You are on page 1of 3
GLOBAL DATA PRIVACY CONSENT In this Data Privacy Consent Notice for our mobility services, “EY* refers to one or more of the member firms of Ernst & Young Global Limited (*EYG"), each of which is a separate legal entity, and each of which can act asa data controller in its own right. The entity that is acting as data controller is the EY member firm engaged to provide you with mobllity services. EY will perform certain mobility services ("Services") for you and, if applicable, for your ‘spouse or spousal equivalent and other family members (each referred to as "you", as agreed in the engagement letter with your employer or one of its affiliates (collectively "your employer") and provided to you under their Mobility Services program. The scope of Services provided to you will be advised to you elther in writing by your employer and/or EY or discussed with you by your EY contact. EY may also provide certain services to your employer under your employer's Mobility Services program (also referred to herein as "Services"). In performing Services for you and for your employer, EY may process personal data relating to you. In some countries, this may include special categories of personal data such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade- union membership, data concerning health or data concerning your sexual orientation (“Special Categories of Personal Data’). EY will also, to the extent necessary, process social security numbers or other government-issued identification numbers and financial account information, in connection with completing appropriate tax filings. In doing so, EY will comply with applicable privacy laws and its privacy policies. EY will only process Special Categories of Personal Data if this is necessary for providing Services to you. For example, you may provide us with details of payments made by you In respect of a trade union membership, to a political party, for medical treatments or toa religious charity or church affiliation. Such data is only required and will only be used as far as the correct taxation of your income is concerned and for claiming the correct tax deduction for you in respect of such payments. For more information about the specific data elements processed in order to provide the Services to you, please refer to your EY contact or your relevant contact at your employer. Security is enabled within the systems which process your personal data for the provision of the Services so that only those EY personnel who are duly authorized and assoclated with the engagement with your employer are able to access your personal data. EY will retain your personal data in accordance with the professional standards applicable to the EY member firm engaged to provide you with Mobility Services. At the end of the data retention period your personal data will be deleted. For more information about the specific retention period applicable to your personal data, please refer to your EY contact or your relevant contact at your employer. EY provides you the ability to keep your personal data accurate and up-to-date. If at any time you would like EY to rectify, erase or restrict the processing of your personal data, or you would like to obtain confirmation whether or not your personal data Is processed by EY, Scanned with CamScanner access your personal ditta, exercise your right to data portability or withdraw your consent to processing, please write 1o your usual EY contact, giving your name, address and the name of your employer, In providing the Services, EY may transfer your personal data between countries in which EY member firms operate, including in countries located outside the European Union (*EU"). The purpose of transferring your personal data between EY member firms Is to maintain quality and provide an efficient service as required by the engagement with your employer. EY has. implemented Binding Corporate Rules (“BCRs*)I1) to legitimize transfers of personal data between EY member firms. In addition, the EY member firm in the United States has certified to the EU-US as well as Swiss-US Privacy Shield Frameworks administered by the U.S. Department of Commerce governing certain transfers of data from the EU to the US.[2] If you are concerned about an alleged breach of privacy law or any other regulation by EY, you can contact EY's General Counsel's Office and/or EY's Global Privacy Officer, 6 More London Place, London, SE1 2DA, United Kingdom, or your usual EY contact. An EY Privacy Officer will be made available to investigate your complaint and will give you information about how it will be handled. If you are not satisfied with the way in which EY has resolved your complaint, you have the right to complain to the data protection authority in your country. You may also refer the matter toa court of competent jurisdiction. Consent To the extent necessary to provide the Services to you and to your employer, you hereby authorize EY to: (2) collect from you or from your employer and process personal data which could, for example, include your employment income (collectively, your "Data"); (b) process the Spectal Categories of Personal Data (also, your *Data*); (©) disclose Data to your employer or its appointed agent; (d) disclose (if applicable) Data, including non-employment data, to your spouse and other family members; (@) disclose Data to relevant authorities (which could include tax or Immigration authorities, depending on the nature of the Services being provided to you); (0 disclose Data between member firms of EY (Including EY centrallzed processing centres) for the provision of the Services or portions thereof, or which may also be used to support the 11 puip//aeycomiplen/mome/ey data prtecton-bindng

You might also like