Legal Basis for Processing Personal Information
Our legal basis for collecting and using the Personal Information described in this Statement will depend on the Personal Information concerned and the specific context in which we collect it.
We collect and use your Personal Information where we need the Personal Information to perform a contract with you (such as to administer an employment or work relationship with us), where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or where we may have a legal obligation or may otherwise need the Personal Information to protect your vital interests or those of another person. In some limited cases and when applicable, we may collect and use your Personal Information where we have your consent.
If you have questions about the legal basis we use to collect and use your Personal Information, please contact us using the contact methods in the “How to Contact Us” section of this Statement.
How You Can Exercise Rights Regarding Your Personal Information
This section applies to Applicants and Workforce Members based in the EEA, California or other regions where there are applicable data protection laws.
If you live in the EEA, your rights may include:
- Right to Access – The right to be informed of and access the Personal Information we process about you, including, in certain circumstances, a right to know what Personal Information we collected, or disclosed about you, including the specific pieces of Personal Information held.
- Right to Erasure – The right to request deletion of your Personal Information, subject to certain exceptions.
- Right to Rectification – The right to request that we amend or update inaccurate or incomplete personal data.
- Right to Restrict Processing – The right to request that we temporarily or permanently stop processing all or some of your Personal Information.
- Right to Object – The right to object to Intuit processing Personal Information, such as when automated decision making is used.
- Right to Data Portability – The right to request a copy of your Personal Information in electronic format and the right to further request that we send such Personal Information to another party.
- Right to Lodge a Complaint – The right to lodge a complaint with the applicable supervisory authority. Although you are not legally required to do so, we ask that you first contact us so we can make reasonable efforts to address your complaint.
If you live in California, your rights may include:
- Right to Know – The right to know what categories and specific pieces of Personal Information we collect, the purposes for which we collect Personal Information, the sources from which we collect Personal Information, and whether Personal Information is disclosed, sold, or shared with third parties.
- Right to Erasure – The right to request deletion of your Personal Information, subject to certain exceptions.
- Right to Correction – The right to request that we correct inaccurate or incomplete Personal Information.
- Right to Opt Out – The right to opt out of the sale or sharing of your Personal Information, and the right to opt out of automated-decision making technology.
- Right to Non-Discrimination – The right not to receive discriminatory treatment for exercising your rights.
- Right to Limit Use of Sensitive Personal Information – The right to limit the use and disclosure of your sensitive Personal Information.
If you are an Applicant or Workforce Member in France, you also have the right to give directives about the processing of your Personal Information after your death.
To make a request, please contact HR Connect using the methods described in the “How to Contact Us” section below. We will consider and act upon any such requests in accordance with applicable data protection laws. If you are a California resident, you may only make a request to exercise your rights on behalf of yourself. You also have a right to submit requests to exercise your rights through an authorized agent. An authorized agent must be registered with the Secretary of State in California to conduct business in California. If you choose to use an authorized agent, you must (a) provide signed permission to that authorized agent to submit requests on your behalf, (b) verify your identity directly with us, and (c) directly confirm with us that you granted permission to the authorized agent to submit the request on your behalf. For clarity, you are required to verify the identity of both yourself and the authorized agent.
In order to verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information. You must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.
When we receive your request to exercise your rights: (a) we will acknowledge receipt of your request; (b) we will try to match the Personal Information you provide in making the request with Personal Information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including Personal Information; (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.
We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.
We will respond to your requests within the time periods prescribed by applicable law. If we require additional time, we will inform you of the reason and extension period.
When applicable, if we are relying on your consent to process your Personal Information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.
Please be aware that you may have limited choices in your ability to request deletion of Personal Information due to Intuit’s legal obligations to retain certain information.