Applicant privacy and cookie notice

In this privacy statement we explain how we collect and process your personal data as part of our recruitment process, including who is responsible for the processing of your personal data as a data controller, which personal data we collect and process, and how we store your personal data.

This privacy statement will be updated from time to time, such as when there are new developments or changes in how we process your personal data.

Lipton's relationship with its group companies within the Lipton group

Lipton is the data controller for the processing of your personal data by, under the responsibility or on behalf of Lipton, including its subsidiaries in the world. As a global company, we have group companies in different countries. These group companies sometimes process your personal data and are responsible for the processing of your personal data together with Lipton, depending on the job you are applying for and the country location of the job opening. In those situations, Lipton will remain the data controller, together with the relevant Lipton group company, and will be responsible for how your personal data are processed, how you are informed thereof, and ensuring your rights as a data subject. For simplicity, where we refer to Lipton, "we", "us", or "our", in this privacy statement, we mean Lipton as the main data controller responsible for the processing of your personal data and all its other group involved as relevant (joint) data controllers.

We process personal data of (potential) job applicants in connection with our recruitment process. This includes all persons that show interest in, apply to, or are considered for any of the positions as employee or contractor at Lipton. This privacy statement also applies specifically to our processing of personal data in relation to your application via our career website or via other channels. If your application leads to the conclusion of an (employment) agreement with us, our internal privacy statement(s) on the processing of personal data of, amongst others, our employees will apply to our subsequent processing of personal data.

When you apply for a role at Lipton we may process your following personal data of you:

- Name, title, job title, gender

- Demographic information: e.g. nationality, languages, date and place of birth

- Contact details: e.g. (mobile) phone number, e-mail address, address, country of residence.

- Resumes, education, training and qualifications

- Other personal data necessary to comply with an order of a competent authority or a statutory obligation

- Work permits, visa and immigration status (only in case of cross border employment)

- Social Security Number and/or other national identifier (only in case of cross border employment)

- Other personal data provided by you, and verification data

In the context of the recruitment of personnel, we use your personal data for the following purposes:

1/ Recruitment & agency sourcing purposes:

- Manage current and future vacancies

- Sourcing candidates

- Assessing of, and verifying information provided by candidates

2/ Global Mobility purposes: verifying whether the job applicant is allowed to work in specific country, considering visa and or immigration situation

3/ Prevention and handling of disputes and other legal matters

We process your personal data only if this is allowed under one of the legal processing grounds as stated in the GDPR. In the context of our recruitment process, we rely on the below legal grounds:

In general, we obtain your personal data directly from you. We may also obtain your personal data through social media (e.g., LinkedIn), to the extent permitted by the applicable law. Additionally, we may obtain your personal data through recruitment agencies that introduce you to us or via references, indicated by you.

We will not retain your personal data longer than necessary in relation to the purposes for which the data are processed. In general, this means that personal data of job applicants will not be retained longer than 4 weeks after completion of the application procedure, unless:

- You are subsequently employed by Lipton, in which case your personal data will be processed in accordance with our general HR privacy statement.

- You have provided your consent to us for retaining your personal data up to one year after completion of the application procedure, if you have not been employed by Lipton upon completion of your application procedure.

- We need to process your personal data for handling disputes or other legal matters; or

- We need to process your personal data to comply with a legal requirement.

In addition to authorized personnel of Lipton, we may share your personal data with the parties mentioned below in the context of recruitment of personnel.

- Service providers. For the recruitment of personnel, we have engaged several service providers such as SAP SuccessFactors, as well as our sub-processors.

- Public authorities. If required by law, a judicial decision, or other decision of a competent public authority, we will share your personal data in line with such obligation for as far as necessary.

When we use services of a party who processes your personal data on our behalf, and where Lipton acts as a data processor, we have concluded appropriate data processing agreements in line with applicable data protection laws.

In the context of the recruitment of personnel, we may use certain automated decision making tools - including profiling – as part of the recruitment process. We will only do so if we have you explicit consent, which we will request at the time.

If you are applying for a job at Lipton in a country within the Economic European Area (EEA), we aim to not send your personal data to recipients in a location outside of the EEA. And when we do, we will either transfer data to countries that have been recognized by the European Commission as offering an adequate level of protection to personal data, or to countries that have supplementary safeguards in place, in order to ensure that your personal data is afforded the same level of protection as it is in the EEA.

We are committed to ensuring that your personal data is kept secure. To prevent unauthorized access, disclosure, or loss, we have put in place state-of-the-art technical and organizational measures to safeguard the personal data we collect and process. These include using strong encryption techniques for data in rest and in transit, creating back-ups, and limiting and controlling those who can access the data.

As a data subject, you have certain rights concerning our processing of your personal data. You can:

- Request access to your personal data held by us: you can ask us whether we process your personal data and, if so, provide you with a copy of that personal data.

- Request us to rectify or complete your personal data: If you believe that the personal data we process about you is inaccurate or incomplete, you can ask us to rectify your data.

- Request us to erase certain personal data: You can ask us to delete or remove your personal data in some circumstances.

- Request us to restrict the processing of your personal data: You can ask us to restrict the processing of your personal data in some circumstances, such as when you contest the accuracy of the personal data.

- Object to our processing of your personal data: You have the right to ask us to stop processing your personal data, if we are relying on legitimate interests to process your personal data, unless we can demonstrate compelling legal grounds for processing.

- Request to port your personal data: You have the right, in certain circumstances, to obtain personal data you have provided to us (in a structured, commonly used, and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

- Request to withdraw your consent: If we rely on your consent for processing your personal data, you have the right to withdraw that consent at any time. Such withdrawal will not affect the lawfulness of the processing before you withdrew your consent.

You may send us such request using the contact details below. We will handle your request carefully and respond to you without undue delay and at the latest within one month of receipt of your request in line with the applicable data protection rules. We will need to identify you and obtain proof of your identity in order to be able to respond to your request. If you feel that we have not handled your request satisfactory, or if you have a complaint, you can also contact us at privacy@Lipton.com. You are also free to lodge a complaint with your local supervisory authority via this link.

Please contact us if you have any questions or requests on the processing of your personal data by sending an e-mail to privacy@lipton.com. We will get back to your query as soon as possible.

Lipton Teas and Infusions B.V.

Eduard van Beinumstraat 18, 1077 CZ Amsterdam, The Netherlands