PRIVACY NOTICE
Infy Consulting Company Ltd, subsidiary of Infosys Limited, India (collectively referred to as “Infosys”, “us”, “we”) are committed to process your personal data as per the laws of your jurisdiction. We hereby notify you the following information about your personal data processing-
1. Personal data elements collected:
Personal Information
Mandatory data elements: Name, email, phone
Optional data elements: Headline, Address, Photo
Profile Information
Mandatory data elements: Education, Resume, Portfolio (only for certain digital roles)
Optional data elements: Experience, Summary, Current Salary, Notice Period
Diversity Information (Based on Consent)
Optional data elements: Gender, Age, Ethnicity, Sexual Orientation, Religious Belief, Working Arrangement, Caring Responsibilities.
2. Data Recipients / Accessible to:
The Personal Data is accessible to certain authorized Infosys employees in internal functions such as Human Resources/Recruitment and Talent Acquisitions, Interviewer and Hiring Partner, including Sr. Management members, and to our service providers or agents who may require access to the same for processing in relation to the below stated purpose(s). Where required by Infosys Legal Department and Data Privacy Office during responding to any queries or grievances.
The Personal Data may also be disclosed to governmental entities in compliance with applicable laws, if Infosys receives any such request from Government.
3. Lawfulness of Processing:
We process your Personal Data when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract. If you do not provide the Personal Data that we need to employ you, we will not be able to validate your employment with us.
We process your Personal Data for the performance of a contract in the following circumstances:
- I. To assist in the recruitment, selection and other associated processes
- II. Compliance with applicable laws and regulations
- III. To carry out various employer related activities, if you are selected to join the organization
We process your personal data on the basis of legitimate business interests, for the following:
- I. To defend against any claim or investigation II. For storage on data servers III. To manage compliance requirements and where applicable, respond to any Data Subject Rights requests arising from you or handling of incidents/breaches involving you.
We process your personal data on the basis of consent, for the following
- I. To track diversity of candidates applying to the organisation
4. Your Rights
You are entitled at any time to access or rectify your Personal Data. In addition, you have the right to request for deletion, restrict/object any processing, including right to request for a copy of type of Personal Data concerning you which you have provided to us directly. These rights may be exercised, by you sending an email at privacy@infosys.com
5. Secondary Purpose:
If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.
6. Data Storage & Transfer:
The Personal Data listed above may be transferred to countries located outside of the local country where data is collected, for which data protection legislation may differ from that of the EEA, i.e. our offices located in India, US and also for storage on third party servers of the database in USA. We shall take the necessary steps to ensure confidentiality and security of the transferred data. We have in particular implemented the following safeguards: Standard Contractual Clauses (Art. 46 para. 2 lit. c) GDPR), the copies can be obtained by writing to privacy@infosys.com.
7. Data Security:
Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data.
8. Data Retention:
Personal Data will be retained for a period of one (1) year from the date of application, necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required by law or for directly related legitimate business purposes.
9. Contact your Local Data Protection Authority:
If you are unhappy with how we safeguard your personal data, you have the right to bring a complaint to your local Data Protection Authority.
For more information, please contact:
The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
Tel. +44 1625 545 745
international.team@ico.org.uk
https://ico.org.uk
10. Contact your Data Privacy Officer
If you have any queries, comments or requests, please contact our Data Privacy Officer, Srinivas P via email privacy@infosys.com or via phone by dialing +91 80 2852 0261.