EMPLOYEE PRIVACY NOTICE
POINT72 (DIFC) LIMITED
In this privacy notice, “Point72”, “we”, “us” and “our” means the entity employing or proposing to employ you or in which you are or may become a partner on the date that you receive this document, which will be Point72 (DIFC) Limited.
Point72 (DIFC) Limited is registered in the Dubai International Financial Centre (“DIFC”) with its business address at Unit L34-02, Level 34, ICD Brookfield Place, Dubai International Financial Centre, Dubai, United Arab Emirates.
About this privacy notice
Please take the time to read and understand this privacy notice in conjunction with Point72’s Global Privacy Policy which can be found here.
For the purposes of applicable data protection laws, we are a data controller in respect of your personal data. Applicable data protection laws means all laws relating to processing of personal data and privacy, in each case which are in force from time to time, including, without limitation, the DIFC Data Protection Law No. 5 of 2020 and the associated Data Protection Regulations 2020, and all law and regulations implementing or made under them, any amendment or re-enactment of them and, where applicable, the guidance and codes of practice issued by the DIFC Commissioner of Data Protection or any other applicable regulatory body.
This privacy notice applies if you are, or are applying to be, an employee of our organisation and sets out the basis on which any personal data about you will be processed by us.
We will only process your personal data as necessary to fulfil the purposes set out in this privacy notice as they apply to you.
Personal data that we collect about you
Subject to applicable law, we will collect and process the following personal data about you:
- Information that you provide to us or one of our affiliates or that we obtain from other sources. This includes information about you that you give to us by filling in forms or by communicating with us, whether face-to-face, by phone, email or otherwise through the recruitment process and during your employment with us. This information may include (but may not be limited to):
- your full name (and any previous names), gender, curriculum vitae, place of birth, date of birth, nationality, education and qualification details, marital status, home address and home telephone number, mobile telephone number, next of kin, emergency contact details, bank account details, social security / national insurance number, passport number, driver license details, tax details and your date of hire;
- information relating to your work permit (including, where required by applicable laws, your entry authorisation, visa or extension of stay) which entitles Point72 to employ you in the DIFC or any other jurisdiction or country;
- subject to any specific authorisation requirements, whether you have any criminal convictions in the DIFC or any other jurisdiction or country (including traffic offences) or any civil judgements made against you;
- details of your personal investment holdings in accordance with our internal policies on personal account dealing;
- subject to compliance with local applicable law / regulation, whether you have ever consulted a doctor or received any medical treatment while in the DIFC and certain details concerning the same;
- other information concerning you or any of your dependent family members as may be required by applicable law or regulation (for example, in the DIFC, to allow us to lawfully sponsor / employ you or register you as an Authorised Individual with the Dubai Financial Services Authority); and
- diversity monitoring information (including race, ethnic origin, gender and sexual orientation).
- Information we collect or generate about you. This may include:
- work-related details such as your job title and job description, contact details, performance at work, absences, pay and benefits information, service history, a copy of your employment agreement, passport details, residence permit details, your photograph, health information, pregnancy and/or disability status;
- personal data that we collect through your use of our email system (including but not limited to your full name, email address and the content, date and time of your email correspondence);
- information we record through your use of our telephone system where such telephone lines are recorded for regulatory purposes; and
- information obtained through an exit interview with you (upon your departure from our organisation), including your reasons for leaving.
Uses of your personal data
Your personal data may be stored and processed by us for the following purposes:
- to meet our obligations under your contract of employment with us. For example, we use your personal data to pay you, to evaluate your individual performance, and to provide benefits in connection with your employment;
- to comply with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities). For example, we may be obliged to record certain individuals’ phone lines and process certain data for trade/transaction reporting purposes;
- to manage our information technology and to ensure the security and use in accordance with our policies and procedures of our systems (including our email system);
- to enable us to contact you or your next of kin in the event of an emergency; and
- in order to carry out diversity monitoring as required by law and / or permitted by law.
In the event you do not provide the information necessary for the elaboration and the performance of your employment agreement and/or the formalities with the relevant authorities, we may not be able to proceed with the hiring process.
We are entitled to use your personal data in these ways because:
- we may have legal and regulatory obligations to discharge (e.g. use of employee data to comply with any obligations to provide end of service gratuity payments);
- we may need to for the purposes of occupational health and to take decisions regarding your fitness for work;
- it is necessary for reasons of substantial public interest, such as to monitor diversity and equality statistics; and
- the use of your personal data as described may be necessary for our legitimate business interests (or the legitimate interests of one or more of our affiliates), such as:
- allowing us to effectively and efficiently administer and manage the operation of our business including establishing, exercising or defending our legal rights for the purposes of legal proceedings;
- protecting information which is proprietary to us;
- ensuring a consistent approach to the management of our employees and the employees of our affiliate companies worldwide;
- maintaining compliance with internal policies and procedures, and if appropriate conducting internal investigations; and/or
- contacting you or members of your family in case of an emergency.
Disclosure of your information to third parties
We may disclose your personal data to our affiliates within the Point72 group for the purposes of:
- the management and administration of our business and our affiliates’ business;
- complying with the functions that each of them may perform relating to regional or global HR operations;
- benchmarking employee salaries and benefits with similar organisations;
- assessing compliance with applicable laws, rules and regulations, and internal policies and procedures across our business and our affiliates’ business;
- where your personal data are held as part of an internal directory, enabling adequate communication with you for the performance of employment duties or for emergency reasons; and
- the administration and maintenance of the databases storing personal data relating to our employees or to employees of our affiliates.
We will take steps to ensure that the personal data is accessed only by employees of our affiliates that have a need to do so for the purposes described in this privacy notice.
We may also share your personal data with third party agents and contractors outside of our corporate group for the purposes of providing services to us, including payroll service providers, IT and communications providers, law firms, accountants, auditors and Approved Publication Arrangement and Approved Reporting Mechanism service providers. These third parties will be subject to confidentiality requirements and they will only use your personal data as described in this privacy notice.
We may also share your personal data with our business partners (including banks, brokers and trading counterparties) to the extent it is necessary for them to receive this information as part of Point72’s general business operations.
In case of a potential sale of the company or of its assets, we may communicate your personal data to a potential buyer for the purpose of due diligence operations.
Disclosure of your personal data may also, under certain circumstances, be required by law. Your personal data will also, if necessary, be shared with judicial, tax or regulatory authorities acting in the performance of their duties and the exercise of their powers.
Recording phone conversations
Point72 may record phone conversations relating to certain financial transactions in order to prevent market abuse and insider dealing. These recordings will only be shared in accordance with the “Disclosure of your information to third parties” section above, and in accordance with applicable law to satisfy regulatory requirements.
The recordings will be kept for a maximal duration of 5 years.
You will be able to exercise your rights relating to these recordings as described in the section below “Your rights”.
Transfers of personal data outside the DIFC
The personal data that we collect from you may be transferred to, and stored at, a destination outside the DIFC, in particular, the United States and/or the United Kingdom. It may also be processed by individuals operating outside of the DIFC who work for our affiliates in the United States, the United Kingdom or elsewhere or for one of our suppliers.
Where we transfer your personal data outside the DIFC, we will ensure that it is protected in a manner that is consistent with how your personal data will be protected by us in the DIFC.
This can be done in a number of ways, for instance:
- the country that we send the data to might be approved by the DIFC as offering a sufficient level of protection; or
- the recipient might have signed up to a contract based on “model contractual clauses” issued or approved by the DIFC, obliging them to protect your personal data.
In other circumstances, the law may permit us to otherwise transfer your personal data outside the DIFC. In all cases, however, we will ensure that any transfer of your personal data is compliant with applicable data protection law.
You can obtain more details about the protection given to your personal data when it is transferred outside the DIFC (including a copy of the standard data protection clauses which we have entered into with certain recipients of your personal data) by contacting us in accordance with the “Contacting us” section below.
Retention of personal data
How long we hold your personal data for will vary. The relevant retention period will be determined by various criteria including:
- the duration of your employment contract;
- legal obligations which require Point72 to keep your personal data as archives after the expiration of your employment agreement; and
- the establishment, exercise or defence of Point72’s rights as employer, which will require us to store your personal data as archives after the expiration of your employment contract and until the expiration of the applicable limitation period.
Your rights
You have a number of legal rights in relation to your personal data held by us under applicable data protection laws, including the right to request that we:
- provide you with information regarding the processing of your personal data, and access the personal data which we hold about you;
- in certain circumstances, provide you with a copy of your personal data in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us;
- correct your personal data if it is inaccurate or incomplete;
- erase your personal data; or
- restrict our processing of your personal data. In certain circumstances you can also object to our other processing of your personal data.
You may also object to decisions being taken by automated means which produce legal effects concerning you or which similarly significantly affect you. You also have the right not to be discriminated against, if and when you exercise your rights and the right to withdraw your consent in certain circumstances.
These rights will be limited in some situations; for example, where we are required to process your personal data by applicable law or where we are legally entitled to refuse your request.
You also have the right to lodge a complaint with the data protection regulator (details of which are provided below) if you think that any of your rights have been infringed by us.
You can find out more information about your rights by contacting the relevant data protection regulator. In the DIFC, you can contact the Commissioner of Data Protection or search their website at difc.ae/business/registrars-and-commissioners/commissioner-of-data-protection.
To exercise your rights, please contact us using the details set out below.
Contacting us
If you would like further information on the collection, use, disclosure, transfer or processing of your personal data or the exercise of any of the rights listed above, please address questions, comments and requests to DataPrivacy@Point72.com.
Changes to this Privacy Notice
This privacy notice takes effect on 10 January 2024. If we change it, to keep you fully aware of our processing of your personal data and related matters, we will post the new version to the website.