Global Privacy Statements

Supplemental Privacy Statements

Updated: May 2025
Additional Information for EEA, Swiss and UK Residents

The Ping Identity Privacy Policy for Consumers and Professionals (our “Privacy Policy”) provides most of the information required by the EU General Data Protection Regulation and similar data protection laws in Switzerland and the United Kingdom. However, supplemental privacy notice gives EEA Swiss and UK residents the additional information required by these data protection laws.

1. Information about Ping Identity

This notice is being provided by Ping Identity Corporation and its EEA, Swiss and UK affiliates.

Ping Identity
1001 17th Street
Suite 100
Denver, CO 80202 USA
privacy@pingidentity.com

Ping Identity Corporation is based in the United States. Our representative in the UK is:

Ping Identity UK Limited
privacy@pingidentity.com

We have appointed a Data Protection Officer (DPO) who can be contacted at dpo_privacy@pingidentity.com

2. The Purposes and Legal Basis for Processing, including Legitimate Interests

Our Privacy Policy for Professionals and Consumers explains the reasons why we process your Personal Information. We only process Personal Information when we have a legal basis for the processing, such as:

We may also process your Personal Information for the purposes of our legitimate interests, provided that such processing shall not outweigh your rights and freedoms. In particular, we may process your Personal Information as needed to:

3. Automated Decision-Making and Profiling

We may use analytics for product development purposes, such as to understand product usage, or for security purposes, such as to identify unauthorized login attempts. We will not make automated decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology.

4. When You Are Required to Provide Personal Information to Ping Identity

In most cases, you are not required by law to provide any Personal Information to Ping Identity. You are required to provide certain Personal Information to enable us to enter into a contract with you, so that you can use our products and services. Our registration forms indicate which data elements are required for our contracts. If you do not provide these data elements, we cannot do business with you.

5. Your Rights

Ping Identity also respects your rights to access, correct and request erasure or restriction of your Personal Information as required by law. This means:

You can exercise your rights by visiting Your Privacy Choices.

If you believe that we have processed your Personal Information inappropriately, you may also contact us at privacy@pingidentity.com. If we do not resolve your complaint, you can also contact our data protection officer.

You also have the right to lodge a complaint with a data protection supervisory authority. You can find the list of the data protection authorities for the UK and the EU at the linked pages.

6. International Transfers

As noted in the Ping Identity Privacy Statement, your Personal Information may be transferred to, stored at or processed in the United States and other countries which may not have equivalent privacy or data protection laws.

We generally use approved Standard Contractual Clauses such as the EU Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK or Switzerland where appropriate) to assure that Personal Information is adequately protected when it is transferred out of the European Economic Area or Switzerland, but we may also make transfers to recipients with approved Binding Corporate Rules or other approved mechanism. We also participate in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). Please see the Ping Identity Privacy Policy for additional information on our cross-border transfer safeguards. Please contact the privacy@pingidentity.com for a copy of the Standard Contractual Clauses.

7. Data Retention

We will retain your Personal Information for as long as the information is needed for the purposes set forth in Section 3 above and for any additional period that may be required or permitted by law. You may request that we delete your Personal Information by exercising Your Privacy Choices. Unless we have a compelling interest in retaining your information, it will be deleted within 30 days of your request.

Additional Information for California Residents

The Ping Identity Privacy Statement (our “Privacy Statement”) provides most of the information required by the California Consumer Privacy Act and the California Privacy Rights Act (collectively, the “CCPA”). This supplemental privacy notice gives California residents the additional information required by the CCPA.

1. Your California Privacy Rights

The CCPA provides California residents with specific privacy rights:

Personal information of children under 16 cannot be sold or shared without affirmative consent. We do not sell or share any personal information of children under 16 without affirmative consent.

If you are a California resident, you may exercise your rights by:

If you would like to designate an agent, please send an email from your own email address to privacy@pingidentity.com indicating the name and email address of your agent. We will respond to that person’s requests using both your email address and the agent’s email address.

If you are exercising CCPA access or deletion rights on behalf of another person, please understand we will need to verify your authority with the person you seek to represent.

We will not retaliate against you if you exercise your rights under CCPA.

2. Additional CCPA Right to Know Disclosures

Ping Identity uses and discloses various categories of personal information and sensitive personal information as described in more detail in the Privacy Statement. We do not process any sensitive personal information for the purpose of inferring characteristics about you.

3. Financial Incentives

Ping Identity does not offer financial incentives for the collection or sale of personal information. We may offer individuals the opportunity to receive coupons or discounts via email. If you ask us to delete your information, we will not be able to send you additional coupons or discounts via email, however coupons or discounts sent to you previously will continue to be honored according to their original terms.

Ping Identity Career Center Privacy Statement

Ping Identity is committed to respecting the privacy of the individuals with whom we work. We have a Global Privacy Policy that protects all the personal information that is entrusted to us, no matter how or where it is collected, used or stored. We also comply with applicable privacy and security laws.

This Privacy Statement is designed to provide you with an overview of our practices regarding the personal information we collect, use, store and, when necessary, transfer, in connection with our recruiting and hiring functions It also provides information about how to access your information and exercise other privacy rights that you may have.

This Privacy Statement is being provided by:
Ping Identity
1001 17th Street
Suite 100
Denver, CO 80202 USA

1. Sources of Personal Information

In many cases, we collect personal information directly from you. We may also obtain information about you from third parties, such as recruiters, background screening companies, and platforms, such as LinkedIn. We may collect information about you automatically when you apply for a job online.

When we collect information from you about other individuals, such as people you list as references, we rely on you to obtain consent from them for the disclosures to us where required by law and to provide them with information about their rights and our privacy practices.

2. General Purposes for Collecting, Using and Disclosing Personal Information

We only collect, use and disclose personal information when we have a legal basis for the processing. We process your personal information as needed to evaluate your job application and for other customary human resources purpose. We generally collect, use, and disclose personal information from job applicants for the following purposes:

3. Specific Categories of Personal Information

This chart describes the categories of Personal Information that we collect from candidates in connection with our recruiting functions.

Contact Information
Representative Data Elements
  • You name, previous names and preferred names
  • Mailing address
  • Email address
  • Home or mobile telephone numbers
Sources
We collect this information from you and from recruiters. We may also obtain your information from publicly available sources, such as LinkedIn. We may use a service provider to update or standardize mailing addresses.
Primary Purposes for Collecting
We use contact information to communicate with you by mail, email, telephone or text, such as to schedule interviews or provide status of your application.

Contact information is also used to help us identify you and personalize our communications, such as by using your preferred name.
Categories of Recipients
We disclose contact information to our affiliates, service providers, contractors and others, such as couriers and telecommunications providers.
Candidate Information
Representative Data Elements
  • Biographical data, resume or CV
  • Data from LinkedIn profiles and similar platforms
  • Education and degree information
  • Professional licenses, certifications and memberships and affiliations
  • Personal and professional skills and talents summaries (e.g., languages spoken, CPR certification status, community service participation), interests and hobbies
  • Professional goals and interests
Sources
We collect this type of information from you and from publicly available sources, such as LinkedIn, background screening companies, former employers and third parties that verify your credentials. We may receive information from individuals that provide you with professional references.
Primary Purposes for Collecting
We use this information to help us understand you and your skills, to determine if you would be a good fit for the job that you applied for or other job opportunities that we may have.
Categories of Recipients
We disclose employee information to our affiliates, service providers, contractors and others, such as travel agencies, if we schedule interviews.
Application Information
Representative Data Elements
  • Position applied for, with date of application and related data
  • Results of any pre-employment assessments or tests
  • Correspondence with you and others, such as recruiters, references
  • Interview details and notes
Sources
We collect this type of information from you and from others, such as recruiters or professional references. We may collect this information automatically, such as if you apply for a job online.
Primary Purposes for Collecting
We use transaction information to manage our recruiting activities, to assess your qualification for the job and for internal business purposes, such as assessing overall response to our job postings.
Categories of Recipients
We disclose transaction information to our affiliates, service providers, contractors and others, such as recruiters.
Online & Technical Information
Please read our statement about Cookies & Online Privacy for additional information.
Representative Data Elements
  • IP address
  • Data from devices that connect to our networks
  • System logs, including access logs
  • Records from technology monitoring programs, such as suspicious activity alerts
Sources
We collect these data elements automatically when you interact with us online.
Primary Purposes for Collecting
We use the online and technical information for system administration, technology and asset management, information security and cybersecurity purposes.
Categories of Recipients
We disclose this information to our affiliates, service providers, contractors and others, such as IT and security consultants.

Because some of our web pages use cookies and other third party tracking tools it is also possible that your data may be shared with third parties for cross-contextual behavioral advertising or targeting online advertising. You can opt out of this sharing by exercising Your Privacy Choices.

In some cases, we may collect Inferred or Derived Information, such as a “success score” or “potential score.” We create inferred and derived data elements by analyzing information from your resume. These scores can help us predict which candidates will be successful in our company.

We may also collect certain sensitive data elements, such as your race or ethnicity, gender and disabilities for the purposes of equal opportunities monitoring, to comply with anti-discrimination laws and for government reporting obligations.

If you interview with us, we may collect additional data as needed to facilitate the interview. For example, we collect Audio-visual Information if we conduct interviews using video-conferencing tools. We may collect Financial Information, of needed to reimburse you for expenses, or Health Information if you need an accommodation. In each case, we only use and disclose the information for the purpose for which it was collected and our Everyday Business Purposes.

If we make you an offer of employment, we will also collect information needed for background screening and legal compliance, including your Government-issued Identification Number as needed for background screening (verification and/or vetting) and to document your eligibility to work. In this case, we will handle your information in accordance with our Global Data Privacy Notice for Staff.

4. Sensitive Personal Information

We collect, use and disclose sensitive personal information as needed for the purposes listed above. We do not use or disclose sensitive personal information about our workers other than as necessary for our human resources and compliance functions and for other legally authorized purposes. We do not process any sensitive personal information for the purpose of inferring characteristics about you.

5. Collection of Personal Information by Third Parties

In most cases, we only allow third parties to control the collection of personal information when those third parties are acting as a service provider or a contractor to us. These companies only retain, use and disclose your personal information in accordance with our contracts and applicable laws. However, we may receive personal information from third parties that we hire to identify candidates for us. These recruiters may collect personal information from you directly or from platforms where you have posted your biographic data such as job boards, professional organization or platforms such as LinkedIn.

6. Disclosures to Service Providers, Contractors and Other Entities

We do not sell personal information pertaining to our candidates or share it with third parties for cross-contextual behavioral targeting. We may disclose your personal information to the categories of recipients listed above in the following circumstances:

7. Your Privacy Choices

Ping Identity respects your rights to access, correct and request erasure or restriction of your personal data as required by law. Depending on your country or state or residence, these rights may include:

To exercise your rights, please visit Your Privacy Choices. You can also contact the Ping Identity Privacy Office at privacy@pingidentity.com.

Please understand that these rights are subject to some limitations. For example, we may require documentation to support certain corrections to your information, and we generally cannot restrict or delete personal information in those situations where our retention is required for our internal business purposes or to comply with law.

We will not retaliate against you if you exercise your privacy rights.

8. Automated Decision-Making and Profiling

We do not use profiling techniques or make automated employment decisions that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology. However, where permitted by law, we may use automated tools to reject job applications where the information you provide indicates that you do not meet the minimum qualifications for the job, such as having the right level of experience. We may also automatically reject applicants if the position is filled before your application has been considered.

9. Financial Incentives

Ping Identity does not offer financial incentives for the collection or sale of personal information from job applicants.

10. Information Security

We have implemented an information security program that is reasonably designed to protect the confidentiality and security of all the personal information that is entrusted to us. Our security safeguards protect against unauthorized access, improper use, alteration, destruction or accidental loss. Our service providers and data processors are contractually required to implement appropriate security controls.

We have also implemented procedures to deal with any actual or suspected data security breach and will notify you and the applicable authority about a breach as required by law.

11. Data Retention

We generally retain job applicant data for X years from the data of your application. This retention period allows us to analyze the response to our job posting over time. We may also identify other opportunities within Ping Identity that might be of interest to you. You can request that we delete your personal information by exercising Your Privacy Choices. If we do not have a legal basis for retaining your information, we will delete it.

Please note that if you are hired by us, your application data will become part of your human resources file, and subject to our Global Data Privacy Notice for Staff.

12. International Transfers

Ping Identity is headquartered in the United States. Your personal data may be transferred to, stored at or processed in a location outside the country or state of your employment which may not have equivalent privacy or data protection laws. However, regardless of where your personal data is transferred, we will protect it in accordance with our Global Privacy Policy, this Privacy Statement and applicable law. Where required, we use approved Standard Contractual Clauses and other approved data transfer mechanisms to assure that personal data is adequately protected. Please contact the Privacy Office if you would like more information about cross-border transfers or to obtain a copy of any applicable Standard Contractual Clauses.

13. Questions or Complaints

You may contact your local human resources manager or the Ping Identity Privacy Office if you have any questions or complaints. The Privacy Office can be reached at privacy@pingidentity.com.

If you believe that we have processed your personal information in ways that are not consistent with this Privacy Notice or in violation of law, you may file a complaint with Human Resources, the Privacy Office or the Legal Department. Depending on your country of residence, you may also file a complaint with our company data protection officer (DPO). In some countries, you may also file a complaint directly with the supervisory authority.

14. How to Contact the Privacy Office

We welcome questions and concerns! You can always reach the Ping Identity Privacy Office via email to privacy@pingidentity.com.