Privacy Statement

Infosys Consulting Group of entities (click here for the list of entities), subsidiaries of Infosys Limited, India (collectively referred to as “Infosys”, “us”, “we”) are committed to process your personal data as per the laws of your jurisdiction. We hereby notify you the following information about your personal data processing-

1. Personal data elements collected:

Personal Information

Mandatory data elements: Name, email, phone
Optional data elements: Headline, Address, Photo

Profile Information

Mandatory data elements: Education, Resume, Portfolio (only for certain digital roles)
Optional data elements: Experience, Summary, Current Salary, Notice Period

Diversity Information (Based on Consent)

Optional data elements: Gender, Age, Ethnicity, Sexual Orientation, Religious Belief, Working Arrangement, Caring Responsibilities.

2. Data Recipients / Accessible to:

We process your Personal Data when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering a contract. If you do not provide the Personal Data that we need to employ you, we will not be able to validate your employment with us.

For external candidates:

We process your Personal Data for the performance of a contract in the following circumstances:

• To assist in recruitment, selection and other associated processes
• Conducting interviews
• Compliance with applicable laws and regulations
• To carry out various employer related activities, if you are selected to join the organization.

We process your personal data based on legitimate business interests, for the following:

• To defend against any claim or investigation
• For storage on data servers
• To manage compliance requirements and where applicable, respond to any Data Subject Rights requests arising from you or handling of incidents/breaches involving you.

We process your personal data based on consent, for the following

• To track diversity of candidates applying to the organization [Optional]

For Intra Group employees within Infosys Consulting applying for internal job posting (IJP’):

We process your Personal Data for the performance of a contract in the following circumstances:

• To assist in recruitment, selection and other associated processes towards I
• To determine your suitability including eligibility checks for allocation to specific projects and positions
• To conduct interviews for Internal Job Posting (wherever applicable).
• Compliance with applicable laws and regulations
• To carry out various employer related activities, if you are selected for a particular IJP role

We process your personal data based on legitimate business interests, for the following:

• To defend against any claim or investigation
• For storage on data servers
• To manage compliance requirements and where applicable, respond to any Data Subject Rights requests arising from you or handling of incidents/breaches involving you.

We process your personal data based on consent, for the following

• To track diversity of candidates applying to IJP roles, unless already collected & processed by existing employer [Optional]

3. Your Rights

You are entitled at any time to access or rectify your Personal Data. In addition, you have the right to request for deletion, restrict/object any processing, including right to request for a copy of type of Personal Data concerning you which you have provided to us directly. These rights may be exercised, by you sending an email at privacy@infosys.com.

4. Right to Withdrawal (as per applicable DP laws):

Where we process your Personal Data based on your consent, you may withdraw your consent to the processing as per applicable DP laws at any time in the future. This will not affect the lawfulness of any processing operation before your withdrawal. To withdraw your consent, please contact Data Privacy Office by sending an email to privacy@infosys.com.

5. Secondary Purpose:

If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.

6. Data Storage & Transfer:

The Personal Data listed above may be transferred to countries located outside of the local country where data is collected, for which data protection legislation may differ from that of the EEA, i.e. our offices located in India, US and also for storage on third party servers of the database in Ireland and USA. We shall take the necessary steps to ensure confidentiality and security of the transferred data. We have in particular implemented the following safeguards: Binding Corporate Rules (Art. 46 para 2 (b) and to the vendors, in the form of legal instrument of Standard Contractual Clauses (Art. 46 para. 2 lit. c) GDPR), the copies can be obtained by writing to privacy@infosys.com.

7. Data Security:

Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data.

8. Data Retention:

Personal Data will be retained for a period of one (1) year from the date of application, necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required by law or for directly related legitimate business purposes.

9. Contact your Local Data Protection Authority:

If you are unhappy with how we safeguard your personal data, you have the right to bring a complaint to your local Data Protection Authority.

For more information, refer: Annexure 1

10. Contact your Data Privacy Officer

If you have any queries, comments or requests, please contact our Data Privacy Officer:

For Infosys Consulting entities (except Germany)
Srinivas P
Email: privacy@infosys.com
Phone: +91 80 2852 0261

For Infosys Consulting GmbH Germany
Dr. Sebastian Kraska
Email: email@iitr.de
Phone: +49 (0) 89 18917360

For Agency Portals submitting applications on behalf of their candidates: You acknowledge that any personal data of other data subjects is shared by you only after seeking consent from the person to whom the personal data belongs.