InterSystems Candidate Privacy Statement

InterSystems Corporation and the InterSystems entity considering you for a position (“InterSystems,” “we,” “us,” or “our”) respect your privacy as a job applicant or candidate (“you”) for a position within our global organization. This Candidate Privacy Statement (“Statement”) describes how we collect, use, retain, disclose, transfer, and secure your personal information during the recruitment process.

This Statement applies globally and incorporates specific provisions based on regional, national, and state laws. By submitting your application or participating in our recruitment process, you acknowledge that we process your personal information as described in this Statement. Where consent is required, we will request it separately. For general privacy practices unrelated to recruitment, refer to the InterSystems Privacy Statement.

We Collect Your Personal Information Through:

• Direct Submission: Information you provide when applying online, submitting a resume, or participating in interviews.
• Third Parties: Data from recruitment agencies, background check providers, references, employee referrals, job boards, professional networking platforms, and publicly available professional sources.
• Automatic Collection: Data from cookies and analytics when accessing our careers website. Please review the InterSystems Corporation Website Cookies page.

Examples of Personal Information Collected:

• Identifiers: Name, email address, phone number.
• Employment Data: Resume/CV, work history, references, certifications.
• Educational Data: Academic qualifications, certifications, skills.
• Sensitive Personal Information (where permitted): Voluntary demographic information, disability or accommodation information, health information relevant to accommodations, work authorization information and supporting documentation, and criminal records where legally permitted.
• Technological Data: IP address, device information, and usage analytics.
• Interview and Assessment Data: Interview notes, assessment results, and test scores.

What Your Personal Information Is Used For:

• Recruitment Processes:
  
  • Managing your application.
  • Evaluating your suitability for a role.
  • Communicating interview updates.
  • Conducting background checks (where legally permissible).
  • Preparing offers of employment and employment contracts.
• Compliance: Fulfilling legal and regulatory obligations.
• Talent Pools: Retaining your information for consideration for future opportunities, with consent where required.

De-identified or aggregated data may be used for recruitment analytics and improving processes.

Depending on your location, we process your personal information based on legal bases such as necessary steps related to a potential employment contract, legal obligations, legitimate interests in recruitment and workforce management, consent where required, and the establishment, exercise, or defense of legal claims. We process sensitive personal information only where permitted by law, such as with consent where required, to comply with employment or legal obligations, provide accommodations, protect health or safety, prevent fraud or ensure security, or establish, exercise, or defend legal claims.

How Your Personal Information May Be Shared:

• Internally: With authorized personnel like HR and legal teams, hiring managers, and IT staff.
• Externally: Service providers (e.g., recruitment agencies, applicant tracking systems, background check vendors, assessment providers, and professional advisors), and public authorities to comply with legal obligations.
• In Business Transactions: During mergers, acquisitions, or reorganizations.

International Data Transfers

We process your personal information in the United States and other countries worldwide. While privacy laws differ across regions, we are dedicated to implementing strong safeguards to protect your personal information and uphold your rights, regardless of where your data is handled.

• Transfers to countries with an adequacy decision: If we transfer your data to a country recognized as having adequate data protection laws (as determined by authorities like the European Commission), we rely on that recognition. For example, we adhere to the privacy principles established by the EU-US Data Privacy Framework (DPF), the UK Extension to the EU-US DPF, and the Swiss-US DPF for transferring personal information to the United States.

• Transfers to other countries: If your personal information is transferred to a country without an adequacy decision, we rely on internationally recognized safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) ( SCCs Controller-to-Controller and SCCs Processor-to-Processor), the UK Information Commissioner’s Office International Data Transfer Agreement ( IDTA Controller-to-Controller), and Brazil’s LGPD standard contractual clauses ( LGPDSCC-US and LGPDSCC-CL), where applicable.

  If necessary, we implement additional contractual, technical, and organizational measures to ensure that personal information transferred is subject to an essentially equivalent level of protection.

• Your protection across borders: No matter where your data is transferred, we use safeguards designed to protect it in accordance with applicable law.

For more information about how your personal information is managed in specific regions, please refer to Section 9. Additional Region-Specific Disclosures.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, establish, exercise, or defend legal claims, or as permitted by your consent. Retention periods are determined based on applicable laws, statutory obligations, the role and recruitment process, and our internal data retention policies.

Data Categories Retained

• Personal Information: Full name and contact details.
• Recruitment Data: Applications, resumes, references, interview notes, performance assessments, assessment results, and test scores.
• Metrics: Recruitment statistics.
  

Extended Retention

If you consent to retaining your information for future opportunities, or if retention is otherwise permitted by law, we will keep it for the applicable period or until you withdraw your consent, where applicable.

When the applicable retention period ends or you withdraw consent on which retention is based, we will delete or de-identify your information, unless further retention is necessary for another lawful purpose, such as complying with legal obligations or defending legal claims. If immediate deletion or de-identification is not feasible (e.g., due to backups), we will implement safeguards to restrict access and prevent active use of the data until it can be fully removed.

If you are hired, relevant information collected during recruitment may become part of your employment record and be handled under the applicable InterSystems Employee Data Protection Notice.

You may have specific legal rights regarding the personal information we process about you. These rights vary depending on the laws in your location, but may include:

• Access, Correction, or Deletion: The right to access your personal information, correct inaccuracies, or request its deletion, under certain conditions.
• Objection: The right to object to the processing of your personal information, where applicable.
• Restriction: The right to request limitations on processing of your personal information under certain conditions.
• Portability: The right to receive your personal information that you have provided to us in a structured, commonly used, and machine-readable format when we process it electronically based on consent or performance of a contract.
• Withdrawal of Consent: The right to withdraw your consent at any time, where your personal information is processed based on consent.
• Complaints: The right to lodge a complaint with a data protection supervisory authority. You may contact the authority in your place of residence, work, or the place of the alleged infringement. Details of the relevant supervisory authority can be found in the “Contacting Your Regional Data Protection Authority” section of the Exercising Your Rights page.

InterSystems will not discriminate or retaliate against you for exercising these rights. If you submit a request, we will clarify:

• How your rights apply or differ based on your location and the legal basis for processing.
• Any overriding processing needs InterSystems may have and why they apply.
• How the rights of others may affect your request.

Additionally, InterSystems does not make recruitment decisions based solely on automated decision-making that produces legal or similarly significant effects during recruitment activities covered by this Statement.

Our careers website uses cookies to enhance functionality and analyze usage. For more information, refer to the InterSystems Corporation Cookie Policy.

We implement robust technical, organizational, and administrative measures to protect your data against unauthorized access, alteration, or misuse. Access to candidate data is restricted to authorized personnel only.

Australia
We may transfer or disclose your personal information to recipients in other countries.

Your personal information may be stored on IT systems located in Australia and the APAC region, as well as the United States, and the European Union.

If you wish to file a complaint about our compliance with Australian privacy laws, please contact us using the details provided in the “Contact Us” section. We will investigate and respond within a reasonable timeframe.

Brazil
When processing personal information under Brazil’s General Data Protection Law (LGPD), we rely on a legal basis permitted by the LGPD. We process sensitive personal information only where permitted, such as with consent where required, to comply with legal obligations, exercise rights, protect health or safety, prevent fraud, or ensure security.
International transfers from Brazil are made under safeguards permitted by the LGPD, including adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms, where applicable.

In Brazil, you have the right to:

• Confirm whether we process your data.
• Correct inaccurate, incomplete, or outdated information.
• Under certain circumstances, object to processing, request anonymization, blocking, deletion, or portability of your data.

• Obtain information about entities with which we share your data and lodge a complaint with the Brazilian National Data Protection Authority.

China
Under the Personal Information Protection Law (PIPL) of China, we process your personal information only for legitimate purposes. If we process sensitive personal information or transfer your personal information outside China, we provide additional notice, obtain separate consent, and complete required assessments or filings where required.

France
For individuals in France, you may:

• Object to data processing on legitimate grounds unless required for legal obligations.
• Provide instructions for handling your data after your death.

Hong Kong
We adhere to Hong Kong’s Personal Data (Privacy) Ordinance (PDPO), guided by its six core Data Protection Principles (DPPs). You may request access to and correction of your personal data, subject to applicable law.

Israel
You are not legally obligated to provide the personal information described under section 2 above.
We may transfer your personal information outside of Israel for processing, subject to applicable legal requirements and appropriate safeguards.

Kingdom of Saudi Arabia (KSA)
We process personal information in compliance with Saudi Arabia’s Personal Data Protection Law (PDPL).

Transfers of personal information outside Saudi Arabia are conducted only where necessary and in compliance with PDPL’s cross-border transfer requirements, including explicit consent or adequate safeguards where required.

South Africa
Your personal information will be processed in compliance with the Protection of Personal Information Act (POPIA). You have rights to access, correct, and delete your data, object to its processing, and lodge a complaint with the Information Regulator, subject to applicable law.

United Arab Emirates (UAE)
We process your personal information in compliance with the UAE Personal Data Protection Law (PDPL). For international data transfers, we ensure safeguards are in place or obtain your consent, as required.

United States
If you are a California resident, this section also serves as a notice at collection. Please note the following:

• No “Sale” or “Sharing” of Personal Information: InterSystems does not “sell” personal information to third parties or “share” it for targeted advertising purposes, as defined under the California Consumer Privacy Act, as amended. Personal information collected during recruitment, employment, personnel management, or related processes is handled strictly for legitimate purposes.
• Use of Sensitive Personal Information: To the extent we collect sensitive personal information during recruitment, we use and disclose it only for limited purposes allowed by California privacy law. Because we do not use or disclose this information beyond those purposes, the right to limit its use and disclosure does not apply.
• Submitting Requests: You may submit requests regarding your personal information as described in the Your Data Protection Rights section of our Privacy Statement. You may also authorize an agent to act on your behalf, provided we receive proof of authorization and can verify your identity and/or the agent’s authority.
• Verification Process: To ensure security and prevent fraud, we may request information to confirm your identity or your agent’s authority. Verification does not require creating an account and is limited to the information already in our records.

Data Protection Officer: Ken Mortensen
Email: DPO@InterSystems.com
Phone: +1 (617) 621-0600
Post: 1 Congress St., Suite 3400, Boston, MA 02114 USA

InterSystems may update or revise this Statement periodically at its discretion. We recommend reviewing it occasionally to stay informed about our latest privacy practices.

The most recent update to this Statement was on October 28, 2026.