Job Applicant Privacy Notice

In applying to join Mambu, you will be providing us with certain personal data about yourself. Mambu* respects and safeguards the privacy of all applicants. This Job Applicant Privacy Notice (this Privacy Notice) sets out the key principles regarding how the personal data of our applicants will be managed.

Your personal data is processed by Mambu (Mambu, We, Our, Us or the Company and each of them a Mambu entity). Generally, the Mambu entity you apply to will be the data controller of that personal data.

You will be required to create an applicant account in Mambu’s recruitment platform to fill in the application form. Your applicant account allows you to amend your personal data at any time prior to submitting an application for a job. After submission of the application, you may at any time delete, amend and/or correct your profile and personal data.

1 Personal data we collect

1.1 As part of your recruitment process we may collect the following personal data about you (whether such information is provided by you or a third party):

(a) your contact details, CV or resume, cover letter, letter of intent, application form details, national identification or other identification number, and your visa, qualification certificates, training certificates, licences, passport or permission to work documentation, references from former employer(s); and

(b) insofar as permitted by law, information relating to criminal records or financial probity checks or other independent searches (and where we do so you will be asked to consent to such collection and use before we or our agents undertake the search) that we undertake to assess your suitability for the position applied for; and

(c) materials produced during the course of the recruitment processing, including any video, presentations or other assignments you provide us for the purposes of a recruitment assessment and any contemporaneous interview notes (whether made by you or the interviewer, about you).

1.2 We may obtain your personal data from you or from third parties such as our business partners, employment agencies, past employers, educational or sporting institutions, credit reference and anti-fraud agencies, other background check agencies/organisations, sanctions and politically exposed person screening lists or public registers.

1.3 If you are a former employee of Mambu, you agree to us using any available employment-related records held by Mambu for the purpose of processing your application for employment.

1.4 If you are taken on to work at Mambu, we will collect other personal data in accordance with our internal Employee Privacy Notice.

2 Why we collect and how we process and use your personal data

2.1 Your personal data will be collected, used and/or processed for the purposes of:

(a) assessing your suitability for the advertised role or other potential vacancies within Mambu;

(b) communicating with you about Mambu events, new jobs and careers opportunities and the recruitment process including any interviews;

(c) preparing for the on-boarding, such as employment visa application, reference checking and employment contract preparation;

(d) conducting surveys and research activities with the objective of improving Mambu’s recruitment process;

(e) performing analysis of our applicant pool in order to better understand who is applying to positions at Mambu and how to attract top talent;

(f) where legally permissible, we may ask you to voluntarily disclose your disability, ethnicity, gender and nationality, to help Mambu with its Diversity and Inclusion programs;

(g) complying with our legal obligations, such as assisting with proceedings or investigations anywhere in the world as required by public authorities, law enforcement agencies and regulators.

2.2 We process your personal data in order to assess your application (which is in our legitimate interest) and pursuant to laws to which the hiring company is subject (e.g. in relation to equal opportunities). This processing is a necessary precondition of entering into any future contract with you, should your application be successful. If you are unable to provide us with the information requested, we may be unable to assess your appropriateness for the job applied for, or to communicate with you, or offer you a role.

3 Who we share your personal data with and sending your personal data overseas

3.1 We will permit our third party service providers, including agents, contractors and other Mambu affiliates, to use your Personal Data on our behalf for the purposes set out in section 2. We may also use service providers and agents in the administration of the recruitment and selection process. Where reasonably necessary or required to do so, we may disclose your personal data to third parties in relation to law enforcement or regulatory investigations and also for the purpose of conducting any pre-employment checks.

3.2 As a global company Mambu and its affiliates and third parties, may collect, transfer, and store your personal data in different jurisdictions such as the European Economic Area, United Kingdom, United States, Canada, Brazil, Mexico, Singapore, Australia.

Therefore, your personal data may be processed outside your jurisdiction, including in countries and jurisdictions that are not subject to an adequacy decision by the European Commission or your local legislature or regulator, and that may not provide for the same level of data protection as your jurisdiction. We have adopted appropriate technical and organisational measures to ensure an adequate level of protection and security of your personal data (such as as required by the applicable regulators or legislators).

4 Retention Period

4.1 We keep records of your data for no longer than is necessary for the purpose for which we obtained them and any other permitted linked purposes.

4.2 If your application is unsuccessful, we will keep your details on file for as long as is necessary to process your application or for the purposes of further job opportunities if you agree to such longer periods. Deletion of files may be suspended where required by law or to defend ourselves if we consider a complaint or dispute to be likely or until the position is filled.

5 Your rights

5.1 You have the right to access certain personal data held about you and correct any inaccuracies.

Based on data protection laws in your country, you may have certain additional rights in relation to your personal data as listed below. Please be aware that certain exceptions apply to the exercise of these rights and so you will not be able to exercise these in all situations.

(a) Access: You have a right to be provided with access to any data held about you by Mambu, generally within 1 month of your request.

(b) Rectification: You can ask us to have inaccurate personal data amended.

(c) Erasure: You can ask us to erase personal data in certain circumstances and we will take reasonable steps to inform other controllers that are processing the data that you have requested the erasure of any links to, copies or replication of it.

(d) Withdrawal of consent: You can withdraw any consents to processing that you have given us and prevent further processing if there is no other ground under which Mambu can (and does) use to justify the processing of your personal data.

(e) Restriction: You can require certain personal data to be marked as restricted whilst complaints are resolved and also restrict processing in certain other circumstances.

(f) Portability: You can ask us to transmit the personal data that you have provided to us and we still hold about you to a third party electronically.

(g) Raise a complaint: You can raise a complaint about our processing with the data protection regulator in your jurisdiction.

(h) Prevent processing: You can require Mambu to stop any processing based on the legitimate interests ground unless Mambu’s reasons for undertaking that processing outweigh any prejudice to your data protection rights.

6 Contacting us

6.1 Should you need any support in regards to your privacy rights, or any questions about the measures taken by Mambu to ensure the protection of the personal data you share with us, please do not hesitate to contact our Data Protection Officer at dataprivacy@mambu.com.

6.2 If we are unable to resolve an inquiry or a complaint, you have the right to contact the data protection regulator in the country in which you are based.

7 Changes to this Notice

We are constantly trying to improve our Websites and Services, so we may need to change this Notice from time to time. We will alert you about material changes by, for example, placing a notice on our Websites. You are responsible for periodically reviewing this Notice.

*Mambu shall mean: Mambu GmbH (Germany), SC Mambu Tech SRL (Romania), Mambu Tech Ltd (UK), Mambu Asia Pacific Pte. Ltd. (Singapore), Mambu Americas Inc (US), Mambu Tech B.V. (Netherlands), Mambu Ltd. (Abu Dhabi, UAE), UAB Mambu (Lithuania), Mambu Technologia Do Brasil LTDA (Brazil), Mambu Australia Pty Ltd (Australia).