Privacy Statement

Introduction

PwC is strongly committed to protecting the privacy of your personal information. This statement explains how PwC treats the personal information (i.e. information about you as an individual) you submit and we collect through Workday.

As used in this privacy statement, “PwC”, “we”, and “us” refer to the PwC network and/or one or more of its member firms that may process your personal information. Each member firm in the PwC network is a separate legal entity. The data controllers of your personal information are one or more of the member firms listed here at https://www.pwc.com/gx/en/about/corporate-governance/legal-entities.html. The data controller of your personal information provided to us in connection with a specific application will be the PwC member firm that posted the position for which you are applying. For further details, please see www.pwc.com/structure.

This privacy statement applies to personal data provided to us, either by you or by others (such as your employer) save where the PwC member firm that posted the position for which you are applying has made available its own privacy statement and stated at the point of collection or otherwise during the application submission process that it will apply to personal data provided in connection with an application for that position. When collecting and using personal data our policy is to only collect what we need and to be transparent about why and how we process personal data. We may use personal data provided to us for any of the purposes described in this privacy statement or as otherwise stated at the point of collection. The term “personal information” also refers to “personal data”.

By using Workday and providing personal information to us, you acknowledge you have read this privacy statement, and, to the extent your consent is necessary and valid under applicable law, you consent to the collection, use and disclosure of such personal information, including any sensitive personal information you choose to provide, by PwC and any third party recipients in accordance with this privacy statement.

Collecting your information

To help us with the recruitment process and your application for a position with PwC, we will collect personal information about you. If you login to Workday in order to progress your application for employment with PwC, you will be asked to provide information about you (including your name, email address, telephone number, address, your academic and professional qualifications and experiences, etc.). You may also choose to import information about yourself into Workday from other websites (for example, from LinkedIn). In connection with your application, you may choose to provide other information about yourself, such as a photograph or additional biographical information; we will use and process that information in the manner described in this Privacy Statement. To the extent the terms of use of other websites require consent to import their data, you agree you will obtain such consent prior to importing any information into Workday.

PwC may seek additional data and/or verify your personal information by contacting your references, referrer and other third parties. You are responsible for making sure that before providing personal information about other individuals to PwC you let them know that you will be sharing their personal information with PwC.

PwC may also collect information about you from publicly available information sources. As permitted under applicable law, PwC may also conduct background checks, criminal record checks and assessments and use and store such information during the recruitment process.

The information you provide to PwC via Workday, both now and in the future, will be held and processed by or on behalf of PwC for purposes related to current or future employment with PwC.

Sensitive personal information / special categories of personal data

PwC will not require you to provide sensitive personal information about yourself through Workday, except to the extent the collection of such information is required under applicable law. Sensitive personal information, also known as special categories of data, means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation and criminal acts.

Updating and accessing your information

It is your responsibility to keep your personal information accurate and up to date and to inform us of any changes. You can access your Workday profile at any time to review or update your personal information.

Using your information

Any personal information you submit through Workday will be provided and disclosed to PwC and may also be provided and disclosed to other PwC member firms to assist with their recruitment and employment activities.

PwC and other PwC member firms with which your personal information is shared may use your personal information for any or all of the following purposes:

• managing your application(s) for employment, evaluating you for open positions throughout the PwC network, and managing your candidate profile;
• evaluating your suitability for employment (including for example providing your personal information to third parties to conduct background checks);
• sending you email notifications and other announcements, requesting additional information, or otherwise contacting you about your candidacy; conducting statistical analyses and reports including for example regarding usage of Workday, demographic analyses of candidates, reports on PwC recruitment activities, and analyses of candidate sourcing channels;
• using data for making an offer;
• administering and managing Workday and communicating with you about it; and relating to any other purposes for which you provided the information to PwC.
  

Should you become an employee of PwC or another PwC member firm, any personal information you submit through Workday may be used in connection with your employment as permitted by applicable laws.

Our legal grounds for processing your data
Your local law may require us to set out in this privacy statement the legal grounds on which we rely in order to process your personal information. In such cases, we rely on one or more of the following processing conditions:

• if you respond to our job offer or within the negotiations concerning such a job offer, the negotiations on contract conclusion or contract performance will serve as the legal grounds for processing of your personal data; this applies similarly even if you express your interest in concluding another type of contractual relation with PwC;
• your personal data may be processed to satisfy any requirement of law;
• we may also process your personal data based on our legitimate interest in connection with our recruitment activities; or
• where no other processing condition is available, if you have agreed to us processing your personal information for the relevant purpose (please note we do not generally process personal data based on consent as we can usually rely on another legal basis).
  

Data retention

We will retain your personal data for as long as is considered necessary for the purpose(s) for which it was collected (including as required by applicable law or regulation). If your application is unsuccessful, PwC may retain and use the information you provided to PwC via Workday for a reasonable period of time to deal with any matter which may arise in connection with your application, for purposes of contacting you regarding other employment opportunities, and for PwC’s legitimate business purposes. We may keep your personal data for longer periods where extended retention periods are required by law or regulation and in order to establish, exercise or defend our legal rights.

When and how we share personal data and locations of processing

We will only share your personal data if we are legally permitted to do so. When we transfer or share personal data, we put contractual arrangements and security mechanisms in place that comply with our data protection, confidentiality and security standards and applicable laws and regulations.

PwC is part of a global network with member firms around the world. Your personal information may be transferred and disclosed to other PwC member firms in connection with your application for employment and other legitimate business purposes. As a result, your personal information may be transferred and stored outside the country where you are located. This includes countries and regions outside the European Economic Area (EEA) and countries or regions that do not have laws that provide specific protection for personal information. For a list of countries and regions where PwC firms are located, please see https://www.pwc.com/gx/en/about/office locations.html

Where we collect your personal information from within the EEA, transfer outside the EEA will be only:

• to a recipient in a jurisdiction approved by the European Commission as offering an adequate level of protection for personal data.
• under an agreement which covers the EU requirements for the transfer of personal data to data processors or data controllers outside the EEA.
  

We may transfer your personal data to:

• Other PwC member firms

We may share your personal data with other PwC member firms for the purposes set out above (under Using your information). For details of the locations of PwC member firms, please click here.

• Third party organizations that provide applications/functionality, data processing or IT services to us

We use third parties to help provide, run and manage our internal IT systems. For example, providers of information technology, cloud-based software as a service providers, identity management, website hosting and management, data analysis, data back-up, security and storage services. We also may use third parties when arranging for the electronic execution of a document.

The third party providers may use their own third party subcontractors that have access to personal data (sub-processors). It is our policy to use only third party providers that are bound to maintain appropriate levels of security and confidentiality, to process personal information only as instructed by PwC, and to flow those same obligations down to their sub-processors.

• Other disclosures

We may also disclose personal information to other third parties for regulatory compliance purposes and/or as otherwise set out in this Privacy Statement.

We may also disclose personal information to a third party as necessary in connection with a corporate reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or capital.

We may also disclose your personal information to law enforcement, regulatory and other government agencies, and to professional bodies and other third parties, as required by and/or in accordance with applicable law or regulation. This includes disclosures outside the country or region where you are located. PwC may also review and use your personal information to determine whether disclosure is required or permitted.

Individuals’ rights and how to exercise them

You may have certain rights under your local law in relation to the personal information we hold about you. In particular, you may have a right to:

• request a copy of personal information we hold about you;
• ask that we update the personal information we hold about you, or correct such personal information that you think is incorrect or incomplete;
• ask that we delete personal information that we hold about you, or restrict the way in which we use such personal information;
• restrict or object to our processing of your personal information;
• request a copy or transfer of your data (data portability); and/or
• withdraw your consent to our processing of your personal information (to the extent such processing is based on consent and consent is the only permissible basis for processing).

To exercise any of the abovementioned rights, please contact us as set forth below. We will process any requests in accordance with applicable law and within a reasonable period of time. We recommend you include documents that prove your identity and a clear and precise description of your request. We may charge for a request to access your information, if permitted by applicable law.

Withdrawal of your consent and deletion of your personal data

You may request that your personal information be deleted from Workday and, to the extent the processing of your information is based on consent, revoke your consent to PwC’s processing of your personal data. Because PwC must process your personal data in order to consider you for a position as part of the recruitment process, if you ask to have your personal information deleted from Workday, PwC may need to terminate your application. Notwithstanding the foregoing, PwC may retain certain information related to your application for a reasonable but limited period to meet applicable legal or records retention requirements.

Security

PwC has implemented generally accepted standards of technology and operational security in order to protect your personal information from loss, misuse or destruction.

In particular, PwC has put in place appropriate technical and organisational security measures to prevent any unau thorised or unlawful disclosure or processing of personal information and the accidental loss or destruction of or damage to personal information.

Data controller and contact information

The data controller for the personal information you submit via Workday is the PwC member firm(s) with which you have applied for a position.

Contact us

Please submit a request to exercise a legal right in relation to your personal data, or an enquiry if you have a question or complaint about the handling of your personal data.

You may also contact us at the following postal address:

PricewaterhouseCoopers LLP
One Embankment Place
London
WC2N 6RH
UK

You may also have the right under applicable law to lodge a complaint with your local supervisory authority responsible for data protection matters.

Changes to this privacy statement

This privacy statement was last modified in March 2023. We may update this privacy statement at any time by publishing an updated version here. The new modified or amended privacy statement will apply from that revision date. Therefore, we encourage you to review this privacy statement periodically to be informed about how we are protecting your information.