Privacy Notice For Candidates

Last updated on: August 10, 2026

1. Introduction

Your privacy is important to us. We believe it is important for you to know how we treat the information we receive from you, on the Internet. This privacy notice explains what personal data we, Ness Digital Engineering and its global subsidiaries (“Ness” or “We”, “Our”, “Us”) collect from you, through our interactions with you, and how we use that data when you are applying for a job offer on the portal https://ness-usa.ttcportals.com and later during the recruitment process.

As part of any recruitment process, Ness collects and processes personal data relating to job applicants. Ness is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations which can be accessed at https://www.ness.com/consent-to-personal-data-processing.

It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you, so that you are aware of how and why we are using such information.

2. Data Protection Principles

Ness will comply with applicable data protection laws and its internal policy regarding data protection. This means that the personal data we hold about you must be:

Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we declare in this notice and not used in any way that is incompatible with those purposes.
Relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Kept only as long as necessary for the purposes we have told you about.
Kept securely.

3. What information do we collect?

Personal information/data means any information relating to a natural person from which that person can be identified. It does not include data where the identity has been removed (aka anonymous data). Ness collects a range of information about you. This includes:

Your name, age, address and contact details, including email address and telephone number;
Details of your qualifications, skills, experience and employment history;
Information about your remuneration, including benefit entitlements;
Any other information you decide to share with us during the registration on the portal.
As part of the assessment process, Ness may collect and process videos, photographs, audio recordings, and other personal data through AI-enabled assessment platforms for candidate evaluation, skills assessment, proctoring, identity verification, and related recruitment purposes. We may use external applications and communication channels to send assessment-related invitations, reminders, updates, and notifications. Where required, your personal data may be shared with such service providers solely for recruitment purposes and subject to applicable data protection safeguards.
We may also collect, store and use the following “special categories” of sensitive personal information/data:
Information about your health, including any medical condition, health and sickness records only where necessary for the job position and allowed by the applicable law;
Information/data about criminal convictions and offences, if required for the specific job position and allowed by the applicable law;

4. How we collect your personal information

Ness may collect this information, in some cases consider sensitive, in a variety of ways. For example, data might be contained in application forms, CVs or resumes, photos, or collected through interviews or other forms of assessment.

We may also collect personal data about you from third parties, such as referrals / placement vendors / job sites/ networking websites and references supplied by former employers.

As part of the recruitment process, we may conduct background verification checks where applicable, including to satisfy customer, contractual, or business requirements before onboarding. Where required by law, we will obtain your consent before conducting such checks.

Information will be stored in a range of different places, including on your application record, in HR management systems and on other IT systems of Ness (including email).

We collect your personal data/information with your explicit consent as required under the applicable laws.

5. Why does Ness collect and process personal data?

Ness has a legitimate interest in collecting and processing personal information/data during the recruitment process and for keeping records of the process. Processing data from job applicants allows us to manage the recruitment process, verify the applicant’s background, assess and confirm an applicant’s suitability for employment and decide to whom to offer a job and any other employment related activities on successful joining in Ness.

We may also process your personal information/data where we need to take steps at your request prior to entering into an employment contract, to enable you to access a secure area of our applications, and to perform activities finalized at the signature of the employment contract, including but not limited to determining the terms on which you work for us, checking if you are legally entitled to work in the country of employment, etc. We may also need to process data from job applicants to respond to and defend against legal claims. Additionally, your data may be used to enhance our recruitment practices and ensure the security of the process.

Ness also needs to process information/data to ensure that it is complying with applicable legal obligations of entering into a contract with you and demonstrating the lawfulness of the application and selection process.

If your application is unsuccessful, you may request Ness to process your personal data for the purpose of evaluating your profile for future employment opportunities for which you may be suited, according to the retention criteria specified below.

If you do not provide your consent for collection and processing of your information, we may be prevented from complying with our legal obligations and therefore, we may not be able to proceed with the selection process.

7. Change of Purpose

We will only use your personal data for the purposes for which we collected it. If We need to use your personal data for an unrelated purpose, We will notify you and seek your consent to do so without undue delay. Please note that we may process your personal data without your knowledge or consent, in compliance with the above criteria, where this is required or permitted by applicable laws.

8. Who has access to data?

Your information may be shared internally, with the other entities of our group and third parties for the purposes of the recruitment process. These include members of the Human Resources (HR) and recruitment team, interviewers involved in the recruitment process, managers in the business area, clients, background check vendors, third party vendors and other relevant teams like Compliance, Marketing, Legal, Finance & Accounting, Delivery, Internal Audit and IT staff if access to the data is necessary for the performance of their roles.

We also share your personal data with other third-party service providers that may assist us in recruiting talent, evaluating and pre- and post-employment screening and testing, and improving our recruiting practices.

Ness uses the recruitment platform JobVite published through the portal https://nessusa.ttcportals.com/. JobVite receives, processes and stores personal information captured in resumes submitted by candidates seeking employment. Jobvite also stores information about Ness’s job opportunities that are posted online, and other workforce program information used to administer recruiting activities on the Jobvite recruitment platform. Jobvite’s Privacy Notice provides additional details about this processing.

We maintain processes designed to ensure that any processing of personal information/data by third party service providers is consistent with this Privacy Notice and protects the confidentiality, availability, and integrity of your personal information/data.

9. Transferring information outside the EU/EEA

In some cases, we transfer personal data from the, European Economic Area and UK to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use a variety of legal mechanisms, including data transfer agreements based on European Standard Contractual Clauses, to help ensure your rights and protections travel with your information/data.

10. How does Ness protect your data?

We take the security of your information/data seriously. We have implemented appropriate technical and organizational measures to protect the security of your personal information/data. These measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of your information/data.

Where third parties process your personal information/data on our behalf, they will only do so in accordance with our instructions. These third parties are required to treat your information confidentially and take steps to ensure it is kept secure. We enter into specific agreements with such third parties to ensure they comply with applicable data protection laws and maintain the confidentiality and security of your information/data.

11. For how long does Ness retain data?

In case of a positive outcome of the recruiting process, your personal information/data will become part of your personnel records and securely stored and processed according to our Privacy Policy and Employment Notice, which will be provided to you at the right time.

In case of a not successful application, or you reject the Ness offer, Ness will retain your personal data as per applicable employment law requirement for/in a specific geography. Ness will also retain your personal information/data, in case you specify your choice to Ness during the recruitment process in order to consider you for new positions, and, if appropriate, to refer back to an earlier application if you submit a resume or other information to Ness again in the future.

Ness determines the retention period of your information based on the following retention criteria:

We will retain your personal information/data as long as it has an ongoing relationship with you or we consider your profile still suitable for other job positions; to determine the appropriate retention period in this case, we consider the amount, nature, and sensitivity of the personal information/data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements;
We may retain your personal data where it is required to do so by an applicable legal obligation to which it is subject.
We will retain your personal data where this is advisable to safeguard or improve Ness’s legal position (for instance in relation to statutes of limitations, litigation, or regulatory investigations);

In some circumstances we may anonymize your personal information/data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

12. Your rights in relation to your personal information

If you are applying from country of the EU/EEA area or any country where, as a data subject, you have a number of rights under applicable privacy regime like EU GDPR (European Union General Data Protection Regulation), UK GDPR (UK General Data Protection Regulation), Mexico Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and India DPDPA (Digital Personal Data Protection Act), you can:

Request access to your personal information/data (commonly known as a “data subject access request”) by sending an email at [email protected]. This enables you to receive a copy of the personal data we hold about you and information regarding its processing.
Request correction of the personal information/ data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information/data. This enables you to ask us to delete or remove personal information/data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information/data where you have exercised your right to object to processing (see below), where there’s no other valid reason to process those information/data.
Object to processing of your personal information/data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Request the restriction of processing of your personal information/data. This enables you to ask us to suspend the processing of personal information/data about you
Request the transfer of your personal information/data to another party in a structured, machine readable and commonly used format.
Object to decisions being taken by automated means. We do not engage in automated decision-making processes or profiling activities that significantly affect individuals based on their personal information/data without obtaining your explicit consent or unless permitted by applicable laws.
Right to withdraw consent to use and process your personal data for which explicit consent has been taken from you.
Right to grievance redressal through Our grievance redressal system. The contact information of the grievance officer has been provided under Clause 15 herein.
Right to complaint with an applicable supervisory authority in case the grievance is not resolved within the stipulated time frame.
Be Informed about the collection, use and breach of personal information/data.
Right to nominate. You have the right to nominate any individual who shall, in the event of death or incapacity, exercise the rights on your behalf.

If you would like to exercise any of these rights, please contact [email protected]. The aforementioned rights will be evaluated according to the limitations and / or specifications that each local legislation establishes.

13. Data Protection Supervisory Authority

Under applicable legislation, you may have the right to make a complaint at any time to the relevant data protection supervisory authority. In certain jurisdictions, you would be required under the applicable data protection law to first approach the designated grievance redressal system established by Ness within the relevant jurisdiction before seeking recourse to the supervisory authority.

You can understand or obtain the details of the applicable supervisory authority by contacting Our Data Protection Officer.

14. Changes to this privacy notice

This Notice applies to all job applicants and does not form part of any employment contract or any other service agreement. We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates, through the same portal where this privacy notice is hosted.

15. How to contact the DPO

If you have a privacy concern, complaint or a question regarding this privacy statement or how we handle your personal data, please direct it to our Data Protection Officer by writing to [email protected].

16. Privacy Statements for Specific Geos

Please refer to some of the region-specific applicable regulations below:

16.1. EU/EEA & UK

When processing your Personal Information within the EU/EEA Regions, we adhere to the Data Privacy Principles and regulations set forth in the General Data Protection Regulation (GDPR).
For the purposes of processing your Personal Information in UK, we will follow all the applicable Data Privacy Regulations, including UK General Data Protection Regulation.

16.2. USA

When processing Personal Information in California, we adhere to the Data Privacy Principles and Regulations outlined in the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act (“CPRA”) and all applicable federal laws.

16.3. India

We adhere to requirements as laid down by Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act 2023 and the Rules framed thereunder.
For the purpose of this policy, the Data Protection Officer shall also be the grievance officer and can be contacted in the manner provided under clause 15 hereinabove.
Where the processing of personal data is based on consent, you have the right to withdraw your consent at any time by contacting Ness through the channels specified in this Notice. Such withdrawal shall not affect the lawfulness of processing undertaken prior to the withdrawal of consent.
You have the right to seek access to information regarding the processing of your personal data, correction and updating of personal data, erasure of personal data, grievance redressal, consent withdrawal, and nomination of an individual to exercise such rights in accordance with the Digital Personal Data Protection Act, 2023.
If you are not satisfied with the resolution provided through Ness’s grievance redressal mechanism, you may lodge a complaint with the Data Protection Board of India, subject to applicable legal requirements. Information regarding the Data Protection Board of India may be accessed through the official Government website or any successor website notified by the Government of India.
This Privacy Notice is primarily made available in English. Where required, localized versions may also be made available in applicable regional languages of India. You may request access to the applicable local language version by contacting the Data Protection Officer at [email protected]. We will make reasonable efforts to provide the requested version within a reasonable period, not exceeding 30 days from the date of your request. In the event of any inconsistency between language versions, the English version shall prevail to the extent permitted by applicable law.

16.4. Mexico

For processing your Personal Information in Mexico, we will follow the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), 2025 and its regulations (the “Personal Data Protection Law”).