Joint Controller Addendum
Glassdoor and Indeed, sister companies under Recruit Holdings, are offering a synced experience between our services. To provide this synced experience and to improve our services, Indeed and Glassdoor jointly use and act as joint controllers for certain personal data contained within user profiles. This shared data includes information like name, email address, resume details, job alert preferences, and activity history across both sites (such as “jobs saved” or “applied for”). This joint processing (the “Joint Processing Activity”) makes it easier to apply for jobs and helps the Parties to recommend jobs and streamline features. This Joint-Controller Addendum (the “Addendum”) sets out the obligations of both parties.
Indeed and Glassdoor agree to the following:
- Indeed Ireland Operations Limited, 80 Sir John Rogerson’s Quay, Grand Canal Dock, Dublin, D02 HE36, Ireland (“Indeed”), and Glassdoor LLC, 2261 Market Street, Suite 22764, San Francisco, CA 94114, United States (“Glassdoor”) (each a “Party” and together the “Parties”), act as joint controllers pursuant to Article 26 of the General Data Protection Regulation (“GDPR”) in respect of the Joint Processing Activity defined in this Addendum.
- The scope of the Joint Processing Activity, and accordingly of this Addendum, extends solely to the collection of the categories of personal data set out herein. Any subsequent processing of such personal data carried out independently by either Party does not fall within the scope of the Joint Processing Activity.
- This Addendum applies exclusively to the processing of personal data falling within the scope of GDPR. For the purposes of this Addendum, the terms “personal data,” “data subject,” “controller,” “joint controller,” “processor,” and “personal data breach” shall have the respective meanings assigned to them under the GDPR.
- Each provision of this Addendum is a separately enforceable provision. If any part or parts of this Addendum are found under the law to be invalid or unenforceable, then such specific part or parts shall be of no force and effect and, shall be severed, and the remainder of this Addendum shall continue in full force and effect
- The Parties may update this Addendum from time to time. Access to or use of the services of the Parties following any such changes to this Addendum will constitute acceptance of such changes. If a user disagrees with the updated Addendum, they should stop using the services of the Parties.
- This Addendum sets out the allocation of responsibilities between the Parties with respect to our obligations under the GDPR in relation to the Joint Processing Activity. The Joint Processing Activity shall be conducted in accordance with the provisions of this Addendum, which apply to all relevant activities involving the Parties, our employees, or our processors. For the purposes of complying with Article 26(2), the specific responsibilities of the Parties are detailed in the table below:
| Indeed | GDPR Obligation | Glassdoor |
| X (regarding Indeed’s processing) | Article 6: Requirement of legal basis for joint processing | X (regarding Glassdoor’s processing) |
| X (see this Addendum and the Indeed Privacy Policy) | Articles 13,14: Providing information on joint processing of personal data | X (see this Addendum and the Glassdoor Privacy Policy) |
| X (published on the HRTech Privacy Centre) | Article 26(2): Making available the essence of this Addendum | |
| X (regarding Indeed’s processing. See the “Your Personal Data Rights” section of the Indeed Privacy Policy) | Articles 15-20: Rights of the data subject with regard to the personal data stored by the Parties after the joint processing | X (regarding Glassdoor’s processing. See Glassdoor’s Self-Service Tool) |
| X (regarding Indeed’s processing. See the “Your Personal Data Rights” section of the Indeed Privacy Policy) | Article 21: Right to object insofar as the joint processing is based on Article 6(1)(f) | X (regarding Glassdoor’s processing. See Glassdoor’s Self-Service Tool) |
| X (regarding the security of Indeed’s products) | Article 32: Security of the joint processing | X (regarding the security of Glassdoor’s products) |
| X (insofar as a personal data breach concerns Indeed’s obligations under this Addendum) | Articles 33, 34: Personal data breaches concerning the joint processing | X (insofar as a personal data breach concerns Glassdoor’s obligations under this Addendum) |