Last updated: May 22, 2023

Privacy Notice - EY Talent Outreach Services

1. Introduction

This Privacy Notice is intended to describe the practices EY follows in relation to the EY Talent Outreach Services database (the "Tool") with respect to the privacy of all individuals whose personal data is processed and stored in the Tool. This Privacy Notice should be read together with the ey.com Privacy Statement, and in case of any conflict with the ey.com Privacy Statement, the terms of this Privacy Notice will prevail. Please read this Privacy Notice carefully.

2. Who manages the Tool?

"EY" refers to one or more of the member firms of Ernst & Young Global Limited ("EYG"), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by providing this Tool on which your personal data will be processed and stored is Ernst & Young LLP US. The Tool hosted by Apok Technology on servers licensed from Amazon Web Services located in the US.

The personal data you provide in the Tool may be shared by Ernst & Young LLP US with one or more member firms of EYG (see "Who can access your information" section below).

3. Why do we need your information?

The Tool connects EY clients with Community Based Organizations ("CBOs") in order to facilitate sharing of EY client job postings with CBOs.

Your personal data processed in the Tool is used as to authenticate you into the Tool and, for CBOs, to provide up to date contact information. The information is sourced from users of the Tool, either via communications with EY or through direct submission to the Tool. EY relies on Tool users for the accuracy of the information.

The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.

4. What type of personal data is processed in the Tool?

The Tool processes these personal data categories:

• Name
• Email Address
• Phone number
• Job title

5. Sensitive Personal Data

Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.

EY does not intentionally collect any sensitive personal data from you via the Tool. The Tool's intention is not to process such information.

6. Who can access your information?

Your personal data is accessed in the Tool by the following persons/teams:

• EY personnel tasked with administering the Tool and delivering Talent Outreach Services.
• Apok Technology personnel tasked with administering the Tool.
• CBO personnel, who have access to their contact information only.
• EY client personnel who have access to CBO contact information.

The access rights detailed above involves transferring personal data in various jurisdictions (including jurisdictions outside the European Union) in which EY operates (EY office locations are listed at www.ey.com/ourlocations). EY will process your personal data in the Tool in accordance with applicable law and professional regulations in your jurisdiction. Transfers of personal data within the EY network are governed by EY's Binding Corporate Rules (www.ey.com/bcr).

7. Data retention

Your personal data will be retained in compliance with privacy laws and regulations for as long as you are an active participant in the EY Talent Outreach Services.

8. Security

EY protects the confidentiality and security of information it obtains in the course of its business. Access to such information is limited, and policies and procedures are in place that are designed to safeguard the information from loss, misuse and improper disclosure. Additional information regarding our approach to data protection and information security is available in our Protecting your data brochure.

9. Controlling your personal data

EY will not transfer your personal data to non-EY third parties (other than any external parties referred to in section 6 above) unless we have your permission or are required by law or professional obligation to do so.

10. Your rights in relation to your personal data

Depending on the applicable jurisdiction, you may have certain rights in relation to your personal data, such as:

• To request details of the personal data EY processes about you and to access the personal data that EY processes about you.
• To have your personal data corrected, for example, if it is incomplete or incorrect.
• To restrict or object to the processing of personal data or request the erasure of your personal data.
• To receive a copy of the personal data which you have provided to EY in a structured, commonly used and machine-readable format which you can re-use for your own purposes (known as "data portability").
• Where you have provided consent to the processing of your personal data, the right to withdraw your consent.
• The right to complain to a data protection authority (see section "Complaints").

If you have any questions about how EY processes your personal data or your rights related to your personal data, please send an email to global.data.protection@ey.com.

11. Complaints

If you are concerned about an alleged breach of privacy law or any other regulation, contact EY's Global Privacy Leader, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom or via email at global.data.protection@ey.com or via your usual EY representative. An EY Privacy Leader will investigate your complaint and provide information about how it will be handled and resolved.

If you are not satisfied with how EY resolved your complaint, you have the right to complain to your country's data protection authority. You can also refer the matter to a court of competent jurisdiction.

Certain EY member firms in countries outside the European Union (EU) have appointed a representative in the EU to act on their behalf if, and when, they undertake data processing activities to which the EU General Data Protection Regulation (GDPR) applies. Further information and the contact details of these representatives are available here.

12. US State Privacy Rights

Depending on the US state you reside in, you may have certain additional rights with respect to your personal data. Please visit our US State Privacy Statement for more information. EY does not sell personal information collected in connection with the Tool.

13. Contact us

If you have additional questions or concerns, contact your usual EY representative or email global.data.protection@ey.com.