Riot Games Candidate & B2B Privacy Notice

Last Modified: January 18, 2024

Riot Games, Inc. is a global gaming company headquartered in Los Angeles with offices and operations around the world. Riot Games, Inc. and its subsidiaries take privacy seriously, just like we do play. This Candidate & B2B Privacy Notice explains what info we collect during our application and recruitment process, our business to business (B2B) relationships, info about your rights, as well as ways we may use or disclose info.

When we say “Riot Games” (or similar things like “we” or “us”), we’re referring to the Riot Games entity or, where applicable, entities that control and are responsible for your info.

We have developed this Candidate & B2B Privacy Notice to comply with applicable data protection laws globally. To the extent this Candidate & B2B Privacy Notice conflicts with local law in your jurisdiction, local laws apply. To learn more about our privacy practices on other Riot Games services, like our games and the collection and disclosure of info on our websites, please be sure to check out the Riot Games Privacy Notice.

If you are a California resident, our Notice at Collection is as follows:

• A list of the categories of info collected is in Section 2 - What Info We Collect, and Section 5 - Categories of Personal Info Collected & Disclosed. 

• The purpose(s) for which the categories of info are collected and used is in Section 3 - How We Use Info. 

• We do not sell or share info for cross-context behavioral advertising. We do not use sensitive info for purposes beyond the limited purposes permitted by California privacy law.

• Our retention period explanation is in Section 7 - How Long We Keep Info.
   

1. How We Collect Your Info

This Candidate & B2B Privacy Notice applies to info: 

• You disclose to us directly (like by submitting an application or talking to our recruiters and interviewers or, where you work for one of our suppliers, customers, partners, agents or investors, when you give it to one of your Riot Games contacts); and 

• We obtain from others or public sources in connection with:

  • Our recruitment efforts, such as from background checking agencies (where used as permitted by local laws), external talent database holders (who may collect your info from you, third parties they work with, or from public sources), executive search and recruitment agencies, and from publicly available sources, including any social media platforms you use or other info available online like LinkedIn;

  • B2B relationships, such as where the company you work for gives it to us (like where you are a contact for services being provided to us).

The particular kinds of info we gather often depend on how you interact with us and, for candidates, the role for which you’re being considered. These include:

• Contact Info. We collect names, email addresses, telephone numbers, and similar business or personal contact info to help us communicate with you.

• Experience Info. We collect résumés, CVs, transcripts, cover letters, work samples, and other details about your prior or relevant experience, skills, education, training, or similar background info to support your application and/or our recruitment efforts.

• Reference & Background Info. We collect info from and about any references you provide (it is your responsibility to obtain any necessary consent from your references prior to sharing their info with us). Where applicable, we may also collect info from background checks subject to relevant legal requirements.  

• Interview Info. We collect info from any interviews and screenings you may have, as well as details about the type of opening you are or may be pursuing (like current or desired salary, benefits, and similar preferences).

• Previous applications/roles. We ask you to provide and collect info relating to previous applications you have made to Riot Games and/or any previous employment history with Riot Games.

• Immigration/visa status. We collect details of your immigration or visa status.

• B2B Info. We collect tax ID numbers, Social Security numbers, and bank account information to provide payments. We use legal names to run risk assessments.

• Demographic & Sensitive Info. We try to avoid collecting or processing info that reveals your racial or ethnic origin, religious, political or philosophical beliefs, genetic data, biometric data, trade union membership, or info about your health/sex life/sexual orientation (“Sensitive Personal Information”). However, in some circumstances, and where local laws allow, we may collect or request some Sensitive Personal Information for legitimate employment-related purposes where necessary. For example:

  • Equal opportunities - info about your racial/ethnic origin, gender, date of birth, and disabilities, as well as photographs, for the purposes of equal opportunities monitoring and diversity and inclusion efforts.

We collect info to support our application and recruitment process and our B2B relationships, including to: 

• Process your application (such as adding your info to our systems);

• Communicate with you (like to schedule interview times and dates or in connection with services provided);

• Assess your eligibility for our available opportunities or to enter into a contract (including other current or potential future openings at Riot Games you may not have considered);

• Measure and improve our recruitment process (like by analyzing hiring trends and enhancing our diversity efforts usually by aggregating your data with others before analyzing it);

• Comply with our legal and regulatory obligations (such as submitting required reports, and conducting risk management assessments for B2B relationships);

• Verify the info you submit (including, where applicable, by conducting employment history, background, and reference checks); 

• In certain cases, help you coordinate immigration, work permit, relocation, travel, or other similar issues;

• Perform our business contract with you or where applicable, our business customer, supplier, partner, agent or investor whom you act on behalf of or represent; and

• Conduct and develop our business (such as managing our business relationships including account management, business development and marketing in relation to our existing and prospective business suppliers, customers, partners, agents or investors).

We’ll also use info as we believe is necessary or appropriate under applicable law to protect the rights and property of Riot Games, players, other candidates, our employees, or the public. 

If you are accepted for a role the info collected during the recruitment process will form part of your ongoing staff member record and will be processed in accordance with our GDPR Rioter and Contractor Privacy Notice or Privacy Notice for California Rioters and Contractors, as applicable. 

If you are not successful, we may still keep your application to allow us to consider you for other suitable openings within Riot Games in the future and will delete your CV, résumé, and cover letter in line with local retention requirements. Please inform us if you do not want us to do so.

If you work for one of our suppliers, customers, partners, agents or investors, the processing is necessary for our legitimate interests, namely conducting and developing our business.
 

4. How We Disclose Info and International Transfers

Whenever we permit a third party to access personal info, we will implement appropriate measures designed to ensure the info is used in a manner consistent with this Candidate & B2B Privacy Notice and that the security and confidentiality of the info is maintained.

As part of the recruitment process, we disclose your info to hiring managers, interviewers and those directly involved in the recruitment process. As part of the B2B relationship, we disclose your info with security operations, the legal team, purchasing operations, finance, and those directly involved in the ongoing B2B services. In each case, these individuals may be spread across various offices and locations worldwide. We disclose the info we collect with our subsidiaries and affiliates, which means your info could be transferred to or stored in the US, UK, or other locations outside your country of residence.  

We use service providers to support our recruitment efforts and B2B relationships. This includes:

• recruitment or executive search agencies involved in your recruitment; 

• data storage, shared services and recruitment platform providers, IT developers and support providers and providers of hosting services; and

• third parties who provide support and advice including in relation to immigration, pre-engagement screening, legal, financial / audit, management consultancy, insurance, health and safety, security and intel and whistleblowing / reporting issues.  

We  require these service providers to protect the info they receive with appropriate security measures and prohibit them from using the info for their own purposes or outside what is necessary to provide the service. These service providers may be located outside your country of residence or the country where the position for which you applied is located. 

We’ll also disclose info to third parties where we have a legitimate interest in doing so or where otherwise permitted by law.  For example, we might disclose info to external parties if you ask us to do so in connection with a relocation, to coordinate travel, or to support you with immigration or similar issues related to your application. We don’t sell or share for cross-context behavioral advertising your information to third parties.

Additionally, we use and disclose info to comply with our legal obligations and as we believe is necessary or appropriate under applicable law to protect the rights and property of Riot Games, players, other candidates or B2B contacts, our employees, or the public, or in connection with the sale, assignment or other transfer of all or part of our business.

In some cases, the disclosure described above may result in your personal info being transferred internationally, including from the European Economic Area to a country outside it. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). However, we have taken appropriate safeguards to require that your personal info will remain protected in accordance with this Notice. These include implementing the European Commission’s Standard Contractual Clauses for transfers to countries for which the European Commission has not issued an adequacy decision. The Standard Contractual Clauses can be provided to you upon request to dpo@riotgames.com.

In summary, depending on how you interact with us and the role for which you are being considered, the following categories of personal info may have been collected and disclosed for a business purpose in the preceding 12 months:

• Identifiers, including name, email address, and telephone number

• Characteristics of protected classifications under state or federal law, including date of birth, age, gender, racial/ethnic origin, disabilities, and medical condition

• Audio, electronic, visual, thermal, olfactory, or similar information, including photographs

• Professional or employment-related information, including résumés, CVs, transcripts, cover letters, work samples, references, background checks, info from interviews and screeners, info relating to previous Riot Games applications, and immigration or visa status

We do not infer characteristics using Sensitive Personal Information, and do not use Sensitive Personal Information beyond the limited business purposes permitted by local laws, including the California Consumer Privacy Act.
 

6. Security

We use appropriate physical, technical, and organizational security safeguards to help protect your info from unauthorized access, destruction, use, modification, or disclosure both during transmission and in storage. For example, we use computer systems with limited access in controlled facilities to store info. We also use technologies like encryption and hashing to protect some of the info we collect.

However, please note that no server, communications network, or data transmission over the Internet is 100% secure. Our services are no exception and we can’t guarantee the security of any info transmitted to us.

We’ll generally only retain your info as long as is necessary or appropriate for our recruiting efforts and operating our business (including for purposes like complying with our legal obligations, managing internal books and records, preventing fraud, resolving disputes, and enforcing our contracts and terms and for other current and future employment or similar opportunities with Riot Games), unless a longer retention period is permitted or required by law. For example, applications, resumes for employment, and offer letters for non-hired candidates are retained for five (5) years from their creation date.

If you're successful in your application, we retain the info you provide during the application process, and info about your application process, as part of your employee / personnel records
 

8. Your Rights, Choices & Controls

We’ll collect and use your info in accordance with your legal rights, such as described in this Candidate & B2B Privacy Notice.  

Based on your region, you have the rights listed below:

• Access: The right to obtain confirmation as to whether your info is being processed, to know what info we have about you, including the categories of info, the categories of sources from which the info is collected, the business or commercial purpose for collecting the info, the categories of persons to whom we disclose the info, and the specific pieces of info we have collected about you. 
• Correction: The right to have rectified any inaccurate info concerning you.
• Deletion: The right to delete info that we have collected from you, subject to certain exceptions. 
• Restriction: The right to restrict the processing of your info in certain cases.
• Data portability: The right, in certain cases, to receive the info concerning you in a structured, commonly used and machine-readable format and/or transmit that info to another data controller.
• Objection: In some cases required by law, the right to ask us to stop processing your info.
• Right to withdraw consent: Where your consent is required, you may at any time withdraw such consent by contacting us (though this will not affect the lawfulness of any processing of your data prior to that).

We encourage you to always make sure that the info you disclose to us is kept up to date.You may exercise the rights available to you under applicable data protection laws by contacting us at dpo@riotgames.com or using the contact details provided in Contact Us below.  We may require specific info from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your request.

You may also make a rights request using an authorized agent. If you submit a rights request from an authorized agent who does not provide a valid power of attorney, we may ask the authorized agent to provide proof that you gave the agent signed permission to submit the request to exercise rights on your behalf. In the absence of a valid power of attorney, we may also require you to verify your own identity directly with us or confirm to us that you otherwise provided the authorized agent permission to submit the request.

You also have the right not to be discriminated against for exercising any of these rights. We might not always be able to accommodate your requests in line with our legitimate interests, but if not, we’ll let you know why.  You can also submit an unresolved complaint to a supervisory authority and we will work with them to address your concern. However, we strongly recommend that you engage with us first and we will endeavor to address any concerns. 
 

9. Legal Basis 

Under European data protection law, our legal basis for processing your personal info as part of the recruitment process is: 

• our legitimate interests (as summarized above in How We Use Info);

• to comply with applicable immigration and/or employment laws and regulations; 

• to take steps prior to entering into an employment or vendor contract with you, where you are considered for employment or a B2B relationship; 

• in circumstances where you have made the data public;

• where we have your consent to do so. Where we have requested your consent to process your personal data, you have the right to withdraw your consent at any time; and

• to protect the rights and interests of Riot Games, our employees, applicants and others, as required and permitted by applicable law.
   

10. Policy Changes

We’ll update this Candidate & B2B Privacy Notice from time to time to reflect changes in technology, law, our business operations, or any other reason we determine is necessary or appropriate.  When we do make changes, we’ll update the “Last Modified” date above and post it to our careers website. If we make material changes to the ways we process applicant info, we’ll provide you additional notice as well (such as by sending you a notification directly at the email address we have on file) if we still retain your info.

We encourage you to check back periodically to review this Candidate & B2B Privacy Notice for any changes since your last visit.  This will help ensure you better understand your relationship with Riot Games, including the ways we process your info.
 

11. Contact Us

If you have any questions about this Candidate & B2B Privacy Notice or our privacy practices, or trouble accessing the info herein, please send them to us via email at dpo@riotgames.com or via postal mail at:

Riot Games, Inc. 
Attn: Legal Department
12333 West Olympic Blvd.
Los Angeles, CA 90064
United States

If you live in the EEA, UK or Switzerland:

Riot Games Ltd.
Attn: Legal Department
PO Box 11989
Dublin 2
Ireland