Candidate privacy notice - English

AstraZeneca Privacy Notice for Job Applicants 

I. Who is this notice intended for?

This privacy notice explains how AstraZeneca (“we”, “us”, “our”) collects, and uses personal data about job applicants (“you”).  

Personal data means any information which could reasonably be used to identify you either directly (e.g., your name) or indirectly (e.g., a unique ID number). 

This privacy notice is in line with AstraZeneca's Global Privacy Standard and aims to comply with privacy and data protection laws around the world. However, if a particular jurisdiction requires AstraZeneca to collect or use your personal data differently, we will always comply with applicable law. If you are a resident of the United States, please read this notice in conjunction with our US Supplemental Notice, which includes additional information relevant for individuals residing in certain US jurisdictions.     

II. Who is responsible for your personal data?

The local AstraZeneca company to which you apply is responsible for your personal data. This entity is the "controller", "responsible person" or other equivalent term under applicable privacy and data protection law. 

Find here a list of AstraZeneca companies, including their business contact information, such as their email address, mailing address, and telephone number(s), as applicable. 

III. What personal data do we collect and how do we use it? 

We collect personal data about you from a range of sources depending on the circumstances, including: 

• Directly from you when you: 

• Create an account and profile in the AstraZeneca Group careers site; 

• Share your resumé with us, either via AstraZeneca Group careers site or through other means; or 

• Take part in meetings, interviews or recruitment exercises; 

• Automatically from your device, such as when you log on to the AstraZeneca Group careers site;  

• From third-party sources, such as: 

• Recruitment agencies; 

• Companies who do pre-employment screening for us; and 

• Your colleagues and/or managers when they refer you for a vacant position 

• From public sources: 

• LinkedIn Data Collection and Analysis 
  We may collect and analyze the data available on your LinkedIn profile as part of our talent acquisition process. This includes information you may have chosen to share publicly or specifically authorized us to access, in accordance with LinkedIn's terms and privacy settings. 

The table below lists the purposes for which we may collect and use your personal data, the categories of personal data we may collect and use, and, for those jurisdictions that require a “legal basis”, the legal basis we rely on. 

Regarding legal basis, some countries do not allow us to rely on legitimate interest to use your personal data, in which case we may rely on another legal basis such as your consent. We will ask for your consent to collect and use your personal data where required by and in accordance with applicable law. 

You are free to choose not to provide us with your personal data when we ask for it. However, if you choose not to provide us with your personal data, it may limit or prevent us from evaluating your suitability for open positions or contacting you about them, or responding to your request(s), among other things. 

 

Automated Application Scoring 

An algorithm may be used to automatically screen your CV and application based on pre-defined job requisition calibration. We do this to support our assessment of your suitability, expertise and knowledge relevant to the position you applied for. Regardless of the outcome of this automated scoring, your application will always be reviewed by a human before any decision about progress or rejection of your application will be made. No automated decision making takes place. 

IV. Who do we share your personal data with and how do we transfer it?

Your personal data will be made available to specific AstraZeneca employees, for instance human resources, legal and IT where there is a legitimate business need for them to have access to it. 

Depending on the purposes for which we use your personal data, we may also share your personal data with the following entities for the purposes listed above: 

• Other AstraZeneca group companies, including our affiliates and subsidiaries;  

• Our service providers, such as: 

• Eightfold AI Inc. for the purpose of supporting the automated application scoring in the application assessment process;   

• IT providers for the purposes of system management and maintenance, system security and improvement, development, testing, technical support, and data hosting; 

• recruitment agencies for the purposes of helping us find and recruit suitable candidates, including screening and short listing; 

• companies contracted to perform background screenings, where applicable; 

• companies that help us assess your skills and competencies and to run psychometric tests; 

• a successor or business partner to AstraZeneca or to an AstraZeneca Group company in the event that it sells, divests or sets up a collaboration/joint venture for all or part of its business;  

• Government officials where legal reporting requirements may exist. Such AstraZeneca Group entities and third parties may be based anywhere in the world, which could include countries that may not offer the same legal protections for personal data as your country of residence; and 

• other third parties at your direction or with your consent.   

The entities with whom we share personal data may be located in different jurisdictions globally. When we transfer your personal data across borders, we do so in compliance with applicable privacy and data protection laws. 

Where required by law, we rely on contracts to ensure that the entity receiving your personal data complies with applicable data protection laws. Such contractual arrangements include, for example, AstraZeneca's Binding Corporate Rules and Standard Contract Clauses, or equivalent instruments approved by a competent supervisory authority. You can request information, and a copy of the Standard Contract Clauses used by AstraZeneca by contacting us at Privacy@astrazeneca.com. 

Where required by applicable privacy and data protection laws, we will ask for your consent before transferring your personal data to another jurisdiction. 

Law enforcement, regulatory and security authorities or courts in the jurisdictions to which we transfer your personal data may have a right to access your personal data in accordance with applicable laws. 

V. How long do we keep your personal data?

We keep your personal data for as long as we need it for the purposes set out above, or where local law imposes a retention period, in accordance with such law. When your personal data is no longer needed for these purposes, it will be deleted. 

VI. How do we protect your personal data?

We have implemented a variety of privacy and security measures and technologies to help protect your personal data from a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.  In particular, AstraZeneca has developed and implemented robust data transmission and storage systems designed to ensure an appropriate level of security and protection of personal data.  

We have a dedicated process for carefully selecting the service providers and partners we work with, which includes verifying they have appropriate technical and organizational security measures in place to protect your personal data. We also confirm that these service providers and partners are able to comply with the obligations they have undertaken in the data processing and sharing agreements we sign with them.

If you suspect or believe that your interactions with us are no longer secure, please contact us as soon as possible. See the “contact us” section below.  

VII. What are your data protection rights? 

Generally, your rights in relation to your personal data will depend on: (i) the data protection law (if any) that applies to how we collect and use your personal data; and (ii) in some jurisdictions, the lawful basis on which we collect and use your personal data. Some laws also apply conditions or exceptions to the exercise of these rights. 

You may have the following rights in relation to your personal data: 

• Right to obtain information on how we use your personal data, including the purposes for which we use it, with whom we share it, how long we retain it, and so forth;

• Right to access to the personal data we hold about you, including receive a copy of your personal data;

• Right to have us correct any inaccuracies in the personal data we hold about you (for example, because it is incomplete or out of date);

• Right to have us delete (erase) your personal data;

• Right to have us transmit the personal data you have provided to us about yourself to a third party;

• Right to object to our use of your personal data;

• Right to receive meaningful information about the logic involved in any automated decisions we take about you, and the right to be informed of the significance and the envisaged consequences of that decision;

• Right to withdraw any consent you may have given to the collection or use of your personal data; and

• Any other right recognized by applicable data protection law. 

If you want to exercise these rights, please use AstraZeneca’s dedicated online platform. When doing so, please note the following: 

• We may ask you to provide proof that you are who you say you are if we have any doubts about your identity. For example, we may ask you to verify certain data we have about you or, in some cases, to show us your ID.

• If you are making the request on behalf of someone else, we may ask you to provide proof that you have been authorized by that other person to make the request on their behalf.

• We will delete any proof of your identity as soon as we are satisfied that you are who you say you are, or that you are in fact representing someone else.

In addition to the above rights, you may also have the right to complain to your local data protection authority, depending on the applicable law. 

VIII. Contact us 

You can contact us using the business contact information – such as the email address, mailing address, or telephone number(s) – of the AstraZeneca entity responsible for your personal data , which you can find on this website. 

You can also contact our Data Protection officer at Privacy@astrazeneca.com or by mail at: Global Data Protection Officer, AstraZeneca 1 Francis Crick Avenue, Cambridge Biomedical Campus, Cambridge, CB2 0AA, United Kingdom. 

If you want to exercise your rights, please use our dedicated online platform. 

IX. How do we let you know of updates to this privacy notice?

We will post the latest version of our privacy notice on our website at https://careers.astrazeneca.com/candidate-privacy-notice. The privacy notice lets you know when it was last updated. If we make material updates to the privacy notice, we will, where possible and in accordance with applicable law, provide you with an additional notice (for example, by sending it to you using the contact information we have on file for you).