PRIVACY NOTICE
EPAM is the Data Controller responsible for your personal data (referred to as “EPAM”, “we”, “us” or “our” in this Privacy Notice).
This Privacy Notice explains
- Who we are
- How we collect, share and use your personal data
- How you can exercise your privacy rights
Contact us if you have any questions regarding
- This Privacy Notice
- The use of your personal data
- Or wish to exercise any of your rights
Please contact us using the following details: privacy@epam.com.
Making a Data Protection Complaint
If you have any concerns about the use of your personal data or the way we handle your requests relating to your rights, you can raise a complaint directly with us by using the contact details provided in this notice.
If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with your local data protection supervisory authority.
EPAM may collect, store and process the following categories of personal information obtained from you (or via a third party with your consent)
- Personal contact details including your name, title, gender, address, phone number and email address
- Professional social media accounts
- Any photo or video uploaded by you
- Your username (or other similar identifier) and data required for log-in
- Your log in frequency, location and activity
- Your profile preferences and other forms you may complete in your online profile
- Any privacy or communication preferences
- CCTV footage from attendance at any EPAM office locations
- Engagement data which includes your views during and after the training workshops, posts on social media and any feedback or comments submitted to us
- Technical Data includes internet protocol (IP) address
- Any personal data about you included in free text boxes when you complete our web forms; including in relation to inquiries etc.
How we use your Personal Data?
EPAM will use your personal information for the following purposes:
- To register and maintain an online profile and utilize applicable EPAM products and services
- Updating you on any changes to our privacy notice, security updates or changes to EPAM products and services
- Contacting you as part of a recruitment campaign
- Physical security of our people, visitors and property
There may be additional categories and processing of your personal information if you have previously engaged with EPAM or pursuant to a legal agreement with EPAM.
As a global company, EPAM may transfer your personal information to its affiliated companies which may be outside of your home jurisdiction. Click here for details of EPAM’s locations.
Under certain circumstances, by law you have the right to
- Right to be informed: we are obliged to provide clear and transparent information about out processing activities of your personal data.
- Request access (commonly known as a "data subject access request"): This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction: This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure: You may ask us to delete or remove your personal data where there is no good reason for us to continue to process it. Please note, however, that we may not always be able to comply with your request for erasure for specific legal reasons.
- Request the restriction of processing: You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. You may exercise this right to restrict processing when one of the following conditions applies:
- the accuracy of the personal data is contested
- processing of the personal data is unlawful
- we no longer need the personal data for processing, but the personal data is required for part of a legal process
- the right to object has been exercised and processing is restricted pending a decision on the status of the processing
- Right to Data Portability: You may request your personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing by automated means, and if the processing is based on the fulfillment of a contractual obligation.
- Right to Withdraw Consent: You may withdraw consent at any time if we are relying on your consent to process personal data. This won’t affect any processing already carried out before you withdraw your consent or processing under other grounds.
- Right to Object: You have the right to object to our processing of your personal data where:
- processing is based on legitimate interest
- processing is for the purpose of direct marketing
If you want to request erasure of your personal information, you can do that in the settings of your profile here.
If you want to review, verify, correct, or object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact privacy@epam.com in writing.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.