Privacy Notice – Pymetrics, Inc.
1. Introduction
This Privacy Notice is intended to describe the practices EY follows in relation to the Pymetrics, Inc (“Tool”) with respect to the privacy of all individuals whose personal data is processed and stored in the Tool. This Privacy Notice should be read together with the ey.com Privacy Statement, and in case of any conflict with the ey.com Privacy Statement, the terms of this Privacy Notice will prevail. Please read this Privacy Notice carefully.
For purposes of clarity, this Privacy Notice is solely entered into between you and EY, and is not intended to replace and/or supersede the separate privacy policy, terms and/or conditions entered into between you and Pymetrics, Inc. in connection with your usage of and interaction with the Tool, including without limitation, the privacy policy located at https://www.pymetrics.ai/privacy-policy, which shall remain in full force and effect.
2. Who manages the Tool?
“EY” refers to one or more of the member firms of Ernst & Young Global Limited (“EYG”), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by providing this Tool on which your personal data will be processed and stored is:
- For the personal data of EY personnel: The data controller is the EY entity which employs you.
- For the personal data of third-party personnel (including EY clients): The data controller is the EY local member firm with which the third party has a relationship.
You can find a list of local EY member firms and affiliates on ey.com Privacy Statement.
The personal data you provide in the Tool is shared by the above data controller with one or more member firms of EYG (see “Who can access your information” section below).
The Tool is hosted on servers in an Amazon Web Services (“AWS”) data centre (Northeast Region, US).
3. How does the Tool process personal data?
The Tool assess competencies and aptitude of candidates using a digital psychometric assessment based on game technology.
Your personal data processed in the Tool is used as follows:
For EY Users, gameplay data is used to analyze what are the key characteristics and traits that are common between those employees that make them successful in the role. This data is then used to create a data model to assess candidates against.
Candidates who apply to the same role will take the same assessment and be assessed against the model. Fit for role is determined based on percentile match against model.
Optional Sensitive Personal Data relating to Candidates and EY Users are used to ensure that the models are unbiased against gender/ethnicity.
Candidate data: name, email, requisition ID, and assessment ID are used to associate gameplay with the correct candidate.
EY relies on the following basis to legitimize the processing of your personal data in the Tool:
- The data subject has given consent to the processing of their personal data for one or more specific purposes.
- Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The specific legitimate interest(s) pursued are as follows: Human Resource management, including performance reviews and recruitment.
The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.
4. What type of personal data is processed in the Tool?
The Tool processes these personal data categories:
EY Personnel:
- EY Recruiters
- Full name
- Email address
- Audit logs relating to user login and activity.
- EY Users (part of norm group)
- Assessment data
- Audit logs relating to user login and activity.
Other:
- Candidates
- Full name
- Email address
- Assessment data
- Requisition ID
- Assessment ID
- IP addresses
- Location data
- Audit logs relating to user login and activity
This data is sourced from a feed from other EY systems known as GRMS, Yello and SuccessFactors (SF) Recruitment; or directly from yourselves:
- EY Recruiters
- Full name
- Email address
- Provided by candidates applying for EY vacancies.
5. Sensitive Personal Data
Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.
EY does not intentionally collect any sensitive personal data from you via the Tool. The Tool’s intention is not to process such information.
6. Who can access your information?
Your personal data is accessed in the Tool by the following persons/teams:
EY:
- EY Recruiters: EY Recruiters will have access to candidate match results in the form of Highly Recommend, Recommend, Do Not Recommend, for their respective countries. EY Recruiters can also gain access to a report for each candidate in their respective countries to obtain more details on their specific traits.
Other:
- Vendor Personnel: Pymetrics personnel in the Customer Success, Client Deployment, IO, and Data Science teams will have access to data to provide support services.