Products
Solutions
Resources
Partners
RUBRIK ZERO LABS
Support
Get started

Policies

Rubrik Employment Candidate Privacy Notices

Last updated: October 2023

Thank you for your interest in employment opportunities at Rubrik.

This Employment Candidate Global Privacy Notice (this “Privacy Notice”) describes how Rubrik, Inc., (together with its affiliates and subsidiaries, “Rubrik” or “we”) will collect, process, and use the personal data you submit when applying for a position with Rubrik or one of our affiliates. The specific entity you are applying to work for is part of a wider group of affiliated companies with its headquarters at Rubrik (the “Rubrik Group”). 

California Residents: CALIFORNIA LAW REQUIRES THAT WE PROVIDE YOU A NOTICE ABOUT THE COLLECTION AND USE OF YOUR PERSONAL DATA.  IF YOU ARE A RESIDENT OF CALIFORNIA, YOU SHOULD REVIEW THE SECTION BELOW ENTITLED “SUPPLEMENTAL CALIFORNIA DATA PROCESSING NOTICE.” 

If you are based in the European Economic Area (“EEA”), UK, or Switzerland, please review the “Supplemental Notice for European Candidates” in conjunction with this Privacy Notice.

If you are engaged by Rubrik as an employee, contingent worker, contractor, or other non-employee personnel of Rubrik, see our Global Worker Global Privacy Notice found on the Cube (Rubrik’s intranet) for information about our practices   See our Privacy Policy for information about our practices when you interact with our services in the same manner as a customer or other potential employee or employee who may interact with us.

What Personal Data Do We Process?

We will collect, process and use the following types of personal data which you provide as part of your initial submission or otherwise make available to Rubrik as part of the application process:

  • Identification information, such as your name, legal name, phone number, email address, date and place of birth, and address;

  • Experience information, such as education and work experience, current salary, contact details of your former/current employer, information about your educational background, your work experience and other experience, and recommendations provided on your behalf by others; and

  • Application information, such as the information you provide in an application form, CV or resume or public profile, including any photographs or videos, writing samples, or other written materials you share with us.

  • Video system information, such as photograph and images/audio/footage captured on CCTV or other video systems when visiting our office or captured in the course of recruitment events or interviews;

  • Demographic information, such as data about your race / ethnicity / religion / disability / gender and self-identified LGBT+ status, or veteran status, diversity and inclusion initiatives, and analytics, to the extent allowed by law.

If your application progresses, we may also collect and process the following:

  • Information collected as part of the interview process, such as notes taken from your interview, recording of your online interview for review by additional recruiters and hiring managers, and pre-employment tests; 

  • Background check information, such as information obtained through reference checks, education, prior employment, and where applicable, credit history, criminal records, drug testing or other data revealed during background check screenings subject to any further permissions, notifications, or restrictions required by applicable law; 

  • Recommendations provided on your behalf by others;

  • Banking information to reimburse you for interview-related expenses where applicable,

  • Data required to facilitate pre-employment travel, such as date of birth, legal name, and passport or visa;

  • Data generated by your participation in psychological, technical or behavioral assessments. You will receive more information about the nature of such assessments before your participation in any of them; and

  • Information required to initiate employment, such as proof of eligibility to work in country (e.g., a passport or visa), tax information, bank account information, benefits eligibility information and other information you provide for the purposes of starting employment or performing an employment contract.

For What Purposes Do We Process Your Personal Data?

In summary, we will collect and use the personal data you provide to process your application for employment, comply with statutory obligations we have in relation to your application, and for other lawful business purposes, including:

  • Administering and processing your application, including the identification, experience and other information you submit and, if your application progresses, any interview information and background check information;

  • Determining your suitability for the role for which you have applied or for similar roles within the Rubrik Group, including your identification, experience and other information you submit and, if your application progresses, any interview information and background check information;

  • Conducting background checks as part of your application, subject to applicable law, including your identification, experience and other information you submit, where and, if your application progresses, any interview information and background check information; 

  • Complying with applicable laws and employment-related requirements, including identification information and information required to initiate employment, for purposes such as confirming ability to legally work, setting up payroll, withholdings and benefits, and complying with statutory reporting requirements;

  • Monitoring diversity, including promoting equal opportunities and complying with legal obligations in relation to the same;

  • Creating aggregated, anonymized or de-identified data that we may use for our lawful business purposes, such as performing data analytics on our applicant pool in order to better understand who is applying to positions at Rubrik and how to attract top talent; and

  • Maintaining your contact information (only) in line with our data retention policies so that we can notify you about new positions that may be of interest to you and send an invitation for Rubrik recruiting events. You will have the option to opt-out of receiving such messages if you choose.

From What Sources Will Rubrik Obtain Your Personal Data?

Rubrik may obtain data about you from the following sources:

  • From you when you submit resumes or other information online;

  • From other Rubrik affiliates;

  • From recruiters and interviews with hiring managers and other Rubrik personnel;

  • From previous employers and other referees;

  • From your university/college or similar program;

  • From social media and Internet searches (where allowed by applicable law);

  • From professional tests such as coding tests and similar;

  • From third-party recruiters, staffing companies, employee referrals, recruiting events, or websites where you are introduced to Rubrik. Any resume or other candidate information submitted outside of established candidate submission guidelines (including through the Careers website or via email to any Rubrik employee) and without a written agreement or otherwise will be deemed to be provided for Rubrik’s use, and no fee will be paid should the candidate be hired by Rubrik; and,

  • From background checks, as applicable. Where permitted by law, Rubrik may contract with a third party to perform a pre-employment background screening.  The content of background check information varies by country to comply with local requirements.

What Information Should be Submitted?

Resumes/CVs should include information relevant to your employment history and education (degrees obtained, places worked, positions held, relevant awards, and so forth). If you provide information about others (e.g., reference contact details), please ensure that they agree for you to provide it to us, and inform them of the content of this .

Generally, we recommend that you do not disclose sensitive personal characteristics (e.g., gender, height, weight, religion, philosophical or political beliefs, financial data, age) in your resume/CV or any materials you submit in support of your application.

Any misleading, false or willful omission of relevant information may be sufficient reason for refusal of employment, or suspension or dismissal from employment. Please submit only accurate information. You should inform us of any significant changes to your personal data.

Where Might My Personal Data Be Transferred?

As a global organization with global IT systems, your personal data may be transferred to other Rubrik offices (including remote working locations) as part of our global footprint. Rubrik has internal policies and practices designed to ensure an adequate level of protection is in place across Rubrik’s worldwide organization. Any transfers of your personal data to other Rubrik offices/remote work location will be governed by our Intra-Group Data Transfer Agreement. For more information on data transfers from the European Economic Area, United Kingdom or Switzerland, please see the Supplemental Notice for European Candidates. 

Who, Other than Rubrik, may Access Your Personal Data?

Your personal data may be disclosed with the following parties as necessary for the above purposes:

  • Other Rubrik Group companies: Rubrik Group companies disclose human resources and management decisions, and we may transfer your personal data to the hiring entity to make the hiring decision and to other entities within the group to monitor and ensure compliance with applicable policies and procedures and applicable laws;

  • Third-party service providers: Our service providers may carry out instructions relating to IT hosting services or similar functions, recruitment or workforce administration. Where required, they will be subject to contractual obligations to implement appropriate technical and organizational measures to safeguard personal data, and to process it only as instructed;

  • Government officials: Where legal reporting requirements may exist, or to law enforcement agencies or private litigants in response to valid law enforcement process (warrant, subpoena, or court order); and,

  • Regulators, authorities and other recipients: These parties include courts and other public authorities, independent external advisers and internal compliance and investigation teams.

  • Business transfer participants: Parties to transactions and potential transactions whereby we sell, transfer or otherwise disclose some or all of our business or assets, including your personal data, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.

Within Rubrik Group companies, only authorized Rubrik personnel (talent acquisition, human resources, legal, finance, accounting, internal audit, IT, and appropriate managers) will have access to your personal data for the legitimate business purposes described in this Privacy Notice.

How Long is Your Personal Data Retained?

Rubrik will retain all categories of your personal data disclosed herein no longer than is necessary to carry out the processing purposes described in this Privacy Notice and/or as required by applicable law.  The criteria for deciding how long to retain personal information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this Privacy Notice, including complying with our legal obligations.

We may, subject to different retention requirements under any applicable law, retain your information after the recruitment process is complete for a limited period of time to contact you about potential future opportunities.

We will delete your personal data when we no longer need it for the purposes outlined herein. However, we may retain some of your information for longer as required or allowable by applicable law, or in an anonymized form for statistical purposes, or in other forms in order to meet statutory and regulatory requirements.  Any personal data retained will be processed, used, disclosed, and stored in accordance with this Privacy Notice. If you do not want your information retained in the event that you are not offered a position, you can request deletion by contacting us. 

How Does Rubrik Protect Your Personal Data?

We maintain organizational, physical and technical security arrangements designed to protect all the personal data we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake.

Does this Privacy Notice Address how Third Parties Process my Personal Data?

This Privacy Notice does not address, and we are not responsible for, the practices of any third parties, which have their own rules for how they collect and use your personal data.  Any links to third party website or services are not endorsements.

Access to Personal Information

You may request to access, update, or delete personal information by contacting us as below.

Contact Us

If you have questions or comments about how we will use your personal data, please contact privacy@rubrik.com, visit https://www.rubrik.com/legal/privacy-request, or contact any Rubrik Group entity using the details provided in Annex 1 or

Rubrik, Inc.  
3495 Deer Creek Road 
Palo Alto, CA 94304 
USA  
(844) 478 2745 

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Rubrik’s privacy practices, described in this Privacy Policy, comply with the APEC Cross Border Privacy Rules System. The APEC CBPR system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework can be found here.www.cbprs.org.

Privacy Policy Updates

Rubrik may update its Privacy Policy from time to time to reflect changes to our information practices. When we change the policy in a material way, we will provide you with notice as required by applicable law, including notifying you based on the contact details we have on file and posting an updated version of the Privacy Policy on our Services prior to the changes coming into effect. We encourage you to periodically review this page for the latest information on our privacy practices.

Rubrik complies with the EU-U.S. Data Privacy Framework, UK Extension to the E.U.-US Data Privacy Framework, and Swiss-U.S. Data Privacy Framework. Rubrik also supports customers with data from the EEA, UK and Switzerland regarding cross-border data transfer restrictions with standard contractual clauses and other compliance measures. Rubrik’s Data Privacy Framework Notice can be found: HERE. 

Supplemental California Data Processing Notice

This section applies to residents of California and describes how we collect, use, and disclose personal information of California residents and the rights such residents may have with respect to their personal information.  These rights are not absolute, and in certain cases we may decline your request as permitted by law.  

For purposes of this Supplemental California Data Processing Notice, “personal information” and “sensitive personal information” have the meanings given in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CPRA”). 

Your Privacy Rights.

  • Information.  You can request the following information about how we have collected and used your personal information during the past 12 months:

    • The categories of personal information that we have collected.

    • The categories of sources from which we collected personal information.

    • The business or commercial purpose for collecting, selling or sharing personal information.

    • The categories of third parties with which we disclose personal information.

  • Access.  You can request a copy of the specific pieces of personal information that we have collected about you. 

  • Deletion.  You can ask us to delete the personal information that we have collected from you, subject to certain exceptions.

  • Correction.  You can ask us to correct inaccurate personal information that we have collected about you.

  • Opt-out of sales or sharing of personal information.  California residents can opt-out of any “sale” or “sharing” of personal information as such terms are defined under the CPRA.  We do not sell or share personal information subject to this Privacy Notice and have not done so in the preceding 12 months. However, we encourage you to review our Privacy Policy for information about the sale or sharing of personal information that may occur when you interact with us in the same manner that a customer or other non-employee candidate or non-employee may interact with us.

  • Opt-out of profiling/automated decision making. You can opt-out of automated processing or profiling performed on personal information to evaluate, analyze, or predict personal aspects related to a person's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

  • Limit processing of sensitive personal information.  You can ask us to limit the processing of any sensitive personal information we collect as necessary for our (1) Service delivery and operations, (2) compliance and protection, (3) research and development, or (4) Service improvement and analytics purposes.  However, we do not use or disclose sensitive personal information in ways subject to the right of California residents to limit its use.

  • Nondiscrimination.  You are entitled to exercise the rights described above free from discrimination as prohibited by the CPRA, including exercising such rights without retaliation.

How to Exercise Your California Privacy Rights.

You may submit requests to exercise your rights to our human resources department at [email address], by calling us at (844) 478-2745, or by visiting https://www.rubrik.com/legal/privacy-request.  We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law.  We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. We reserve the right to confirm your current California residency.  

Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to California Probate Code Sections 4000-4465.  If you have not provided your agent with such a power of attorney, you must provide your agent with written and signed permission to exercise your CPRA rights on your behalf, provide the information we request to verify your identity, and provide us with confirmation that you have given the authorized agent permission to submit the request.

California Categories of Personal Information.

California law requires that we describe the categories of personal information we collect by reference to certain categories described in California law.  All categories described in the “What personal data do we process?” section in this Privacy Notice include “identifiers,” “professional or employment information,” and “inferences,” as defined under California law.  

Additionally,

  • Experience information includes “education information”;

  • Application information includes “education information,” “sensory information,” “medical information,” and “financial information”;

  • Video system information includes “sensory information” and “internet or network information”;

  • Information collected as part of the interview process includes “sensory information” or “education information”;

  • Background check information includes “education information” and “medical information”;

  • Recommendations provided on your behalf by others includes “education information”;

  • Banking information includes “financial information”; and

  • Information required to initiate employment includes “financial information” and “medical information.”  

The sections “From what sources will Rubrik obtain your personal data?,” “For What Purposes Do We Process Your Personal Data?” and “Who, other than Rubrik, may access your personal data?” above generally describe our practices currently and during the preceding 12 months.  You should assume that each category of personal information described herein may be disclosed, and may have been disclosed during the preceding 12 months, to each category of parties listed in “Who, other than Rubrik, may access your personal data?”, except that we would only disclose the personal information with our third-party service providers that they need to provide their services.

Sensitive Personal Information.

With the possible exception of “identification information,” all of the categories described in the “What personal data do we process?” section include, or contain information from which it may be possible to infer, sensitive personal information and characteristics of protected classifications under California or federal law if applicable, such as racial or ethnic origin and religious or philosophical beliefs.  However, we do not use or disclose sensitive personal information in ways subject to the right of California residents to limit use of sensitive personal information under the CPRA.

Retention.

Rubrik will retain all categories of your personal information no longer than is necessary to carry out the processing purposes described in this Privacy Notice and/or as required by applicable law.  For more information about how long we may retain your personal information, please read “How long is your personal data retained?” above.

If you have questions or comments about how we will use your personal data, please contact us.

Supplemental Notice for European Candidates

This EEA and UK Candidate Data Processing Notice (this “Notice”) describes how Rubrik Ireland, Rubrik The Netherlands, B.V., Rubrik France SAS, Rubrik Switzerland GmbH, Rubrik Italy S.R.L., Rubrik Germany GmbH and Rubrik UK Limited, depending on which entity is the prospective employer, collects, processes and uses the personal data of candidates in the European Economic Area (EEA) United Kingdom (UK), and Switzerland (collectively, “Europe”) as a “controller” of personal data under the “GDPR” (i.e., the General Data Protection Regulation 2016/679 (“EU GDPR”) and the EU GDPR as it forms part of UK law (“UK GDPR”). 

What Are Our Legal Justifications for the Processing of Your Personal Data?

We use your personal data for the purposes listed below. In respect of each of the purposes for which we use your personal data, the GDPR requires us to ensure that we have a “legal basis” for that use. Our legal bases for processing your personal data described in this Privacy Notice are listed below.

  • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each purpose we use your personal data for is set out in the table below.

  • Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).

  • Where we have your specific consent to carry out the processing for the purpose in question (“Consent”).

We have set out below the legal bases we rely on in respect of the relevant purposes for which we use your personal data, as further described under ‘For What Purposes Do We Process Your Personal Data?’ in this Privacy Notice.

 

Purpose Categories of personal data Legal basis
Administering and processing your application Any and all data types relevant to the processing Legitimate Interests
We have a legitimate interest in ensuring the efficient administration of the application process
Determining your suitability for the role which you have applied for Any and all data types relevant to the processing Legitimate Interests
We have a legitimate interest in ensuring that we select the best candidate for the role
Conducting background checks Background check information Legitimate Interests
We have a legitimate interest in conducting background checks on prospective employees
Where required by applicable law: Consent
Complying with applicable laws and employment-related requirements Any and all data types relevant to the processing Compliance with Law
Legitimate Interests
Where Compliance with Law is not applicable, we have a legitimate interest in participating in, supporting, and following legal process and requests, including through cooperation with authorities. We may also have a legitimate interest of ensuring the protection, maintenance, and enforcement of our rights, property, and/or safety
Monitoring diversity Demographic information Where such processing is required by applicable law:
Compliance with Law
Where such processing is not required by applicable law:
Either:
Consent; or

Legitimate Interests

We have a legitimate interest in monitoring the diversity of our workforce and promoting equal opportunities
Creating aggregated, anonymized or de-identified data Any and all data types relevant to the processing Legitimate Interests
We have a legitimate interest in analyzing workforce demographics and trends
Maintaining your contact information to notify you of new positions Identification information Legitimate Interests
We have a legitimate interest in retaining your information to advise you of roles that may interest you
Where required by applicable law: Consent


We may use your personal data for reasons not described in this Privacy Notice where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and explain the applicable legal basis.

How Is Personal Data Protected in the Context of International Data Transfers?

We may disclose your personal data outside of Europe, both within the Rubrik group and with third parties. Data protection laws in countries outside Europe may not be as protective as those in Europe. Where we transfer your personal data outside of Europe to a third country that has not been deemed to provide an adequate level of protection, we try to ensure a similar degree of protection is afforded to it by using appropriate safeguards designed to give your personal data effectively the same protection it has in Europe.

You may have the right to receive a copy of the appropriate safeguards under which your personal information is transferred by contacting us at privacy@rubrik.com or by visiting https://www.rubrik.com/legal/privacy-request.

What Are Your Rights in Respect of Your Personal Data?

The GDPR gives you certain rights regarding your personal data in certain circumstances. If you are located within Europe, you may ask us to take the following actions in relation to your personal data that we hold:

  • Access.  Provide you with information about our processing of your personal data and give you access to your personal data.

  • Correct.  Update or correct inaccuracies in your personal data.

  • Delete.  Delete your personal data.

  • Transfer.  Transfer a machine-readable copy of your personal data to you or a third party of your choice.

  • Restrict.  Restrict the processing of your personal data.

  • Object.  Object to our reliance on our legitimate interests as the basis of our processing of your personal data.  

  • Opt-out. Stop sending you notifications about jobs that may be relevant to you.

  • Consent withdrawal. Where we rely on your consent and/or explicit consent to process your personal data you may withdraw that consent at any time.  

You may submit these requests by email to privacy@rubrik.com or by visiting https://www.rubrik.com/legal/privacy-request. We may request specific information from you to help us process your request.  

Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal data or our response to your requests regarding your personal data, you may contact us or submit a complaint to the data protection regulator in your jurisdiction:

Contact Us
If you have questions or comments about how we will use your personal data, please contact privacy@rubrik.com, visit https://www.rubrik.com/legal/privacy-request, or contact us using the following details.

 

Legal Name Incorporation / Country Address
     
Rubrik, Inc. US (Delaware) 3495 Deer Creek Road, Palo Alto, CA 94304
Rubrik International, Inc. US (Delaware) 3495 Deer Creek Road, Palo Alto, CA 94304
Rubrik Cloud Data Management International, LLC US (Delaware) 3495 Deer Creek Road, Palo Alto, CA 94304
Datos IO Inc. (acquisition Feb 2018) US (Delaware) c/o 3495 Deer Creek Road, Palo Alto, CA 94304
     
Rubrik The Netherlands B.V. Netherlands Hoogoorddreef 54 A, 1101BE Amsterdam
(Rubrik office)
Rubrik UK Limited UK c/o BDO, LLP
55 Baker Street, London, England W1U 7EU
(BDO office, auditors)
Rubrik Cloud Data Management Limited Ireland c/o BDO
4th Fl, 103/104 O'Connell Street, Limerick, V94 AT85
(BDO office, auditors)
Rubrik France SaS France c/o Citco France SARL
8 avenue, Hoche 75008, Paris, France
(Citco France office)
Rubrik Switzerland GmbH Switzerland c/o BDO AG
Schiffbaustrasse 2, 8005 Zurich, Switzerland
(BDO office, auditors)
Rubrik Italy S.r.l. Italy c/o BDO
Viale Abruzzi 94, 20131, Milano (MI), Italia
(BDO office, auditors)
Rubrik Germany GmbH Germany c/o Citco Deutschland GmbH
Mainzer Landstraße 41,
60329 Frankfurt am Main
Deutschland
(Citco Germany office)
     
Rubrik Japan KK Japan #201, 3-22-10 Toranomon
Minato-ku, Tokyo
(office of Citco partner)
Rubrik Singapore Pte Limited Singapore 10 Changi Business Park Central 2
#05-01 HansaPoint
Singapore 486030
(Rubrik office)
Rubrik India Private Limited India Seventh Floor, Building 9, SEZ CESSNA Business Park,
Outer Ring Road, Kadubeesanahalli Village,
Varthur Hobli, Bengaluru (Bangalore) Urban,
Karnataka, 560087
(Rubrik office)
Rubrik Australia Pty Ltd Australia c/o Baker & McKenzie
Level 19, 181 William Street, Melbourne, VIC 3000, Australia
     
Rubrik Cloud Data Management Inc. Canada c/o Stewart McKelvey
44 Chipman Hill, Suite 1000
Saint John, NB E2L 2A9
(office of Stewart McKelvey law firm)
     
Rubrik Cloud Data Management Mexico S. de R.L. de C.V. Mexico Avenida Insurgentes Sur 1915 - 602
Colonia Guadalupe Inn
Alcaldía Álvaro Obregón
Mexico City, zip code 01020
(Velderrain's office - accountants)
     
Rubrik Middle East FZ-LLC UAE Premises No.: EO29
Floor: Ground
Building: 1
Dubai, United Arab Emirates
TRUSTe


If you have a privacy concern, complaint, or question for the data protection officer for your region, please contact us by using our webform. 

We value your opinions. If you have any questions or comments regarding this Supplemental European Privacy Statement, please contact us at:

Or via e-mail at privacy@rubrik.com
Via webform

Rubrik Cloud Data Management Limited
4th Fl
103/104 O'Connell Street
LIMERICK V94 AT8
IRELAND

Rubrik France SaS
43-47 avenue de la Grande Armee
75116 PARIS
FRANCE

Rubrik The Netherlands B.V. Hoogoorddreef 54
1101 BE Amsterdam
The Netherlands

Rubrik UK Limited
55 Baker Street
LONDON W1U 7EU
ENGLAND

Rubrik Germany GmbH
Bethmannstraße 50-54 
60311 Frankfurt am Main
Germany

Rubrik Switzerland GmbH
Schiffbaustrasse 2
8005 ZURICH
SWITZERLAND

Rubrik Italy S.r.l.
Viale Abruzzi 94
20131 Milano (MI)
ITALIA

 

TRUSTe