Privacy statement

14 February 2020

Introduction

This privacy notice explains how EY collects and uses personal data, and describes the rights you have with respect to your personal data.

In this notice, “EY,” “our”, “we” or “us” refers to the global organization of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity, or refers to one or more of those member firms. The controllers of your personal data are one or more of the EY entities listed here (pdf)  (see the list of EY member firms and affiliates).

Certain EY member firms in countries outside the European Union (EU) have appointed a representative in the EU to act on their behalf if, and when, they undertake data processing activities to which the EU General Data Protection Regulation (GDPR) applies. Further information and the contact details of these representatives are available here.

EY processes personal data for a variety of purposes. We collect this personal data directly from you, for example, if you engage us to prepare your tax return, if you visit ey.com (our Site), if you submit your contact details to receive marketing communications from us, if you submit event-related data to attend EY events, or submit a job application via the EY careers website. Alternatively, we process your personal data in the context of providing professional services to your employer or service provider, for example, conducting an audit of your bank or payroll for the company you work for. Finally, we obtain your personal data via publicly available sources, such as LinkedIn. This privacy notice is intended to cover all of the above-mentioned scenarios.

Click on the links in our index to take you to the more detailed information regarding various purposes for which we process personal data:

  • Visitors to ey.com
  • Entrepreneur Of The YearTM
  • Clients
  • Individuals whose personal data we obtain in connection with providing services to our clients
  • Insolvency services
  • Contacts in our customer relationship management (CRM) systems
  • Participants of EY meetings, conferences, events and learning sessions
  • Individuals who use our applications
  • Individuals who visit our social media sites, social media plugins and tools
  • Individuals who correspond with EY via email
  • Job applicants
  • Alumni
  • Suppliers
  • EY/Ethics
  • Visitors to EY offices

If you have any questions regarding the processing of your personal data or wish to contact the data protection officer of an EY member firm, please contact the EY data protection team who will direct your query to the appropriate person or team within the organization.

  • What data is covered?

    In this privacy notice, “personal data” means any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier. Personal data also refers to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of an individual.

    It also includes special categories of personal data (special category data) from which we can determine or infer an individual's

    • Racial or ethnic origin
    • Political opinions
    • Religious or philosophical beliefs
    • Membership of a trade union
    • Genetic data
    • Biometric data
    • Physical or mental health or condition
    • Sex life or sexual orientation

    As well as personal data relating to criminal convictions and offenses

  • Your rights in relation to personal data

    You have the following rights in relation to your personal data:

    • To access the personal data held by EY about you
    • To have your personal data corrected, for example, if it is incomplete or incorrect
    • To opt out of receiving marketing communications at any time
    • To restrict or object to the processing of personal data or request erasing personal data (in certain circumstances and subject to applicable law)
    • To receive a copy of the personal data which you have provided to EY, in a structured, commonly used and machine-readable format (known as “data portability”) (in certain circumstances and subject to applicable law)
    • Where you have provided personal data voluntarily, or otherwise consented to its use, the right to withdraw your consent
    • The right to complain to a data protection authority (see section “Complaints ”)

    If you have a query or wish to exercise your rights, please speak to the person you usually deal with at EY or contact the EY data protection team.

  • Complaints

    If you are concerned about an alleged breach of privacy law or any other regulation by EY, you can contact the person you usually deal with at EY or the EY global privacy leader, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom. An EY privacy leader will investigate your complaint and give you information about how it will be handled.

    You also have the right to complain to the data protection authority in your country, or refer the matter to a court of competent jurisdiction or as specified in any applicable engagement agreement with EY.

  • Purposes for which we process personal data

    Our Site is not intended for use by minors under the age of sixteen (16) years.  EY does not knowingly collect, disclose, or sell the personal data of minors under 16 years of age. If you are under 16 years old, please do not provide any personal data even if prompted to do so. If you believe that you have inadvertently provided personal data, please ask your parent(s) or legal guardian(s) to notify us and we will delete your personal data.

  • Transfers of personal data

    The following EY policies provide additional information on EY’s privacy practices: