Job Application Privacy Policy

Cross Valley Federal Credit Union

This Job Application Privacy Policy (the ‘Policy’) explains how Cross Valley Federal Credit Union ('we', 'us', or 'our') collects, uses, discloses, and protects personal information provided by applicants during our recruiting and hiring process, including via our careers site, application forms, assessments, email, and interviews (collectively, the ‘Recruiting Channels’).

1) Scope

This Policy applies to information we collect from candidates and prospective candidates when you apply for a job or otherwise participate in our talent acquisition process. This Policy does not cover personal information collected from employees after hire (which is governed by our Employee Privacy Notice) or information collected on our public website for marketing purposes (governed by our Website Privacy Policy).

2) Information We Collect

· Identity and contact data (e.g., name, address, email, phone number).

· Professional and employment-related information (e.g., résumé/CV, cover letter, work history, education, skills, certifications, references).

· Eligibility information (e.g., work authorization status, visa/sponsorship needs).

· Voluntary demographic data where permitted by law (e.g., gender, race/ethnicity, veteran status) for equal opportunity and reporting purposes.

· Assessment data (e.g., results of skills tests, case studies, coding exercises, or job simulations).

· Interview data (e.g., scheduling details, interviewer notes, recordings if applicable with notice).

· Background screening data where permitted by law and with your prior authorization (e.g., criminal history, credit checks for certain roles, education/employment verification).

· Technical data collected automatically when using our careers site (e.g., IP address, device and browser type, cookies and similar technologies).

· Job preference data (e.g., desired location, compensation expectations, relocation preferences, start date).

· Any other information you choose to provide to us during the process.

3) Sources of Personal Information

· Directly from you (e.g., application forms, email, interviews).

· Recruiters, staffing agencies, or referrers acting on your behalf.

· Publicly available sources (e.g., professional networking sites).

· Third-party service providers (e.g., background check vendors) with your authorization where required.

· Automatically from your device when you use our careers site (cookies, analytics).

4) How We Use Your Information

· Evaluate your qualifications, experience, and fit for current or future roles.

· Manage recruiting operations (scheduling, communications, interviews, assessments).

· Verify information and conduct background screenings (with required authorizations).

· Comply with legal, regulatory, and reporting obligations (e.g., EEO/affirmative action where applicable).

· Improve our recruiting process, websites, and candidate experience (including analytics).

· Build a candidate talent pool for future opportunities, where permitted by law.

· Protect our rights, privacy, safety, property, and enforce our terms and policies.

5) How We Share Information

· Within Cross Valley Federal Credit Union and its affiliates/subsidiaries on a need-to-know basis.

· Service providers that support recruiting (e.g., applicant tracking system [ATS Name], video interview tools, background check vendors), bound by written contracts and confidentiality/security obligations.

· Professional advisors (e.g., legal counsel) as needed.

· Authorities, regulators, and law enforcement when required by law or to protect rights and safety.

· A successor entity in connection with a merger, acquisition, or asset transfer, subject to appropriate safeguards.

6) Data Retention

We retain applicant data for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal, regulatory, tax, or accounting requirements, resolve disputes, and maintain records of our hiring decisions. Where permitted by law, we may keep your information in a talent pool for a specified period to consider you for future opportunities. When retention is no longer necessary, we will delete, de-identify, or anonymize the data consistent with our record retention policies.

7) Security

We use administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized access, destruction, loss, alteration, disclosure, or use. No method of transmission over the Internet or method of electronic storage is fully secure; therefore, we cannot guarantee absolute security.

8) Your Choices and Privacy Rights

· You may update certain application details by contacting us or through your candidate profile if available.

· Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to receive a portable copy of your data.

· Where processing is based on consent, you may withdraw your consent at any time.

· EEA/UK applicants: you have the right to lodge a complaint with your local data protection authority.

· California applicants: you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including to know, delete, correct, and limit use of sensitive personal information, and to opt out of certain sharing. We do not sell personal information of applicants.

9) Cookies and Similar Technologies

We and our service providers use cookies and similar technologies on our careers site to enable site functionality, remember preferences, and perform analytics. You can control cookies through your browser settings and, where available, our cookie banner or preference center.

10) Background Checks and Assessments

Certain roles may require background screening or job-related assessments. Where required by law, we will provide separate disclosures and obtain your written authorization before conducting a background check. Screening will be conducted in accordance with applicable laws, including the U.S. Fair Credit Reporting Act (FCRA) where applicable.

11) Children’s Privacy

Our recruiting channels are not intended for minors. We do not knowingly collect personal information from children under the age where parental consent is required. If you believe a minor has provided personal information to us, please contact us to request deletion.

12) Third-Party Links

Our careers site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

13) Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the Effective Date above and, where required, provide additional notice.

14) How to Contact Us

If you have questions about this Policy or our handling of your personal information, please contact:

· Privacy Office: Cross Valley FCU, www.crossvalleyfcu.org

· Mailing Address: 640 Baltimore Drive, Wilkes-Barre, Pa 18702

· Phone: 570-823-6836

15) Jurisdiction-Specific Notices

Additional disclosures for applicants in certain jurisdictions may apply. See Appendix A for region-specific details.

Appendix A: U.S. State Disclosures (Including California)

· Categories of personal information collected (identifiers, professional/employment information, education information, internet/technical activity, inferences, sensitive personal information where applicable).

· Purposes for collection and disclosure (as described above).

· Categories of third parties to whom information is disclosed (service providers, affiliates, advisors, authorities).

· Retention periods (as described above).

· We do not sell or share (for cross-context behavioral advertising) applicant personal information as defined by the CPRA.