What is in this Statement?

Information We Collect

Use of Information

Disclosure of Information

Security and Retention

Your Rights

Contacting Us

Additional Disclosures for California Residents

Changes to This Statement

Glossary

Information We Collect

Generally, you provide your information directly to us (or to our Service Providers). when you register for job notifications, create a profile by submitting your résumé/curriculum vitae (CV) or apply for or accept a job. For example, you may give us Personal Information, such as:

• your name, email address, mailing address, phone number, or date of birth, gender, nationality, and any other identification (for example, ID card, driver’s license where needed), profile picture; and
• Educational, professional, and employment-related information including résumé, qualifications, skills, training, references, and proof of work eligibility.

If you accept an employment offer from us, we will collect additional Personal Information from you during the onboarding process and throughout your employment with us. This additional information may include:

• Additional identifying information such as alias, mailing address, email address, Social Security Number, driver’s license number or state ID card number, passport number, or other similar unique personal identifiers;
• Educational, professional, and employment-related information, including employment and education history, professional licenses, marital or domestic partner status, age, gender, classifications protected under state or federal Equal Employment Opportunity laws (such as race or national origin), health and safety information, medical condition or information, and health insurance information and policy number;
• Geolocation data, including badge access information;
• Audio, electronic, or similar information;
• Biometric information, such as imagery of the face, fingerprint, hand, or palm that can be used to establish identity and/or enable access to our facilities; and
• Financial information, including bank account and routing number.

We (and our Service Providers) also collect information including Personal Information through Cookies and Similar Technologies for purposes such as keeping our site secure, remembering website preferences, enhancing site functionality and analyzing site traffic. For example, if you click Remember Me when you log in to our website, a cookie will store your username.

We (and our Service Providers or Advertising Partners) may collect information using Cookies and Similar Technologies about:

• the device, operating system, and browser version you use, such as when you are to browsing our websites, accessing our apps, or opening electronic communications from us;
• the IP Address and information related to that IP address (such as domain information, your internet provider, and general geographic location);
• browsing history on our website or in our apps (such as what you search for, the pages you view, how long you stay, and how often you come back);
• how you search for our website and from which websites you came from;
• which job ads or online content from us you view, access, or click on;
• your browsing and app use activities over time, and across websites and apps, (Service Providers perform such activities on our behalf);
• the likely associations among different browsers and devices; such as whether two devices are associated with the same individual;
• whether you open our electronic communications and which parts you click on;
• the location of your mobile device (for example, when you use mobile websites or apps to register to receive location-based content); and
• We (and our Service Providers) may also collect information made available through third-party platforms and apps (such as online social media platforms), through online databases or directories, or that is otherwise legitimately obtained. This information may be governed by the privacy notice(s) provided by the third party at the time of collection.

We (and our Service Providers) may also collect other information and combine it with the information we collected about you under this Statement.

We may also collect Personal Information, indirectly from third parties such as recruitment agencies, interviewing companies, job boards, existing employees who refer you for roles, to meet the processing purposes described in "Use of Information” section below. Some of the Personal Information we collect is more sensitive in nature. We will always collect this data in accordance with applicable laws.

We sometimes process Personal Information so that it no longer identifies any individual person. Once processed in this manner, it will no longer constitute Personal Information and will be referred to as Aggregated Information or Anonymized Information. Aggregated Information or Anonymized Information helps us analyze patterns in groups of individuals and create business insights and reports to help us manage and improve our business.

Use of Information

We use information we collect from job applicants in a number of ways, including:

• To contact you with notifications and announcements about new jobs at American Express, if you register for these alerts;
• If you submit your résumé/CV, we may retain your résumé/CV for a limited period of time and review your online candidate profile periodically to consider you for relevant job opportunities at American Express;
• To conduct research and analysis, including to better understand our job candidates and site visitors;
• To support our background/sanction screening process if you apply for employment and are subsequently offered a position, subject to applicable law and where appropriate (we will provide you with additional information before we do such a screening);
• Research and identify relevant profiles for open positions including: creation of a candidate database, by matching résumé/CVs you have uploaded in your profile or you sent to us in our database with available jobs, creation and management of a platform allowing candidates to apply to open roles on Amex’s Careers website, making contact at a job fair.
• Preselection/selection of candidates who applied for a position, including sorting, and filing of résumé/CVs and cover letters, creation, and management of your candidate profile, review your profile, organize the recruitment (including job interviews) and select the most qualified candidate for the position.
• Assessment of candidates’ suitability for a job and measurement of their professional aptitudes including processing of information gathered during telephone, face to face and/or video interviews.
• Communicating with you regarding your application (e.g., to send you e-mails and/or call you regarding your application and ask for additional details on your résumé/CV).
• Verify your professional experience and education credentials if you are applying for a job and are subsequently offered a position.
• Organize the onboarding process once you have been selected for the position including contacting you to organize the terms of your integration and drafting your employment offer letter.
• To ensure equal opportunities and treatment in accordance with equal opportunities policy and legislation.
• Where required to defend our rights, for example in the context of a litigation
• We may process Personal Information relating to your health or circumstances (for example, information regarding any disabilities you may have) to provide you with necessary accommodations in our offices or to ensure we comply with applicable legislation.
• Use it in other ways as required by law such as to verify your employment eligibility.

If you accept an employment offer from us, we may process the information we collect from you for the following purposes:

• to manage compensation, benefits, and employment-related expenses;
• to manage professional development, performance, and conduct;
• to protect the company against illegal activity and other misconduct; and
• to fulfill other operational, business, and legal purposes.

Disclosure of Information

We may disclose information about you as required or permitted by applicable law, including:

• with regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests;
• with our Service Providers, law enforcement and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
• within the American Express Family of Companies; and
• with our Service Providers who perform services for us and help us operate our business, including our recruitment processes.

Cross-Border Transfers of Personal Information

We may transfer your information to companies within the American Express Family of Companies or to our Service Providers throughout the world, for example, to search for suitable positions or to process your application. Regardless of where we process your information, we still protect it in the manner described in the Data Protection and Privacy Principles, this Statement and in accordance with applicable laws.

Security and Retention

We use administrative, technical, and physical security measures to protect Personal Information. These measures include technological safeguards and appropriate access controls to files and facilities. We take reasonable steps to securely destroy or anonymize Personal Information when we no longer need it. We keep Personal Information for only so long as necessary for the recruitment and selection process, onboarding, employment, and for the purposes described in this Statement. The data retention period will depend on a number of criteria, such as the duration of our relationship with you and any business requirements to retain your Personal Information. We may retain your Personal Information for longer periods in light of legal and/or compliance obligations, for litigation, or law enforcement agencies or regulatory investigations.

Your Rights

You have the right to withdraw your request to receive job notifications or to be considered for job applications at any time. If you decide to withdraw your job application, we will not further process your application for the job. You also have the right to ask us to rectify incorrect Personal Information we may have about you by contacting us at RecruitmentOperationsServicing@aexp.com

Contacting Us

If you are an applicant and would like to update your Personal Information, please contact us at RecruitmentOperationsServicing@aexp.com.

If you have questions about this Statement, or how your Personal Information. is processed, or wish to make a complaint, please contact globalcolleagueprivacy@aexp.com

Additional Disclosures for California Residents

California ("CA") residents may receive additional protections for Personal Information under the California Consumer Privacy Act ("CCPA"). Please refer to the “Information We Collect” section above for more information about the categories of Personal Information, including the categories of sensitive Personal Information (as defined by the CCPA), that we may have collected about you in the preceding 12 months. Additionally, please refer to the “Use of Information” and “Security and Retention” sections above for more detailed information regarding our use of Personal Information, the sources of Personal Information, and the length of time we retain Personal Information.

We do not use or disclose sensitive Personal Information for purposes that require us to provide you with the right to limit the use or disclosure of your sensitive Personal Information. Sensitive Personal Information includes, but is not limited to, your Social Security Number, driver’s license, state identification card or passport number, your racial or ethnic origin, and your biometric information.

We do not sell your Personal Information. Additionally, we do not share Personal Information with third parties in order to serve you advertisements that are relevant to you, based on your interests inferred from your activity across other sites (“cross-context behavioral advertising”). Similarly, we do not sell or share the Personal Information of individuals under the age of 16. However, we may have disclosed the categories of Personal Information described above with third parties during the preceding 12 months for the purposes described in the “Disclosure of Information” section.

Additional Rights for CA Residents

As a California resident, you may have certain rights over the Personal Information we have about you. You may have the right to request:

• Access to the Personal Information we have collected or shared about you in a portable format;
• Deletion of the Personal Information we have collected from you; and
• Correction of the Personal Information we have collected about you.

We will not discriminate against you in the event you choose to exercise any of these rights. These rights are subject to limitations, such as when we are retaining Personal Information to comply with our own legal obligations.

CA residents may exercise these rights by visiting our Privacy Center or by calling us at 1(855) 783-4772. We may need to validate certain information about you to verify your identity before we can fulfill your request. If you are making a request on behalf of another person, we may require you to provide proof that you have been designated as their authorized agent.

Changes to This Statement

Our Online Recruitment Privacy Statement is available for you to access via the American Express Careers website. We may change this Statement from time to time. When we make changes, we will update the “Effective Date” at the top of this Statement. Any changes to this Statement will become effective when posted. We recommend that you regularly consult the version available here for changes or updates.

Glossary

Aggregated Information: information relating to multiple people which has been combined or aggregated such that individuals cannot be re-identified. Aggregated Information includes information that we create or compile from various sources, including certain information from Cookies and Similar Technologies.

American Express (we, our, us): the American Express Company as identified at the beginning of this Statement.

American Express Family of Companies: any affiliate and subsidiary of, and any company owned or controlled by, the American Express Company.

Cookies and Similar Technologies: a Cookie is a small data file that a website transfers to your computer. Similar Technologies include clear GIFs, web beacons, and pixel tags, which are typically transparent images on websites.

Anonymized Information: information used in a way that does not identify you to a third party. We often derive Anonymized Information from Personal Information. It includes information that we may collect from Cookies and Similar Technologies.

IP Address: a number assigned to a device when connecting to the Internet.

Personal Information: information that identifies or could reasonably be linked with a particular individual or household; it does not include information that is publicly available or has been anonymized or aggregated.

Service Providers: any vendor, third party and/or company that performs business operations on our behalf, such as recruitment, printing, mailing, and other communications services (email, direct mail, etc.), data processing, and outsourced technology, auditors, consultants, and professional advisors.