Privacy notice for candidates

PRIVACY NOTICE FOR CANDIDATES

Our objective is to fight complexity and, for that, we simplified our Privacy Notice for candidates as much as possible, but in case you have any doubt, we are at your disposal via e-mail dpo@nubank.com.br.

The Privacy Notice for Candidates of Nu Payments SA, Nu Financeira SA - Sociedade de Crédito, Financiamento e Investimento and other companies of the group, which covers its parent companies and subsidiaries, directly or indirectly, as well as its affiliates and companies under common control in Brazil ("Nubank"), was built to reaffirm Nubank's commitment to security, privacy, and transparency when processing personal data.

In this Privacy Notice, we describe how we collect and process your personal data when you participate in a hiring process to work at Nubank, when you submit your resume or when you register on our platform voluntarily.

Introduction

This Privacy Notice is applicable to the recruitment platform that is used to conduct Nubank's hiring processes.

At Nubank, we commit to protecting your data and we are in compliance with the laws and regulations in force and applicable to personal data.

When accepting the terms of this Privacy Notice, you are aware that the controller of your personal data, meaning, the company responsible for making decisions about the processing of your personal data, will be Nu Pagamentos S.A., CNPJ 18.236.120/0001-58 with its headquarters located at Rua Capote Valente, nº 39, São Paulo/SP, CEP 05409-00.

Depending on the position you apply to, the controller of your data can be Nu Financeira S.A. - Sociedade de Crédito, Financiamento e Investimento, CNPJ sob o nº 30.680.829/0001-43 with its headquarters located at Rua Capote Valente, nº 120, São Paulo/SP, CEP 05409-00.

1. Scope

Each time you read a term that begins with capital letters in this Privacy Notice, it means that said term has a meaning specifically assigned in the Notice.

Whenever there is mention of the terms “Nubank”, “we” or “our”, we are referring to Nubank; likewise, whenever there is mention of the terms "you", "yours", "yours", we are referring to You.

This Privacy Notice is applicable to all candidates for available positions through Nubank. For regular jobs or internship positions, you need to be at least 18 years old. Nubank also accepts applications for internship and apprentice positions if you are at least 16 years old, subject to presentation of a written authorization given by the parents or legal guardians.

The practices described in this Privacy Notice only apply to the processing of your personal data in Brazil and are subject to applicable local laws, with emphasis on Law No. 13.709/2018 (General Law for the Protection of Personal Data, or "LGPD") as from its entry into force.

2. Which type of personal data Nubank collects during the hiring process

When you take part in our hiring process, we may need to collect specific personal data. In some cases, you will be asked to provide this data directly to Nubank, but we may also receive your personal data from partners we collaborate with for certain services, such as recruitment for a specific role, or supporting us in our bootcamps and other training initiatives.

By accepting the terms of our Privacy Policy, you agree to provide only valid, current and exact data and to not alter your identity or personal data in any form.

During the hiring process, Nubank may collect the following personal data:

Full Name;
E-mail Address;
Phone number;
Location (address, city, state, country);
Resume (personal profile, academic data, labor data, among other information that You provide to us in Your resume);
Cover Letter;
Information on your LinkedIn account if you decide to connect with us;
Information about your participation in training or recruitment initiatives, such as bootcamps, NuLab Salvador courses, DiversiDados, Yes She Codes, and others, in case you have taken part in any of them;
A few questions related to the available position you want to apply to;
Expected salary;
If you are a person with Disabilities, if you decide to inform;
Information about your interactions with Nubank in previous and current hiring processes;
Sensitive data, such as ethnicity, race and sexual orientation, in the context of initiatives related to diversity and inclusion; and
Other personal data that you may inform us.

During the hiring process we may have to conduct interviews via videoconference, it is important that you are aware of this step because if you do not agree or do not want to participate in the video interview we will not be able to proceed with the hiring process.

3. Purposes of processing

We process your personal data for the hiring process, which means that Nubank will be able to:

Manage and control candidates’ resumes for available positions to evaluate, contact and conduct the hiring process;
Check personal and work references;
If applicable, prepare job offers for the selected candidates after the hiring process ends, whether binding or non-binding;
Elaborate statistical reports and register candidates’ history, including information regarding diversity in our hiring and recruitment processes;
Improve the hiring process by sending a satisfaction survey to candidates;
Allow the selection of candidates for hiring processes aimed, exclusively or not, at affirmative positions related to diversity and inclusion policies at Nubank; and
Comply with legal and regulatory obligations, including Brazilian Law for Inclusion of Persons with Disabilities no. 13.146/15.

For some positions that involve access to financial data of our clients and/or Nubank's strategic data, Nubank will need to perform a due diligence check (criminal and/or financial). For this specific purpose, Nubank will notify you when the due diligence check is necessary and will ask for some additional data, such as your full name, your mother's full name, birth date, ID or passport number, and tax ID number.

4. Sharing Personal Data

Nubank may share your data if you request, or also with companies within the Nubank group, with third-party partners, or with authorities and regulatory bodies for different purposes. The mentioned data sharing, when necessary, will be carried out within the limits and purposes of our business, in accordance with the applicable law.

Consulting partners, for foreign candidates from outside Brazil:

Shared personal data: Name, email and passport number

Purpose: We may share your personal data if you are a foreign candidate from outside Brazil in order to obtain guidance on the requirements to hire a foreign person.

Business partners and credit bureaus who conduct due diligence checks, only for some positions

Shared personal data: Name, mother's name, birth date, address, ID or passport number and tax ID number

Purpose: We may share your personal data with some business partners and credit bureaus to conduct due diligence checks in specific cases. In these cases, the candidate will be informed.

Relocation and moving partners

Shared personal data: Name, birth date, address, ID or passport number and tax ID number

Purpose: We may share your personal data with some partners that provide relocation and moving services, if applicable

Technical and operational partners

Shared personal data: Name, e-mail, or other information indicated in 2. Which type of personal data Nubank collects during the hiring process, depending on the type of activity carried out by the partner.

Purpose: We may share your personal data with technical and operational partners to improve our hiring processes.

Training and bootcamp partners

Shared personal data: Name and e-mail.

Purpose: we might share your personal data with our training and bootcamp partners to guarantee, whenever necessary, your access to e-learning and other training platforms.

5. Retention and deletion of your personal data

We will delete your personal data after 3 (three) years counted as from the end of the hiring process unless we need to keep the data for a longer period in order to comply with legal or regulatory obligations or in case we have to retain your data to preserve our rights. Nevertheless, Nubank may delete the data in a shorter period, by its sole discretion.

6. Data Subjects’ Rights

As of the entry into force of the LGPD, the candidate, as a data subject, will be able to exercise its rights before data controllers. We provide the mechanisms detailed below so that you understand clearly and transparently how to exercise your rights and our team will be ready to meet any requests you may send.

Please find below the mentioned rights:

Processing confirmation

The fact that you are a candidate to an open position in Nubank already results in the occurrence of the processing of personal data by Nubank, even if said processing is, among others, the storage of personal data in a safe and controlled environment. You can ask Nubank to confirm whether we process your personal data.

Personal data access

You can request that Nubank inform and provide the personal data that it holds in relation to you.

Correction of incomplete, inaccurate or outdated data

If you find that Your personal data is incomplete, inaccurate, or outdated, You can ask Nubank for correction or addition. For this, You will need to send a formal proof of the correct form of personal data.

Anonymizing, blocking or deleting unnecessary, excessive or processed data in non-compliance with the LGPD

If any personal data is processed excessively or in non-compliance with the LGPD, you can request that Nubank anonymize, block or delete this data, as long as the excess or non-compliance with the Law is effectively verified.

Deletion of personal data processed with the consent

If You have given your consent for the processing of your personal data, you can request the deletion of that data, if applicable.

Information on companies with which Nubank shared data

You can ask Nubank to inform to which third parties your personal data was shared with, or who sent your personal data to Nubank.

Information on the possibility of not giving consent and about the consequences of denial

If Your consent is required to access a particular service, you can ask Nubank to clarify whether it is possible to provide that service without your consent or the consequences of not providing it.

Consent withdrawal

If You have given Your consent for the processing of your personal data, You can request the withdrawal of Your consent at any time. The withdrawal of consent may imply the impossibility of proceeding with the hiring process.

Automated decisions

Nubank does not make decisions based solely in automated processing of personal data during the hiring processes. Should it be adopted at some moment, you will be able to request a review of decisions made solely on the basis of automated processing of personal data that affects your interests and the indication of the criteria used for those decisions.

Data portability and right to petition

When this right is regulated by the National Data Protection Authority (ANPD), you will be able to ask Nubank to transfer your personal data to another service provider. In addition, with the creation of the ANPD, you will also have the right to petition in relation to your personal data before the national authority.

If you wish to exercise any of these rights, please contact us through our Data Protection Officer (DPO) through the e-mail dpo@nubank.com.br. In order to enforce your rights, we may request proof of your identity as a security measure and fraud prevention.

You will be able to exercise the rights described in this chapter 6 from the date the LGPD comes into force.

History logs storage

You can always get in touch with Nubank, just as we can also get in touch with you. Whether by chat, e-mail, or phone, conversations will be stored and we will be able to use your content as evidence in court, or in other cases provided by law.

7. International Data Transfer

Some of your personal data, or all of it, may be transferred abroad, for example when it is stored by Nubank on cloud computing servers located outside Brazil. For this, Nubank observes all requirements established by the current legislation and adopts the best security and privacy practices to guarantee the integrity and confidentiality of your personal data.

You are aware that Nubank will also carry out an international transfer of your personal data, including to countries that may have different laws and standards on data protection matters:

For its affiliates, subsidiaries, associate companies, and all companies within the same economic group, to evaluate candidates, conduct hiring processes and for statistical purposes and candidate’s history; and
Candidates’ management, control, and administration service providers.

8. Security Measures

Nubank uses several layers of security measures to ensure the integrity of your personal data, such as information security standards practiced by the industry when collecting and storing personal data.

Personal data may be stored by means of cloud computing technology and other technologies that emerge in the future, but always aiming at the improvement of our services and security.

We treat the security of your personal data with the utmost care, using standards and best practices adopted in the market. We have a robust, highly qualified team responsible for ensuring that Nubank adopts the best security practices, including:

Multiple authentication factors for accessing information;
Security as a code, in order to enable automation and quick and efficient responses to security events in the technological environment;
Encryption for data at rest, in transit and in use, to ensure the integrity of the information;
Continuous monitoring of the environment;
Analysis and continuous testing of information security in our systems carried out by internal and external teams;
Periodic audits.

We also recommend that you always take care when posting your personal data on social networks or any other public environment. To learn more about digital security, visit our blog.

9. Sensitive Personal Data

Nubank is interested in understanding how different groups are being represented in our hiring processes. In addition, Nubank constantly promotes the selection of candidates for affirmative positions based on diversity and inclusion criteria. We believe that these practices can help us to improve and foster diversity in our teams and also to understand and build an open, diverse and inclusive environment for minority and/or underrepresented groups.

For this reason, we included some diversity questions in our selection processes. Some hiring processes may even be aimed exclusively at people who identify themselves as part of one or more minority or underrepresented groups. All questions containing personal data are optional and only applicable to open positions in Brazil. The sensitive personal data collected will be anonymized in cases where the indicators are used for internal improvement processes only. In some cases, sensitive personal data may be analyzed by people from Nubank's People & Culture team to conduct affirmative positions. We emphasize that in any case only our People & Culture team will have access to the answers, and they will not negatively impact the selection process in any way.

Therefore, if you choose and wish, you can answer the questions in the Diversity section and help us, as a community, to improve our selection processes.

10. Privacy Notice Changes

Nubank reserves the right to modify, update, amplify, or change the content and scope of this Privacy Notice, at any time, at its sole criteria. Whenever the Privacy Notice is substantially changed, these changes will be valid, effective and binding after the new version is posted on our website https://nubank.com.br/carreiras or sent by email. By continuing to use our services after changes made to the Privacy Notice, you will be agreeing to the new terms - but you can always express your disagreement through our service channels.

11. Contact Us

According to Law nº 13.709/2018, Nubank is considered the "Controller" of your personal data. If after reading this Privacy Notice you still have any questions, or for any reason, you need to contact us for matters involving your personal data, you can contact us through the channel below and inform that you are a Candidate:

Data Protection Officer (DPO): E-mail: dpo@nubank.com.br

We are always at your disposal to answer your questions and put you in control of your personal data.