Last updated: June 1, 2026
This Global Data Protection and Privacy Notice for Personnel (the “Privacy Notice”) is provided by Rocket Software, Inc. or the affiliate of Rocket Software, Inc. that is your employer (“Rocket Software,” “we,” “us,” or “our”) to help you understand our practices surrounding the collection, use and disclosure of your personal data. This Privacy Notice also applies to certain independent contractors, interns and other individuals who perform work for us (collectively “Non-Employee Workers”).
Nous respectons la vie privée des individus et nous engageons à traiter les données personnelles de manière responsable et conformément à la législation applicable. La présente Déclaration de confidentialité décrit les types de données personnelles que nous collectons et traitons à votre sujet, les finalités de ce traitement et les droits dont vous pouvez bénéficier en lien avec notre traitement, selon votre localisation.
For inquiries and concerns, please see below.
Cet avis de confidentialité aborde les sujets suivants:
If you are located in the European Union, United Kingdom, India or Switzerland, you should also refer to “Jurisdiction Specific Information,” below, for a description of additional information and rights that you may have. In all other jurisdictions, this Privacy Notice is provided on an informational basis only, and your rights may vary according to applicable local data privacy laws.
This Privacy Notice applies only to information collected for employment purposes, whether through our websites or from other sources. The other sources might include information that you provide in connection with your application for employment as well as information obtained, for example, from prior employers, other references, pre-employment screening providers, and educational institutions. Moreover, we seek to comply with the principle of of data minimization, meaning we seek to only collect and process personal data for a specific, legitimate purpose.
La présente Déclaration de confidentialité ne fait partie d'aucun contrat de travail ni d'aucun autre contrat de prestation de services. Il est important que vous lisiez et conserviez cette déclaration, ainsi que toute autre déclaration de confidentialité que nous vous communiquons lors de la collecte ou du traitement de vos données personnelles, afin de savoir comment et pourquoi nous les utilisons.
A. Catégories de données personnelles
Les catégories de données personnelles collectées peuvent inclure, sans toutefois s'y limiter, les suivantes:
In relation to our monitoring practices, it is noted that while our systems enable us to access and monitor telephone, email, voicemail, internet and other communications, this will primarily be used to carry out our legal obligations applicable to our business, services and as an employer (such as ensuring compliance with our IT related policies), and for other business reasons. Rocket Software has the capability to monitor your use of our systems including the telephone, computer and other communications and messaging systems, by automated software or otherwise, but such monitoring is only carried out to the extent permitted by law and to the extent necessary and justifiable for our legitimate business purposes. Such monitoring shall not be exercised to proactively monitor individual employee’s performance.
Information About Others: Information that you provide to us relating to other people (e.g. your partner, dependents, etc.) will be processed by us in accordance with this Privacy Notice. You are responsible for the accuracy of such information and for ensuring that those people are aware of the nature of the information you have provided and the way in which it will be processed by us.
We collect some of the categories of personal information listed above for Non-Employee Workers, excluding the categories that apply only to employees (such as compensation and benefits information for employees, characteristics of protected classifications, and non-public educational information).
B. Comment nous collectons vos données personnelles
We collect personal data from you during the application process, either directly from you or sometimes from a referrer, job portal, an employment agency or background check provider, that is integrated into your personnel file upon hire. During your employment, we collect personal data directly from you as well as from authorized employees, for example, through administration of your benefits, performance evaluations and other job-related activities. We may also collect personal data about you from third parties for job-related purposes, for example from your references.
We use personal data, as necessary, for all purposes related to the creation, administration and termination of your employment relationship with us, including as set out below:
| Purpose for Use | Base juridique |
| Manage talent acquisition and hiring, onboarding and offboarding | Our legitimate interest to manage our workforce, necessary for the purpose of carrying out employer rights and obligations and/or performance of a contract |
| Manage your relationship with us, including payroll, benefits and performance, change in roles/position, promotions, leaves, and disciplinary proceedings | Our legitimate interest to manage our workforce; legal obligations and/or performance of a contract where special categories of personal data are processed (in the event of a sick leave), processing is necessary for the purpose of carrying out employer rights and obligations. |
| Ensure the health, safety, and accessibility for employees | Performance of a contract, legal obligations and/or legitimate interest in operating our business where special categories of personal data are processed, processing is necessary for the purpose of carrying out employer rights and obligations. |
| Provide learning and development tools, and monitor training completion | Our legitimate interest to train our employees |
| Engage employees, including via communications, surveys and statistics. | Our legitimate interest, including to communicate with our employees and obtain feedback from our employees and improve our relationship based on that feedback |
| Manage events, including social events and work-related travel | Our legitimate interest to allow our workers to participate in events organized by us and/or performance of a contract |
| Ensure the security of our IT infrastructure, including networks and communication systems | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Safeguard our business interests, including our intellectual property and confidential information, and the security, availability and resilience of our premises, information systems and technology, and to prevent fraud | Legal obligation and/or legitimate interest in operating our business |
| Network maintenance purposes | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Comply with legal obligations | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Prevent, detect or investigate security threats, incidents or violations of law or our policies (including threats or actual harassment, violence or bullying). | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Safeguard the security of our stored IT assets, IT infrastructure in server-rooms, and property and offices entry and exit points | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; to comply with a contract and/or to comply with legal obligations |
| Investigate suspected or reported employee or contractor actions which were in breach of our policies or violation of applicable laws, including where requested or instructed by law enforcement | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Investigate whistleblower complaints and grievances | Our legitimate interest, legal obligation and/or performance of a contract. Where special categories of personal data are processed, processing is necessary (i) in connection with exercising rights or obligations in connection with employment; and/or (ii) to establish, exercise or defend a legal claim (for special categories of personal data); and/or (iii) for the purpose of preventing or detecting unlawful acts (for criminal convictions and offences data) |
| Monitor for diversity and to consider steps that we can take to improve diversity and inclusion | Our legitimate interest to promote a diverse and inclusive workforce, your explicit consent and, where processing is necessary, for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment and/or where necessary for carrying out employer rights and obligations |
| Engage Non-Employee Workers to support us in providing our products and services | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; to comply with a contract and/or to comply with legal obligations |
| In connection with an actual or prospective corporate transaction (including a sale, divestment, merger or acquisition of all or any part of our business), restructuring or investment with respect to which we are a party | Legal obligation and/or legitimate interest in operating our business |
| À toute autre fin qui a été notifiée ou convenue par écrit | Consentement |
We may install CCTV technology on our premises for security purposes, where permitted by law. Where CCTV has been installed, we may collect images and other personal data of our employees and other workers, inside, entering or in the immediate vicinity of the CCTV “field of view” area. Our lawful basis for such processing is to comply with a legal obligation and/or in the legitimate interests in operating our business and protecting our people, our IT infrastructure and assets as well as for security purposes. Where necessary or required, this information may be shared with the individuals themselves, employees, agents, services providers, police forces, security organisations and persons making a legitimate inquiry. This data will not be used by us to view or monitor your performance and will only be reviewed and used in the event of a security event (i.e., break in) or for maintenance/CCTV quality purposes.
We may also use your personal data: (i) where we need to protect your (or someone else’s) vital interests, and (ii) where it is necessary to defend any legal claims that may be brought against us in connection with your employment, or to establish, bring or pursue any claim against you.
Note that we may process your personal data on more than one legal basis depending on the specific purpose for which we are using your personal data.
You are required to provide certain personal data, such as identification data, by law or because the personal data is necessary for us to enter into an employment agreement with you, where applicable, and to perform its obligations under that agreement. Please understand that if you do not provide your personal data when required by law or contract, we may not be able to provide you with certain benefits of employment. For example, we require your national ID number to process payroll. Furthermore, if you do not provide your personal data, we may be prevented from complying with our legal obligations, such as maintaining a safe work environment.
Aucune prise de décision entièrement automatisée, y compris le profilage, n'est utilisée lors du traitement de vos données personnelles.
Your personal data may be shared with and processed by our affiliates and certain service providers and business partners as necessary to fulfil the purposes set out in this Privacy Notice. We use a number of service providers that provide a wide range of services including legal and financial professional advisors, IT and data security providers, data hosting providers and website managers and other IT service providers, meetings and conference vendors, auditors, marketing agencies, HR firms, and data software providers. We make sure anyone who provides a service to, or for us, enters into an agreement with us and meets our standards for data security.
We may also disclose your data at your direction, to government or administrative agencies or to clients and customers where you require access to their systems or network to perform your job duties (e.g. background check information, nationality, social security number and military status). We may share your data with a third party when we believe it is necessary to protect your health or safety, such as disclosure to emergency medical personnel if you experience a medical emergency in the workplace.
We may disclose your personal information to the public as part of a press release, for example, to announce promotions or awards. If you do not want your personal information in press releases, please contact us at [email protected] and include in the subject line “Request for Exclusion from Press Release.” We do not disclose sensitive personal information to the public.
Nous nous réservons le droit de divulguer vos données personnelles si la loi l'exige ou si nous estimons que cette divulgation est nécessaire pour protéger nos droits et/ou nous conformer à une procédure judiciaire, une décision de justice, une demande d'un organisme de réglementation, la sécurité nationale, à des fins d'intérêt public ou à toute autre procédure judiciaire ou d'enquête nous impliquant. Si nous, ou l'une de nos entités affiliées, faisons l'objet d'une transaction, y compris une cession ou une acquisition, nous pourrons divulguer vos données personnelles au nouveau propriétaire de l'entreprise concernée et à ses conseillers (y compris dans le cadre de toute procédure de diligence raisonnable préliminaire).
We seek to retain personal data for no longer than is necessary to fulfil the purposes for which it was collected.
This means we will retain your personal data throughout the employment relationship and as long thereafter as is reasonably necessary for the purposes set forth in this Privacy Notice, unless retention for a longer period is required or permitted by applicable law, legal process or administrative needs. We will not keep more personal data than we need for those purposes. For further information about how long we will keep your personal data, please contact us at the email address at the end of this Privacy Notice, including in the subject line “Request for Personal Data Retention Information.”
We have put in place appropriate technical, physical and administrative procedures and means to safeguard and secure the information we may collect or might receive from you in order to prevent unauthorized access or disclosure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality and required to keep your personal data secure.
Dans le cadre de nos activités internationales, nous pouvons être amenés à transférer des données personnelles vers des pays autres que ceux où elles ont été initialement collectées. Lorsque nous exportons vos données personnelles vers un autre pays, nous prenons des mesures pour garantir que ces exportations de données sont conformes aux lois applicables en matière de confidentialité des données.
Si vous résidez dans l’Union européenne (« UE »), en Suisse ou au Royaume-Uni (« RU »), nous avons pris des mesures pour assurer un niveau de protection adéquat de vos données personnelles transférées, conformément aux clauses contractuelles types auxquelles Rocket Software, Inc., ses filiales américaines et ses filiales dans l’UE, en Inde, en Suisse, au Royaume-Uni et dans d’autres régions sont parties. Si vous résidez dans un autre pays imposant des restrictions aux transferts transfrontaliers de données, comme le Brésil, nous pourrions avoir besoin de votre consentement pour transférer vos données personnelles hors de votre pays de résidence.
Les informations spécifiques à la juridiction suivantes peuvent s'appliquer à vous en fonction de votre lieu de résidence ou de votre emplacement:
A. European Union, United Kingdom, and Switzerland
Cette section s'applique uniquement si notre collecte, ou votre fourniture, ou vos données personnelles en vertu de la présente déclaration de confidentialité sont soumises aux lois de l'Union européenne (UE), du Royaume-Uni (RU) ou de la Suisse sur la confidentialité des données, telles que le RGPD de l'UE ou l'équivalent du Royaume-Uni ou de la Suisse.
Rocket Software is a controller of any personal data collected or processed by us when you interact with us in the ways described above (e.g., during the course of your employment, etc.). The types of personal data we collect, and our legal bases for doing so, is set out above.
Vos droits
You may have the right to access the personal data we hold about you and control the way in which and what personal data we store and process about you, as set out below. To exercise these rights and controls, please see “How to Exercise Your Rights” below.
En savoir plus sur le droit de déposer une plainte: Si des personnes situées dans l'UE, en Suisse et/ou au Royaume-Uni estiment que leurs données personnelles ont été traitées en violation des lois applicables en matière de confidentialité des données, elles peuvent suivre le processus « Comment exercer vos droits » ci-dessous, mais elles ont également le droit de déposer une plainte auprès de l'autorité de contrôle compétente du pays où elles résident, où elles travaillent ou où la violation présumée a eu lieu.
B. India
This section applies to individuals in India and supplements this Privacy Notice for purposes of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (Privacy Rules), Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules) as and when in effect, with any other applicable laws, rules, regulations or governmental directions relating to personal data in India (collectively, “Applicable Indian Privacy Laws”).
For the purposes of the DPDP Act, Rocket Software acts as a “Data Fiduciary” in respect of personal data processed in connection with your employment or engagement. This Privacy Notice is provided to individuals in India at or before the time of collection of their personal data, or as soon as reasonably practicable, in accordance with Applicable Indian Privacy Laws.
For individuals located in India, references in the table under the section on ‘How We May Use your Personal Data’, to “legal basis,” “legitimate interest,” “performance of a contract,” or “special categories of personal data” will not apply. For such individuals, processing of personal data will be carried out either (i) on the basis of valid consent obtained in accordance with Applicable Indian Privacy Laws, or (ii) where such processing is permitted without consent Applicable Indian Privacy Laws, as the case may be.
Consentement et traitement autorisé
Where required under the Applicable Indian Privacy Laws, we will obtain consent that is free, specific, informed, unconditional and unambiguous, provided through a clear affirmative action, and limited to personal data necessary for the specified purpose(s) described in this Privacy Notice.
Where processing is permitted under the Applicable Indian Privacy Laws without additional consent (for example, for compliance with law, protection of rights, security, or other permitted purposes such as legitimate uses), we may process personal data as allowed by law. Withdrawal of consent will not affect processing carried out prior to such withdrawal and may impact our ability to provide certain optional services or benefits where consent is required.
Where personal data of dependents or individuals under eighteen (18) years of age is processed in connection with employment benefits or related matters, such data is processed on the basis that it has been lawfully provided by the employee in their capacity as parent or lawful guardian. Where required under Applicable Indian Privacy Laws, we will obtain verifiable consent from the parent or lawful guardian prior to processing such personal data.
Moyens d'exercer ses droits
Individuals in India may submit a rights request by completing this Form and providing where applicable, the particulars that may be required to identify the individual under Rocket Software’s terms such as a username, employee ID, registered email, or other identifier used in our systems). We may require reasonable information to identify to locate relevant records.
Subject to the Applicable Indian Privacy Laws, individuals in India have the right to:
Règlement des griefs
We maintain a grievance redressal mechanism for personal data related grievances. This mechanism may be utilized by contacting the designated officer at the email address provided below under the section “Inquiries and Concerns.” We will respond to grievances within a reasonable period not exceeding ninety (90) days.
If you are not satisfied with our response, you may have the right to escalate your grievance in accordance with the Applicable Indian Privacy Law.
Personal data breach notification
If we become aware of a personal data breach affecting individuals in India, we will notify affected individuals and will intimate the relevant authorities and regulators as required under Applicable Indian Privacy Laws and other applicable laws including any directions issued by the Indian Computer Emergency Response Team.
Transferts transfrontaliers
We may transfer personal data outside India for the purposes described in Privacy Notice. Such transfers will be subject to any restrictions, conditions or requirements notified by the Government of India from time to time under the Applicable Indian Privacy Laws.
C. All other locations
Dans la mesure prévue par la loi applicable et sous réserve de toute exception pertinente, vous pouvez être en mesure d'exercer les droits suivants et tout autre droit accordé par la loi applicable:
Si vous estimez que vos données personnelles ont été traitées en violation des lois applicables en matière de protection des données, vous pouvez également avoir le droit de déposer une plainte auprès de l'autorité de protection des données de votre lieu de résidence, de votre lieu de travail ou du lieu où vous pensez que la violation a eu lieu.
Please note that if you are a resident of California, your rights are set forth in a separate privacy notice.
D. How to Exercise Your Rights
Pour exercer les droits décrits ci-dessus, vous ou votre mandataire dûment désigné (« Mandataire ») devez nous adresser une demande qui (1) fournit suffisamment d'informations pour nous permettre de vérifier que vous êtes bien la personne concernée par la collecte de données personnelles, et (2) décrit votre demande de manière suffisamment détaillée pour nous permettre de la comprendre, de l'évaluer et d'y répondre. Toute demande répondant à ces deux critères sera considérée comme une « Demande valide ». Nous pourrions ne pas répondre aux demandes qui ne répondent pas à ces critères. Nous utiliserons les données personnelles fournies dans une Demande valide uniquement pour vérifier votre identité et traiter votre demande. Vous n'avez pas besoin de compte pour soumettre une Demande valide.
We will work to respond to your Valid Request within the timeframe provided by the laws applicable to your employment location. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request. You may submit a Valid Request by completing this Form. The more risk entailed by the request (e.g., a request for specific pieces of personal data), the more items of personal data we may request to verify your identity. If we cannot verify your identity to a sufficient level of certainty to respond securely to your request, we will let you know promptly and explain why we cannot verify your identity.
Vous pouvez également autoriser un mandataire à exercer vos droits en votre nom. Pour ce faire, vous devez fournir à votre mandataire une autorisation écrite d'exercer vos droits en votre nom, et nous pouvons lui demander une copie de cette autorisation écrite lorsqu'il effectue une demande en votre nom. Vous pouvez obtenir un formulaire de « Désignation de mandataire » en nous contactant à l'adresse courriel indiquée à la fin de la présente Politique de confidentialité, en indiquant « Demande de mandataire » dans l'objet du message.
Nous répondrons aux demandes d'exercice des droits individuels relatifs aux données conformément à la loi applicable. Nous reconnaîtrons tout droit supplémentaire dont vous pourriez bénéficier en vertu de la loi applicable, mais nous ne pourrons pas vous accorder plus de droits que ceux prévus par la loi applicable.
Nous pouvons modifier la présente Politique de confidentialité ponctuellement, à notre entière discrétion. Si nous décidons de la modifier, nous la publierons afin que nos utilisateurs soient toujours informés des informations que nous collectons, de leur utilisation et des circonstances, le cas échéant, dans lesquelles nous les divulguons. Veuillez consulter régulièrement la présente Politique de confidentialité pour prendre connaissance des modifications, notamment avant de nous communiquer des données personnelles.
Please direct any questions or concerns you may have about this Privacy Notice to our Data Protection Officer at [email protected], including in the subject line “Privacy Notice Inquiry.”
