Notice at Collection of Employment Related Information – California

The notice at collection was last updated: 10/2024

This notice addresses the California Consumer Privacy Act (CCPA) requirement, as amended by California Privacy Rights Act, (CPRA) that a business that collects personal information from a California consumer shall, at or before the point of collection, inform consumers as to the (1) categories of personal information to be collected from the consumer; (2) the purposes for which the categories of personal information are collected or used; (3) whether the information is sold or shared;(4) the length of time Granite Re intends to retain each category of personal information; and (5) the criteria used to determine the length of time Granite Re will retain the categories of personal information. See CCPA §1798.100

This notice applies only to California residents who are applying for a job with Granite Re (Granite) or are California residents who are employees, owners, officers, directors or contractors of Granite (referred to hereafter as “consumers”).

Granite Re is a business that collects California consumers’ personal information. The categories of information and purposes for which the categories of information will be collected or used, as well as the retention periods for the categories, vary depending upon the reasons Granite is collecting personal information from you. This Notice is provided to you because Granite is collecting information from you in connection with your interest in or application for work at Granite, or information collected from you while you are an employee, owner, officer, director, contractor or retiree of Granite. The categories of personal information we may collect from you may include the following:

Personal Identifiers: such as a real name, signature, physical characteristics, physical description, alias, postal address, unique personal identifier, online identifier, IP address, user ID, email address, telephone number, passport number, social security number, driver’s license or state identification card number.
Financial Identifiers: such as insurance policy number, bank account number, credit card number, debit card number, or any other financial information.
Medical Information: such as health insurance or medical information, unique personal identifier for health insurance, online identifier, account name, health-related data, or other similar identifiers;
Employment and Education Information: such as, education history, employment or professional history, and education information as defined in FERPA, which is not publicly available information.
Protected classifications under California or federal law, including: age, race, color, sex, creed, gender, sexual orientation and identity, national origin, disability, immigration status, citizenship status, marital status, military or veteran status
Internet or other electronic network activity information, including, but not limited to, search history, and information regarding a consumer’s interaction with an Internet or intranet Web site, or application.
Data Regarding Use of Granite Assets: including use of Granite’s technology assets such as Granite’s networks, intranet and internet access, computers, laptops, or any other Granite devices which you use.
Audio, video, electronic, e-mail communications, or similar information.

NOTE: Personal Information does not include publicly available information, which means information that is lawfully made available from federal, state, or local government records nor de-identified or aggregate consumer information.

Granite collects and uses the categories of personal information we collect from you for the following hiring, employment or provision of benefits purposes:

To evaluate, monitor, manage and document your role (or former role) as a job applicant, employee, owner, director, officer, or a contractor of Granite.
To verify references, employment and educational history and to conduct background checks, employee drug tests, and respond to claims, complaints or allegations of misconduct, as allowed by law.
To communicate with you and to ensure we have current emergency contact information regarding you on file.
To administer payroll and staffing.
To determine your eligibility for, enrollment in, and administration of employment benefits for you and your covered dependents and beneficiaries.
To comply with government mandated reporting.
To help ensure security and integrity to the extent the use of the consumer’s personal information is necessary and proportionate for these purposes.
To debug to identify and repair errors that impair existing intended functionality.
To undertake activities to verify or maintain the quality or safety of a service or product that is developed or provided by Granite, and to improve, upgrade, or enhance any service or product that is developed or provided by Granite.
To conduct an audit related to compliance with the CCPA and other standards.
To undertake internal research for technological development and demonstration.
To advance Granite’s lawful commercial or economic interests.
To exercise or defend legal claims.

For other legitimate purposes.

Please note that Granite does not sell or share your personal information.

Granite retains each category of personal information described above for varying lengths of time. Retention periods depend on the specific purposes for which we use or collect your information as well as legal retention requirements. For example, we keep all categories of personal information while you are employed by Granite in order to manage your employment and your benefits. The period during which we keep the information will also depend upon how long you are employed, the duration that any benefits may be payable to you after your employment, retention required by your specific post-employment status, as well as retention required by other relevant law. Since it is not possible to describe retention periods for each category of personal information, we apply the following criteria in determining the retention period:

How long you are employed and your status/situation after employment, including the right to any post-employment benefits.
Legal requirements (including, but not limited to statutes of limitation and laws regarding audits of insurance companies and employers) that require us to maintain the personal information.
Whether there is threatened or ongoing litigation, mediation or arbitration involving the personal information.
Whether the personal information is the subject of a valid court order or law enforcement directive to retain.
Retention to exercise or defend legal claims.
Compliance with federal, state, or local laws.

Granite does not retain a consumer’s personal information for longer than is reasonably necessary for each disclosed purpose.

Our Privacy Policy can be found at: www.granitere.com/privacy-policy. Persons with a disability can receive alternate formats of this Notice by emailing consumerdatarequest@fedins.com or via download.

Privacy Contacts

If you have specific questions about your rights or about this notice, you may contact us at:

Phone TOLL-FREE: 1-800-533-0472 and ask to speak to the Privacy Officer
Postal Address:

Federated Mutual Insurance Company
Attn: Privacy Official - Legal
121 East Park Square
Owatonna, MN 55060