursement. We may also use this Personal Information to manage accommodations requests. We also use this to administer employee claims such as under workers’ compensation or unemployment benefits (or similar).
3.5 To Contact You in the Event of an Emergency. We may use your Personal Information to contact you in the event of an emergency impacting an AutoRABIT employee.
3.6 Recruiting. We may use Personal Information to communicate with you regarding the recruiting process, to learn where you heard about AutoRABIT, and to evaluate and improve our recruiting process.
3.7 For Performance Management. AutoRABIT collects Personal Information in order to assess our employees’ performance, assist in career development, conduct pay and grading reviews, and to handle any employment related disputes. We may also use Personal Information to respond to violations of company policies and to gather information for disciplinary actions. We also use Personal Information for internal performance improvement, administering the disciplinary process, and to respond to complaints.
3.8 Education and Professional Services. We may use your Personal Information to assist with education, training and professional development.
3.9 Law Enforcement and Courts. We may disclose your Personal Information in response to a subpoena, a search warrant, or other legally valid process. We may use your Personal Information to cooperate with law enforcement or other government entities investigating suspected violations of law.
3.10 Record Keeping. We may use Personal Information to comply with applicable legally required or industry-standard business and employment record keeping requirements and to respond to governmental requests for information.
3.11 Health and Safety. We use Personal Information to protect your health and safety, or the health and safety of others, including through the use of technology to allow contract tracing if you may have exposed to communicable diseases. We also use this Personal Information to protect our facilities and property.
3.12 Protect Our Legal Rights. We may use your Personal Information to protect our legal rights, to defend a claim or lawsuit, and to investigate or prevent actual or suspected loss or harm to persons or property. We may use your Personal Information to seek legal, accounting or other professional advice. We may use your Personal Information when necessary to identify, contact or bring a legal action against someone who may cause or be causing harm to, or interfering with the legal rights of, AutoRABIT or any other party.
3.13 Security. We may use your Personal Information to monitor the use of our information systems and electronic resources, to conduct internal audits or investigations and for safety and security of AutoRABIT employees, visitors and facilities. We also may use such information to protect AutoRABIT against illegal activity and misconduct such as fraud, deceptive practices, and data security incidents. We use this to offer, operate, maintain, deliver, troubleshoot and update websites, programs, network, and systems used by AutoRABIT in the course of its business. Subject to applicable law, we may monitor any activity you perform online while using an AutoRABIT device or while connected to AutoRABIT’s network. This may include monitoring the websites you visit and your activity on those websites when using an AutoRABIT device or internet connection. We may also track the emails you send using your AutoRABIT-provided email address, the phone calls you make using an AutoRABIT-provided device, and the chat messages you are involved in using the AutoRABIT-provided instant messaging program.
4. LEGAL BASIS FOR PROCESSING.
AutoRABIT processes Personal Information only where it has a legal basis for doing so under applicable data protection laws which include:
4.1 For the performance of, or in preparation of, a contract with you;
4.2 For compliance with legal obligations to which we are subject; and
4.3 For the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights.
In some instances, where permitted and required by applicable data protection law, we may process your Personal Information with your consent. Unless another legal basis applies, you may withdraw your consent at any time, but all processing performed prior to such withdrawal will remain lawful.
5. HOW WE DISCLOSE PERSONAL INFORMATION.
We disclose your Personal Information in the following circumstances:
5.1 Within AutoRABIT. We may disclose your Personal Information internally within AutoRABIT and among AutoRABIT’s affiliates for purposes of recruiting and/or evaluating applicants, resource planning, talent and recruiting efforts, human resources activity, and business administration functions.
5.2 Service Providers. AutoRABIT may disclose Personal Information to third-party service providers or suppliers (“Service Providers”) that include, without limitation, payroll processors, benefits administrators, recruiters, data storage providers, website or mobile application hosting providers, and email service providers as needed to provide the applicable services to us. AutoRABIT will take steps to help ensure appropriate protections are in place before we disclose or disclose Personal Information with any Service Provider.
5.3 Legal Requirements. We will cooperate with law enforcement and other governmental agencies. We may disclose Personal Information for the following legal purposes:
5.3.1 If we believe in good faith we are legally required to disclose that Personal Information;
5.3.2 If we are advised to disclose Personal Information by our legal counsel;
5.3.3 When necessary to identify, contact, or bring a legal action;
5.3.4 For tax and payment purposes (e.g. Internal Revenue Service or similar tax authorities);
5.3.5 To detect and investigate fraud or illegal activity, or to respond to a government request; and
5.3.6 To respond to an emergency.
5.4 Professional Advisors. We may disclose Personal Information with our professional advisors, such as our attorneys and accountants, in their capacity as advisors, including for advice on potential or actual litigation matters.
5.5 Change in Ownership. We may use and disclose Personal Information in connection with the evaluation of a change of control of AutoRABIT such as in the event of a merger, acquisition, or sale of assets. We may provide Personal Information both in connection with a due diligence process and in the event of a change of control to subsequent owner(s). If we (or our assets) are acquired or if we go out of business, enter bankruptcy, or go through some other change of control or reorganization, Personal Information and other information could be one of the assets transferred to or acquired by a third party, or reviewed as part of the due diligence process.
6. DEIDENTIFIED AND AGGREGATED INFORMATION.
We may collect or create information that is de-identified or aggregate information that does not identify a natural person (“De-Identified Information”). AutoRABIT is the sole and exclusive owner of De-Identified Information and may use or disclose such information for any legal business purpose. AutoRABIT will maintain and use De-Identified Information only in deidentified form and will not to attempt to reidentify the information, except that AutoRABIT may attempt to reidentify the information solely for the purpose of determining whether its deidentification processes satisfy the requirements of applicable law.
7. CHILDREN.
We only employ those who are legally eligible to work at the location of employment, which is typically the age of majority (18 years old).
We may collect and process Personal Information of persons under 18 years of age only as necessary to maintain emergency contact information or administer employee benefits such as health insurance.
8. DATA SECURITY.
AutoRABIT makes commercially reasonable efforts to protect Personal Information. We protect Personal Information using technical and organizational measures designed to reduce the risks of loss, misuse, and unauthorized access, disclosure, alteration, and destruction of Personal Information appropriate to the type of Personal Information processed.
Notwithstanding our security safeguards, it is impossible to guarantee 100% security in all circumstances. AutoRABIT employees are responsible for safeguarding the security of any password, user ID, or other form of authentication involved in obtaining access to password-protected or secure areas of any AutoRABIT-owned or licensed platforms. It is your sole responsibility to use the appropriate level of care whenever communicating with us.
If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem. If a breach of your Personal Information occurs, we will notify you of the breach if and as required under applicable law. In order to protect you and your Personal Information, AutoRABIT may suspend your use of any AutoRABIT programs or platforms without notice pending an investigation if any breach of security is suspected.
9. RETENTION OF YOUR PERSONAL INFORMATION.
Personal Information will be stored in accordance with appliable laws and kept as long as needed to carry out the purposes described in this Notice or as otherwise required by applicable law, taking into consideration any statutorily required minimum periods of time in applicable jurisdictions. Generally, this means your Personal Information will be retained until the end or your employment, work relationship, and/or administration of benefits us plus a reasonable period of time thereafter to respond to employment, work-related, or benefits inquiries or to deal with any legal matters, document the proper termination of your employment or work relationship, or to provide you with any ongoing benefits.
Personal Information that is no longer to be retained will be securely and effectively destroyed or permanently erased from our systems, and we will also require third parties to destroy or erase such Personal Information where applicable.
10. YOUR RIGHTS AND CHOICES.
Depending on where you live, you may have the following rights with respect to your Personal Information under applicable data protection laws:
10.1 Access. The right to request access to and obtain a copy of any Personal Information we may have about you.
10.2 Deletion. The right to delete your Personal Information that we have collected or obtained, subject to certain exceptions.
10.3 Correction. The right to request that we correct any inaccuracies in your Personal Information, subject to certain exceptions.
10.4 Opt-out of Certain Processing. The right to: (a) opt out of the processing of your Personal Information for purposes of targeted advertising, (b) opt out of the sale or sharing of your Personal Information; (c) limit the use of your sensitive Personal Information (if applicable), and (d) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
10.5 Objection/Restriction of Processing. The right to object or restrict us from processing your Personal Information in certain circumstances.
10.6 Withdraw Consent. The right to withdraw your consent where we are relying on your consent to process your Personal Information.
10.7 Automated Decision-making. The right to know when you are subject to automated decision-making, the Personal Information used to render the decision, the principal factors and parameters involved in the decision, and human review or correction of the decision (or its underlying data, where appropriate). You may also have the right to consent or opt out of this automated decision-making, depending on your location.
10.8 Lodge a Complaint. The right to lodge a complaint with a supervisory authority or other regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us, so we have an opportunity to address your concerns directly before you do so.
We do not (i) sell your Personal Information; (ii) disclose your Personal Information to third parties for targeted advertising; (iii) use Personal Information for profiling; or (iv) use sensitive or special category Personal Information outside of purposes permitted by law. We do not, therefore, recognize requests to opt out of these uses of Personal Information.
To exercise any of the privacy rights afforded to you under applicable data protection laws, e-mail us at [email protected] or submit a request through our Data Subject Access Request Form. You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.
You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Policy. However, should you withdraw your consent or object to processing of your Personal Information, or if you choose not to provide certain Personal Information, we may be unable to provide some, or all, of our Services to you.
Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Information. We must verify your identity before fulfilling your requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making a request on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of a power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.
We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.
11. ACCESS TO PERSONAL INFORMATION IN OTHER COUNTRIES.
If you are outside the United States, please be aware that your Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required by the in other jurisdictions.
12. CALIFORNIA RESIDENTS.
This section provides additional information regarding AutoRABIT’s practices pursuant to the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act (“CCPA”), where “Personal Information” has the definition set forth in the CCPA.
Please see the below chart for detailed information about the categories of Personal Information we have collected from California residents during the twelve months preceding the date on which this Notice was last updated and the categories of third parties to whom we sell or share Personal Information. For each category of Personal Information set forth in the chart below, the categories of third parties to whom we disclose it for a business or commercial purpose are set forth in the How We Disclose Personal Information section above.
Personal Information Category set forth in Cal. Civ. Code § 1798.140
Categories of Third Parties to Whom We Sell or Share Personal Information
Personal identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or other similar identifiers.
We do not sell or share this category of Personal Information.
California Customer Records Personal Information (Cal. Civ. Code § 1798.80(e)), including name, address, telephone number, education, employment, and employment history.
We do not sell or share this category of Personal Information.
Characteristics of protected classifications under California or federal law. This may include age, veteran status, and accommodations information.
We do not sell or share this category of Personal Information.
Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement.
We do not sell or share this category of Personal Information.
Geolocation data, such as your IP address.
We do not sell or share this category of Personal Information.
Sensory data including audio, electronic, visual, thermal, olfactory, or similar information.
We do not sell or share this category of Personal Information.
Professional or employment-related information.
We do not sell or share this category of Personal Information.
Sensitive Personal Information as set forth in Cal. Civ. Code § 1798.140, such as account access credentials and information related to employment, including racial and ethnic origin.
We do not sell or share this category of Personal Information.
13. INDIVIDUALS IN THE EUROPEAN UNION
This section provides additional information regarding AutoRABIT’s practices pursuant to the processing of employee personal data in compliance with Act No. 110/2019 Coll., on personal data processing, as amended (hereinafter the “Act”), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), and Act No. 480/2004 Coll., on certain information society services, as amended.
AutoRABIT can only process your data for other purposes than those covered by the purposes stated above based on your valid consent to the processing of your data, provided that the consent has been granted as an expression of your free will, thus representing a specific title for the handling of Personal Information.
Consent to the processing of Personal Information is voluntary and free. A consent that has been given can be withdrawn fully or partially at any time.
In accordance with art. 84 of the Act n. 89/2012 Sb, Civil Code, as amended, you can, upon the start of your employment, grant an explicit consent to the AutoRABIT to the use of their portrait, texts written by them, audio or video recordings about them or their expressions of personal nature (hereinafter referred to as “Recordings”), for social and commercial purposes of AutoRABIT related to your work, on all communication media regardless of their nature and intended use, by all usual means, with possible post-processing, merging with other works or including into a collected works, related to you, namely upon the start of your employment, creation of presentation brochures of AutoRABIT intended for clients. This consent also covers third persons AutoRABIT will provide the Recordings to in line with their intended use. In this context, you undertake, upon the start of your employment, to provide your portrait to AutoRABIT (with the copy rights settled, i.e. with the right to use), or have your portrait made at the expense and in accordance with the instructions of AutoRABIT, exclusively in order to be processed for the above stated purposes.
The Personal Information controlled by AutoRABIT may be transferred or transmitted, or stored and processed in, the United States or other countries outside the European Economic Area for the purposes as described in this Policy. AutoRABIT utilizes standard contractual clauses approved by the European Commission and rely on the European Commission´s adequacy decisions about certain countries, as applicable, for data transfers from the European Economic Area to the United States and other countries. The list of personal data processors will be provided to you on written demand.
AutoRABIT complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), as set forth by the U.S. Department of Commerce, with respect to personal data received from the European Union in the context of the employment relationship.
AutoRABIT has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles. If there is any conflict between the terms in this policy and the DPF Principles, the DPF Principles shall govern. To learn more about the Data Privacy Framework and to view our certification, please visit: https://www.dataprivacyframework.gov
In compliance with the EU-U.S. DPF Principles, AutoRABIT commits to resolve complaints about our handling of personal data. EU-based employees with inquiries or complaints should first contact AutoRABIT at [email protected]
AutoRABIT has further committed to cooperate with the EU data protection authorities (DPAs) and comply with their guidance with respect to unresolved complaints concerning HR data transferred from the EU under the DPF.
Additional Rights of Individuals in the European Union:
13.1 lodge a complaint with the supervisory authority: For Czech employees: Úřad pro ochranu osobních údajů („The Office for Personal Data Protection“), Pplk. Sochora 27, 170 00, Prague 7, www.uoou.cz;
13.2 withdraw their consent to the processing of their data at any time, with effect for the future;
13.3 obtain confirmation from the data processor to know if their data is processed or not;
13.4 have the processor correct inaccurate personal data concerning you without unnecessary delay. With regard to the purposes of the processing, the data subject has the right to complete their incomplete personal data;
13.5 obtain from the controller the erasure of the personal data (right to be forgotten) concerning the data subject and the controller has the obligation to erase personal data without undue delay where one of the grounds exhaustively enumerated in GDPR applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) you withdraw consent on which the processing is based and there is no other legal ground for the processing; c) you object to the processing and there are no overriding legitimate grounds for the processing; d) the personal data have been unlawfully processed; e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; f) the personal data have been collected in relation to the offer of information society services. GDPR lays down the details and exceptions related to the performance for this right;
13.6 obtain from the controller restriction of processing where one of the following applies: a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject;
13.7 data portability, i.e., receive the personal data concerning you, which they have provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where a) the processing is based on consent or contract, b) the processing is carried out by automated means;
13.8 object at any time to processing of personal data concerning you, including profiling based on GDPR provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defense of legal claims; and
13.9 not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly effects. GDPR lays down the details and exceptions.
14. CHANGES TO THIS NOTICE.
Please note that we may modify or update this Notice from time to time, and may apply any changes to information previously collected, as permitted by law. When we make material changes to this Notice, we will update the website or otherwise notify you by email and/or by posting the updated Notice on our websites and/or intranet, and we will update the Last Updated date at the top of this Notice.
15. CONTACT US.
If you have any questions about this Notice or how we handle your Personal Information or would like to request access to your Personal Information, please contact us at [email protected].
If you are unsatisfied with our response to any issues that you raise, you may have the right to make a complaint with the data protection authority in your jurisdiction by contacting the data protection authority.
If you have any questions about this Notice or how we handle your Personal Information or would like to request access to your Personal Information, please contact us at [email protected].
If you are unsatisfied with our response to any issues that you raise, you may have the right to make a complaint with the data protection authority in your jurisdiction by contacting the data protection authority.
Annex 1
Categories of Personal Information
1. CONTACT INFORMATION.
We may collect contact information such as full name, home and work address, home and work phone number, home and work fax number, home and work email address, work mobile phone number, web address data, instant messenger data, job code, employment location, job title, employee ID;
2. MASTER DATA AND QUALIFIED HR DATA.
We may collect master data and qualified HR data such as job function, business title, contractual details, education, work experience, employment history, CV, certification information, data about employee appraisal, national ID type, national ID, citizenship status, citizenship country, nationality, place and date of birth, gender, marital status, language skills, military service information, passport issue country, passport issue city, passport issue state, passport expiry date, visa status, country for visa/permit (country name for which visa is applied/granted), visa effective date, visa type (work permit/business/etc.), visa contract, visa expiry date (only for compliance with immigration law purposes), drivers’ license information, emergency contact information, employment location, employment action (hire/rehire/termination/leave), reason for employment action (hire/rehire/termination/leave), job code, reports, employee classification, employment status, work schedule, type of contract, contractual starting date, contractual end date, contract duration information, probation period, job classification, full time/part time status, work duration information, part time percentage, job title and job title code, company, department, sub-department, region, market, project and project allocation, information on international internal assignments, accomplishment information, cost center and cost center allocation, supervisor (employee name and ID), staff travel details, employee expenses, company credit card expenditure, education, company training history, development plan, award information, membership information, performance rating history, skills, qualifications and special competencies, days of absence taken per year, all personal information required to provide data subjects (i) access to company computer systems and networks and (ii) tools to electronically communicate within AutoRABIT, including but not limited to IP address and user login name;
3. PAYROLL DATA.
We may collect payroll data such as banking data necessary to make payments to data subject, compensation information and related information (including pay type, information regarding raises and salary adjustments), data on leave, dependent details (name, date of birth, relationship), end of service payment and accruals, holiday salary deduction, holiday compensation and accruals, other leave salary deduction; paycheck details (including the following: total gross salary, employee’s wage tax withheld by the employer), employee’s compulsory social security deduction, employee’s compulsory retirement deduction, employee’s compulsory unemployment deduction, employee’s additional medical care deduction, other compulsory or additional employee’s deductions, employee’s voluntary retirement deduction, employee’s voluntary medical care deduction, other employee’s voluntary deductions, total employee deductions, total net salary, stock purchase plan deduction, salary administration plan, salary grade, compensation rate, supplemental salary, overtime compensation, bonus compensation, commission, other variable compensation, other leave compensation, not taken holidays compensation, all company paid expenses, benefits and benefits in kind, housing allowances, travel allowances, staff travel details, car or commuting allowances, other allowances (cost of living, mobile phone, etc.), expenses refund and advances, expatriate expenses refund, benefits in kind deduction, other net adjustments, salary advance adjustments, third party payments (net), total net adjustments, net to pay, banking details; and third party payments (where acting as an employer surrogate when the employee is on leave for long-term sickness, accident at work or other reason);
4. STOCK, EQUITY, AND BENEFITS DATA.
We may collect Stock, equity, and benefit plans administration data such as full name, country (that has issued the national identification document), citizenship status, citizenship country, social security number, employment action (hire/rehire/termination/leave) tax jurisdiction, tax withholding rate, annual salary, payroll entity responsible for reporting of income and taxes, general ledger code (including business unit and department information), home address, date of birth, all details related to grants under the equity plans, including but not limited to grant date, number of shares granted, type of shares granted, percentage of target, vesting requirements and number of stock options exercised;
5. COMMUNICATION DATA.
We may collect communication data such as IP address or the content of your communications using AutoRABIT-sanctioned platforms and devices; and
6. TRAINING INFORMATION
We may collect training information such as participation in training sessions.
7. SPECIAL CATEGORIES OF PERSONAL DATA / SENSITIVE PERSONAL INFORMATION.
Depending on where you reside, the following categories represent personal information that we collect that may be considered special category data or sensitive personal information:
7.1 Demographic information obtained during the hiring or onboarding process such as information about your citizenship and/or nationality, medical or health information, and/or your racial or ethnic origin;
7.2 Religious affiliation if required for payroll and related tax processing or otherwise permitted or required under national law;
7.3 Statutorily required employee health information such as: information on mandatory employee health reviews and vaccines plan, health and safety prevention plans according to employment legislation to manage workplace illness and accidents and reports to the authorities; information required to deduct sick payments;
7.4 Credit history and/or criminal record if needed for background checks;
7.5 Drug test results from the third-party service providers AutoRABIT uses to perform employee drug tests;
7.6 Banking information for direct deposit purposes, income history and income information, tax information, and benefits information such as health insurance information and information regarding your third-party beneficiaries; and
7.7 Your credentials for accessing AutoRABIT systems, the content of your communications and activities using AutoRABIT systems, and any other information you store on AutoRABIT systems.
The categories outlined in this Annex I are not comprehensive and can be updated.
In general, AutoRABIT collects Personal Information from you directly. AutoRABIT may also acquire Personal Information from publicly available registers and databases, from state authorities, or under specific legislation.