PRIVACY NOTICE

EPAM Systems, Inc. and its subsidiaries (“EPAM”) require certain information (including personal information) from you in order for you to benefit from the products, services and access platforms offered by EPAM. This Privacy Notice should be read in conjunction with EPAM’s Privacy Policy and Cookie Policy and other applicable privacy notices available at www.epam.com/applicant-privacy-notice. This Privacy Notice does not imply any contract of employment or contract for services or any other relationship between you and EPAM.

EPAM is the Data Controller responsible for your personal data (referred to as “EPAM”, “we”, “us” or “our” in this Privacy Notice).

This Privacy Notice explains

Who we are
How we collect, share and use your personal data
How you can exercise your privacy rights

Contact us if you have any questions regarding

This Privacy Notice
The use of your personal data
Or wish to exercise any of your rights

Please contact us using the following details: [email protected].

Making a Data Protection Complaint

If you have any concerns about the use of your personal data or the way we handle your requests relating to your rights, you can raise a complaint directly with us by using the contact details provided in this notice.

If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with your local data protection supervisory authority.

EPAM may collect, store and process the following categories of personal information obtained from you (or via a third party with your consent)

Personal contact details including your name, title, gender, address, phone number and email address
Professional social media accounts
Any photo or video uploaded by you
Your username (or other similar identifier) and data required for log-in
Your log in frequency, location and activity
Your profile preferences and other forms you may complete in your online profile
Any privacy or communication preferences
CCTV footage from attendance at any EPAM office locations
Engagement data which includes your views during and after the training workshops, posts on social media and any feedback or comments submitted to us
Technical Data includes internet protocol (IP) address
Any personal data about you included in free text boxes when you complete our web forms; including in relation to inquiries etc.

How we use your Personal Data?

EPAM will use your personal information for the following purposes:

To register and maintain an online profile and utilize applicable EPAM products and services
Updating you on any changes to our privacy notice, security updates or changes to EPAM products and services
Contacting you as part of a recruitment campaign
Physical security of our people, visitors and property

There may be additional categories and processing of your personal information if you have previously engaged with EPAM or pursuant to a legal agreement with EPAM.

As a global company, EPAM may transfer your personal information to its affiliated companies which may be outside of your home jurisdiction. Click here for details of EPAM’s locations.

Under certain circumstances, by law you have the right to

Right to be informed: we are obliged to provide clear and transparent information about out processing activities of your personal data.
Request access (commonly known as a "data subject access request"): This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction: This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure: You may ask us to delete or remove your personal data where there is no good reason for us to continue to process it. Please note, however, that we may not always be able to comply with your request for erasure for specific legal reasons.
Request the restriction of processing: You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. You may exercise this right to restrict processing when one of the following conditions applies:
- the accuracy of the personal data is contested
- processing of the personal data is unlawful
- we no longer need the personal data for processing, but the personal data is required for part of a legal process
- the right to object has been exercised and processing is restricted pending a decision on the status of the processing
Right to Data Portability: You may request your personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing by automated means, and if the processing is based on the fulfillment of a contractual obligation.
Right to Withdraw Consent: You may withdraw consent at any time if we are relying on your consent to process personal data. This won’t affect any processing already carried out before you withdraw your consent or processing under other grounds.
Right to Object: You have the right to object to our processing of your personal data where:
- processing is based on legitimate interest
- processing is for the purpose of direct marketing

If you want to request erasure of your personal information, you can do that in the settings of your profile here.

If you want to review, verify, correct, or object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact [email protected] in writing.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.