Candidates' privacy policy for our selection processes
We are glad you want to be part of ThreatModeler!
Do you want to know what we do with your data? Here we explain it to you in a simple way:
Who is the data controller?
ThreatModeler Software, Inc., Located at 1 Evertrust Plaza Suite 802, Jersey City, NJ 07302, United States.
Any of the companies affiliated to ThreatModeler Software, Inc. and that belong to the ThreatModeler group may also act as a data controller for your personal data.
privacy@threatmodeler.com
How do we get your CV/personal data?
What personal data do we process, for what purposes and on the basis of what conditions of lawfulness?
Purpose
Participation in the selection process for an open position.
Evaluation of the application through CV assessment, interviews and knowledge and personality tests.
Categories of personal data
Identification data: name, surname, image, voice.
Contact details: telephone number, email, postal address.
Professional and employment data: Current position, previous experience, etc.
Academic data: level of studies, degrees, certifications, language level, etc.
Personality characteristics data.
Other data: Soft skills; other data that you may voluntarily provide during the selection process.
Legitimate basis
Our overriding legitimate interest in getting the best talent and the most suitable candidates to become part of ThreatModeler.
Application of pre-contractual measures; intention to conclude an employment/commercial contract.
Retention period
For the duration of the selection process in which you participate.
As soon as it ends (if you have not been selected) you will become part of our Talent Community (find more information here).
You can ask us to remove your profile from our Talent Community at any time, in the section “Data & Privacy” > Remove my data or by objecting to the processing by sending a request to legal@iriusrisk.com.
2 years since you completed your profile on our Talent Community (when you registered), unless you state that you no longer wish to belong to the Talent Community.
Once this period is over, you will be asked again if you wish to continue to belong to our Talent Community. Otherwise, your profile will be deleted.
Use of Artificial Intelligence in the Recruitment Process
Part of the evaluation process for your application may be carried out with the assistance of Artificial Intelligence (AI) systems. In all instances, any outputs or profiles generated by these systems will serve solely as a supporting tool and will always be subject to review, oversight, and final validation by a human team member. We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you without human intervention.
Furthermore, we guarantee that the use of these technologies is implemented in accordance with all necessary technical and organizational security measures, as well as the compliance controls required by the European Artificial Intelligence Act (EU AI Act) and all other legal provisions applicable to its corresponding risk classification.
Do we disclose your personal data? Do we carry out international data transfers?
We process your personal data with strict confidentiality in accordance with the applicable legislation, and we do not communicate them to third parties, except in cases where we must disclose them in order to comply with a legal obligation or at the request of a competent authority.
We have an ATS recruitment tool (Viterbit S.L.), which acts as a data processor and is located in Madrid, with which we have signed a Data Processing Agreement (DPA).
As ThreatModeler operates globally and recruits for roles worldwide, your personal data may be transferred to, stored in, and accessed from locations outside your country of residence, including our headquarters in the United States and our offices in the United Kingdom. We implement appropriate safeguards and measures to ensure your data is protected during all international transfers in accordance with applicable data protection laws.
How can I exercise my data protection rights?
If you consider that your data protection rights have been infringed or that the processing of your personal data is in breach of the applicable regulations, you have the right to lodge a complaint with a data protection supervisory authority. Depending on your jurisdiction, this may include, but is not limited to:
For more detailed information regarding our general data processing practices, please refer to our Global Privacy Policy
However, if you have any questions or need further information, please contact us at privacy@threatmodeler.com, we will be happy to help you!