APPENDIX A

Collection of Personal Information

We, and our Vendors and Client School Districts, may have collected and processed the following categories of Personal Information from or about applicants in the preceding 12 months:

Identifiers, such as real name, alias, postal address, telephone number, email address, other contact information, date of birth, Social Security number, driver’s license number, passport number, written signature, unique personal identifier, Internet Protocol (IP) address, device or mobile advertising ID, service request ID number, or other similar identifiers.

Education information (maintained by an educational institution and as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99)), such as grades, transcripts, student disciplinary records, or other academic information and records.

Professional or employment-related information, such as employment history, job title, salary, performance evaluations, professional certifications, or other professional and employment-related information.

Characteristics of protected classifications under state or federal law, including race, gender, physical or mental disability, age (40 years or older), citizenship, sexual orientation, veteran or military status, genetic information (including familial genetic information), or religion.

Internet or other electronic network activity information, including browsing history, search history, cookie data, referring/exiting URL, clickstream data, time spent on a webpage or advertisement, or other information regarding your interaction with an internet website, application, email or advertisement.

Geolocation data, such as device location.

Biometric information, such as fingerprints.

Physical characteristics or description, such as age, gender, race, disability.

Inferences drawn from any of the information listed in this section (including Sensitive Personal Information) to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

Sensitive Personal Information, including:

• Personal information that reveals:
  • Sensitive identification numbers, including social security, driver’s license, state identification card, or passport number.
  • Your racial or ethnic origin, religious or philosophical beliefs, or union membership.
• Biometric information for the purpose of uniquely identifying you.
• Personal information concerning your sex life or sexual orientation.

Sources of Personal Information

We collect Personal Information directly from all applicants. We also collect Personal Information from joint marketing partners, public databases, consumer reporting agencies, providers of demographic data, publications, professional organizations, educational institutions, social media platforms, Service Providers and Third Parties that help us screen and onboard individuals for hiring purposes, and Service Providers and Third Parties when they disclose information to us.

Purposes for Collecting & Processing Personal Information

We, and our Vendors, collect and process applicant Personal Information (excluding Sensitive Personal Information) described in this California Privacy Notice to:

• Evaluate a potential employment or contractor relationship with you.
• Attract and recruit job applicants (e.g., job advertisements and postings, Curriculum Vitae/resume reviews, applications, selection processes).
• Perform background checks and verify past employment, educational history, and professional standing and qualifications.
• Evaluate, determine, and arrange compensation, payroll, and benefits.
• Authenticate your identity and provide you with access to online services and facilities.
• Arrange, confirm, and monitor hiring-related travel, events, meetings, and other activities.
• Assess your fitness and physical capacity for work.
• Contact you regarding your application and potential employment or contractor relationship with us.
• Comply with laws and regulations, including (without limitation) applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws.
• Monitor, investigate, and enforce compliance with and potential breaches of ESS policies and procedures and legal and regulatory requirements.
• Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons.
• Exercise or defend the legal rights of ESS and its employees, affiliates, customers, contractors, and agents.

We, and our Vendors, collect and process the Sensitive Personal Information described in this California Privacy Notice only for:

• Performing the services or providing the goods reasonably expected by an average applicant who requests those goods or services (including offering benefits to employees and their beneficiaries);
• Ensuring security and integrity to the extent the use of the applicant’s Personal Information is reasonably necessary and proportionate for these purposes;
• Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of an applicant's current interaction with us; provided that we will not disclose the applicant's Personal Information to a Third Party and/or build a profile about the applicant or otherwise alter the applicant's experience outside the current interaction with the business;
• Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.

We do not use or disclose Sensitive Personal Information for purposes other than those specified above.

Disclosures of Applicant Personal Information to Third Parties

We have disclosed the following categories of Personal Information to Third Parties in the preceding 12 months:

CATEGORY OF PERSONAL INFORMATION	CATEGORY OF THIRD PARTY RECIPIENTS
Identifiers	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Education information	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Professional or employment-related information	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Characteristics of protected classifications under state or federal law	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Internet or other electronic network activity information	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Geolocation data	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Biometric information	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business Background check providers
Physical characteristics or description	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Inferences	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Sensitive identification numbers	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Racial or ethnic origin, religious or philosophical beliefs, or union membership	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business
Biometric information for the purpose of uniquely identifying you	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Operating systems and platforms, Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business Background check providers
Personal information concerning your sex life or sexual orientation	Internet service providers Data analytics providers Government entities, regulators, courts, and law enforcement agencies Consumer reporting agencies Other employers Affiliates and potential purchasers of our assets or business

We disclose to third parties the categories of Personal Information identified above for the purposes listed under the Purposes for Collecting & Processing Personal Information section above, as well as to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings); for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law; to conduct research, analytics, and data analysis; to detect and prevent fraud, secure our systems and facilities, and perform accounting, audit, and other internal functions, such as internal investigations; and to comply with law, legal process, and internal policies.