Web Privacy Policy – Taleo Recruitment Site

EY Global Services Limited ("EYGS"), a private company limited by shares in England and Wales, registered office, 6 More London Place, London SE1 2DA, United Kingdom, registered number 5483856, licenses the System from Taleo Corporation, 4140 Dublin Boulevard Suite 400, Dublin, California 94568 (“Taleo”). Taleo manages the System on behalf of EYGS for the benefit of EY member firms globally. The servers which host the System are owned by Taleo and situated in the United States of America. Taleo has certified to the EU-US Privacy Shield Framework administered by the US Department of Commerce which provides organisations a mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States.

The information you provide in the System may be shared by EYGS for recruitment purposes with one or more EY member firms located throughout the world (see the 'Why do we need your personal information?' section below). EYGS is acting as a joint data controller with each EY member firm which advertises a position on the Careers site of EY.com.

Access to your personal information is limited by need. All recruitment staff within the EY member firms worldwide have access to your profile on the database and are able to match your details to current vacancies.

Taleo can access your personal information as is necessary to perform its functions but may not share any information without first obtaining permission from EYGS. From time to time, in addition to Taleo, we may need to share your personal information with other third parties. However we will only disclose your personal details for the following reasons:

• When it is necessary to involve a third party service provider in order to facilitate or extend recruitment services, as we do today with Taleo.
• When explicitly requested by you.
• As required by a court order or any other legal or regulatory requirement.

EY has a comprehensive global privacy compliance program which consists of EU approved Binding Corporate Rules as well as certification to the EU-US Privacy Shield Framework administered by the U.S. Department of Commerce and will only disclose your personal information to third parties that have agreed in writing to provide an adequate level of privacy protection.

Your personal information is processed in the Global Recruitment Management System so that EY recruitment teams can consider and manage your application for the advertised position and to contact you. Your personal information will be used by EY for administering the global recruitment program of our member firms. This will include planning and monitoring recruitment campaigns and notifying you from time to time of current vacancies.

The Careers site on EY.com uses cookies. A cookie is technology that allows the site to store information (an "identifier") in your browser used only while you are on the site. Cookies are not used to determine the personal identity of anyone merely visiting the site. Cookies also help us track traffic patterns so that we know how best to improve the site for our visitors.

If you do not want to receive a cookie from the site, you have the option of setting your browser to notify you when you receive a cookie so that you can determine whether to accept it or not (see your browser settings to do that). However, please be aware that if you do turn off cookies in your browser, you will not be able to fully experience some of the features of the site.

The data controller for your personal information is the EY member firm which is responsible for the advertised position and to whom you address your application. Details of the EY member firm responsible for your application can be found in our Careers site on EY.com.

It is possible that EY member firms may be jointly responsible for your personal information if you submit applications to multiple EY member firms via the System.

If you wish to apply for a job in a country outside of your home country, we may need to ask you questions that are specific to the country where the job is located. This is because in certain countries, before we can offer someone a job, we have to ask certain additional questions. These questions will be relevant and necessary for the job advertised and consistent with EY's Values.

When applying for a job in Poland, your agreement and consent is obtained in accordance with Polish Data Protection Act, from 29 August 1997 r. about personal data protection Dz. U. Nr 133, poz. 883.

When applying for a job in Mexico your agreement and consent is obtained in accordance with the Federal Law for Protection of Personal Data in Possession of the Private Sector from July 6th, 2010 about personal data protection. Further information can be found by accessing the following web page www.ey.com/mx.

When applying for a job in Malaysia, your agreement and consent is obtained in accordance with the Personal Data Protection Act 2010 (Act 709). Further information can be found by accessing the following web page:

When applying for a job in Japan, additional information regarding the processing of your personal information can be found here.

Taleo uses IBM Watson Recruitment Express (“IBM Watson”) to assist with the screening of candidates for jobs within EY. Your personal data will be processed by IBM Watson for the following purpose: to perform an artificial intelligence analysis and provide a suitability score to EY recruiters in relation to your job application. Although IBM Watson provides an automated recommendation based on a candidate’s suitability score, an EY recruiter is required to manually make the final decision about which candidates are successful.

EY Global Services Limited is the data controller and licenses IBM Watson from IBM Global Business Services, PO Box 41, North Harbour, Portsmouth, PO6 3AU, United Kingdom. IBM Watson is hosted on servers in Sterling, Virginia at a colocation facility (Cyxtera), Washington, D.C., and San Jose, California.

IBM Watson processes all of the categories of personal data that you add to the System. This includes any sensitive personal data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation to the extent that you may have added them to the System. This personal data will be retained only in line with EY business need. IBM Watson does not retain your personal data after the job opportunity is closed for applications and will only retain your personal data while the job opportunity is open for applications so that it can update your suitability score relative to other candidates. Your personal data is purged periodically based on the System’s data retention policy set out in the section entitled “Data Retention” of this Data Privacy Statement. Once the System is purged, your personal data will be removed from IBM Watson (even if the job opportunity remains open for applications). You may request for your personal data to be manually removed from IBM Watson at any given time.

Your personal data can be accessed by:

• Third party IBM users who have access to EY’s instance of IBM Watson to provide technical support upon EY’s request; and
• Internal EY Recruiters who process the suitability scores as part of the candidate screening process.

This processing is necessary for the purposes of the legitimate interests pursued by us (except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data). The specific legitimate interest pursued is: human resource management, including performance reviews and recruitment.

You may wish to forward an advertised job vacancy in the System to a friend. You can do this by clicking on the "SHARE" link which can be found in each job description. When you use this functionality, we may require your e-mail address and the e-mail address of the recipient, your friend. We collect this information so that we can forward the job description and your e-mail address to avoid the possibility of the information being treated as spam. In addition, when we contact your friend, he/she will be provided with full details of how their information will be used, specifically in relation to their rights and details of the EY Member Firm acting as a data controller, in line with this statement.

The policies and/or procedures for the retention of personal data in the System are:

For GDPR countries only:

You may of course ask to have your information deleted from the System at any time. Your personal data remains in the System as long as you have expressed interest in EY or until you have secured a position with EY. However, please note that your data will not be kept more than 18 months after the last contact with you. We will provide you the opportunity to re-opt in every 18 months. If you do not opt-in, your data will be removed from the System.

For some countries, a different retention period will be applied:

6 months: Germany & India
12 months: Austria, Switzerland, Sweden, Norway, Denmark, Iceland, Finland & the Netherlands
24 months: France
36 months: Albania, Bosnia & Herzegovina, Bulgaria, Croatia, Cyprus, Czech Republic, Estonia, Greece, Hungary, Kosovo, Latvia, Lithuania, FYR of Macedonia, Malta, Moldova, Montenegro, Poland, Romania, Serbia, Slovakia, Slovenia & Turkey

For all other countries:

You may of course ask to have your information deleted from the System at any time. Your information will remain in the System as long as you are actively pursuing positions with EY. However, your personal information will not be kept more than 36 months after the end of the application process. At that point, we may contact you to inform you that your details will be removed from the System unless you instruct us otherwise.

In the initial stages of the recruitment process, we do not seek to collect special categories personal information from you (this is also known as “sensitive personal information”). Special categories of personal information includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data for the purpose of uniquely identifying a natural person, information concerning health, information concerning a natural person's sex life or sexual orientation and in some cases, social security numbers or financial information.

We may need to collect special categories of personal information from you at a later stage in the recruitment process if local employment laws or regulations require us to do so. To the extent you provide us with any special categories of personal information to support your application or as part of your personal profile, you agree that we may use this information in accordance with local applicable law or regulations and in line with this Data Privacy Statement.

Your Candidate Profile contains free-text boxes. If you provide us with personal details for your application or as part of your Candidate Profile, please do not include any special categories of personal information. If you provide us with this information, you agree that we may use this information in accordance with applicable local law or regulations and in line with this Data Privacy Statement.

If you provide any information in relation to third parties or referees, you are responsible for obtaining their consent and ensuring they are aware that their details will be forwarded to, and used by, the EY network.

EY does not collect or compile personal information obtained by this site for dissemination or sale to outside parties for consumer marketing purposes or host mailings on behalf of third parties.

You are legally entitled to request details of the personal information we hold about you. We provide you with the ability to make sure your personal information is accurate and up to date in the System through your Candidate Profile. You can request a copy of your personal information, or seek rectification, erasure or restriction of processing of your personal information by sending an e-mail to EY data protection team.

EY is committed to making sure that your personal information processed in the System is kept secure and has implemented accepted standards of technical measures and security policies that protect the information it has under its control from:

• Unauthorized access.
• Improper use or disclosure.
• Unauthorized modification.
• Unlawful destruction or accidental loss.

All EY personnel and any third parties which EY engages to process your personal information are obliged to respect the confidentiality of your information.

This site is not intended for use by children. We understand the importance of protecting children’s information, especially in an online environment, and we do not knowingly collect or maintain information about children.

EY may change this data privacy statement as needed. If changes to the statement are made, please note that it may take up to 30 business days before new privacy practices are implemented. Check this page periodically if you would like to monitor changes.

If you are concerned about an alleged breach of privacy law or any other regulation by EY, you can contact EY’s General Counsel’s office and/or EY’s Global Privacy Leader, 6 More London Place, London, SE1 2DA, United Kingdom or via EY data protection team. An EY Privacy Leader will be made available to investigate your complaint and give you information about how it will be handled.

If you are not satisfied with the way in which EY has resolved your complaint, you have the right to complain to the data protection authority in your country. You may also refer the matter to a court of competent jurisdiction.

If you have questions or you do not feel that your concerns have been addressed in this privacy policy, please contact your usual EY representative, or you can reach us via EY data protection team.