Solidigm Worldwide Candidate Privacy Notice

Last Updated: January 2026

About this Notice

This Worldwide Candidate Privacy Notice (“Candidate Privacy Notice”) provides details on how Solidigm, located at 10951 White Rock Road, Rancho Cordova, CA 95670, and its subsidiaries (collectively called “Solidigm,” the “Company,” “we,” “us,” or “our”), as data controllers, may process (including collect, use, and share) the Personal Information we collect about you or from you as a Candidate for employment with Solidigm.  If you receive an offer, you may be retained by a subsidiary.  For example, Candidates who accept employment for positions assigned to the United Kingdom (“UK”) may be employed by SK hynix NAND Product Solutions UK Limited. If you accept a position and do not know which entity will employ or retain you, please contact the HR Help Desk or your Business HR Representative.

This Privacy Notice updates Solidigm’s prior privacy notice to reflect changes that Solidigm made since the prior version dated January 2025.  This updated version supersedes all prior versions.

For purposes of this Candidate Privacy Notice, “Personal Information” or “PI” means any information that identifies, relates to, or could reasonably be linked to an identifiable natural person. 

“Candidate” means an individual who is being recruited for, has expressed an interest in, and/or applied for employment  or executive position at Solidigm.  PI of a Candidate may also be referred to in this Personnel Privacy Notice as “Candidate PI.”

This Candidate Privacy Notice is in addition to the Solidigm Worldwide Personnel Privacy Notice, which will apply to you if you are employed by Solidigm, and the Solidigm General Privacy Notice found on the Solidigm website. 

Collection and Use of Your Personal Information

You may share and Solidigm may otherwise collect and process the following types of Candidate PI for recruitment and hiring purposes:

  • Personally Identifying Information: This includes PI such as name, date and place of birth, place of residence and address, citizenship, languages spoken;
  • Contact Details: This includes PI such as home or other mailing address, personal/mobile telephone number, and personal email addresses;
  • Educational and Professional Background:  This includes PI such as academic/professional qualifications, former or current compensation (if permitted by applicable law), work history, curriculum vitae (“CV”), resume, certifications, reference letters, and interview notes;

Other Information:  This includes any other PI that you choose to provide to Solidigm, whether in an application form, such as through a resume, CV, current professional biography, public profile you share with us, or otherwise.  Examples of PI under this category include, but are not limited to, PI about your hobbies, social preferences, etc.

Also, if your application progresses, including if you accept an offer for the position, you may share or Solidigm may collect, process, and use the following additional types of Candidate PI:

  • National Identifiers: This includes PI such as national ID/passport, immigration status and documentation, visas, social security numbers (US only), national insurance numbers;
  • Biometric Data: This includes PI relating to you physical, physiological, or behavioral characteristics that allows for the confirmation of your identity, such as facial images, and video meeting or presentations;
  • Background Check Information: This includes any PI provided by you or obtained through a third-party background investigation service provider (including, for example, criminal records) and sanctions check information (for vetting purposes and compliance with certain laws) where legally permissible, subject to any further legal requirements;
  • Medical and Disability Information: This includes PI such as information about your short- or long-term disabilities or illnesses that you might share with your recruiting professional at Solidigm that is relevant to us and the particular position you are being considered for by us, in each case to the extent permitted by applicable law;
  • IT information: This includes PI required to provide access to the Company’s information technology systems and networks, such as internet protocol addresses, log files, login information, passwords, software/hardware inventories. For further information about how we process IT information, see the “Contact information” below; and
  • Demographic Information, Government Issued Identification Numbers, and other Information Required to Onboard You: This includes PI you share with the Company to the extent required by law to prove your eligibility to work for the Company as well as PI you optionally provide to Solidigm about your demographics.

Where lawfully authorized and/or with your consent, Solidigm may also collect certain demographic data, which qualifies as sensitive PI, such as race, ethnicity, sexual orientation, and disability, to help Solidigm in its efforts towards diversity and inclusion. This information, when collected, is generally done so on the basis of the Candidate’s voluntary consent, and Candidates are not required to provide this information unless it is necessary for us to collect such information to comply with legal obligations.

If a Candidate is engaged for employment by Solidigm, then the personal information from the first day of employment through the duration of employment is covered by our Personnel Employee Privacy Notice.  This Candidate Privacy Notice continues to apply to each Candidate’s personal information.

Purposes for Collection and Use of Your Personal Information

We may collect and use your PI, including the PI you submit as a Candidate, to process your application for employment or other submission, or non-employee executive, and comply with all laws applicable to your candidacy, including, for example, for employees confirming your eligibility to work in a specific geographic location, and administering and evaluating your employment application.  Solidigm may also process your PI to complete the on-boarding process should you accept a role with us, including conducting background checks and pre-engagement verifications directly related to your application. We will use your PI for multiple specific reasons related to processing your application, along with other legitimate business purposes and legal bases noted below (the “Processing Purposes”):

  • Administering and processing your employment application or other submission for a role with Company, as well as communicating with you throughout the entire recruiting process;
  • Determining your suitability for the role for which you have applied, or for other roles.  This includes assessing and reviewing your prior experience, and your interview information;
  • Conducting background checks and pre-engagement verifications directly related to your application.  Any such background check may include a review of a limited criminal history, national ID verification, as well as of your credit history (for certain executive level positions), employment and educational background, and extended global sanctions, to the extent permitted by applicable law;
  • Complying with applicable laws and regulations (e.g., tax, health and safety, anti-discrimination, and labor and employment laws), including, for example, your ability to legally work, initiating payroll, identifying tax withholdings and benefits, and complying with statutory and retention requirements and cooperating with the legal process, including, for example, government investigations and seeking legal counsel and other professional consultations;
  • If provided, and with your explicit consent, we may use information about your disability status and demographic information, to provide appropriate accommodations, or promote workplace equality. 

Legal Basis for Processing Your Personal Information.

The legal basis for processing your PI can be one or more of the following four legal bases:

  • on our legitimate business interests in managing our relationship with you and legitimate business interests in carrying out our business obligations;
  • to take steps prior to our potential pre-contractual measures relating to our potential future relationship with you;
  • on our complying with laws that apply to your PI and the processing that is necessary to satisfy our legal and regulatory obligations; and
  • your consent as required by law.

Submissions of PI to Solidigm by You and Collected from Third Parties

Resumes, CVs, and other similar documents and information submitted by you to Solidigm for review should include only information relevant to your job qualifications and employment history, including, for example, your prior employment, relevant positions and dates, significant accomplishments, skills and qualifications, education, degrees, or certifications obtained, dates, and issuing institutions.  As permitted by local law, during your candidacy and the hiring process, we also may obtain information about you from publicly available sources or from third parties, including, for example, references, a third-party recruitment vendor, a third-party background investigation and pre-employment verification service provider, or other similar sources.  In so doing, we will take steps to confirm that the PI we receive about you from any third parties has been collected with your consent or that those third parties are otherwise legally permitted to disclose your PI to Solidigm.

If you provide PI to Solidigm about other individuals (for example, information such as a phone number or job title about your references), please ensure that prior to any such disclosure to the Company, (1) you have informed those other individuals about your intent to provide Solidigm with their PI, and (2) those other individuals agree that you may provide us with their PI.

We recommend that you do not provide us with any of your sensitive personal characteristics, including, for example, your resident registration numbers, height, weight, religion, age, and political beliefs.  Subject to applicable law, however, Solidigm may request that you self-identify with certain characteristics, such as gender, race, ethnicity, or veteran status.  You may choose not to disclose such characteristics, and choosing not to disclose those will not subject you or your application for employment to any adverse treatment.  If you do disclose those characteristics to us, we will keep that information confidential and use it only for internal reporting and statistical purposes, as well as to comply with applicable laws.

Solidigm uses a third-party solution, SmartRecruiters, to process your application.  You can find the third party’s privacy policy on its website.

Who Accesses Your Personal Information

We may share your PI with third parties, including affiliates of Solidigm, for any of the following Processing Purposes:

  • To the Company and its Affiliates:  Because Solidigm is part of a larger corporate group with headquarters in the United States and offices and employees/contractors in multiple jurisdictions, and because the corporate group shares executive oversight, human resources, procurement, and management decision making, we may share your PI to various internal parties involved in the process, in order to make a hiring decision and assure compliance with applicable laws, policies, and procedures.  In addition, Solidigm may share your PI with its parent company, SK hynix Inc., headquartered in South Korea, which owns the Company.
  • To Regulators, Legal Authorities, and Other Third Parties: We may share your PI with regulators, administrative tribunals, courts and other legal authorities, independent external advisers, and internal compliance and investigation teams, as necessary to fulfill any of the Processing Purposes listed above (Art. 6 GDPR, Section 26(1) BDSG).
  • To Data Processors: Solidigm will provide PI to its data processors as necessary to fulfill any of the Processing Purposes.  For example, these data processors may carry out instructions related to data hosting services or similar functions, legal or regulatory compliance services, and recruitment or workforce administration.  Where required, these data processors will be subject to contractual obligations to implement appropriate technical and organizational measures to safeguard your PI, and to process it only as instructed to fulfill any of the Processing Purposes.

For the Processing Purposes, Solidigm may process and store your PI on systems used by Solidigm in the United States as well as other secure locations as necessary. Some Solidigm recipients of your PI are located within and outside of the European Economic Area (the “EEA”), the UK, and Asia. 

If you are a Candidate in the EEA or the UK applying for a position within Solidigm, we will be the controller of your data for the purposes of your application’s receipt and review and for human resources administration.  Under those circumstances, local hiring legal entities may also be the data controllers for your local recruitment related processing.

Solidigm has established a legal basis and purpose for processing your PI,  and has entered into appropriate data transfer mechanisms (such as the standard contractual clauses), obtained your consent as required, and implemented other appropriate safeguards to provide you with an adequate level of data protection.  In addition, we confirm that we have implemented appropriate technical and organizational security measures designed to protect your PI against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure, or access, and against all other unlawful forms of data processing. To see if you have the right to request an explanation of the appropriate safeguards, email DSRequests@Solidigm.com.  If you have the right, you may request the information by CLICKING HERE.

As such transfer of your PI is necessary and unavoidable for the application process, such data transfer to third countries outside the EEA is permitted under Art. 49 (1) (b) GDPR.

Only authorized personnel will have access to your PI with a Processing Purpose described in this Candidate Privacy Notice.

Records Retention

Solidigm will retain your PI no longer than is necessary to carry out any of the Processing Purposes described in this Candidate Privacy Notice, or as otherwise required or permitted by applicable law and Company procedures.  

We may retain your PI after the recruitment and application process has terminated, even if you did not receive or accept an offer of employment, to contact you about potential future opportunities or other recruitment purposes.  Where a different retention period is required by applicable law, however, we reserve the right to extend or alter any of its applicable records retention time periods.

Using a process that meets industry standards, Solidigm will permanently delete your PI when no longer necessary for any of the Processing Purposes or as described immediately above.  We will continue to process (including use, disclose, and store) any retained PI consistent with this Candidate Privacy Notice. 

Automated Decision Making

We may make certain decisions based solely on automated processing in a variety of ways (including through the use of machine learning and/or artificial intelligence (“AI”)) to support and improve business operations. Solidigm does not, however, subject your Personal Information to automated decision making that produces legal or similarly significant effects. To exercise any rights and choices available, you can visit the Solidigm Data Subject Request link by CLICKING HERE.

With some job requisitions and select jurisdictions, Solidigm may deploy a tool to perform specific recruiting tasks that rely on machine learning AI. This tool screens internal and external candidates by generating a score based on the matched qualifications provided by the candidates and the qualifications outlined in the job requisition. Our recruiters use the score as a guide to further evaluate candidates. The score does not automatically result in a decision as to whether or not the candidate moves forward. Additionally, we use this tool to consider candidates for open job requisitions. If you are a match, a Solidigm recruiter may contact you regarding the matched requisition.

In both scenarios, the use of the tool does not replace human judgment. It merely helps our recruiters and hiring managers expediently identify which candidates have stated that they meet the requirements of the jobs to which they applied or could apply. Our recruiters and hiring managers have discretion on which applicants they select, and what information they weigh or consider. These tools do not influence any decision making.

If you previously opted in, but now wish to opt-out of either activity outlined above, please submit a request by CLICKING HERE.

Measures Designed to Protect the Safety of PI

Solidigm takes the following measures that are designed to protect the safety of PI:

  • Managerial measures: Establishment and implementation of internal management plans, regular training of employees, etc.;
  • Technical measures: Management of access rights to PI processing systems, installation of access control systems, encryption of personally identifiable information, installation of security program, etc.; and
  • Physical measures: IT access controls of the data storage room, etc.

Geography-Specific Provisions:

Solidigm is a worldwide organization with employees in different countries, regions, and states.  The regulators of these different areas of the world have passed different types of laws to protect privacy.  Some laws are stricter while others offer different rights.  We provide the following additional information to those of you who are protected by the applicable laws.

Your Choices and Rights Concerning Your PI

Depending on the laws that apply to your PI, you may have certain rights regarding the PI you provide to Solidigm.  Those rights may differ among jurisdictions.

If you are in the EEA, UK, California, China, or Mexico, you have the following rights:

Who Accesses Your Personal Information

The Company may share your PI with third parties, including affiliates of the Company, for any of the following Processing Purposes:

  • To the Company and its Affiliates:  Because the Company is part of a larger corporate group with headquarters in the United States and offices and employees/contractors in multiple jurisdictions, and because the corporate group shares executive oversight, human resources, procurement, and management decision making, the Company may share your PI to various internal parties involved in the process, in order to make a hiring decision and assure compliance with applicable laws, policies, and procedures (Art. 6 (1) sentence 1 lit. f GDPR).  In addition, the Company may share your PI with its parent, SK hynix Inc. headquartered in Korea, which wholly owns the Company.
  • To Regulators, Legal Authorities, and Other Third Parties:  The Company may share your PI with regulators, administrative tribunals, courts and other legal authorities, independent external advisers, and internal compliance and investigation teams, as necessary to fulfill any of the Processing Purposes listed above (Art 6 GDPR).
  • To Data Processors: The Company will provide to data processors PI necessary to fulfill any of the Processing Purposes.  For example, these data processors may carry out instructions related to data hosting services or similar functions, legal or regulatory compliance services, and recruitment or workforce administration.  Where required, these data processors will be subject to contractual obligations to implement appropriate technical and organizational measures to safeguard your PI, and to process it only as instructed to fulfill any of the Processing Purposes.

For the Processing Purposes, the Company may process and store your PI on systems used by the Company in the United States as well as other secure locations as necessary. Some recipients of your PI from the Company are located within and outside of the European Economic Area and United Kingdom (collectively, the “EEA”), and Asia.

If you are a Candidate in the EEA applying for a position within the Company, the Company will be the controller of your data for the purposes of your application’s receipt and review and for human resources administration.  Under those circumstances, local hiring legal entities may also be the data controllers for your local recruitment related processing.

The Company has established a legal basis for processing your PI by, among others, establishing the legal basis for the Processing Purposes, which may include entering into appropriate data transfer agreements, obtaining your consent as required, and implementing other appropriate safeguards to provide you with an adequate level of data protection.  Based on those, the Company confirms that it has implemented an adequate level of global protection for your PI.  The Company also confirms that it has implemented appropriate technical and organizational security measures designed to protect your PI against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure, or access, and against all other unlawful forms of data processing. To see if you have the right to request an explanation of the appropriate safeguards, email DSRequests@Solidigm.com.  If you have the right, you may request the information by CLICKING HERE.

As such transfer of your PI is necessary and unavoidable for the application process, such data transfer to third countries outside the EEA is permitted under Art. 49 (1) (c) GDPR.

Only authorized personnel will have access to your PI with a Processing Purpose described in this Candidate Privacy Policy.

Records Retention

The Company will retain your PI no longer than is necessary to carry out any of the Processing Purposes described in this Candidate Privacy Policy, or as otherwise required or permitted by applicable law and Company procedures.  

The Company may retain your PI after the recruitment and application process has terminated, even if you did not receive or accept an offer of retention (employment), to contact you about potential future opportunities or other recruitment purposes.  Where a different retention period is required by applicable law, however, the Company reserves the right to extend or alter any of its applicable records retention time periods.

Using a process that meets industry standards, the Company will permanently delete your PI when no longer necessary for any of the Processing Purposes or as described immediately above.  The Company will continue to process (including use, disclose, and store) any retained PI consistent with this Candidate Privacy Policy.  

Automated Decision Making

The Company may make certain decisions based solely on automated processing in a variety of ways (including through the use of machine learning and artificial intelligence) to support and improve business operations. The Company does not, however, subject your Personal Information to automated decision making that produces legal or similarly significant effects. To exercise any rights and choices available, you can visit the Solidigm Privacy Rights Request link by CLICKING HERE.

With some job requisitions and select jurisdictions, the Company may deploy a tool to perform specific recruiting tasks that rely on machine learning (also referred to as artificial intelligence or AI). This tool screens internal and external candidates by generating a score based on the matched qualifications provided by the candidates and the qualifications outlined in the job requisition. The Company recruiters use the score as a guide to further evaluate candidates. The score does not automatically result in a decision as to whether the candidate moves forward. Additionally, the Company uses this tool to consider candidates for open job requisitions. If you are a match, a Solidigm recruiter may contact you regarding the matched requisition.

In both scenarios, the use of the tool does not replace human judgment. It merely helps the Company recruiters and hiring managers expediently identify which candidates have stated that they meet the requirements of the jobs to which they applied or could apply. Our recruiters and hiring managers always have complete discretion on which applicants they select, and what information they weigh or consider. These tools do not influence any decision making. The tools simply indicate which candidates match the stated job requirements and to what extent.

If you previously opted in, but now wish to opt-out of either activity outlined above, please submit a request by CLICKING HERE.

Right California EEA/UK China Mexico
Right of Access/Know/Confirm X X X X
Right to Rectification/Correction X X X X
Right to Erasure/Deletion X X X  
Right to Restrict Processing   X    
Right to Portability   X X  
Right to Object and Rights Concerning Automated Decision Making   X X  
Right to Withdraw Consent   X X  
Rights Related to Sale and Sharing/Targeted Advertising  X   X  
Right to Limit the Use and Disclosure of Sensitive PI X      
Right to Cancellation of PI       X
Right to Opposition of PI       X

Generally, the rights are described as follows:

  • Right of Access/Know/Confirm: The right to confirm with Solidigm whether the PI has been processed and, if so, how it was processed.  This also includes the right to request access to that PI.  The right includes access to the following information to the extent not already included in this Privacy Notice: the categories of PI processed, the purpose of the processing, the recipients or categories of recipients, the source of the PI if the Candidate is not the source, and the existence of automated decision-making including information about the logic, significance, and envisioned consequences for the Candidate.
  • Right to Rectification/Correction: The right to rectify inaccurate or incomplete PI concerning the Candidate.
  • Right to Erasure/Deletion: The right to have us erase PI about the Candidate, outside of Solidigm’s normal records retention policies.  However, we  may continue to retain the PI for legitimate purposes, including statistical purposes, depending on applicable statutory and regulatory requirements.
  • Right to Restrict Processing: The right to request that Solidigm limit or restrict the processing of the Candidate PI.  Where we process Candidate PI for the Processing Purposes, however, we may have a legitimate interest in processing that PI, which may override the request.
  • Right to Portability: The right to receive the Candidate PI that the Candidate provided to Solidigm, in a structured, commonly used, and machine-readable format, and the Candidate may have the right to have the PI transmitted to another entity.
  • Right to Object and Rights Concerning Automated Decision Making: The right to object to or complain about, at any time, the processing of the Candidate PI, including for allegations of profiling, and we may be required to stop processing the PI for that Processing Purpose unless we can do so under another legal bases.  This could include a request by the Candidate for human intervention, in relation to an automated decision that Solidigm made, so that the Candidate may express the Candidate’s view and contest the automated decision.
  • Right to Withdraw Consent:  After providing Solidigm with consent to the processing of PI, Candidate may withdraw it at any time with future effect.  Withdrawing consent will not, however, affect the lawfulness of any processing we conducted prior to the withdrawal, or Solidigm’s processing of Candidate PI under other legal bases.
  • Rights Related to Sale of PI and Sharing/Targeted Advertising: Solidigm does not sell PI, does not share PI with others for their advertising purposes, and does not use others’ PI to advertise to you.
  • Right to Limit the Use and Disclosure of Sensitive PI: The right to tell Solidigm to limit our use and disclosure of your sensitive PI to the use that is necessary for the purpose.
  • Right to Oppose the Processing of Your PI: You have the right to tell Solidigm that you oppose the processing of your personal information when your specific situation requires it. This means you may ask us to stop processing your personal information—even if the processing is lawful—when continuing to do so could cause you harm, or when you do not wish your information to be subject to automated processing that produces significant effects.
  • Right to Cancel Your Personal Information: You have the right to tell Solidigm that you want us to cancel your personal information when it is no longer necessary for the purposes for which it was collected, or when you believe it is being processed in violation of the law.

Candidates in some jurisdictions also have the right to lodge a complaint with the competent data protection supervisory authority in the respective jurisdiction.

Candidates and their legal personal representatives with one or more of these rights may exercise the rights by completing the online form available by CLICKING HERE.  If your jurisdiction is not listed here and to see if your jurisdiction provides you with rights, complete the questions on the request form.  Solidigm reserves the right to validate the requestor’s identity in accordance with applicable laws, including when the request is made by a representative of the data subject.  We also reserve the right to seek additional details to assist in our response and to aid us in locating Candidate PI.

Notice to California Residents

California residents may exercise their rights noted above in one of three ways: 1) by completing the online form when you CLICK HERE, 2) by emailing DSRequests@Solidigm.com, or 3) by calling the toll-free number 1-888-209-0378.

In addition to the information above, this section describes Solidigm’s practices regarding the PI we collected about California residents in the last 12 months, the sources of that information, our business or commercial purposes for collecting that information, and the third parties with whom we shared that information.  Solidigm does not “sell” or “share” your PI as those terms are defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of PI (described in more detail above) Recipients to whom PI is disclosed for a business purpose
Resumes, CVs, and other similar documents and information that you provide, which may include sensitive PI Our affiliates and subsidiaries, our services providers, third parties when required by law or to comply with valid legal process, third parties to enforce our rights or protect our rights, third parties in connection with or during negotiations of any corporate transaction, any third party with your consent or at your direction, or as we believe to be necessary and appropriate.
Publicly available PI Our affiliates and subsidiaries, our services providers, third parties when required by law or to comply with valid legal process, third parties to enforce our rights or protect our rights, third parties in connection with or during negotiations of any corporate transaction, any third party with your consent or at your direction, or as we believe to be necessary and appropriate.
Professional and background check PI collected by third party service providers including sensitive PI Our affiliates and subsidiaries, our services providers, third parties when required by law or to comply with valid legal process, third parties to enforce our rights or protect our rights, third parties in connection with or during negotiations of any corporate transaction, any third party with your consent or at your direction, or as we believe to be necessary and appropriate.

EEA, UK, and Other Countries with Privacy Rights Laws

EEA/UK

The Global Data Protection Regulation (“EU GDPR”) and the UK’s adoption of the EU GDPR as well as the adoption by EEA states (collectively “GDPR”) protects the processing of PI in the EEA and the UK.  The following provides you with additional information about our privacy practices: 

  • As a legal basis for processing PI in the EEA and UK, we process your personal information for employment and related purposes based on legal requirements and legitimate business needs. This includes, without limitation, managing your employment, fulfilling our legal obligations, and supporting company operations. Certain sensitive information, such as health data, is processed when necessary for legal or employment reasons, or when you have given your consent.
  • The legal basis for the above mentioned transfer of PI to the Company’s Affiliates:  Because Solidigm is a global company with headquarters in the United States and offices in multiple countries, we may share your personal information within the organization. This is necessary to establish, manage, or end your candidacy for employment with Solidigm and for compliance with applicable laws, policies, and procedures.
  • The legal basis for the above-mentioned transfer of PI to Regulators, Legal Authorities, and Other Third Parties is to enable Solidigm’s compliance with laws or court orders (for example, tax filings or investigations), responding to requests from public bodies such as labor inspectors, and protecting our legitimate interests—such as managing legal claims or ensuring compliance with company policies.

South Korea

Solidigm processes your PI within the scope expressly indicated in Purposes for Collection and Use of Your Personal Information above.  In some cases, if you provide consent to Solidigm for the use of your PI, we may notify you of the third parties that will receive your Personal Information.

China

The Personal Information Protection Law (the “PIPL”) provides any person located in China and/or any PI that has been collected or is processed within China with specific rights and obligations aimed at protecting the rights and interests of individuals, regulating PI processing activities, and facilitating reasonable use of PI.

With respect to this Privacy Notice, “China” refers to mainland China, excluding Hong Kong Special Administrative Region (“SAR”), Macau SAR, and the Taiwan Region.

Legal basis. Where the PIPL applies, we process your PI based one or more of the following legal bases:

  • your consent;
  • where it is necessary to enter into or perform a contract to which you are a party, or for the implementation of human resources management in accordance with the labor rules and regulations formulated in accordance with applicable laws and the collective contract concluded in accordance with applicable laws;
  • where it is necessary for the performance of our statutory obligations;
  • where it is necessary for the response to a public health emergency or for the protection of the life, health and property safety of a natural person in an emergency;
  • where it is for the purposes of public interest, and the handling of PI is within a reasonable scope;
  • where we reasonably process the PI that has been publicly disclosed by you or otherwise disclosed publicly in a lawful manner within a reasonable scope in accordance with the provisions of PIPL; and

other circumstances prescribed by laws and administrative regulationsSpecific notice about sensitive PI. Some of the PI we process about you may fall into the scope of sensitive PI under the PIPL, including the national identifiers (such as national ID/passport, visas), biometric data (such as facial images), financial information (e.g., bank account), non-public criminal records, medical and disability Information (such as short- or long-term disabilities or illnesses). We only process your sensitive PI where it is necessary to fulfill any of the Processing Purposes listed above.

Cross-border transfer of PI. Because Solidigm is a global company, it may be necessary for us to transfer your data internationally to our affiliates and trusted third parties located outside of China. Where we do so, we will secure your PI by using appropriate safeguards consistent with applicable laws and regulations that apply to us.

Mexico

Our processing of personal data in Mexico complies with the Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”). We provide individuals with their full ARCO rights—the rights of Access, Rectification, Cancellation, and Opposition—enabling you to request information about your personal data, correct inaccuracies, request its deletion through a blocking and subsequent removal process, or object to its processing when justified.  We process personal data only for the purposes described in this Privacy Notice.

How to Contact Us

To submit a data subject request, click here and provide the information requested.  If you have questions or concerns about Solidigm’s privacy practices or to exercise any rights that you may have that is described in this Privacy Notice, you may contact the Solidigm Data Protection Officer by emailing SolidigmDPO@solidigm.com.  Requests will be responded to in accordance with applicable data protection laws.