Welcome to Handshake, a career services platform that connects students and employers to democratize the job finding experience, in college and beyond. From the very beginning, our goal has been to design privacy into our platform in a way that respects the rights of students, the obligations of Universities, and the needs of employers. We understand that student data privacy is important so we want to make clear the very basic privacy principles that guide our policies and practices
You should read our full Privacy Policy to understand what data we collect, how we use it, and the limited circumstances where we may share it.
____________________
We are a career services platform that connects students, schools and employers to democratize the job finding experience in college and beyond.
This Privacy Policy applies to students at and alumni of EU University Partners and EU employers that use the joinhandshake.co.uk website and the Handshake Service (collectively “the Handshake Service” or “the Service”), as well as your relationship with Stryder Corp. (“Handshake”). This policy is part of Handshake’s Terms of Service. By using our Service, you agree to both our Terms of Service and this Privacy Policy; if you do not agree, please do not use the Service.
If you are not an EU resident or have joined Handshake as a student or alumnus of a US University or a US based employer, this Privacy Policy applies to your personal data collected by the Services.
Data Controller and Data Protection Officer
For personal data transferred from your University to Handshake, your University is the Data Controller and Handshake processes your data at your University’s direction. You should contact your University directly for requests regarding that data.
For personal data you share through the Handshake platform, Stryder Corp. (“Handshake”) and your University are each Controllers. You should contact Handshake directly for requests regarding that data. Handshake’s Data Protection Officer can be reached by sending an email to privacy@joinhandshake.com with the Subject: EU Data Privacy Officer or by addressing a letter to our mailing address (please add "Attn: Data Protection Officer”).
Stryder Corp - Handshake
Attn: Privacy
P.O. Box 40770
San Francisco, CA 94140
VeraSafe has been appointed as Handshakes's representative in the European Union for data protection matters, pursuant to Article 27 of the General Data Protection Regulation of the European Union. If you are unable to reach Handshake at privacy@joinhandshake.com, VeraSafe can be contacted on matters related to the processing of personal data under GDPR. To make such an inquiry, please contact VeraSafe using this contact form.
Alternatively, VeraSafe can be contacted at:
VeraSafe Czech Republic s.r.o
Klimentská 46
Prague 1, 11002
Czech Republic
VeraSafe Ireland Ltd
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland
Data Storage and Transfers:
Personal data collected through our Service will be stored and processed in the EU and may be accessed by Handshake employees outside the EU. Handshake participates in the EU/US Privacy Shield program as described below.
Changes to the Privacy Policy
This Privacy Policy may change over time. If we make minor changes to it without materially changing your rights, we will post the modified Policy on our website. We will notify you by email, through the Handshake Service, or by presenting you with a new Privacy Policy to accept if we make a modification that materially changes your rights. When you use the Handshake Service after a modification is posted, you are telling us that you accept the modified terms.
What information we collect
We collect personal and non-personal data from you when you use our Services. Personal Data is data that includes a personal identifier like your name, email or address, phone number, IP address or device identifier, or is data that could reasonably be linked back to you. It also may include demographic information, geolocation information, educational information, or commercial information as described below.
Personal data may you upload to the Services may include categories of data classed as ‘special categories’ such as ethnicity, religious beliefs or sexual orientation. For example, this information may be inferred from the social or academic clubs that you share on a resume. It is your choice whether you share this information. Handshake does not process this information for any purpose other than to provide the Service to you.
You need to have an account to use Handshake. You can create an account on Handshake as a student seeking a job or career advice or as an employer looking for exciting new talent. You may also create an account as a career center or school employee or as an invited mentor.
We collect data as follows:
How we process your personal data and our legal basis for processing your data
We use, process and store your Personal Data to provide the Handshake Service and to maximize opportunities to connect you with potential employers. This legal basis for processing your data and the purpose for processing is as follows:
To fulfil our contract with you: By joining Handshake, we will be required to collect, store, use and otherwise process information about you for any purposes deemed necessary for your use of the Service and for the performance of your agreement with the Handshake. See GDPR Article 6(1)(b), including:
For our legitimate interests: Processing of your personal data may also be necessary for the pursuit of our legitimate interests or by a third party’s legitimate interests - but only where the processing is not unwarranted and will not cause a prejudicial effect on your rights and freedoms, or legitimate interests. See GDPR Article 6(1)(f). Examples are:
When we may share your personal data
We will only share your personal data with third parties under the following circumstances:
When we use and share non-personal data
Non-personal data is data that itself cannot reasonably be linked back to you or data that is combined with other data in a way that cannot reasonably be linked back to you. We use and share your non-personal, de-identified or aggregated data in a variety of ways to help our Partners and the public understand trends in the job seeking market through analytics reports, statistics and other metrics and guides. For example, to understand:
Cookies
As a Site visitor, we place a small piece of software referred to as a “session cookie” on your computer. If you use the Services and create an account, we also use this cookie to recognize you on return visits and expedite the login process. You can remove this and other cookies through your browser preferences menu, though the exact method varies depending on the type of browser you use – but note that you won’t be able to log into our service if your cookies are disabled. If you visit from a mobile device, we may reference your device identifier or other information about where your visit originated.
Our email communications contain web beacons or similar technology which track when the email has been opened or read. This functionality sends the resulting records back to our Service, which may be associated with other information you have provided us.
How to opt-out of email communications
We only send marketing communications to users located in the EEA with your prior consent. To stop receiving notifications or promotions, please click the unsubscribe link found at the bottom of each email or update your account preferences.
Storage, security and how to remove your information
We use industry standard technical, administrative and physical controls to protect your data including encrypting it at rest and as it is transferred from you to Handshake. While we take reasonable precautions against possible security breaches, no website or internet transmission is completely secure and we cannot guarantee that unauthorized access, hacking, data loss or other breach will never occur. In the event of a breach, we will take reasonable steps to investigate the situation and, where appropriate, notify affected individuals in accordance with any applicable laws and regulations.
De-activating your account or deleting your personal data
You can choose to deactivate your account so that you are no longer viewable on the Service or you can make your account private. You may also request Handshake delete information about you, however we may be obligated as a Processor or Controller with your college or university to retain certain data about you. This means that if they re-send us your data to process on their behalf, we will retain it as their Data Processor unless they request we delete it. You can request deactivation or deletion by sending a message to privacy@joinhandshake.com or by contacting your University to ask them to delete your information.
Third party links
The Services may contain links to and from third party websites of our Employer and University Partners or other Handshake Partners. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We also cannot be responsible for your personal data that you submit to employers using the Services. Please check their individual policies before you submit any information to those websites.
Children
Minors under 16 are not permitted to use our Site without express parental consent to both use the Services and be bound by our Terms of Service and this Policy. We do not intentionally collect information from minors under 13. If you believe we have collected any personal information from a child younger than 13 years of age, please notify us immediately here and we will take reasonable measures to remove that information from our systems.
Payments
Handshake provides the ability for employers to pay partner institutions for collateral expenses, such as hosting a booth at a career fair, through the use of a third party payment processor. Handshake does not collect or use any of that payment information. If an employer has any conflicts regarding the method of payment acceptance, they should contact the school. Handshake claims no responsibility or liability for payment transactions.
Exercising your Rights
You have certain rights in respect of your personal information:
When Handshake processes your data at the direction of your University we act as their Processor and comply with requests they send us under GDPR. You become a Handshake user by agreeing to this Handshake European Union Privacy Policy and Terms of Service which describes that the personal data Handshake collects as a co-Controller of your data.
You may exercise your rights regarding your personal information as follows:
You may contact us at privacy@joinhandshake.com with questions or requests regarding your personal information. Please note that Handshake may request additional information from you to verify your identity before we disclose any personal or account information.
For Employers
Prospective employers who create a Handshake Employer Account must only process Personal Data a student chooses to make available for the purposes of any job enquiry or application a student may make in the course of using the service and must process such data strictly in accordance with the General Data Protection Regulation and the Data Protection Act 2018. Such data may not be shared, transferred, retained or otherwise used in any manner to which a student has not given express and informed consent.
PRIVACY SHIELD
Handshake complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom, and Switzerland to the United States pursuant to the Privacy Shield. Handshake has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit http://www.privacyshield.gov.
In compliance with the Privacy Shield Principles, Handshake commits to resolve complaints about your privacy and our collection or use of your personal information pursuant to the Privacy Shield. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Handshake at the contact address below:
Stryder Corp - Handshake
Attn: Privacy
P.O. Box 40770
San Francisco, CA 94140
or privacy@joinhandshake.com
Within the scope of this privacy notice, if a privacy complaint or dispute cannot be resolved through Handshake’s internal processes, Handshake has agreed to participate in the VeraSafe Privacy Shield Dispute Resolution Procedure. Subject to the terms of the VeraSafe Privacy Shield Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe under the Privacy Shield Dispute Resolution Procedure, please submit the required information to VeraSafe here.
In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles.
The Federal Trade Commission has jurisdiction over Handshake’s compliance with the Privacy Shield.
The Privacy Shield Principles describe Handshake’s accountability for personal data that it subsequently transfers to a third-party agent. Under the Privacy Shield Principles, Handshake shall remain liable if third party agents process the personal information in a manner inconsistent with the Privacy Shield Principles, unless Handshake proves it is not responsible for the event giving rise to the damage.
Note that Handshake may be required to release the personal data of EU and Swiss individuals whose data is pursuant to the Privacy Shield in response to legal requests from public authorities, including to meet national security and law enforcement requirements.