Prometheus collects information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household (“Personal Information”). In particular, we collect, use and disclose the categories of Personal Information specified below. Prometheus may collect, use, disclose, sell or share these categories of personal information for one or more of the indicated business or commercial purposes:
| Categories | Description | Disclosed for a Business Purpose? | Categories of Third Parties to whom the Personal Information is Disclosed |
|---|---|---|---|
| Identifiers | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, or other similar identifiers. | Yes |
|
| Categories listed in the California Customer Records statute | A name, signature, Social Security number, physical characteristics or description, address, telephone number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. Cal. Civ. Code § 1798.80(e). | Yes | |
| Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military status. | Yes | |
| Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | |
| Internet or similar network activity | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | Yes | |
| Professional or employment-related information | Current or past job history or performance valuations. | Yes |
We collect, use and disclose the following categories of Sensitive Personal Information (as defined under the CPRA) regarding our personnel:
| Categories of Sensitive Personal Information Collected | Disclosed for a Business Purpose? | Categories of Third Parties to whom the Personal Information is “Sold” or “Shared” |
|---|---|---|
| Personal information that reveals Social Security, driver's license, state identification card, or passport number | Yes |
|
| Personal information that reveals account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account | Yes | |
| Personal information that reveals racial or ethnic origin, religious or philosophical beliefs or union membership | Yes | |
| Personal information collected and analyzed concerning a consumer's health | Yes |
Prometheus does not use or disclose the above Sensitive Personal Information for any purpose other than those permitted under the CPRA.
The Personal Information, including the Sensitive Personal Information, described above are collected directly from you when you apply for employment or from other sources such as third parties for reference checks (e.g., past employers), recruitment agencies, background check agencies, public agencies (e.g., tax authorities, the California Department of Fair Employment and Housing, the California Labor Commissioner, the California Occupational Safety Administration, etc.), and law enforcement agencies.
With the limited exception of internet or other network activity that may be collected and shared with our third-party website analytics and digital advertising service providers if you visit our websites, such information is not sold or shared as such terms are defined under the CPRA. See the Section of this privacy notice, below, entitled “CPRA Rights” for more information about how to opt-out of the sale or sharing of Personal Information. Prometheus does not have actual knowledge that it sells or shares such information of children under 18 years of age
We use the Personal Information, including the Sensitive Personal Information, described above for business purposes related to your application for employment. Those purposes may include:
• Workforce Planning and Recruitment1
• General Human Resources Management/ Administration2
• Performance of our Business Operations3
• Security Management4
• Legal and Regulatory Compliance5
• As described to you when collecting your personal information.
• Business transactions6
1 Workforce Planning and Recruitment (for example: for business forecasting, employee assignment planning and budgeting, job advertising, interviewing, conducting background and criminal history checks, performing drug testing, selecting and hiring and terminating staff).
2 General Human Resources Management and Administration (for example: for career development, performance management, compensation and benefits management and benchmarking, administering payroll, reimbursing expenses, managing stock options, obtaining employee satisfaction feedback, managing absences, general headcount reporting, disaster recovery and emergency response planning, equal opportunities monitoring, training employees, and carrying out disciplinary or grievance procedures.)
3 Performance of our Business Operations (for example: to carry out day-to-day business activities, to allow us to work together and collaborate, to provide our services, to ensure business continuity, to enforce our rights and protect our operations and those of our affiliates, and to pursue available remedies and limit damages we may sustain.)
4 Security Management (for example: to ensure the security of our premises, assets, information, employees and other personnel.)
5 Legal and Regulatory Compliance (for example, to respond to law enforcement requests; as required by applicable law, court order, or governmental regulations; to ensure compliance with health & safety requirements and other legal or fiscal obligations, or in connection with litigation or an internal investigation or audit and to ensure compliance with our policies regarding anti-money laundering, bribery and corruption.)
6 Business Transactions (for example, to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Prometheus’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Prometheus about you is among the assets transferred.)
We will retain the personal information, including sensitive personal information, described above as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws or regulations. For applicants who do not become employees, records will generally not be kept longer than 4 years, and for some records a lesser amount of time, provided such records are not subject to any litigation holds or other applicable laws or regulations that require a longer retention period; for employees, records will generally not be kept longer than their duration of employment plus 6 years, and for some records a lesser amount of time provided such records are not subject to any litigation holds or other applicable laws or regulations that require a longer retention period.