What is in this online privacy statement?

• What information does this Online Recruitment Privacy Statement cover?
• What information do we collect online and how do we collect it?
• How do we use the information we collect about you?
• How do we share your information?
• How do we handle Aggregated Information and De-identified Information?
• How do we keep and safeguard your information?
• What are your rights?
• Do you have questions about the Online Recruitment Privacy Statement, want to exercise any of your rights or want to make a complaint?
• Glossary

What information do we collect online and how do we collect it?

Generally, you give information directly to us (or to our Service Providers). For example, you have to give us your name, email, mailing address, phone number, or date of birth when you:

• register for job notifications;
• create a profile by submitting your CV/resume; or
• apply for a job.

Cookies and Similar Technologies

We (and our Service Providers) also collect information through Cookies and Similar Technologies. Most Cookies and Similar Technologies will only collect De-identified Informationsuch as how you arrive at our website or your general location. However, certain Cookies and Similar Technologies do collect Personal Data/Sensitive Personal Data.

We (and our Service Providers) may collect information using Cookies and Similar Technologies including but not limited to:

• the device you use to browse our websites (for example, we may collect information about the operating system or the browser version and the type of device you use to open electronic communications from us);
• the IP Address and information related to that IP Address (such as domain information, your internet provider and general geographic location);
• browsing history on our website (such as what you search for, the pages you view, how long you stay, and how often you come back);
• how you search for our website and from which websites you came from;
• whether you open our electronic communications and which parts you click on.

We (and our Service Providers) may also collect information made publicly available through third-party platforms and services (such as online social media platforms, professional social networking sites, job/career fairs, etc.), through online databases or directories, or that is otherwise legitimately obtained. This information may be governed by the privacy notice(s) provided by the third party at the time of collection.

We may also collect non-public information from third parties for purposes such as for background checks and referrals.

Automated decision making

We may use fully automated processes to help us make certain decisions, including to evaluate certain aspects about you (for example, to identify relevant candidates for open positions based on job skills and resume details as part of our talent acquisition and recruitment process).

These decisions are based on Personal Data that we lawfully hold such as information that you provided in your job application. In addition, the methods we use to make such decisions are regularly tested to ensure that they remain fair, effective and unbiased.

Some of these decisions relying solely on automated means may have legal or similarly significant effects on you. However, we’ll only perform such processing if it’s:

- necessary for entering into or performing a contract between you and American Express;

- authorized by a law to which American Express is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

- based on your explicit consent to such processing.

Please see the section “What are your rights?” below for more information about your rights with respect to these types of automated decisions

How do we use the information we collect about you?

We use the Personal Information you provide to us and, possibly, Online Information or information collected by our Service Providers about you on its own or combine it withOther Information,including but not limited to:

• If you register for notifications, we may contact you with notifications and announcements about new jobs at American Express;
• If you submit your resume/CV,

  - we may hold your resume/CV and related Personal Data/Sensitive Personal Data in accordance with our record retention schedule;

  - We may review your online applicant profile from time to time to consider you for relevant job opportunities at American Express; and

   
  

  • protect your information;
  • safeguard the security of your information;
  • conduct research and analysis, including to better understand our job candidates and website visitors;
  • To support our background screening process if you apply for employment and are subsequently offered a position, subject to applicable law and where appropriate (we will provide you with additional information before we do such a screening); and
  • use it in other ways as required or permitted by law or with your consent (as applicable).

  
  
  Please note that if you choose to provide us with your e-mail address or your mobile number, we will only use these to send you e-mails and/or SMS alerts about your recruitment enquiry, job application, to request additional details about your resume/CV, and send you job alerts, where you have enrolled in this service. If we send you emails, we will collect information about your interaction with our e-mail content, such as whether you can read graphic-rich html e-mails.
  

How do we share your information?

We may share Personal Data/Sensitive Personal Data as required or as permitted by law, including but not limited to:

• with regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests;
• with our Service Providers law enforcement and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
• within the American Express Family of Companies;;
• with our Service Providers who perform services for us and help us operate our business, including our recruitment processes;
• for specific services, when you have given your consent (as applicable).

We may transfer Personal Data/Sensitive Personal Data to companies within the American Express Family of Companies or to our Service Providers throughout the world, for example, to search for suitable positions or to process your application. Regardless of where we process your information, we still protect it in the manner described in this Online Recruitment Privacy Statement and according to the applicable laws.

How do we handle Aggregate Information and De-identified Information

Aggregate Information and De-identified Information does not identify you individually; it helps us to analyze patterns among groups of people. We may share Aggregate Information or De-identified Information for the same reasons as we might share Personal Data/Sensitive Personal Data. .