Europe, the Middle East, and Africa (EMEA)

This Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of the European Union (EU), United Kingdom (U.K.), or Switzerland, and describes how we collect, use, disclose, and store your Personal Information in accordance with the General Data Protection Regulation (GDPR), the United Kingdom General Data Protection Regulation (U.K. GDPR), and the Swiss Federal Act on Data Protection (revFADP), respectively.

Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:

• Privacy Notice | Collection
• Privacy Notice | Use
• Privacy Notice | Disclosure

Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.

In order to provide services, Carrot will store and process your Personal information in the United States.

To the extent that applicable law considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of the EU, the U.K., or Switzerland.

For more information on how we store, protect, and retain your information, please see here.

In addition to the rights outlined here, you have the following data subject rights:

• The right to access the Personal Information that we maintain about you;
• The right to require us to correct your Personal Information;
• The right to the erasure of your Personal Information;
• The right to request that we stop processing your Personal Information;
• The right to not provide or to withdraw your consent at any time;
• The right to suspend the processing of your Personal Information;
• The right to transfer your Personal Information to yourself or to a third-party; and
• The right to not be subject to decisions based solely on automated decision making.

Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.

Carrot collects and processes Personal Information from job applicants (“Candidates”) for the purposes of managing our recruitment process, including assessing your qualifications with respect to your application and to decide whether to enter into an employment relationship with you. This may include your name, contact details, CV, employment history, educational background, references, and any other information that you provide to us during the recruitment process, or that we receive from a recruitment agency, background check provider (to the extent permitted by applicable law) or other third party. We may also collect sensitive Personal Information if voluntarily provided by you, such as information relating to ethnic origin or disabilities for equal opportunities monitoring.

The legal basis for this processing is our legitimate interest in hiring qualified individuals and, where applicable, compliance with legal obligations. All Candidate Personal Information will be stored securely and will only be accessible by authorized personnel involved in the recruitment process. We may share your Personal Information with third-party service providers who assist us in the recruitment process, subject to appropriate data processing agreements or analogous contractual provisions.

Carrot will retain Personal Information of Candidates for as long as necessary to comply with our legitimate interests, which may include (among other purposes), reviewing applications that have previously been denied, and for the length of time necessary to comply with applicable law.

You can also file a complaint with the applicable local authority. When you consent to our processing your Personal Information for a specified purpose, you may withdraw your consent at any time, and we will stop any further processing of your data for that purpose.

Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.

Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.

This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Serbia and describes how we collect, use, disclose, and store your Personal Information in accordance with the Law on Protection of Personal Data 2018.

Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:

• Privacy Notice | Collection
• Privacy Notice | Use
• Privacy Notice | Disclosure

Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.

Data Storage

In order to provide services, Carrot will store and process your Personal Information in the United States. For more information on how we store, protect, and retain your data, please see here.

International Data Transfers

Carrot operates globally and your Personal Information will be transferred to countries outside of Serbia that are subject to different standards of data protection. We will take reasonable and appropriate steps to ensure that transfers of your Personal Information comply with applicable law and are managed to protect your privacy rights and interests.

In addition to the rights outlined here, you have the following data subject rights:

• Access. You have the right to access the Personal Information that we maintain about you.
• Rectification. You have the right to have your data corrected if it is inaccurate or incomplete. Upon request, we will correct inaccurate Personal Information about you and, taking into account the purposes of the processing, complete incomplete Personal Information.
• Erasure. You have the right to have your Personal Information erased.
• Restrict processing. You may request that we restrict the processing of your Personal Information. This means that we will suspend the processing of your data. This right does not prevent us from continuing to store your Personal Information.
• Right to object. You have the right to ask us to no longer process your Personal Information if your data is processed due to legitimate interests. You can object to direct marketing at any time and at no cost to you if your Personal Information is processed for this purpose.
• Portability. You may ask us to provide you with your Personal Information in a structured, commonly used and machine-readable format, and have such data transmitted directly to another Data Controller, where technically feasible.

Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.

You may file a complaint with the Commissioner for Information of Public Importance and Protection of Personal Data.

Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.

This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Turkey and describes how we collect, use, disclose, and store your Personal Information in accordance with the Law on the Protection of Personal Data (“LPPD”).

Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:

• Privacy Notice | Collection
• Privacy Notice | Use
• Privacy Notice | Disclosure

Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.

In order to provide services, Carrot will store and process your Personal information in the United States.

To the extent that the LPPD considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of Turkey.

For more information on how we store, protect, and retain your information, please see here.

In addition to the rights outlined here, you have the following data subject rights:

• Right of Access and Right to Knowledge. You have the right to know whether your information has been processed. If your information has been processed, you have the right to know which data has been processed and how it has been processed.
• Right to Information about Entities with whom Personal Information has been Shared. You have the right to know the the identities of natural or legal persons with whom your information has been shared.
• Correction, Erasure, or Removal of Personal Information. You have the right to request that your information be corrected, erased, or removed, in accordance wit the LPPD. If your information has been transferred, then such requests will be shared with third party recipients in accordance with the LPPD.
• You may object to any negative consequence of your information being analyzed exclusively through automated systems.
• You may request compensation if you have suffered any damage due to the illegal processing of your information.

Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.

Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.

This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of South Africa and describes how we collect, use, disclose, and store your Personal Information in accordance with the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA).

Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:

• Privacy Notice | Collection
• Privacy Notice | Use
• Privacy Notice | Disclosure

Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.

In order to provide services, Carrot will store and process your Personal information in the United States.

To the extent that the POPIA and/or PAIA consider this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of South Africa.

For more information on how we store, protect, and retain your information, please see here.

In addition to the rights outlined here, you have the following data subject rights:

• Access. After providing adequate proof of your identity, you may request that we confirm, free of charge, whether or not we hold Personal Information about you. You may then request a description of this information, including information about third parties who have had access to this information, within a reasonable time and at a prescribed fee (if any). In addition, we will provide information in a reasonable manner and in a form that is generally understandable.
• Rectification. You may request the rectification of inaccurate, incomplete, misleading, or outdated Personal Information.  
• Erasure. You have the right to request that we delete Personal Information that is inaccurate, irrelevant, or excessive, or that we are no longer authorized to retain.
• Object/Opt-out. You have the right to object to the processing of your Personal Information. You also have the right to “opt out” of having your information processed for purposes of direct marketing by means of unsolicited electronic communications.
• Not be Subject to Automated Decision-Making. You have the right to not be subject to a decision which is based solely on the basis of the automated processing of your Personal Information.

Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.

You may submit a complaint to the Information Regulator regarding alleged interference with the protection of your information or with respect to a determination of an adjudicator.

You may also institute civil proceedings regarding an alleged interference with the protection of your Personal Information.

Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.