AMERICAN EXPRESS BRAZIL PRIVACY STATEMENT FOR ONLINE RECRUITMENT

 

Last Modified: May 18, 2022

 

American Express, its subsidiaries and affiliates (as identified during your application process), ("we", "us", "our", "our" or "with us") is the recruiting company for the vacancy for which you have applied. American Express and its affiliates will be jointly designated as the "American Express Group" or simply "Amex".

 

At Amex, we are committed to protecting your personal data and privacy. So to demonstrate our commitment to you, we want you to know how we treat your data.

 

GENERAL INFORMATION

 

This Privacy Statement describes how the American Express Group, as the controller of personal data in Brazil, processes the personal data of candidates during recruitment and selection processes.

 

The provisions contained in this Privacy Statement do not govern or correlate with data processing operations carried out by third parties, even if Amex partners and/or service providers, even if the services performed were provided on behalf of Amex or using its trademark.

 

The following topics are included in this Privacy Statement:

 

1. IDENTIFICATION AND CONTACT OF THE DATA CONTROLLER

 

The agent responsible for the processing of your personal data will always be the one responsible for managing the selection and recruitment process – "Online Recruitment". It is only this agent that holds the power to determine the mode, extent and why of the treatment operation.

 

If you have any questions, or if you want to have access to your personal information for any reason, please contact Amex by e-mail (ERBrazil@aexp.com).

 

2. WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA FOR THE ONLINE RECRUITMENT PROCESS?

 

Applicants' personal data processing operations, performed on the basis of this Privacy Statement, will be intended to enable Amex, its subsidiaries and/or affiliates, to properly manage the process of recruiting and selecting candidates, including electronic archiving of this data for organizing applications, interviews and contacting the "Candidate" to fill out present and future vacancies.

 

Amex will not process the personal data of "Candidates" for purposes other than to determine the suitability and eligibility of this holder for the desired vacancy. Amex may also use the treatment operation for the regular exercise of its rights, where applicable.

 

3. WHAT TYPES OF PERSONAL DATA ARE PROCESSED?

 

In the course of the Online Recruitment process and/or related activities, Amex will collect the following personal data from the "Candidates":

 

  • Identification data: Data that enable Amex to identify and/or contact the "Candidates", consisting, for example, of: full name, date of birth, nationality, sex, racial or ethnic origin, home address, email address, zip code and telephone number;
  • Professional experiences: Data on previous professional experiences of the "Candidate", consisting, for example, of: date of hiring and dismissal/ dismissal, position occupied, department and business unit, workplace, work situation, school history, skills, certifications and remuneration;
  • CV/Curriculum Data: Personal data that may exist in the CV/Curriculum submitted by the "Candidate" and that are not covered by the hypotheses highlighted above;
  • Health data: Personal data relating to certain health conditions of the "Candidate". Such data will only be processed when expressly required;
  • Access Data: Data related to the "Candidate"'s access to the Online Recruitment process, consisting, for example, of: login, profile data, photograph and access password;
  • Any other information you ("Candidate") chooses to provide to us, such as employment preferences, desired compensation, awards, or professional membership.

Amex does not make extensive use of sensitive personal data in its Online Recruitment process. Thus, except when expressly requested, we ask you to avoid submitting data of this nature to us, which, for example, consist of information about: religious conviction, political opinion, sexual orientation, genetic or biometric information, among others.

 

Amex does not process personal data of children or adolescents. Thus, if you ("Candidate") are under the age of 18, do not attempt to register or submit your personal data to the Online Recruitment process.

 

The provision of your personal data to Amex is voluntary. However, given the purpose of the processing of data performed under the assumptions of this Privacy Statement, if you ("Candidate") do not provide all the requested data, our ability to consider you for a particular vacancy may be limited.

 

4. HOW DOES THE COLLECTION OF PERSONAL DATA OCCUR?

 

Amex may collect personal data when (i) you visit or use our websites or applications for Online Recruitment; and (ii) receive or respond to electronic communications sent by us.

 

We use different methods to collect data considered essential for the Online Recruitment process. Most of this "Personal Information" is directly and voluntarily shared with us by you ("Candidate") and other candidates for jobs made available by us and may occur, in an example, when:

 

  • There is the voluntary completion of forms, registrations or job forms by the Candidate, while making use of the Online Recruitment tools we use;
  • Amex is contacted by the Candidate by e-mail, any other modality of electronic correspondence and/or by letter;
  • The candidate voluntarily creates a profile on any of the Online Recruitment platforms provided by Amex for the purpose of following a process of recruitment and selection of candidates;
  • The candidate voluntarily creates a profile on any of the Online Recruitment platforms provided by Amex for the purpose of submitting their CV/Curriculum for job vacancies.

The direct collection of personal data of "Candidates" aims to allow the evaluation of professionals to fill job vacancies.

 

Passive Collection: Consists of the collection of personal information via cookies and similar technologies, email and/or SMS. We and our "Partners" collect data through the use of Cookies and Similar Technologies. Most Cookies and Similar Technologies will only consider anonymized data during such collection. However, in certain situations, you ("Candidate") may actively act with this collection, when, for example, you choose the option "Remember My Data" when registering on our site. On this occasion, a cookie may store your username and password.

 

Please refer to the privacy notice of our Online Recruitment platform for more information on the use of your personal data in these situations.

 

Public access data: Consists of the collection of personal data made public by the "Candidate" himself or that, by their nature, are publicly accessible. In such cases, Amex Brasil will collect this information when:

 

  • Are shared by the "Candidate" himself on Amex's social networks, including, but not limited to, applications and web pages or by uploading to any of Amex's electronic platforms;
  • They come from public databases, including any services accessible over the Internet for the purposes of serving Amex's legitimate interests.

 

5. WHO WILL BE ABLE TO ACCESS YOUR PERSONAL DATA?

 

Access to the personal data of "Candidates" will be restricted to professionals and agents assigned to the specific function of developing the recruitment and selection process – Online Recruitment.

 

6. HOW DO WE KEEP AND PROTECT YOUR PERSONAL DATA?

 

Amex takes administrative, technical and physical measures of advanced complexity to protect your personal data. These measures include computer protection mechanisms and secure files and installations. In turn, once the purpose of the data processing has been fulfilled, we have taken appropriate measures to securely delete or permanently decouple your personal data, depending on the applicable legislation.

 

We will retain your personal data only for as long as it is necessary to process its application or inform you of future opportunities, unless retention is required for an underlying period, which will be carried out on the basis of the provisions of Law No. 13.708/2018 - General Data Protection Law.

 

In the event that your application is successful, Amex will store the personal data submitted by you ("Applicant") submitted during Online Recruitment based on the existing legal relationship.

 

Amex is entitled to hire third parties – operators – to store personal data under its custody, in which case these agents must process personal data with prior written instructions determined by Amex and ensure the confidentiality and security of personal data.

 

7. HOW AND WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

 

We do not share personal data of "Candidates" with any third party, with the following reasons:

 

  • with regulatory authorities, courts and government agencies to comply with legal orders, legal or regulatory requirements, and government requests;
  • with Service Providers ("Operators"), regulatory authorities and government agencies to detect and prevent fraud or other criminal activity and to protect the rights of Amex or others;
  • globally, within the "American Express Group", in accordance with current legislation. This sharing will be intended, for example, to nod "Candidate" for existing job openings in other countries where Amex, its subsidiaries and affiliates are located. Regardless of where your information is processed, we guarantee your protection, in accordance with the provisions of this Privacy Statement and applicable law; and
  • with Service Providers ("Operators") for the execution of projects and business development at the request of Amex.

If the personal data of "Candidates" may need to be shared with third parties in any way other than those described above, Amex will notify the holder of the information to obtain specific consent for this purpose, except for the exceptions provided in applicable law.

 

As indicated in the above item, Amex retains the right to store personal data under its custody with contracted Service Providers ("Operators") who may or may not be located in Brazilian territory. When personal data is transferable to other jurisdictions, the recipient of such information will always be countries or international organizations capable of providing an appropriate degree of protection and compatible with Law No. 13.708/2018 - General Data Protection Law.

 

8. YOUR RIGHTS

 

In accordance with the laws applicable in Brazilian territory, you ("Applicant") may exercise prerogatives with respect to processing of your personal data.

 

Among them: (i) the right not to provide us with your personal data, with the protection that certain data are essential for the purpose highlighted in this Privacy Statement; (ii) the right to be informed of the existence of processing of your personal data; (iii) the right to access, rectify and update your personal data; (iv) the right to request the payment of your personal data; (v) the right to have your personal data transferred to another controller; (vi) the right to withdraw your consent to the processing of your personal data, where applicable.

 

If you choose any of the actions described above, or if you have any questions about how the processing of your personal data works, please contact the Amex Officer for the channel: ERBrazil@aexp.com

 

9. YOUR DUTIES

 

You ("Candidate") are responsible for the information you provide during the Online Recruitment process that must be true and accurate.

 

10. CHANGES TO THIS PRIVACY STATEMENT

 

Amex reserves the right to amend or modify this Privacy Statement at any time, considering, but not limited to, legislative, regulatory and jurisprudential updates. Therefore, we recommend that you periodically review the updated version available. If we make changes to this statement, we will update the "Effective from" field at the top of this page.