PRIVACY NOTICE TO JOB APPLICANTS

Last Updated: December 1, 2025

At Mascoma Bank, we value your privacy. This Privacy Notice describes our privacy practices specifically with respect to job applicants, including the types of personal information we collect or obtain, the reasons why we collect or obtain this information, how we may use the information, with whom we may share this information, how we safeguard this information, and more. We will not collect, obtain, use, or share personal information except as described in this Notice, unless you consent.

We encourage you to read this Notice carefully so you can understand our policies and practices regarding your personal information when you apply for employment with us. Please also note that by choosing to apply for employment with Mascoma, you agree to those policies and practices. If you do not agree with them, you may choose not to apply. 

We may change this Notice periodically (see “Changes to this Notice,” below). You agree to any changes we make if you continue to access or use our hiring portal (which is provided through Paylocity) or our website, or otherwise provide personal information to us, after we make these changes, so please be sure to check this Notice periodically for any updates.

Please note that Mascoma Bank is in the United States. If you are located outside of the United States, you should be aware that any personal information you provide to us is transmitted, processed, and stored in the United States. Your personal information will be protected subject to this Privacy Notice and applicable laws, which may not be as protective as the laws in your country. To understand your rights about your personal information, please contact or visit the website of the appropriate data protection authority for your region.

1. Personal Information We Collect or Obtain

We collect or obtain several types/categories of personal information and sensitive personal information from and about job applicants, including: 

· Contact Information, including your full name, home (physical and mailing) address, email address, home telephone number, and mobile telephone number (if you consent to provide permission for Short Message Service (“SMS”) for text messaging; message and data rates may apply unless you reply STOP at any time if you no longer wish to receive text messages regarding a job opening)

• Social security number
• Date of birth
• Race/ethnicity*
• Whether you are authorized to work lawfully in the United States (in accordance with applicable federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document upon hire)
• Gender and whether you identify by your legal gender*
• What pronouns do you prefer to use*
• Sexual orientation*
• Veteran’s status*
• Disability status*
• Employment history 
• Credit history
• Criminal history, including whether you ever been convicted of any criminal offense (misdemeanor or felony) that has not      been annulled
• Whether you are a current or previous Mascoma Bank employee 
• Whether you have any relatives who work for Mascoma Bank and if so, the names of such relatives*
• Name and contact information for two references* 
• Automatically collected information, as described below under “Cookies and Other Tracking.”

NOTE: Items listed above that are marked with an asterisk (*) are optional. If you opt not to provide any of this information, that will not impact on your application status.

 

We collect or obtain the information described above from a variety of sources, including:

• You directly, based upon information you provide when you apply for employment whether through our hiring portal or otherwise.
• People or entities you provide as references. 
• Third-party data providers such as AssureHire and Paylocity, which are each able to collect personal information as identified above, through the hiring portal. 
• Automatically through cookies, pixel tags/web beacons, or other tracking technologies as you use our hiring portal or visit our website.
• Publicly available sources such as local, state and federal courts, and local, state, and federal governmental agencies, databases, and lists including without limitation county criminal records searches, terrorist watchlists, national and state criminal databases, national and state sex offender registries, and social security number database.
• Private sources such as credit bureaus for credit reports. 

2. Why We Collect, and How We Use, Personal Information

We collect and use the personal information described above for a variety of purposes:

• To compile, review, and process employment applications
• To enable us to communicate with applicants
• To conduct background checks on applicants
• For the purposes described below under “Cookies and Other Tracking”
• For the purposes described below under “Sharing and Disclosure of Personal Information”

3. Cookies and Other Tracking

Mascoma Hiring Portal

As noted above, our hiring portal is provided through Paylocity. When you use our hiring portal Paylocity, Paylocity collects information using cookies and other tracking technologies such as pixel tags, web beacons, browser analytics tools and server logs. For more information on this, please see Paylocity’s Cookie Notice here: https://www.paylocity.com/company/protecting-our-clients/privacy-center/cookie-notice/ 

Mascoma Bank Website

When you visit our website, we collect information from you by automatic means, including cookies, pixel tags, or similar files. These are small text, image,  or electronic files (some of which may be placed on your device or browser) that allow us to recognize and remember things about users of our website, such as their preferences, location, and saved searches; perform analytics, such as counting the number of users who have visited or used our  website, determining how they got here, tracking their activity in our website, and gauging their interests; gather technical information about users’ devices, browsers, operating systems, IP addresses, etc.; assess and enhance our website’s performance; help protect our website against certain attacks; and assist with marketing.

Trackers used on our website also may identify other devices you use to visit our website, which helps us to ensure that our website functions correctly for any device you may be using. Trackers do not give us access to your computer or device. Cookies can be managed, deleted, or modified through your internet/browser settings. Please note that if you choose to reject cookies or other trackers, you may be unable to fully utilize all of our website’s features and information.

For more information, please see our Website Privacy and Cookies page here: https://mascoma.bank/privacy-security-statement/cookie-policy/.

Please note that we use Google Analytics to measure traffic on our website. Google has its own Privacy Policy, and if you want to opt out of tracking by Google Analytics, you can visit the Google Analytics opt-out page here:  Privacy Policy – Privacy & Terms – Google

Finally, please note that our website does not respond to “Do Not Track” signals or similar requests from browsers.

4. Sharing and Disclosure of Personal Information

While reviewing and processing your application for employment, we may share or disclose personal information with outside parties. Specifically, the information we collect or obtain about you when you apply for employment at Mascoma (see “Personal Information We Collect or Obtain” above) may be shared with the following third parties:

· Paylocity – As noted above, our hiring portal is provided through Paylocity. We share personal information with Paylocity for compiling, reviewing, and processing employment applications, to enable us to communicate with applicants, and to conduct background checks on applicants. Paylocity’s privacy policy may be accessed here:  https://www.paylocity.com/company/protecting-our-clients/privacy-center/.

· AssureHire – We share personal information with AssureHire for compiling, reviewing, and processing employment applications, to enable us to communicate with applicants, and to conduct background checks on applicants. AssureHire’s privacy policy may be accessed here:  https://mitratech.com/policies/assurehire-privacy-policy/.

· OutSolve – This vendor supports our Equal Employment Opportunity (“EEO”) requirements. OutSolve’s privacy policy may be accessed here:  https://www.outsolve.com/privacy-policy

We do not sell (as defined in applicable privacy laws) your personal information for monetary or other consideration under any circumstances, nor do we use or share your personal information for targeted or cross-context behavioral advertising (as defined under applicable privacy laws) based upon your activities over time and across nonaffiliated websites or online services/applications, or for profiling in furtherance of decisions that produce legal or similarly significant effects on you (as defined under applicable privacy laws).

Finally, we may also disclose information about you if necessary to comply with applicable laws and regulations; to respond to any legal process or other lawful request for information we receive; to protect vital interests of you or another natural person; to detect, prevent, and investigate fraud, abuse, or other illegal activity; to defend our legal interests where necessary for our legitimate interests or the legitimate interests of others; or to otherwise protect our rights. In addition, we may transfer personal information we have about you in the event we sell or transfer some or all our business or assets.

5. Retention of Personal Information

We retain personal information for as long as reasonably necessary to achieve the purposes listed under “Why We Collect, and How We Use, Personal Information” section above, or to satisfy our legal obligations. After that period, and to the extent permitted by applicable law, we may delete, anonymize, de-identify, or dispose of your information.

6. Notice Regarding Children’s Privacy

We do not knowingly or intentionally request, collect, use, or share personal information from children under 13 years of age. If we discover or are notified that this has occurred, we will immediately delete the information from our servers and instruct any third parties with whom we have shared the information to do so as well.

7. Your Rights Concerning Personal Information

To learn what personal information we have about you, and to update, correct, or delete that information, please contact us as indicated in the “How To Contact Us” section below. Please note that under certain circumstances we may not be able to honor requests to delete certain information.

We will consider all requests you make regarding your information and will respond within any time period required by applicable law. Please note, however, that certain information may be exempt from such requests, such as if we need to keep the information to comply with our own legal obligations or to establish, exercise, or defend legal claims. Your rights and our obligations also may vary based on your state or country of residency. Please note that you may be in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.

We also reserve the right to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name, email address, phone number, or other information unique to you (e.g., a password).

If you would like further information on requests concerning your information, please contact us as indicated in the “How to Contact Us” section below.

8. Protection of Your Information

We maintain reasonable safeguards to protect your personal information from accidental or unauthorized access, use, disclosure, alteration, destruction, or loss. These safeguards include technological measures such as encryption, multi-factor authentication, and password protection); administrative measures such as employee training, periodic risk assessments, and auditing; and physical measures such as locked doors/drawers, and badge access restrictions

9. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. Whenever we make any changes to this Notice, we will update the “Last Updated” date above. We encourage you to check our Privacy Notice often to always be up to date on the current version and to review any updates we have made.

10. How to Contact Us

If you have any questions, comments, or concerns about this Privacy Notice or our privacy practices, or if you would like us to update information, we have about you or any preferences you might have given us, you can reach us here:

Mascoma Bank 

67 North Park Street

Lebanon, NH 03766

802.490.1864

careers@mascomabank.com