APPLICANT & COLLEAGUE DATA PRIVACY POLICY​

Updated May 25, 2018.

INTRODUCTION
We are committed to safeguarding the privacy of the personal information that we gather concerning our prospective, current and former employees. In this document, the terms “you”, “employee(s),” and “colleague(s)” are interchangeable and refer to perspective, current and future employees of Nobu Hotels and/or Nobu Hospitality for management, human resources and payroll purposes.

As a Nobu Hospitality colleague (or prospective colleague), you understand and acknowledge that we collect, use and disclose your personal information in accordance with this Applicants’ & Colleagues’ Data Policy (this “Policy”).

THE APPLICATION OF THIS POLICY
This Policy applies to applicants’ and colleagues’ personal information and to the use of that personal information in any form – whether oral, electronic or written.

This Policy gives effect to Nobu Hospitality’s commitment to protect your personal information and has been adopted by all of the separate and distinct legal entities that manage, operate, franchise, own and/or provide services to the various Nobu Hospitality hotels and resorts (whether a hotel-within-a hotel or freestanding, managed by Nobu Hospitality or not managed by Nobu Hospitality.)  References to “Nobu Hospitality”, “we,” “us” and “our” throughout this Policy, depending on the context, collectively refer to those separately owned hotels and the Nobu restaurants within them, including the entity with which you have or may have an employment relationship or applicant relationship.

Your personal information will be processed by the entity with which you have or may have an employment relationship with for the purposes set out in Section IV below.  Your personal information may be disclosed to the other Nobu Hotels, government entities, human resources software programs, payroll software programs, and our medical insurance and workers’ compensation partners and programs. When your information it is shared it is done for administration and payroll purposes, to meet the legal requirements, for us to communicate with you, and for other legitimate business purposes.

While this Policy is intended to describe the broadest range of our personal information processing activities globally, those processing activities may be more limited in some jurisdictions based on the restrictions of their laws.  For example, the laws of a country may limit the types of personal information we can collect or the manner in which we process that personal information. In those instances, we adjust our internal policies and/or practices to reflect the requirements of local law.

If you agree to this Policy you are, to the extent required under local law in some jurisdictions, granting your express and written consent to the processing of any personal information that you provide Nobu Hospitality that is considered to be Sensitive Personal Information (as described in Section III) or is considered to be financial information.

THE TYPES OF PERSONAL INFORMATION WE PROCESS
The term “personal information” in this Policy refers to information that does or is capable of identifying you as an individual. The types of personal information that we process (which may vary by jurisdiction based on applicable law and the nature of the colleague’s position and duties) may include:
– name, gender, home address and telephone number, date of birth, image, biometric information (such as a fingerprint), marital status, emergency contacts;
– residency and work permit status, driver’s license information, military status, nationality and passport information;
– social security or other taxpayer identification number, banking details;
– sick pay, pensions, insurance and other benefits information (including the gender, age, nationality and passport information for any spouse, minor children or other eligible dependents and beneficiaries);
– date of hire, date(s) of promotions(s), work history, technical skills, educational background, professional certifications and registrations, language capabilities, training courses attended;
– height, weight and clothing sizes, photograph, physical limitations and special needs;
– records of work absences, vacation entitlement and requests, salary history and expectations, performance appraisals, letters of appreciation and commendation, and disciplinary and grievance procedures (including monitoring compliance with and enforcing Nobu Hospitality policies);
– where permitted by law and proportionate in view of the function to be carried out by a colleague or prospective colleague, the results of credit and criminal background checks, the results of drug and alcohol testing, screening, health certifications, driving license number, vehicle registration and driving history;
– information required to comply with laws, the requests and directions of law enforcement authorities or court orders (e.g., child support or debt payment information);
– acknowledgements regarding Nobu Hospitality policies, including ethics and/or conflicts of interest policies and computer and other corporate resource usage policies;
– information captured on security systems, including CCTV and key card entry systems and other security and technology systems, to the extent permitted by applicable law;
– voicemails, emails, correspondence and other work product and communications created, stored or transmitted by a colleague using Nobu Hospitality’s computer or communications equipment (although correspondence exchanged using Nobu Hospitality’s equipment but using personal addresses is only processed to the extent permitted by applicable law);
– scores on tests and assessments;
– date of resignation or termination, reason for resignation or termination, information relating to administering termination of employment (e.g., references); and
– any other relevant data that could be necessary to comply with Nobu Hospitality’s purposes.

Much of the personal information we process is information that you knowingly provide to us. However, in other instances, we process personal information that we are able to infer about you based on other information you provide to us or during our interactions with you, or personal information about you that we receive from a third party using a process that we have told you about, such as in the case of a background check.   There may be instances in which the personal information that you provide to us or we collect is considered Sensitive Personal Information under the privacy laws of some countries. Those laws define “Sensitive Personal Information” to mean personal information from which we can determine or infer an individual’s racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, membership in a trade union or professional association, physical or mental health or condition, genetic data, sexual life or judicial data (including information concerning the commission or alleged commission of a criminal offence). We only process Sensitive Personal Information in your jurisdiction if and to the extent permitted by applicable law and when needed for legitimate business purposes.

HOW WE USE PERSONAL INFORMATION
Depending on the respective country and applicable laws, we may collect, use and disclose personal information concerning colleagues in order to:
– evaluate applications for employment;
– manage all aspects of a colleague’s employment relationship, including, but not limited to, payroll, benefits, corporate travel and other reimbursable expenses, development and training, absence monitoring, performance appraisal, disciplinary and grievance processes and other general administrative and human resource-related processes;
– develop manpower and succession plans;
– maintain sickness records and occupational health programs;
– protect the safety and security of Nobu Hospitality guests, staff and property (including controlling and facilitating access to and monitoring activity in secured premises and activity using Nobu Hospitality computers, communications and other resources);
– investigate and respond to claims against Nobu Hospitality, its staff and its guests;
– conduct colleague opinion surveys and administer colleague recognition programs
– administer termination of employment and provide and maintain references;
– maintain emergency contact and beneficiary details (which involves Nobu Hospitality holding information on those you nominate in this respect); and
– comply with applicable laws (e.g., health and safety), including judicial or administrative orders regarding individual colleagues (e.g., garnishments or child support payments)
Closed Circuit Television (CCTV) cameras operate within and around our hotels and other premises, which, depending on the respective country and applicable laws, may be used for the following purposes
– to prevent and detect crime;
– to protect the health and safety of Nobu Hospitality guests and staff;
– to manage and protect Nobu Hospitality’s property and the property of Nobu Hospitality’s staff, guests and other visitors; and
– for instances of workplace behavior, to the extent permitted by applicable law; and
– for quality assurance purposes, to the extent permitted by applicable law
We may also utilize “Secret Shopper” or “Mystery Guest” programs, to monitor the quality of our customer service.

We may monitor Internet use and communications in accordance with applicable laws and Nobu Hospitality’s information use policies and any other acceptable use policies that may replace, amend or supplement that policy from time to time.

We may retain certain personal information of colleagues after their employment ends for any residual aspects of the purposes set out above. We will only retain such personal information for as long as it is necessary and in all cases for no longer than permitted by Nobu Hospitality’s Records Management Policy and applicable law, which varies country to country.

Unless otherwise stated, all personal information we request from you is obligatory.  If you do not provide and/or allow us to process all obligatory personal information as requested, we will not be able to keep complete information about you, thus affecting our ability to accomplish the purposes set out above.

DISCLOSURES OF YOUR PERSONONAL INFORMATION
General In order to carry out the purposes outlined above, information about you will be disclosed for the purposes set out above to human resources staff, managers, consultants, advisers and other appropriate persons in our hotels and offices.

Our Agents, Service Providers and Suppliers Like many businesses, from time to time, we outsource the processing of certain functions and/or information to third parties.  Please note that when you apply for a position with us online, you may be transferred to a third party site with whom Nobu Hospitality has contracted to process your personal information on our behalf.  When we do outsource the processing of your personal information to third parties or provide your personal information to third-party service providers, we oblige those third parties to protect your personal information in accordance with the terms and conditions of this Policy, with appropriate security measures.
Business Transfers As we continue to develop our business, we may buy or sell hotels and other assets. In such transactions, colleague information is generally one of the transferred business assets and we may include your personal information as an asset in any such transfer. Also, in the unlikely event that we, or substantially all of our assets, are acquired, colleague information may be one of the transferred assets.

Legal Requirements We reserve the right to disclose any personal information we have concerning you if we are compelled to do so by a court of law or requested to do so by a governmental entity or if we determine it is necessary or desirable to comply with the law or to protect or defend our rights or property in accordance with applicable laws.  We also reserve the right to retain personal information collected and to process such personal information to comply with accounting, tax rules, regulations and any specific record retention laws.

CENTRALIZED DATA PROCESSING ACTIVITIES
Like most international businesses, we have centralized certain aspects of our data processing and human resources administration in accordance with applicable laws in order to allow us to better manage our business.  That centralization may result in the transfer of personal information from one country to another.  For example, some personal information concerning you will be transferred to and processed in the United States and or Canada if you are employed, or are a candidate for employment: (a) by any Nobu Hospitality affiliate located outside of the United States; or (b) as an Executive Committee Member, Department Head or other key colleague of any of our entities or affiliated hospitality businesses located outside the United States.

If you are being considered for a position with a Nobu Hospitality hotel or affiliated hospitality business in a different country, some personal information concerning you will be transferred to the country where the job opening is located. With your consent personal information concerning you may also be transferred to managers and/or human resources staff of Nobu Hospitality affiliates in other locations in accordance with applicable laws in order for them to be able to contact you with respect to applying for a different position. The jurisdictions to which the information will be transferred may or may not have laws that seek to preserve the privacy of personal information.  However, whenever your personal information is transferred within Nobu Hospitality, your personal information will be processed in accordance with the terms and conditions of this Policy, applicable laws, and for legitimate business purposes.

UPDATING OR ACCESSING YOUR PERSONAL INFORMATION
With some limited exceptions, you may inquire about the personal information we maintain about you by sending us a written request by letter or email to the address set out in Section X below. Please be sure to include your full name, current (or last) job title and place of employment with Nobu Hospitality and a copy of a document evidencing your identity (such as an ID card or passport) so we can ascertain your identity and the personal information we maintain about you. We may not disclose data that you are not entitled to receive under applicable laws (e.g., data revealing information about another individual).

We reserve the right to charge you a fee, if (and to the extent) permitted under applicable law, which is usually around US$20, for processing any such request.  Where you make more than one request in quick succession, we may respond to your subsequent request by referring to our earlier response and only identifying any items that have changed materially.

You may request that we correct, delete or stop processing, personal information that we hold about you on legitimate grounds by sending a letter or email to the address set out in Section X below. If we agree that the information is incorrect, or that the processing should be stopped, we will delete or correct the information.  If we do not agree that the information is incorrect, we will tell you that we do not agree and record the fact that you consider that information to be incorrect in the relevant file(s).

PROTECTING YOUR PERSONAL INFORMATION
The personal information we collect from you is stored by use and/or our service providers on databases protected rough a combination of physical and electronic access controls, firewall technology and other reasonable security measures.  Nevertheless, such security measures cannot prevent all loss, misuses or alteration of personal information, and we are not responsible for any damages or liabilities relating to any such incidents to the fullest extent permitted by law. Where required under law, we will notify you of any such loss, misuse or alteration of personal information that may affect you, so that you can take the appropriate actions for the due protection of your rights.

CHANGING TO THIS POLICY
Just as our business changes constantly, this Policy may also change.  To assist you, this Policy has an effective date set out at the end of this document.

​REQUEST FOR ACCESS TO PERSONAL INFORMATION / QUESTIONS OR COMPLAINTS
If you have any questions about this Policy, about the processing or your personal information as described herein, or any concerns or complaints with regard to the administration of the Policy, or if you would like to submit a request (in the manner described in Section VII above) for access to the personal information that we maintain about you, please contact us by any of the following means:
– for current colleagues, by contacting your line manager or your human resources manager; and
– for applicants and former colleagues, by contacting Nobu Hospitality’s Privacy Office at [email protected].
For complaints, further escalation at the colleague’s option can be made to the relevant Hotel General Manager and finally to Nobu Hospitality’s Privacy Office by sending an email to [email protected].

While this Policy alone does not create contractual rights, Nobu Hospitality has ensured compliance with some of its legal obligations in some countries in relation to personal information by creating a set of binding standards and policies (known in some countries as binding corporate rules), approved by a number of national privacy regulators.  As a result, depending on your circumstances and location, you may be able to enforce your privacy rights using those standards and policies through that regulator or a court. If you would like to know more about these standards and policies, please contact Nobu Hospitality’s Privacy Office by sending an email to [email protected].

All requests for access to your personal information must be submitted in writing by letter or email.  We may respond to your request by letter, email or any other suitable method.

Effective Date: April 2018

In the event of any inconsistencies between the English version of this Policy, and any version of this Policy in any other language, the English version shall prevail (to the fullest extent permitted under applicable law).