Country Specific Addendums

Application
This Addendum applies to all employees, external staff members, or candidates working in California, and supplements the information contained in the Global Candidate Privacy Notice.

Your Data Rights
You may have certain rights under the California Privacy Rights Act (CPRA), including to request information about the collection of your personal information by Proofpoint, to access your personal information in a portable format, and to correct or delete your personal information.

Prohibition Against Selling Personal Information
Proofpoint does not sell your personal information. Additionally, Proofpoint has not sold your personal information as defined under the CPRA in the 12 months prior to the effective date of this Addendum. 

Requests
To make a request to exercise your rights (including to withdraw consent), please: (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and (2) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it and contact us at:

Proofpoint, Inc.
Attn: Data Privacy Officer
925 W. Maude Ave.
Sunnyvale, CA 94085

Email: privacy@proofpoint.com

We will consider and act upon any authenticated requests with confirmation of identity, in accordance with applicable data protection laws.

Application
This Addendum applies to all employees, external staff members, or candidates that reside in Canada, and supplements the information contained in the Global Candiate Privacy Notice.

Collection
We collect personal data that you provide directly to us (such as through the job application process or in connection with the management of your employment or working relationship) as well as information devices provide to us automatically, as described above. We may also collect personal data indirectly with consent. For example, we collect background verification information from third-party background screening providers and we may also obtain personal data from recruitment agencies or job references.

Your Data Rights
You have the right to access, update, rectify and correct inaccuracies in your personal data in our custody and control and withdraw your consent to our collection, use and disclosure of your personal data (although an employee cannot withdraw consent to the collection of personal data necessary to administer their employment) subject to limited exceptions under applicable law. Additionally, you may request access, updates, rectification, and corrections of inaccuracies in your personal data in our custody or control. We may require certain personal data for the purpose of verifying your identity or the identity of the individual making the request.

Transfer of Personal Data
We and our service providers (including affiliates) may access, store and otherwise process personal data outside of your province (including, for Quebec residents, outside of Quebec), including in other parts of Canada, the United States, and other foreign jurisdictions where we or our service providers are located. We, our affiliates and our service providers may disclose your personal data if we are required or permitted by applicable law or legal process, which may include lawful access by foreign courts, law enforcement or other government authorities in the jurisdictions in which we or our service providers operate.

Retention
We will process and keep your personal data for as long as is necessary to meet the purposes for which the information was collected as set out in this policy and to meet our legal or business requirements.

Requests
To make a request to exercise your rights (including to withdraw consent), please contact us at:

Proofpoint, Inc.
Attn: Data Privacy Officer
925 W. Maude Ave.
Sunnyvale, CA 94085

Email: privacy@proofpoint.com

We will consider and act upon any authenticated requests with confirmation of identity, in accordance with applicable data protection laws.

Application
In addition to the information shared in the Global Data Privacy Notice for Employees, External Staff and Candidates, EU, UK, and Switzerland employees, external staff and candidates may have certain rights under applicable data protection laws, including the EU and UK General Data Protection Regulation (collectively, the “GDPR”) and local laws implementing or supplementing the GDPR and the Swiss Federal Act on Data Protection.

Your Data Rights
You have the right to request access to, correction, or deletion of your personal data, to ask for data portability and the restriction of processing. You are also entitled to object to the processing of your personal data in certain instances. When we process your personal data based on your consent, you may withdraw your consent for the future at any time but note however that this will not affect the lawfulness of the processing before withdrawal of consent.

Please note that certain conditions and exceptions apply to these rights and that application of the above rights may vary depending on the type of personal data involved, and Proofpoint’s particular basis for processing the personal data.

Requests
To make a request to exercise your rights (including to withdraw consent), please contact us at:

Proofpoint, Inc.
Attn: Data Privacy Officer
925 W. Maude Ave.
Sunnyvale, CA 94085

Email: privacy@proofpoint.com

We will consider and act upon any authenticated requests with confirmation of identity, in accordance with applicable data protection laws.

While we hope we can answer any questions that you may have, if you have unresolved concerns, you also have the right to complain to a relevant data protection supervisory authority in the EU, UK, and Switzerland.