Last updated: June 1, 2026
This Global Data Protection and Privacy Notice for Personnel (the “Privacy Notice”) is provided by Rocket Software, Inc. or the affiliate of Rocket Software, Inc. that is your employer (“Rocket Software,” “we,” “us,” or “our”) to help you understand our practices surrounding the collection, use and disclosure of your personal data. This Privacy Notice also applies to certain independent contractors, interns and other individuals who perform work for us (collectively “Non-Employee Workers”).
Respeitamos a privacidade dos indivíduos e estamos comprometidos em tratar os dados pessoais de forma responsável e em conformidade com a legislação aplicável. Este Aviso de Privacidade descreve os tipos de dados pessoais que coletamos e processamos sobre você, as finalidades do processamento e os direitos que você pode ter em relação ao nosso processamento, dependendo da sua localização.
For inquiries and concerns, please see below.
Este Aviso de Privacidade aborda os seguintes tópicos:
If you are located in the European Union, United Kingdom, India or Switzerland, you should also refer to “Jurisdiction Specific Information,” below, for a description of additional information and rights that you may have. In all other jurisdictions, this Privacy Notice is provided on an informational basis only, and your rights may vary according to applicable local data privacy laws.
This Privacy Notice applies only to information collected for employment purposes, whether through our websites or from other sources. The other sources might include information that you provide in connection with your application for employment as well as information obtained, for example, from prior employers, other references, pre-employment screening providers, and educational institutions. Moreover, we seek to comply with the principle of of data minimization, meaning we seek to only collect and process personal data for a specific, legitimate purpose.
Este Aviso de Privacidade não faz parte de nenhum contrato de trabalho ou outro contrato de prestação de serviços. É importante que você leia e guarde este aviso, juntamente com qualquer outro aviso de privacidade que fornecermos em ocasiões específicas em que coletamos ou processamos seus dados pessoais, para que você esteja ciente de como e por que usamos essas informações.
A. Categorias de Dados Pessoais
As categorias de dados pessoais coletados podem incluir, entre outras, as seguintes:
In relation to our monitoring practices, it is noted that while our systems enable us to access and monitor telephone, email, voicemail, internet and other communications, this will primarily be used to carry out our legal obligations applicable to our business, services and as an employer (such as ensuring compliance with our IT related policies), and for other business reasons. Rocket Software has the capability to monitor your use of our systems including the telephone, computer and other communications and messaging systems, by automated software or otherwise, but such monitoring is only carried out to the extent permitted by law and to the extent necessary and justifiable for our legitimate business purposes. Such monitoring shall not be exercised to proactively monitor individual employee’s performance.
Information About Others: Information that you provide to us relating to other people (e.g. your partner, dependents, etc.) will be processed by us in accordance with this Privacy Notice. You are responsible for the accuracy of such information and for ensuring that those people are aware of the nature of the information you have provided and the way in which it will be processed by us.
We collect some of the categories of personal information listed above for Non-Employee Workers, excluding the categories that apply only to employees (such as compensation and benefits information for employees, characteristics of protected classifications, and non-public educational information).
B. Como coletamos seus dados pessoais
We collect personal data from you during the application process, either directly from you or sometimes from a referrer, job portal, an employment agency or background check provider, that is integrated into your personnel file upon hire. During your employment, we collect personal data directly from you as well as from authorized employees, for example, through administration of your benefits, performance evaluations and other job-related activities. We may also collect personal data about you from third parties for job-related purposes, for example from your references.
We use personal data, as necessary, for all purposes related to the creation, administration and termination of your employment relationship with us, including as set out below:
| Purpose for Use | Fundamento jurídico |
| Manage talent acquisition and hiring, onboarding and offboarding | Our legitimate interest to manage our workforce, necessary for the purpose of carrying out employer rights and obligations and/or performance of a contract |
| Manage your relationship with us, including payroll, benefits and performance, change in roles/position, promotions, leaves, and disciplinary proceedings | Our legitimate interest to manage our workforce; legal obligations and/or performance of a contract where special categories of personal data are processed (in the event of a sick leave), processing is necessary for the purpose of carrying out employer rights and obligations. |
| Ensure the health, safety, and accessibility for employees | Performance of a contract, legal obligations and/or legitimate interest in operating our business where special categories of personal data are processed, processing is necessary for the purpose of carrying out employer rights and obligations. |
| Provide learning and development tools, and monitor training completion | Our legitimate interest to train our employees |
| Engage employees, including via communications, surveys and statistics. | Our legitimate interest, including to communicate with our employees and obtain feedback from our employees and improve our relationship based on that feedback |
| Manage events, including social events and work-related travel | Our legitimate interest to allow our workers to participate in events organized by us and/or performance of a contract |
| Ensure the security of our IT infrastructure, including networks and communication systems | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Safeguard our business interests, including our intellectual property and confidential information, and the security, availability and resilience of our premises, information systems and technology, and to prevent fraud | Legal obligation and/or legitimate interest in operating our business |
| Network maintenance purposes | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Comply with legal obligations | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Prevent, detect or investigate security threats, incidents or violations of law or our policies (including threats or actual harassment, violence or bullying). | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Safeguard the security of our stored IT assets, IT infrastructure in server-rooms, and property and offices entry and exit points | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; to comply with a contract and/or to comply with legal obligations |
| Investigate suspected or reported employee or contractor actions which were in breach of our policies or violation of applicable laws, including where requested or instructed by law enforcement | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; performance of a contract and/or to comply with legal obligations |
| Investigate whistleblower complaints and grievances | Our legitimate interest, legal obligation and/or performance of a contract. Where special categories of personal data are processed, processing is necessary (i) in connection with exercising rights or obligations in connection with employment; and/or (ii) to establish, exercise or defend a legal claim (for special categories of personal data); and/or (iii) for the purpose of preventing or detecting unlawful acts (for criminal convictions and offences data) |
| Monitor for diversity and to consider steps that we can take to improve diversity and inclusion | Our legitimate interest to promote a diverse and inclusive workforce, your explicit consent and, where processing is necessary, for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment and/or where necessary for carrying out employer rights and obligations |
| Engage Non-Employee Workers to support us in providing our products and services | Our legitimate interest to protect our people, our IT infrastructure and assets as well as for security purposes; to comply with a contract and/or to comply with legal obligations |
| In connection with an actual or prospective corporate transaction (including a sale, divestment, merger or acquisition of all or any part of our business), restructuring or investment with respect to which we are a party | Legal obligation and/or legitimate interest in operating our business |
| Para qualquer outra finalidade que tenha sido notificada ou acordada por escrito. | Consentimento |
We may install CCTV technology on our premises for security purposes, where permitted by law. Where CCTV has been installed, we may collect images and other personal data of our employees and other workers, inside, entering or in the immediate vicinity of the CCTV “field of view” area. Our lawful basis for such processing is to comply with a legal obligation and/or in the legitimate interests in operating our business and protecting our people, our IT infrastructure and assets as well as for security purposes. Where necessary or required, this information may be shared with the individuals themselves, employees, agents, services providers, police forces, security organisations and persons making a legitimate inquiry. This data will not be used by us to view or monitor your performance and will only be reviewed and used in the event of a security event (i.e., break in) or for maintenance/CCTV quality purposes.
We may also use your personal data: (i) where we need to protect your (or someone else’s) vital interests, and (ii) where it is necessary to defend any legal claims that may be brought against us in connection with your employment, or to establish, bring or pursue any claim against you.
Note that we may process your personal data on more than one legal basis depending on the specific purpose for which we are using your personal data.
You are required to provide certain personal data, such as identification data, by law or because the personal data is necessary for us to enter into an employment agreement with you, where applicable, and to perform its obligations under that agreement. Please understand that if you do not provide your personal data when required by law or contract, we may not be able to provide you with certain benefits of employment. For example, we require your national ID number to process payroll. Furthermore, if you do not provide your personal data, we may be prevented from complying with our legal obligations, such as maintaining a safe work environment.
Não utilizamos métodos de tomada de decisão totalmente automatizados, incluindo a definição de perfis, no processamento dos seus dados pessoais.
Your personal data may be shared with and processed by our affiliates and certain service providers and business partners as necessary to fulfil the purposes set out in this Privacy Notice. We use a number of service providers that provide a wide range of services including legal and financial professional advisors, IT and data security providers, data hosting providers and website managers and other IT service providers, meetings and conference vendors, auditors, marketing agencies, HR firms, and data software providers. We make sure anyone who provides a service to, or for us, enters into an agreement with us and meets our standards for data security.
We may also disclose your data at your direction, to government or administrative agencies or to clients and customers where you require access to their systems or network to perform your job duties (e.g. background check information, nationality, social security number and military status). We may share your data with a third party when we believe it is necessary to protect your health or safety, such as disclosure to emergency medical personnel if you experience a medical emergency in the workplace.
We may disclose your personal information to the public as part of a press release, for example, to announce promotions or awards. If you do not want your personal information in press releases, please contact us at [email protected] and include in the subject line “Request for Exclusion from Press Release.” We do not disclose sensitive personal information to the public.
Reservamo-nos o direito de divulgar os seus dados pessoais conforme exigido por lei, ou quando acreditarmos que a divulgação é necessária para proteger os nossos direitos e/ou cumprir um processo judicial, ordem judicial, solicitação de um órgão regulador, questões de segurança nacional, para fins de interesse público ou qualquer outro processo legal ou investigativo que nos envolva. Caso nós, ou qualquer uma das nossas entidades afiliadas, sejamos objeto de uma transação corporativa, incluindo qualquer alienação ou aquisição, poderemos divulgar os seus dados pessoais ao novo proprietário da empresa em questão e aos seus consultores (inclusive como parte de qualquer processo de due diligence preliminar).
We seek to retain personal data for no longer than is necessary to fulfil the purposes for which it was collected.
This means we will retain your personal data throughout the employment relationship and as long thereafter as is reasonably necessary for the purposes set forth in this Privacy Notice, unless retention for a longer period is required or permitted by applicable law, legal process or administrative needs. We will not keep more personal data than we need for those purposes. For further information about how long we will keep your personal data, please contact us at the email address at the end of this Privacy Notice, including in the subject line “Request for Personal Data Retention Information.”
We have put in place appropriate technical, physical and administrative procedures and means to safeguard and secure the information we may collect or might receive from you in order to prevent unauthorized access or disclosure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality and required to keep your personal data secure.
Como operamos em nível global, podemos precisar transferir dados pessoais para países diferentes daqueles em que as informações foram originalmente coletadas. Quando exportarmos seus dados pessoais para um país diferente, tomaremos medidas para garantir que essas exportações de dados estejam em conformidade com as leis de privacidade de dados aplicáveis.
Se você estiver localizado na União Europeia (“UE”), na Suíça ou no Reino Unido (“RU”), tomamos medidas para garantir um nível adequado de proteção para seus dados pessoais transferidos por meio de Cláusulas Contratuais Padrão das quais a Rocket Software, Inc., suas subsidiárias nos EUA e suas subsidiárias na UE, Índia, Suíça, RU e outras regiões são signatárias. Se você estiver localizado em outro país com restrições à transferência internacional de dados, como o Brasil, podemos nos basear em seu consentimento para a transferência de seus dados pessoais para fora do seu país de residência.
As informações específicas da jurisdição a seguir podem se aplicar a você, dependendo de onde você reside ou se encontra:
A. European Union, United Kingdom, and Switzerland
Esta seção aplica-se somente se a nossa coleta, ou o seu fornecimento, de dados pessoais ao abrigo deste Aviso de Privacidade estiver sujeita às leis de privacidade de dados da União Europeia (UE), do Reino Unido (RU) ou da Suíça, como o RGPD da UE ou o seu equivalente no Reino Unido ou na Suíça.
Rocket Software is a controller of any personal data collected or processed by us when you interact with us in the ways described above (e.g., during the course of your employment, etc.). The types of personal data we collect, and our legal bases for doing so, is set out above.
Seus direitos
You may have the right to access the personal data we hold about you and control the way in which and what personal data we store and process about you, as set out below. To exercise these rights and controls, please see “How to Exercise Your Rights” below.
Mais informações sobre o direito de apresentar uma reclamação: Se indivíduos localizados na UE, Suíça e/ou Reino Unido acreditam que seus dados pessoais foram processados em violação às leis de privacidade de dados aplicáveis, podem seguir o processo "Como exercer seus direitos" abaixo, mas também têm o direito de apresentar uma reclamação à autoridade supervisora competente no país onde residem, onde trabalham ou onde ocorreu a alegada violação.
B. India
This section applies to individuals in India and supplements this Privacy Notice for purposes of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (Privacy Rules), Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules) as and when in effect, with any other applicable laws, rules, regulations or governmental directions relating to personal data in India (collectively, “Applicable Indian Privacy Laws”).
For the purposes of the DPDP Act, Rocket Software acts as a “Data Fiduciary” in respect of personal data processed in connection with your employment or engagement. This Privacy Notice is provided to individuals in India at or before the time of collection of their personal data, or as soon as reasonably practicable, in accordance with Applicable Indian Privacy Laws.
For individuals located in India, references in the table under the section on ‘How We May Use your Personal Data’, to “legal basis,” “legitimate interest,” “performance of a contract,” or “special categories of personal data” will not apply. For such individuals, processing of personal data will be carried out either (i) on the basis of valid consent obtained in accordance with Applicable Indian Privacy Laws, or (ii) where such processing is permitted without consent Applicable Indian Privacy Laws, as the case may be.
Consentimento e processamento permitido
Where required under the Applicable Indian Privacy Laws, we will obtain consent that is free, specific, informed, unconditional and unambiguous, provided through a clear affirmative action, and limited to personal data necessary for the specified purpose(s) described in this Privacy Notice.
Where processing is permitted under the Applicable Indian Privacy Laws without additional consent (for example, for compliance with law, protection of rights, security, or other permitted purposes such as legitimate uses), we may process personal data as allowed by law. Withdrawal of consent will not affect processing carried out prior to such withdrawal and may impact our ability to provide certain optional services or benefits where consent is required.
Where personal data of dependents or individuals under eighteen (18) years of age is processed in connection with employment benefits or related matters, such data is processed on the basis that it has been lawfully provided by the employee in their capacity as parent or lawful guardian. Where required under Applicable Indian Privacy Laws, we will obtain verifiable consent from the parent or lawful guardian prior to processing such personal data.
Meios para exercer direitos
Individuals in India may submit a rights request by completing this Form and providing where applicable, the particulars that may be required to identify the individual under Rocket Software’s terms such as a username, employee ID, registered email, or other identifier used in our systems). We may require reasonable information to identify to locate relevant records.
Subject to the Applicable Indian Privacy Laws, individuals in India have the right to:
Resolução de Queixas
We maintain a grievance redressal mechanism for personal data related grievances. This mechanism may be utilized by contacting the designated officer at the email address provided below under the section “Inquiries and Concerns.” We will respond to grievances within a reasonable period not exceeding ninety (90) days.
If you are not satisfied with our response, you may have the right to escalate your grievance in accordance with the Applicable Indian Privacy Law.
Personal data breach notification
If we become aware of a personal data breach affecting individuals in India, we will notify affected individuals and will intimate the relevant authorities and regulators as required under Applicable Indian Privacy Laws and other applicable laws including any directions issued by the Indian Computer Emergency Response Team.
Transferências transfronteiriças
We may transfer personal data outside India for the purposes described in Privacy Notice. Such transfers will be subject to any restrictions, conditions or requirements notified by the Government of India from time to time under the Applicable Indian Privacy Laws.
C. All other locations
Na medida permitida pela legislação aplicável e sujeita a quaisquer exceções pertinentes, você poderá exercer os seguintes direitos e quaisquer outros direitos previstos na legislação aplicável:
Se você acredita que seus dados pessoais foram processados em violação às leis de privacidade de dados aplicáveis, você também pode ter o direito de apresentar uma reclamação à autoridade de proteção de dados do local onde você mora, onde trabalha ou onde acredita que a violação ocorreu.
Please note that if you are a resident of California, your rights are set forth in a separate privacy notice.
D. How to Exercise Your Rights
Para exercer os direitos descritos acima, você ou seu representante legal devidamente nomeado (“Representante Legal”) deve nos enviar uma solicitação que (1) forneça informações suficientes para nos permitir verificar se você é a pessoa sobre a qual coletamos dados pessoais e (2) descreva sua solicitação com detalhes suficientes para que possamos entendê-la, avaliá-la e respondê-la. Cada solicitação que atender a esses dois critérios será considerada uma “Solicitação Válida”. Podemos não responder a solicitações que não atendam a esses critérios. Usaremos os dados pessoais fornecidos em uma Solicitação Válida apenas para verificar sua identidade e atender à sua solicitação. Você não precisa de uma conta para enviar uma Solicitação Válida.
We will work to respond to your Valid Request within the timeframe provided by the laws applicable to your employment location. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request. You may submit a Valid Request by completing this Form. The more risk entailed by the request (e.g., a request for specific pieces of personal data), the more items of personal data we may request to verify your identity. If we cannot verify your identity to a sufficient level of certainty to respond securely to your request, we will let you know promptly and explain why we cannot verify your identity.
Você também pode autorizar um agente a exercer seus direitos em seu nome. Para isso, você deve fornecer ao seu Agente Autorizado uma permissão por escrito para exercer seus direitos em seu nome, e podemos solicitar uma cópia dessa permissão por escrito ao seu Agente Autorizado quando ele fizer uma solicitação em seu nome. Você pode obter um formulário de “Designação de Agente Autorizado” entrando em contato conosco pelo endereço de e-mail no final deste Aviso de Privacidade, incluindo “Solicitação de Agente Autorizado” no assunto do e-mail.
Responderemos às solicitações para o exercício de direitos individuais de dados de acordo com a legislação aplicável. Reconheceremos quaisquer direitos adicionais que você possa ter de acordo com a legislação aplicável, mas não poderemos conceder-lhe mais direitos do que os previstos por lei.
Podemos alterar este Aviso de Privacidade periodicamente, a nosso exclusivo critério. Caso decidamos alterar nosso Aviso de Privacidade, publicaremos essas alterações para que nossos usuários estejam sempre cientes de quais informações coletamos, como as utilizamos e em que circunstâncias, se houver, as divulgamos. Verifique periodicamente se houve alterações neste Aviso de Privacidade e, principalmente, antes de nos fornecer quaisquer dados pessoais.
Please direct any questions or concerns you may have about this Privacy Notice to our Data Protection Officer at [email protected], including in the subject line “Privacy Notice Inquiry.”
