Privacy Notice
Introduction
This Privacy Notice is intended to describe the practices EY follows in relation to the privacy of all individuals whose personal data is processed and stored the CSG+ HTML Survey Tool (the "Tool") that is used for managing registration in EY Festival of Innovation organized by EY.
Who manages the Tool?
"EY" refers to one or more of the member firms of Ernst & Young Global Limited ("EYG"), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by providing this Tool on which your personal data will be processed and stored is EYGM Limited, an EY global entity.
The personal data you provide in the Tool is shared by EYGM Limited with one or more member firms of EYG (see "Who can access your information" section below).
The Tool is hosted on servers in Secaucus, NJ, USA.
Why do we need your information?
The Tool processes your personal data for the purpose of authenticating you into and processing the personal information that you provide to us in the registration form for event part of EY Festival of Innovation.
EY relies on the following legal grounds to processing your personal data:
- EY legitimate interest in employer branding opportunities, organizing and managing events, attracting and recruiting talent. EY relies on this legal ground for managing your registration for the event data.
- Your consent to be contacted in the future by EY personnel from the country of your location in relation to existing job or traineeship opportunities, events or news.
The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.
What type of personal data is processed in the Tool?
The Tool processes these personal data categories:
- First Name
- Last Name
- E-mail address
- Phone Number
- Country
- University
- Field of study
- Graduation year
- Current location
- Business areas of interest
- How did you find about the event
- Your motivation to attend this event is really important, please tell us in no more than 250 words why you are interested in attending the Festival of Innovation event?
Sensitive Personal Data
Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.
EY does not intentionally collect or solicit any sensitive personal data from you via the Tool. The Tool's intention is not to process such information. Please do not insert any sensitive personal data into any free text fields present in the Tool.
Who can access your information?
Your personal data is accessed in the Tool by the following persons/teams:
- Members of the EY Creative Services Group based in the US and India, who create, deploy, and manage surveys delivered via the Tool.
- EY personnel based in Poland and Ukraine who is responsible to manage the registrations, organization of the events, part of EY Festival of Innovation, and respective follow up.
- EY personnel based in the country where you are located to potentially reach out to you for employment opportunities at EY, only provided that in the registration form you have specifically opted-in for that.
The access rights detailed above involves transferring personal data in various jurisdictions (including jurisdictions outside the European Union) in which EY operates (EY office locations are listed at www.ey.com/ourlocations). EY will process your personal data in the Tool in accordance with applicable law and professional regulations in your jurisdiction. Transfers of personal data within the EY network are governed by EY's Binding Corporate Rules (www.ey.com/bcr).
We transfer or disclose the personal data we collect to third-party service providers (and their subsidiaries and affiliates) who are engaged by us to support our internal ancillary processes. For example, we engage service providers to provide, run and support our IT infrastructure (such as identity management, hosting, data analysis, back-up, security and cloud storage services) and for the storage and secure disposal of our hard copy files. It is our policy to only use third-party service providers that are bound to maintain appropriate levels of data protection, security and confidentiality, and that comply with any applicable legal requirements for transferring personal data outside the jurisdiction in which it was originally collected.
For data collected in the European Economic Area (EEA) or which relates to individuals in the EEA, EY requires an appropriate transfer mechanism as necessary to comply with applicable law. The transfer of personal data from the Tool to the supplier in the US is governed by an agreement between EY and the service provider that includes standard data protection clauses adopted by the European Commission.
Data retention
Your personal data will be retained in compliance with privacy laws and regulations. The Tool retains personal information for 2 years. After the end of the data retention period, your personal data will be deleted.
Security
EY is committed to making sure your personal data is secure. To prevent unauthorized access or disclosure, EY has technical and organizational measures to safeguard and secure your personal data. All EY personnel and third parties EY engages to process your personal data are obliged to respect your data's confidentiality.
Controlling your personal data
EY will not transfer your personal data to third parties (other than any external parties referred to in section 6 above) unless we have your permission or are required by law to do so.
You are legally entitled to request details of EY's personal data about you.
To confirm whether your personal data is processed in the Tool or to access your personal data in the Tool, email your request to dpo@bg.ey.com.
Rectification, erasure, restriction of processing or data portability
You can confirm your personal data is accurate and current. You can request rectification, erasure, restriction of processing or a readily portable copy of your personal data by sending an e-mail to dpo@bg.ey.com
Complaints
If you are concerned about an alleged breach of privacy law or any other regulation, contact EY's Global Privacy Officer, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom or via email at global.data.protection@ey.com. An EY Privacy Officer will investigate your complaint and provide information about how it will be handled and resolved.
If you are not satisfied with how EY resolved your complaint, you have the right to complain to your country's data protection authority. You can also refer the matter to a court of competent jurisdiction.
Contact us
If you have additional questions or concerns, email dpo@bg.ey.com.
Additional information on how EY processes personal data can be found on www.ey.com/privacy. You can find a list of local EY member firms and affiliates on the ey.com Privacy Statement. Certain EY member firms in countries outside the European Union (EU) and the UK have appointed representatives in the EU and the UK respectively to act on their behalf if, and when, they undertake data processing activities to which the EU General Data Protection Regulation (GDPR) and/or the UK General Data Protection Regulation (UK GDPR) applies. Further information and the contact details of these representatives are available below: