Privacy Notice – EY Career Center Website
Introduction
This Privacy Notice is intended to describe the practices EY follows in relation to the EY Career Center Website (“Tool”) with respect to the privacy of all individuals whose personal data is processed and stored in the Tool.
Who manages the Tool?
“EY” refers to one or more of the member firms of Ernst & Young Global Limited (“EYG”), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by providing this Tool on which your personal data will be processed and stored is EY U.S.
The personal data you provide in the Tool is shared by EY U.S. with one or more member firms of EYG (see “Who can access your information” section below).
The Tool is hosted by Digital Ocean with its data centers in the U.S. and by SendGrid with its data centers in the U.S.
Why do we need your information?
The Tool provides career transition support to sponsored senior managers, alumni and executive friends of EY (the “users”) with career transitions through coaching, networking, access to market opportunities, communications, and career planning tools and resources.
Your personal data processed in the Tool is used as follows: - For log-in and authentication purposes
- To provide users with career transition support including career transitions through coaching, networking, access to market opportunities, communications and career planning tools and resources
- To contact, communicate and work with users requesting access to the EY Career Center’s services.
- For analysis to identify trends and themes.
EY relies on the following basis to legitimize the processing of your personal data in the Tool: - Consent – for data provided by the users into the Tool
- Legitimate Interest – for log-in and authentication purposes, data analysis, and communications with Tool user’s
The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.
What type of personal data is processed in the Tool?
The Tool processes these personal data categories:
User Data Collected and Processed by the Tool:
Mandatory, all users: - Name: The users first and last name
- Email: The users’ email, which acts as their username and must be unique in the system
- Password
- City
- State
- Phone Number
Optional, Based on user type: - GPN: An EY unique identifier that is captured for users who currently work for EY
- Relationship to the firm: current employee, current employee but looking outside of EY for opportunities, EY alumni, friend of EY
- Referral: How did the user hear about the program
- Sponsor ID: the ID for the EY sponsor account responsible for suggesting their use of the program
- Employment Status
- Most Recent Employer
- Title
- Current Industry
- LinkedIn Profile URL
- EY Service Line
- Year Left EY
Sensitive Personal Data
Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.
EY does not intentionally collect any sensitive personal data from you via the Tool. The Tool’s intention is not to process such information.
Who can access your information?
Your personal data is accessed in the Tool by the following persons/teams: - EY and third party users (access to their own data only)
- EY PPMDD personnel
- EY System Administrator
- EY Career Center Website Admins
The access rights detailed above involves transferring personal data in various jurisdictions (including jurisdictions outside the European Union) in which EY operates (EY office locations are listed at www.ey.com/ourlocations). EY will process your personal data in the Tool in accordance with applicable law and professional regulations in your jurisdiction. Transfers of personal data within the EY network are governed by EY’s Binding Corporate Rules (www.ey.com/bcr).
Data retention
The policies and/or procedures for the retention of personal data in the Tool are: Data is retained in accordance with EY Records Retention Global Policy and the U.S. retention schedule. Users data will be retained for as long as their account is active within the Tool.
Your personal data will be retained in compliance with privacy laws and regulations.
After the end of the data retention period, your personal data will be deleted.
To request your account be deactivated and your data be deleted in accordance with EY’s Global Retention Policy, please contact EYCC at admin.eycareercenter@ey.com.
Security
EY is committed to making sure your personal data is secure. To prevent unauthorized access or disclosure, EY has technical and organizational measures to safeguard and secure your personal data. All EY personnel and third parties EY engages to process your personal data are obliged to respect your data’s confidentiality.
Controlling your personal data
EY will not transfer your personal data to third parties (other than any external parties referred to in section 6 above) unless we have your permission or are required by law to do so.
You are legally entitled to request details of EY’s personal data about you.
To confirm whether your personal data is processed in the Tool or to access your personal data in the Tool, contact your usual EY representative or email your request to global.data.protection@ey.com.
Rectification, erasure, restriction of processing or data portability
You can confirm your personal data is accurate and current. You can request rectification, erasure, restriction of processing or a readily portable copy of your personal data by contacting your usual EY representative or by sending an e-mail to global.data.protection@ey.com.
Complaints
If you are concerned about an alleged breach of privacy law or any other regulation, contact EY’s Global Privacy Leader, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom or via email at global.data.protection@ey.com or via your usual EY representative. An EY Privacy Leader will investigate your complaint and provide information about how it will be handled and resolved.
If you are not satisfied with how EY resolved your complaint, you have the right to complain to your country’s data protection authority. You can also refer the matter to a court of competent jurisdiction.
Contact us
If you have additional questions or concerns, contact your usual EY representative or email global.data.protection@ey.com.
