Cloudera, Inc., along with its affiliates, (collectively, “Cloudera,” “we,” “us,” and “our”) is the data controller of personal data collected from and provided by job applicants and candidates (“data subjects”), or disclosed by their agents or by third party service providers, and processed by Cloudera in the context of the pre-employment process, in accordance with applicable law.

Cloudera’s Candidate Privacy Notice (“Privacy Notice”) explains our role as a data controller in determining the purposes and means of the processing of the data subjects’ personal data.  This Privacy Notice applies to your activities on this webpage and/or our web domains (“Site”) and our processing of your personal data in the pre-employment process, including the recruitment, application, interview, hiring, and initial stages of the onboarding process.

While this Privacy Notice describes the broadest range of our data processing activities globally, some jurisdictions may have laws that restrict or limit those activities. In those instances, we adjust our internal policies and practices to reflect the requirements of local law.

Types of Personal Data

Cloudera collects, stores, uses, and otherwise processes your personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes of processing in the pre-employment process.

Personal Data Processed

Cloudera may process the following categories of personal data:

• Personal Details: Name; gender; date of birth; country of residence; work permit status; military status; nationality; racial or ethnic origin.
• Government Identification: social security number; driver’s license number; passport number; taxpayer identification number.
• Personal Contact Information: home postal address; telephone number; email address.
• Family Information: marital status; dependents; beneficiaries; emergency contacts; names, ages, and genders of family members.
• Physical Characteristics: clothing sizes; photographs; videos; physical limitations and special needs.
• Academic or Education Information: resume or CV; academic degrees; training courses.
• Job Applicant, Recruitment, and Hiring Information: resume or CV; cover letter; previous and/or relevant work experience; education; transcripts; any information you provide to us in support of an application and/or recruitment process; references; interview notes; prior job applications to Cloudera; employment history with Cloudera; offer letters and employment acceptance correspondence; employment agreement.
• Background Checks: where permitted by law and if applicable, the results of credit and criminal background checks; the results of drug and alcohol testing/screening; health certifications; vehicle registration and driving history.
• Professional and Employment Information: Records of work absences; salary history and expectations; performance appraisals/indicators; letters of appreciation and commendation; and disciplinary and grievance procedures; date of hire, date(s) of promotions(s); work history; job title/role/position/function; technical skills; professional certifications and registrations; language capabilities; training records; work location; acknowledgements regarding our policies.
• Characteristics of protected classifications: race; ethnicity; sex/gender; gender identity, gender expression; sexual orientation; marital status; medical condition; military or veteran status; national origin; ancestry; disability; age.
• Business Contact Information: work email address and phone number; office location.
• Health/Medical information: forms and information relating to health and welfare conditions and/or benefits.
• Financial Information: payroll information; salary and wages; benefits; banking details; retirement account information; insurance; pensions; insurance.
• Security-related Information: video footage captured on security systems, including Closed Circuit Television (“CCTV”); event or entry logs; internet activity.
• Communications: Voicemails, emails, correspondence, and communications generated by the pre-employment process.
• Internet or other electronic network activity information: Internet protocol (“IP”) address; device identifier; MAC address; browsing history; search history; and information regarding your interaction with our Site, and applications, and/or your use of our networks, applications, devices, computers, and/or communications equipment.
• Legally-required information: information required for us to comply with laws, and the requests and directions of law enforcement authorities or court orders.

Excluded Data

Public Concern and Publicly Available Information

Note that personal data does not include lawfully obtained, truthful information that is a matter of public concern or publicly available information (i.e., information that is lawfully made available from federal, state, or local government records, or information that we have a reasonable basis to believe is lawfully made available to the general public by you or from widely distributed media; or information made available by a person to whom you have disclosed the information if you have not restricted the information to a specific audience).

Anonymous / De-identified / Aggregate Data

Note that personal data does not include anonymized, de-identified, or aggregated data.  Cloudera may anonymize, de-identify, and/or aggregate personal data so that such data will no longer constitute personal data.  We do so to generate other data for our use, which we may use and disclose for any purpose, as it no longer identifies you or any other individual.

How We Collect Personal Data

Direct Collection

Generally, Cloudera collects personal data directly from you in circumstances where you provide personal data to us during the pre-employment process.

Indirect Collection

Cloudera may also collect your personal data indirectly from other sources, such as:

• Log information: information about your use of our network, applications, or Site, including the type of browser you use, internet service provider, date/time stamp, pages and files viewed, IP address, and username/user ID, etc.
• Device information: information about the computer or mobile device you use to access our network, applications, or Site, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
• Information collected by cookies and other tracking technologies: cookies or similar technologies used to collect information, analyze trends, administer the Site, and track individuals’ activities around and within our Site and applications.  Refer to our Recruitment Site Cookie Notice for more information.
• Monitoring: We reserve the right to monitor the use of our premises (e.g., entry logs and CCTV cameras), equipment, devices, computers, network, applications, software, and similar assets and resources. Such monitoring may result in the collection of personal data about you.
• Third parties: We may collect your personal data from third parties where (i) you have given us express permission to do so, (ii) your permission was implied by your engagement with them (e.g., your use of a third-party employee or job candidate or referral service made available to you), (iii) you provided explicit or implicit permission to the third party to provide your personal data to us, or (iv) your personal data is publicly available.

Third-Party Service Providers

In some cases, you may provide your personal data to third parties that work with Cloudera, such as a recruitment service, a job applicant portal, or a job recruitment board (e.g., social media).  The use of such third-party services, websites, and/or applications may be governed by separate terms of use and privacy policies, in which case the third parties’ terms of use and privacy policies apply and are not under our control.  We encourage you to carefully review these third parties’ privacy policies before submitting your personal data to them.  If you have any questions regarding these third parties’ privacy practices or would like to exercise your privacy rights in relation to your personal data, please contact these third parties directly.

Lawful Basis of Processing

To the extent required by applicable law, Cloudera relies on one or more of the following legal bases to process personal data:

• Your Consent
• Contract Performance or Pre-contractual Steps
• Compliance with a Legal or Regulatory Obligation
• Protection of the Vital Interests of an Individual
• Cloudera’s Legitimate Interests (or a third party’s legitimate interest(s), except where such interests are overridden by your interests or fundamental rights and freedoms, which require protection of personal data)
  • Our Legitimate Interests may include, among other things, the processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring network and information security, managing possible criminal acts or threats to public security, preventing fraud, and processing that is relevant and appropriate to our relationship and that you could reasonably expect at the time and in the context of the collection of the personal data.
• HR Management

Purposes of Data Processing

Cloudera processes personal data for specified, explicit, and legitimate purposes and only processes data that is adequate, relevant, and reasonably necessary and proportionate to what is necessary in relation to those purposes.  To that end, we may process personal data for one or more of the following purposes:

Job Application, Recruitment, Interviewing, and Hiring

• To manage all aspects of the pre-employment relationship, including, but not limited to, communicating with you; reviewing resumes/CVs and social media profiles; conducting interviews, surveys, background and reference checks, and human resources management; obtaining an immigration visa or work permit where required; administering our occupational safety and health programs; and handling salaries, benefits, and training issues.
• To inform you of job opportunities.

Safety and Security

• To manage health and safety at a physical location.
• To prevent or detect crime, including the prevention, preclusion, or remedying of unlawful or seriously improper conduct, dishonesty, or malpractice.
• To protect the safety and security of our workforce, guests, property, intellectual property or other proprietary rights, and business assets (including controlling and facilitating access to and monitoring activity on and in our premises and our Site).

Legal matters

• To comply with national, federal, state, or local laws.
• To comply with a civil, criminal, or regulatory inquiry, investigation, court order, subpoena, or summons by federal, state, or local authorities.
• To cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law.
• To cooperate with a government agency request.
• To exercise or defend our legal rights.

Other Necessary Matters

• To carry out any additional purposes we advise you of and, where required, obtain your consent.
• To carry out other purposes as part of our lawful business activities when reasonably required by us and reasonably expected by data subjects.
• To investigate and respond to claims against us.

Disclosures of Personal Data

Cloudera may disclose personal data for the purposes outlined above, as follows:

Affiliates and Subsidiaries

Cloudera may disclose personal data to our affiliates and/or subsidiaries in connection with our business operations, such as finances, human resources, and information technology administration.

Service Providers, Consultants, and Data Processors

Cloudera may disclose personal data to consultants, advisors, service providers, or data processors, or direct them to collect such data, so that they can provide us with services or help us provide our Site, insofar as they need to process such data to carry out work on our behalf.  This includes third parties that conduct data analytics on the functioning of our Site.  We ensure that these entities have implemented appropriate technical and organizational measures in such a manner as to comply with applicable laws, rules, and regulations and are subject to a legally-binding contract to protect the personal data and process it only in accordance with our instructions.

Requested Disclosures

Cloudera may disclose your personal data if you request us to do so or provide your explicit consent for us to do so.

Necessary and Legally-Required Disclosures

Cloudera may disclose personal data if we believe a disclosure is reasonably necessary to (i) comply with any applicable law, regulation, legal process, or governmental request; (ii) establish, exercise, or defend legal claims or to enforce applicable contracts, user agreements, or policies, including our Terms and Condition of Site Use (the “Terms of Use”); or (iii) prevent, detect, and/or protect Cloudera, individuals, you, or the public from harm, fraud, or illegal activities, or a violation of rights.

Mergers and Acquisitions

Cloudera may disclose personal data in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company.  In this event, we will use best efforts, in accordance with applicable law, to notify you via email and/or with a prominent notice on our Site, of any change in ownership, uses of personal data, and choices you may have regarding personal data.

Your Public Disclosures

Please note that, by using the Site or other third-party websites, you may elect to disclose personal data on message boards, chat, profile pages, blogs, community forums, social media, and other offerings.  Any information you post or disclose through these methods will become publicly accessible and may be available to us for processing.

Cross-Border Data Transfers

As a global company, Cloudera may process personal data in multiple countries, including the United States of America (USA).  Cloudera may store and process your personal data in any country where we have facilities, affiliates or subsidiaries, or in which we engage third-party service providers.  By using our Site, or otherwise interacting with us, you understand and acknowledge that we may transfer your personal data from your country of residence to other countries, including the USA, which may have data protection laws or rules that are different from those of your country.  In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may have legal authorization to access or request disclosure of your personal data. 

Cloudera may transfer personal data subject to this Privacy Notice from the European Union (EU), the European Economic Area (EEA), Switzerland, the United Kingdom (UK), and/or Brazil to a third country, for the purposes described in this Notice.  The European Commission, Switzerland, the UK, and/or Brazil may recognize several third countries as providing adequate levels of data protection (i.e., adequacy decisions) and allow the lawful transfer of personal data to such countries.  To conduct lawful transfers of personal data to third countries without such adequacy decisions, Cloudera relies on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (EU SCCs), the UK’s International Data Transfer Addendum to the EU SCCs, and/or Brazil’s Standard contractual clauses.  You may obtain a copy of these standard contractual clauses by contacting us in accordance with the “Contact Cloudera” section below.

Data Security

Cloudera uses commercially reasonable organizational, technical, physical, and administrative measures to help (i) protect personal data from accidental or unlawful loss, alteration, destruction, theft, misuse, and unauthorized access and disclosure, and (ii) ensure the confidentiality, integrity, and availability of personal data.  We follow generally accepted industry standards and best practices to safeguard the personal data.  Please keep in mind that no security measures are completely effective, and we encourage you to regularly review your accounts for suspicious activity and carefully guard your credentials.

Data Retention

Cloudera retains personal data for as long as necessary for our legal business purposes and/or as lawfully permitted given the purpose(s) for which we obtained it and consistent with applicable law.  We use the following criteria to determine our retention periods for personal data:  

• The type(s) of personal data;
• Whether the personal data is necessary to continue to provide our Site to you or continue the pre-employment process; 
• Whether we have a legal or regulatory obligation retain the data for a certain period of time; 
• Whether we have Legitimate Interests to retain the data; and/or 
• Whether retention is advisable considering our legal position (e.g., regarding applicable statutes of limitations, litigation, or regulatory investigations)

When the retention period ends, we will delete or anonymize, de-identify, or aggregate your personal data.

Your Data Protection Rights

Privacy Rights - Global

Certain countries’ privacy laws may grant you one or more of the following rights:

• Right to Know about any processing of your personal data
• Right to Access your personal data
• Right to Delete or Erase your personal data
• Right to Correct or Rectify Inaccurate, Incomplete, or Outdated personal data
• Right to Data Portability
• Right to Restrict Processing of your personal data
• Right to Object to Processing of your personal data
• Right to Withdraw Consent (if the lawful basis of processing is consent)
• Right to Not to Be Subject to a Decision Based Solely on Automated Processing, including Profiling, which Produces Legal Effects Concerning You or Similarly Significantly Affects
• Right to Lodge a Complaint with a Supervisory (data protection) Authority.

Privacy Rights - USA

Privacy laws in the USA (“US Privacy Laws”) may provide residents of certain US States with the following rights in relation to personal data:

• Right to Confirm and/or Know about any processing of your personal data 
• Right Access your personal data
• Right to Delete your personal data
• Right to Correction of Inaccurate or Incomplete personal data
• Right to Data Portability
• Right to Withdraw Consent (if the lawful basis of processing is consent)
• Right to Opt-out of Profiling in furtherance of Decisions that Produce Legal or other Similarly Significant Effects Concerning You
• Right to Opt-out of Selling or Sharing your personal data
• Right to Limit Use and Disclosure of sensitive personal data
• Right to Non-discrimination if you exercise a privacy right

We Do Not Sell Your Personal Data

Cloudera does not “sell” your personal data (as the term “sale” or “sell” is defined under the US Privacy Laws), and we will not do so without offering you the right to opt out of any such sale.

Exercising Privacy Rights

If you would like to exercise your privacy right(s), or you are an authorized agent making a request on a data subject’s behalf, please submit a request to us at privacy@cloudera.com or talentacquisition@cloudera.com or 1-888-789-1488.  You may also submit your request via one of our contact methods listed in the section titled “Contact Cloudera.” 

To help us respond appropriately, please make clear the nature of your request (i.e., the privacy right(s) you would like to exercise) and the personal data to which it pertains. For your protection, we may only fulfill requests with respect to the personal data associated with the particular email address that you use to send us your request.  Additionally, we must verify or authenticate your identity and may need to ask you to provide additional information for purposes of verification or authentication before completing your request.  We will try to comply with your request as soon as reasonably practicable, but always within the time required by applicable law.

Please note that we may need to rely on a legal exception in order not to, or to partially, fulfill a privacy rights request, such as to retain certain personal data for legitimate business purposes, to comply with legal or regulatory obligations, to establish, exercise, or defend legal claims, and/or to perform a contract.  Also, note that regulatory authorities in your country may implement laws, rules, or regulations that restrict your privacy rights.

If you become aware that a profile or job application about you has been created or submitted without your consent or knowledge, you may contact us to request deletion of it.

Data Protection Complaints

Appeal a Denial of a Privacy Rights Request

You may request more information about a denial, in whole or in part, of your privacy rights request or appeal that denial by contacting us at privacy@cloudera.com.

How to Lodge a Complaint

To make a complaint about data privacy, please contact us at privacy@cloudera.com. 

To help Cloudera address the issue effectively, the complaint should state the following:

• The specific data privacy complaint, along with as much detail as possible, including your country of residence, your understanding of the data privacy infringement and issue(s), and the redress requested;
• Your full name and how we can contact you; and
• Any previous correspondence with us on this specific data privacy issue.

Cloudera aims to resolve all issues in a timely manner and in accordance with applicable law.  If there is any delay (such as where a more detailed investigation is required), we will try to keep you informed of the progress on your matter.

Data Protection Authorities

If you are not satisfied with Cloudera’s resolution of your complaint or privacy rights request, you may have the right to lodge a complaint with the competent data protection authority of your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs.

The Choice Not to Provide Personal Data

Cloudera only collects personal data that is necessary and relevant for the pre-employment process and up to the execution of an employment agreement and onboarding, in accordance with applicable law.  The provision of your personal data may be a statutory or contractual requirement, or a requirement to engage in the pre-contractual steps of an employment relationship and to enter into the employment agreement.  You may decline to provide your personal data, opt-out of data processing, or, in some cases, withdraw your consent.  As a result, however, we may no longer be able to consider you as a job applicant/candidate or enter into an employment relationship with you.

Changes to the Privacy Notice

Cloudera periodically verifies that this Privacy Notice is accurate, up-to-date, and comprehensive.  We may update and revise this Privacy Notice from time to time to reflect changes in our business operations, our data processing activities, and/or changes in applicable law.  If we make material changes to this Privacy Notice, we will revise the date at the top or bottom of this Notice, and in some cases, including as required by law, we may provide you with a more prominent notice.  We encourage you to review this Privacy Notice periodically to stay informed about our data processing practices.

Use of this Site by Children

This Site is not intended for or directed to anyone under the age of 16 years.  Cloudera does not knowingly collect personal data of individuals under the age of 16.  If you are younger than 16, you should not register with us, contact us, apply for a job with us, or use our Site.

Contact Cloudera

If you have any questions about this Privacy Notice or need to contact us with any questions, complaints, or concerns about how Cloudera handles personal data, you may reach us as follows:

Postal Address

Cloudera, Inc.
5470 Great America Parkway
Santa Clara, CA 95054
USA
Attn: Privacy

Email

privacy@cloudera.com
talentacquisition@cloudera.com

Telephone

1-888-789-1488

Last Updated: May 15, 2025