What is in this Online Recruitment Privacy Statement?

• What information does this Online Recruitment Privacy Statement cover?
• What information do we collect and how do we collect it?
• How do we use the information we collect about you?
• How do we share your information?
• How do we handle Aggregated and De-identified information?
• How do we keep and safeguard your information?
• What are your rights?
• Query or Complaint
• Glossary

What information does this Online Recruitment Privacy Statement cover?

This online recruitment privacy statement describes how we (and our Service Providers) collect, use, share, and keep information that we get about you online. We gather Online Information if you:

• Visit, use or apply on our recruitment sites or other platforms, such as social media platforms, that link to the American Express recruitment sites; or
• Receive or reply to electronic communications from us.

While you are not legally required to provide us with your personal information, if you do not provide requested information, we may not be able to consider you for employment.

What information do we collect and how do we collect it?

Generally, you provide your Personal Information directly to us (or to our Service Providers). For example, you have to give us your name, email, mailing address, phone number, or date of birth when you:

• register for job notifications;
• create a profile by submitting your CV/resume; or
• apply for a job.

Cookies and Similar Technologies

We (and our Service Providers) collect information through Cookies and Similar Technologies. Most Cookies and Similar Technologies will only collect De-Identified Information such as how you arrive at our website or your general location.

We (and our Service Providers) may collect information using Cookies and Similar Technologies about:

• the device you use to browse our sites (for example, we may collect information about the operating system or the browser version and the type of computer or mobile device);
• the IP Address and related information (such as domain information, your internet provider and general geographic location);
• browsing history on our site (such as what you search for, the pages you view, how long you stay, and how often you come back); and
• how you search for our site, from which sites you link to our site.

For more information about Cookies and Similar Technologies, please read About Cookies.

We (and our Service Providers) may also collect information made publicly available through third-party platforms (such as online social media platforms), through online databases or directories, or that is otherwise legitimately obtained and used only for the purposes outlined below.

How do we use the information we collect about you?

We use the Personal Information you provide to us and, possibly, Online Information we collect about you, to follow up on your request to (i) register for job notifications; (ii) create a profile by submitting your CV/resume; or (iii) apply for a job. More specifically, we use your information to do the following:

• if you register for notifications, we may contact you with notifications and announcements about new jobs at American Express;
• if you submit your resume
  • we may hold your resume and related Personal Information on file in accordance with our record retention schedule; and
  • review your online candidate profile from time to time to consider you for relevant job opportunities at American Express;
• to conduct research and analysis, including to better understand our job applicants and site visitors;
• to support our background screening process if you apply for employment and are subsequently offered a position, subject to applicable law and where appropriate (we will provide you with additional information before we do such a screening); and
• in other ways as required by law such as to verify your employment eligibility.

Please note that if you choose to provide us with your e-mail address or your mobile number, we will only use these to send you e-mails and/or SMS alerts about your recruitment enquiry, job application, to request additional details about your resume/CV, and send you job alerts, where you have enrolled in this service. If we send you emails, we will collect information about your interaction with our e-mail content, such as whether you can read graphic-rich html e-mails.

How do we share your information?

We do not share Personal Information with anyone except as described below. We will share your Personal Information only with your consent or as required or permitted by applicable law, such as:

• with regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests;
• with our Service Providers, regulatory authorities, law enforcement and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
• within the American Express Family of Companies; and
• with our Service Providers who perform services for us and help us operate our business, including our recruitment processes.

We may transfer your Personal Information outside the state of Israel, such as to the United States (where our main operational data centres are located) to companies within the American Express Family of Companies or to our Service Providers throughout the world, for example, to search for suitable positions or to process your application. Regardless of where we process your information, we will take appropriate steps to ensure an adequate level of protection for your information in other countries outside the state of Israel, including the United States, where data protection laws may not be as comprehensive as in the state of Israel.

For more information, please read the American Express Data Protection and Privacy Principles, which are available on the privacy section of our website. When we share your Personal Information with third parties outside the state of Israel, we include appropriate contractual protections in those agreements. In addition, we assess whether other technical and organizational measures are required for those transfers.

How do we handle Aggregated and De-identified information?

Aggregated Information or De-Identified Information does not identify you individually; it helps us to analyze patterns among groups of people. We share Aggregate Information or De-Identified Information for the same reasons as we might share Personal Information.

How do we keep and safeguard your information?

We use organizational, administrative, technical and physical security measures to protect your Personal Information. These measures include computer safeguards and secured files and facilities. We require Service Providers to safeguard Personal Information and only use your Personal Information for the purposes we specify.

We will keep your Personal Information only as long as we need to follow up on your request to register for job notifications, process your application or inform you about future opportunities, unless we are required by law or regulation or for litigation and regulatory investigations to keep it. When your Personal Information is no longer necessary for our business, legal or regulatory needs, we will take reasonable steps to securely destroy such information or permanently de-identify it. For more information about American Express’ retention periods for Personal Information, please contact us.

What are your rights?

As a candidate for employment, you have, under some circumstances, certain rights over the personal information that we have about you. These rights include:

• access the personal information we keep about you;
• delete your incorrect, incomplete, unclear, or outdated personal information;
• correct inaccurate personal information we have about you;
• request a copy of your personal information, in a structured, commonly used; and machine-readable format;
• be deleted from a database which is used for direct mailing.

If you want to exercise any of your rights click here. If you have any questions about how we process your Personal Information, you can contact us – please see the “Query or Complaint” section.

If we receive a request from you, we will respond as soon as possible but no later than one month or 21 days in case of refusal. If, due to the nature or circumstances of your request, we cannot meet that deadline, it may be extended by 15 days by the Registrar of Databases. In such case, we will send you a letter explaining the cause of the delay. Please note that your request will be free of charge.

Query or Complaint

If you have questions about this privacy statement or how your information is handled or wish to make a complaint or exercise other rights, please contact: RecruitmentOperationsServicing@aexp.com

Glossary

Aggregated Information — data or information relating to multiple people which has been combined or aggregated such that individuals cannot be re-identified. Aggregated Information includes information that we create or compile from various sources, including certain data from Cookies and Similar Technologies.

American Express or the Company (we, our, us) — the American Express Company as identified at the beginning of this online recruitment privacy statement.

American Express Family of Companies — any affiliate and subsidiary of, and any company owned or controlled by, the American Express Company.

Cookies and Similar Technologies — a cookie is a small data file that a website transfers to your computer's hard drive. We place cookies when you visit our recruitment website. We use the term Cookies and Similar Technologies in this statement to refer to all technologies that collect information in this way.

De-identified Information — data or information used in a way (for example, pseudonymised) that does not identify you to a third party. We often derive De-Identified Information from Personal Information. It includes information that we may collect from Cookies and Similar Technologies.

IP Address — a number assigned to a device when connecting to the Internet.

Online Information — data or information collected on the American Express sites and applications as well as on sites and applications of third parties relating to topics about our business, which may include Personal Information, Aggregated Information and De-Identified Information.

Personal Information — information that relates to an identified or identifiable natural person, such as name, address, telephone number, email address, previous employment history and other information associated with that individual such as demographic details.

Service Providers — any vendor, third party and/or company that performs business operations on our behalf, such as recruitment, printing, mailing, and other communications services (email, direct mail, etc.), data processing, and outsourced technology, auditors, consultants and professional advisors.