What information does this Online Recruitment Privacy Statement cover?

This online Recruitment privacy statement describes how we (and our Service Providers) may collect, use, share, and keep information that we get about you online and offline.  We gather Online Information if you:

• Visit, use or apply on our recruitment websites or other platforms, such as social media platforms, that link to the American Express recruitment sites; or
• Receive or reply to electronic communications from us.

We may also collect offline information from you or about you during the recruitment process including but not limited to:

• during interviews (i.e. phone interview, in person interview);
• from referrals;
• as part of the background verification process.

In this statement, we also explain how we may combine Online Information with Other Information we collect from you and how we then use the combined information. <br>

Some Online Information and Other Information is Personal Information.

What information do we collect online and how do we collect it?

Sometimes you give information directly to us (or to our Service Providers). For example, you might give us your name, email, mailing address, phone number, or date of birth when you:

• register for job notifications;
• create a profile by submitting your CV/resume;
• apply for a job.

Cookies and Similar Technologies

We (and our Service Providers) collect information through Cookies and Similar Technologies. Most Cookies and Similar Technologies will only collect De-identified Information such as how you arrive at our website or your general location. However, certain Cookies and Similar Technologies do collect personal information. 

We (and our Service Providers) may collect information using Cookies and Similar Technologies including but not limited to:

• the device you use to browse our websites (for example, we may collect information about the operating system or the browser version and the type of device you use to open electronic communications from us);
• the IP Address and information related to that IP Address (such as domain information, your internet provider and general geographic location);
  
• browsing history on our website (such as what you search for, the pages you view, how long you stay, and how often you come back);
• how you search for our website and from which websites you came from;
• whether you open our electronic communications and which parts you click on.<br>

Automated decision making

We may use fully automated processes to help us make certain decisions, including to evaluate certain aspects about you (for example, to identify relevant candidates for open positions based on job skills and resume details as part of our talent acquisition and recruitment process).

These decisions are based on Personal Information that we lawfully hold such as information that you provided in your job application. In addition, the methods we use to make such decisions are regularly tested to ensure that they remain fair, effective and unbiased.

Some of these decisions relying solely on automated means may have legal or similarly significant effects on you. However, we’ll only perform such processing if it’s:

• necessary for entering into or performing a contract between you and American Express;
• authorized by a law to which American Express is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
• based on your explicit consent to such processing.

Please see the section “What are your rights?” below for more information about your rights with respect to these types of automated decisions.

How do we use the information we collect about you?

We use the Personal Information you provide to us and, possibly, Online Information or information collected by our Service Providers about you on its own or combine it withOther Information including but not limited to:

• if you register for notifications, we may contact you with notifications and announcements about new jobs at American Express;
• if you submit your resume/CV,
  • - we may hold your resume/CV and related Personal Information in accordance with our record retention schedule;
  • - we may review your online applicant profile from time to time to consider you for relevant job opportunities at American Express;
    
• protect your information;
  
• safeguard the security of your information;
  
• conduct research and analysis, including to better understand our job candidates and website visitors;
  
• to support our background screening process if you apply for employment and are subsequently offered a position, subject to applicable law and where appropriate (we will provide you with additional information before we do such a screening); and
  
• use it in other ways as required or permitted by law or with your consent (as applicable).
  

Please note that we may review your information using automated processes.

Please note that if you choose to provide us with your e-mail address or your mobile number, we will only use these to send you e-mails and/or SMS alerts about your recruitment enquiry, job application, to request additional details about your resume/CV, and send you job alerts, where you have enrolled in this service. If we send you emails, we will collect information about your interaction with our e-mail content, such as whether you can read graphic-rich html e-mails.

How do we share your information?

We may share personal information as required or as permitted by law, including but not limited to:

• with regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests;
• with our Service Providers, law enforcement and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
• Within the American Express Group of Companies;
• with our Service Providers who perform services for us and help us operate our business, including our recruitment processes;
• for specific services, when you have given your consent (as applicable).

We may transfer personal information to companies within the American Express Group of Companies or to our Service Providers throughout the world, for example, to search for suitable positions or to process your application. Regardless of where we process your information, we still protect it in the manner described in this Online Recruitment Privacy Statement and according to the applicable laws.

Specifically, your Personal Information will be provided as follows:

We delegate Personal Information processing to a third party as follows:

How do we handle Aggregated Information and De-Identified Information?

Aggregated Information or De-identified Information does not identify you individually; it helps us to analyse patterns among groups of people. We may share Aggregated Information or De-identified Information for the same reasons as we might share Personal Information.

How do we keep and safeguard your information?

We use organizational, administrative, technical and physical security measures to protect your Personal Information. These measures include computer safeguards and secured files and facilities. We require Service Providers to safeguard Personal Information and only use your Personal Information for the purposes we specify.

We will keep your Personal Information only as long as we need to follow up on your request to register for job notifications, process your application or inform you about future opportunities, unless we are required by law or regulation or for litigation and regulatory investigations to keep it. When your Personal Information is no longer necessary for our business, legal or regulatory needs, we will take reasonable steps to securely destroy such information or permanently de-identify it. Your information will be transmitted to a separate database (or moved to a separate storage if your information is retained in a paper form) and retained for a certain period under our internal regulations and other applicable laws and regulations before it is destroyed. Your Personal Information relocated to a separated database will not be used for other purposes unless it is required under the applicable laws and regulations. When we destroy your Personal Information, we implement measures to ensure that the Personal Information cannot be restored or regenerated.If the Personal Information that needs to be destroyed is in electronic form, we will permanently delete such information in an irrevocable manner. Documents, printouts, letters, and other recorded media will be destroyed by incineration or shredding.

What are your rights?

You have the right to access, update, and/or erase your Personal Information in the following ways:

• - withdraw your request to receive job notifications or to be considered for job applications at any time;
  
• - ask us to delete the Personal Information we have about you;
  
• - ask us to rectify any incorrect Personal Information; and
  
• - request a copy of the Personal Information we have about you; and
  
• - request a manual review of certain automated decisions that may produce legal effects concerning you or that may similarly significantly affect you.

Please note that if you decide to restrict and/or object to the processing of your Personal Information or if you withdraw your job application, we will not be able to further process your application or consider you for future opportunities at American Express.

If you want to access, update or change your Personal Information, please contact RecruitmentOperationsServicing@aexp.com

Do you have questions about the Online Recruitment Privacy Statement, want to exercise any of your rights or want to make a complaint?

If you have questions, wish to make a complaint or exercise you rights you may contact the Korea Data Privacy Office at KoreaDataProtectionOffice@aexp.com

Glossary

Aggregate Information — data or information relating to multiple people which has been combined or aggregated such that individuals cannot be re-identified. Aggregated Information includes information that we create or compile from various sources, including certain data from Cookies and Similar Technologies.

American Express (we, our, us), — the American Express Company as identified at the beginning of this Online Recruitment Privacy Statement.

American Express Family of Companies — any affiliate and subsidiary of, and any company owned or controlled by, the American Express Company.

Cookies and Similar Technologies —  a cookie is a small data file that a website transfers to your computer's hard drive. We place cookies when you visit our recruitment website. We use the term Cookies and Similar Technologies in this statement to refer to all technologies that collect information in this way.

De-identified Information — data or information used in a way (for example, pseudonymised) that does not identify you to a third party. We often derive De-Identified Information from Personal Information. It includes information that we may collect from Cookies and Similar Technologies.

IP Address — a number assigned to a device when connecting to the Internet.

Online Information — data or information collected on American Express websites and applications as well as on websites and applications of third parties relating to topics about our business, which may include Personal Information, Aggregated Information and De-Identified Information.

Other Information — American Express internal information (for example, previous employment history) and other online and offline information we collect from or about you.

Personal Information or Personal Identifiable Information (PII) — information that relates to an identified or identifiable natural person, such as name, resident registration number, address, telephone number, email address, image, previous employment history and other information associated with that individual such as demographic details, even if it by itself does not identify a particular individual, may be easily combined with other information to identify a particular individual.

Service Providers — any vendor, third party and/or company that performs business operations on our behalf, such as recruitment, printing, mailing, other communications services (email, direct mail, etc.), data processing, and servicing.