Employ­ee and Appli­cant Pri­va­cy Notice

O’NEILL BEV­ER­AGES CO., LLC EMPLOY­EE AND APPLI­CANT PRI­VA­CY NOTICE

Pol­i­cy Last Updat­ed: June 7, 2023

O’Neill Bev­er­ages Co. LLC, doing busi­ness as O’Neill Vint­ners & Dis­tillers (“O’Neill,” ​“we,” ​“us,” or ​“our”) is com­mit­ted to pro­tect­ing your pri­va­cy. The infor­ma­tion that you pro­vide to us is uti­lized to con­sid­er you for employ­ment, retain you as an employ­ee or inde­pen­dent con­trac­tor, and main­tain employ­ment-relat­ed records. 

This Employ­ee and Appli­cant Pri­va­cy Notice (the ​“Notice”) applies to cur­rent and for­mer employ­ees, job appli­cants, and inde­pen­dent con­trac­tors (“you”) who sub­mit per­son­al data for the pur­pos­es of apply­ing for and or becom­ing a val­ued employ­ee at or con­trac­tor of O’Neill, and in the course of your employ­ment with O’Neill, pur­suant to the Cal­i­for­nia Con­sumer Pri­va­cy Act (“CCPA”), as amend­ed by the Cal­i­for­nia Pri­va­cy Rights Act (“CPRA”), and oth­er applic­a­ble laws and reg­u­la­tions. If you are not an employ­ee, appli­cant, or inde­pen­dent con­trac­tor who is a Cal­i­for­nia res­i­dent, this Notice does not apply to you. 

Please note that if you vis­it our web­site or social media appli­ca­tions in a non-employ­ment con­text, any of your per­son­al infor­ma­tion col­lect­ed in that capac­i­ty is sub­ject to O’Neill’s Pri­va­cy Pol­i­cy for con­sumers. For more infor­ma­tion, we encour­age you to vis­it and review our Pri­va­cy Pol­i­cy and Cal­i­for­nia Pri­va­cy Rights Notice.

Changes to this Notice. We may update this Notice from time to time. If we make any mate­r­i­al changes, we will pro­vide you with notice as required by law. We encour­age you to review this Notice peri­od­i­cal­ly to stay informed about our pri­va­cy practices.

Col­lec­tion of Per­son­al Information

We col­lect per­son­al infor­ma­tion from you when you pro­vide it for the pur­pos­es of employ­ment or apply­ing for employ­ment with us. We col­lect the fol­low­ing types of per­son­al information:

• Con­tact infor­ma­tion includ­ing your name, address, email address, phone num­ber, and oth­er rel­e­vant con­tact infor­ma­tion such as emer­gency con­tact information;
• Right to work I‑9 ver­i­fi­ca­tion and proof of identification;
• Date of birth;
• Gen­der, mar­i­tal sta­tus, names and rela­tion­ships of depen­dents, and ben­e­fi­cia­ry designations;
• Finan­cial infor­ma­tion such as a cred­it check and back­ground check;
• Resume with pro­fes­sion­al, employ­ment, and edu­ca­tion­al background; 
• Gar­nish­ment notices from tax agencies;
• Doctor’s notes and oth­er health infor­ma­tion relat­ed to the eval­u­a­tion and pro­vi­sion of accommodations; 
• Diver­si­ty and EEO/CRD data col­lec­tion information.

We col­lect sen­si­tive per­son­al infor­ma­tion, as that term is defined by the CPRA, such as per­son­al iden­ti­fi­ca­tion num­bers, includ­ing social secu­ri­ty, driver’s license, pass­port, or state ID card num­bers; bank­ing infor­ma­tion; diver­si­ty and EEO/CRD data col­lec­tion includ­ing race and eth­nic­i­ty, sex­u­al ori­en­ta­tion, mil­i­tary, and dis­abil­i­ty status.

We col­lect infor­ma­tion about you through your brows­er, com­put­er hard­ware, and soft­ware. This infor­ma­tion can include your IP address, device ID, brows­er type, domain names, access times and dates, pages viewed, one or more cook­ies that may unique­ly iden­ti­fy your brows­er, refer­ring web­site address­es, what appli­ca­tions are run on your com­pa­ny-issued device, files down­loaded, opened, and cre­at­ed using O’Neill man­aged equip­ment, geolo­ca­tion of lap­tops and mobile devices which con­tain com­pa­ny data, and any per­son­al infor­ma­tion entered into any O’Neill con­trolled sys­tem, includ­ing com­pa­ny email.

To see a com­plete list of what infor­ma­tion we col­lect and how we use it, please see Annex 1 below.

How We Use Your Per­son­al Information

We use your per­son­al infor­ma­tion for a wide range of pur­pos­es, including:

• to eval­u­ate job can­di­da­cy and com­mu­ni­cate with you regard­ing your application;
• to keep you up to date about the employ­ment process and employ­ment-relat­ed issues;
• to ensure com­pli­ance with inter­nal HR policies;
• to facil­i­tate the employ­ment rela­tion­ship, includ­ing for pro­cess­ing of pay­roll and ben­e­fits (includ­ing fam­i­ly health ben­e­fits), and oth­er inter­nal busi­ness needs;
• to main­tain inter­nal employ­ment records;
• to main­tain inter­nal finan­cial records includ­ing paystubs and pay­ment methods;
• to meet and mon­i­tor gov­ern­ment report­ing regulations;
• to com­ply with legal oblig­a­tions or to assert or defend legal rights or address legal claims and pro­ceed­ings; and
• to main­tain any oth­er busi­ness operations.

Reten­tion of Per­son­al Information 

We retain your per­son­al infor­ma­tion for as long as need­ed to ful­fill the pur­pos­es out­lined in this Notice or per­mit­ted in light of the purpose(s) for which it was obtained. The cri­te­ria used to deter­mine our reten­tion peri­ods include our ongo­ing rela­tion­ship with you and any legal oblig­a­tion to which we are subject.

How We Dis­close Your Per­son­al Information

Ser­vice Providers and Contractors

We dis­close per­son­al infor­ma­tion you pro­vide to con­sul­tants, ser­vice providers, and con­trac­tors we use to sup­port our busi­ness and oper­a­tions. These third par­ties have agreed to keep the infor­ma­tion con­fi­den­tial and use it only to pro­vide the applic­a­ble service(s), such as ven­dors that help us com­mu­ni­cate with you and man­age the employ­ment rela­tion­ship and ven­dors that host our web­site and data.

Legal Oblig­a­tions

We may dis­close per­son­al infor­ma­tion to out­side par­ties (includ­ing, with­out lim­i­ta­tion, gov­ern­men­tal agen­cies) if required to do so by law, reg­u­la­tion, or court order; to respond to gov­ern­men­tal and/​or law enforce­ment requests; to iden­ti­fy, con­tact or bring legal action against some­one who may be caus­ing injury to or inter­fer­ing with our (or oth­ers’) rights or prop­er­ty; to sup­port any actu­al or threat­ened claim, defense or dec­la­ra­tion in a case or before any juris­dic­tion­al and/​or admin­is­tra­tive author­i­ty, arbi­tra­tion or medi­a­tion pan­el; or in con­nec­tion with dis­ci­pli­nary actions/​investigations.

Sale or Cor­po­rate Restructuring

We may dis­close per­son­al infor­ma­tion in con­nec­tion with the sale, assign­ment, or oth­er trans­fer of the busi­ness of our web­site or the sale, assign­ment, merg­er, reor­ga­ni­za­tion, or oth­er trans­fer of our brand or company.

To see a com­plete list of what we col­lect and how we use and dis­close that infor­ma­tion, please see Annex 1 below.

YOUR RIGHTS UNDER THE CCPA

As a cur­rent or for­mer Cal­i­for­nia employ­ee, appli­cant, or inde­pen­dent con­trac­tor (col­lec­tive­ly, ​“employ­ee”), you are afford­ed sev­er­al rights relat­ing to the per­son­al infor­ma­tion col­lect­ed about you. How­ev­er, there are sev­er­al excep­tions that may apply. These excep­tions to the right to know what infor­ma­tion we col­lect about you, and to cor­rect and/​or delete your per­son­al infor­ma­tion may include our right to main­tain per­son­al infor­ma­tion of employ­ees for busi­ness pur­pos­es and sole­ly inter­nal uses rea­son­ably aligned with the expec­ta­tions of the employ­ee, as well as to com­ply with any legal oblig­a­tions, includ­ing main­tain­ing prop­er employ­ee records, or main­tain­ing priv­i­lege or con­fi­den­tial­i­ty of cer­tain records, in com­pli­ance with applic­a­ble U.S. and Cal­i­for­nia labor laws and legal rights.

Right To Know About Per­son­al Infor­ma­tion Col­lect­ed or Disclosed

Per­son­al Infor­ma­tion Collected

In the pre­ced­ing 12 months, we have col­lect­ed the cat­e­gories of per­son­al infor­ma­tion about Cal­i­for­nia employ­ees as described in Annex 1 below.

Infor­ma­tion Sold or Shared

We have not sold or shared, as defined by the CPRA, any per­son­al infor­ma­tion to third par­ties in the pre­ced­ing 12 months.

We have dis­closed the fol­low­ing cat­e­gories of per­son­al infor­ma­tion about Cal­i­for­nia employ­ees for a busi­ness or com­mer­cial pur­pose in the pre­ced­ing 12 months:

• IP address, device ID, brows­er type, domain names, access times and dates, pages viewed, one or more cook­ies that may unique­ly iden­ti­fy your brows­er, refer­ring web­site address­es, what appli­ca­tions are run on your com­pa­ny issued device, files down­loaded, opened, and cre­at­ed using com­pa­ny man­aged equip­ment, geolo­ca­tion of lap­tops and mobile devices which con­tain com­pa­ny data, and any per­son­al infor­ma­tion entered into any com­pa­ny con­trolled sys­tem, includ­ing com­pa­ny email.
• Name, job title, mail­ing address, email address, right to work for I‑9 ver­i­fi­ca­tion, phone num­ber, date of birth, gen­der, names and rela­tion­ships of depen­dents, emer­gency con­tact infor­ma­tion, cred­it check, back­ground check, resume with pro­fes­sion­al, employ­ment and edu­ca­tion­al back­ground, lan­guage pro­fi­cien­cy, ben­e­fi­cia­ry des­ig­na­tions, gar­nish­ment notices from tax agen­cies, proof of iden­ti­fi­ca­tion, health infor­ma­tion, diver­si­ty infor­ma­tion and EEO data collection.

Requests to Know

You have the right to request that we dis­close to you the fol­low­ing regard­ing the per­son­al infor­ma­tion we col­lect about you:

• Cat­e­gories of per­son­al infor­ma­tion collected;
• Sources of per­son­al infor­ma­tion collected; 
• The busi­ness or com­mer­cial pur­pose for col­lect­ing or sell­ing per­son­al information;
• The cat­e­gories of third par­ties with whom we share per­son­al infor­ma­tion; and
• The spe­cif­ic pieces of per­son­al infor­ma­tion we have col­lect­ed about you over the last 12 months.

You also have a right to know if we have sold or dis­closed your per­son­al infor­ma­tion for a busi­ness pur­pose over the past 12 months and, if so, the cat­e­gories of per­son­al infor­ma­tion sold or dis­closed and the cat­e­gories of third par­ties to whom the per­son­al infor­ma­tion was sold or dis­closed, along with the busi­ness or com­mer­cial pur­pose for which the per­son­al infor­ma­tion was sold or disclosed.

To make a request for any of the infor­ma­tion set forth above (a ​“Request to Know”), please sub­mit a request pur­suant to the instruc­tions below. You or your des­ig­nat­ed agent may only make a Request to Know twice with­in a 12-month peri­od. We will acknowl­edge your Request to Know with­in 10 days and will attempt to respond sub­stan­tive­ly with­in 45 – 90 days.

The Request to Know must pro­vide suf­fi­cient infor­ma­tion to allow us to ver­i­fy that you are the per­son about whom the per­son­al infor­ma­tion was col­lect­ed, sold or dis­closed and must con­tain suf­fi­cient detail to allow us to prop­er­ly under­stand, eval­u­ate and respond to your request. You may be asked to pro­vide addi­tion­al proof of iden­ti­fi­ca­tion so that we can ver­i­fy your iden­ti­ty and val­i­date the request. If we can­not ver­i­fy your iden­ti­ty, we may decline to hon­or your request.

You or your des­ig­nat­ed agent can make a Request to Know the per­son­al infor­ma­tion we have about you by fill­ing out our online form avail­able here or call­ing us at 1−800−400−6628.

We will retain cor­re­spon­dence, doc­u­ments, and infor­ma­tion relat­ed to any Request to Know for 24 months as required by law.

Right to Know About Sen­si­tive Per­son­al Infor­ma­tion Collected

We col­lect and use your sen­si­tive per­son­al infor­ma­tion as described in Annex 1 below.

We do not col­lect or process sen­si­tive per­son­al infor­ma­tion for the pur­pose of infer­ring characteristics.

Right to Request Dele­tion of Per­son­al Information

You or your des­ig­nat­ed agent have the right to request dele­tion of your per­son­al infor­ma­tion col­lect­ed or main­tained by us (“Request to Delete”), sub­ject to cer­tain excep­tions per­mit­ted by law.

To make a Request to Delete, please sub­mit a request pur­suant to the instruc­tions below. We will acknowl­edge your Request to Delete with­in 10 days and will attempt to respond sub­stan­tive­ly with­in 45 – 90 days.

The Request to Delete must pro­vide suf­fi­cient infor­ma­tion to allow us to ver­i­fy that you are the per­son about whom the per­son­al infor­ma­tion was col­lect­ed, sold, or dis­closed and must con­tain suf­fi­cient detail to allow us to prop­er­ly under­stand, eval­u­ate, and respond to your request. You may be asked to pro­vide addi­tion­al proof of iden­ti­fi­ca­tion so that we can ver­i­fy your iden­ti­ty and val­i­date the request. If we can­not ver­i­fy your iden­ti­ty, we may decline to hon­or your request. Addi­tion­al­ly, as per­mit­ted by law, if the infor­ma­tion request­ed to be delet­ed is nec­es­sary for us to main­tain, we will not be able to com­ply with your request. We will noti­fy you if this is the case.

You or your des­ig­nat­ed agent can make a Request to Delete the per­son­al infor­ma­tion we have about you by fill­ing out our online form avail­able here or call­ing us at 1−800−400−6628.

We will retain cor­re­spon­dence, doc­u­ments and infor­ma­tion relat­ed to any Request to Delete for 24 months as required by law.

Right to Request Cor­rec­tion of Per­son­al Information

You or your des­ig­nat­ed agent have the right to request that we cor­rect in our records inac­cu­rate infor­ma­tion about you. To make a request to cor­rect inac­cu­rate infor­ma­tion about you (a ​“Request to Cor­rect”), please sub­mit a request pur­suant to the instruc­tions below. We will acknowl­edge your Request to Cor­rect with­in 10 days and will attempt to respond sub­stan­tive­ly with­in 45 – 90 days.

The Request to Cor­rect must pro­vide suf­fi­cient infor­ma­tion to allow us to ver­i­fy that you are the per­son about whom the per­son­al infor­ma­tion was col­lect­ed, sold, or dis­closed and must con­tain suf­fi­cient detail to allow us to prop­er­ly under­stand, eval­u­ate and respond to your request. You may be asked to pro­vide addi­tion­al proof of iden­ti­fi­ca­tion so that we can ver­i­fy your iden­ti­ty and val­i­date the request. If we can­not ver­i­fy your iden­ti­ty, we may decline to hon­or your request.

You or your des­ig­nat­ed agent can make a Request to Cor­rect the per­son­al infor­ma­tion we have about you by fill­ing out our online form avail­able here or call­ing us at 1−800−400−6628.

We will retain cor­re­spon­dence, doc­u­ments, and infor­ma­tion relat­ed to any Request to Cor­rect for 24 months as required by law.

Non-Dis­crim­i­na­tion / No Retaliation

We will not dis­crim­i­nate or retal­i­ate against you in any man­ner pro­hib­it­ed by the CCPA or CPRA for exer­cis­ing your pri­va­cy rights.