Windward (“We”, “Our”, “Us”) respect its employees’ privacy. This privacy notice (“Notice”) describes the ways We collect and process Personal Information related to you and is applicable worldwide.
By “Personal Information”, We mean information related to you which identifies or can identify you.
Please take the time to read this Notice, and do not hesitate to contact Us if you have any questions regarding your privacy rights, or this Notice. You can contact our privacy team here.
If you are employed in a country that requires a legal basis for processing Personal Information related to you (such as Israel and the UK), then our legal basis for processing Personal Information that We
collect and process about you is:
In certain circumstances, We will request you to explicitly consent to the processing of Personal Information related to you, even when We can rely on other lawful grounds of processing.
If We process Personal Information related to you based on your consent, you can withdraw your consent at any time with future effect (although it may have an effect on our ability to continue your employment with Us).
Withdrawing consent will not affect the lawfulness of any processing that we have conducted before your withdrawal and will have no effect on mandatory processing of your information under laws applicable to Us.
We collect and use Personal Information related to you primarily to manage Our employment relationship with you (the “Purposes”), including:
Where Our employees use Windward’s assets or devices, usage information is captured to protect Our assets and rights. We record, collect, store and analyze Personal Information related to you, including:
We collect Personal Information related to you in one or more of the following ways:
Personal Information related to you will be shared internally, including with members of the HR, Legal and Finance departments, your direct manager, senior management and IT staff if access to the Personal Information is necessary for performance of their roles.
We do not sell, rent lease or otherwise commercialize Personal Information related to you. Our data sharing practices include:
Our contracts with third parties include provisions to protect Personal Information related to you and limit its use to the purposes described in this Notice.
We respect Our employees’ rights. You may request Us to access, correct, delete or to obtain a copy of Personal Information related to you and, depending on applicable law, you may have additional rights available to you.
If you request to correct or delete Personal Information related to you, please note that We may still need to retain certain information for record-keeping purposes or to comply with legal or contractual requirements.
To exercise any of the abovementioned rights, please contact our privacy team here. Upon your request and based on the rights afforded to you under applicable laws, We will respond to
your request promptly.
We have implemented administrative, technical and organizational security measures as well as policies and procedures to protect Personal Information related to you. These measures and procedures are designed to protect information against risks such as temporary or permanent loss, destruction, and unauthorized or unlawful access, alteration, use or disclosure.
We require Our suppliers and vendors to apply similar security measures and procedures when they access or use Personal Information that they process on Our behalf.
We are a global company with sites in Israel, the United States and the UK. We transfer Personal Information related to you between these territories to operate our business efficiently, to improve performance, and to create redundancies in order to protect information in the event of an outage or other malfunctions.
Whenever We transfer Personal Information related to you beyond the country of origin, We will do so in accordance with applicable laws. If you are a resident in a jurisdiction where transfer of Personal Information related to you to another jurisdiction requires your consent, then you provide Us your appropriate consent to such transfer.
You can contact our privacy team here for further information about data transfer.
We retain personal information for the period necessary to fulfil the purposes, rights and obligations that this Notice outlines. We retain records relating to Our employees for a maximum of seven years following the termination of the employment relationship except where a longer or shorter retention period is required by applicable law.
Some records relating to pensions, compensation plans, profit sharing or payroll may be retained for a longer period as they are subject to ongoing performance obligations. Our retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, Our intellectual property or ownership rights, contract requirements, operational directives or needs, and archiving.
When Personal Information related to you is removed from Our systems, it will be deleted or destroyed using appropriate security protocols so that it cannot be reconstructed or read.
From time to time, We will need to update this Notice. If the updates have minor if any consequences, they will take effect 7 days after we post the revised Notice subject to this section. If any change to this Notice materially affects you, We will use reasonable efforts to notify you in advance, such as by sending an email or posting a prominent notice of the changes. We will give you a reasonable period of time to object to any changes and we will seek affirmative consent if and where this is required by applicable data protection laws.
Please contact our privacy team here for further information.