This information notice is a global notice which describes broadly how we, Alibaba and our affiliated companies within the Alibaba Group (the “Company”) collect information relating to Candidates through our online recruitment system on a website on our domain, the exact website link of which may change from time to time (the “Site”) and through other means, as well as how we Process (as that term is defined below) and potentially use such information. The Company acknowledges that the laws of certain jurisdictions may restrict, limit, or prevent, either in whole or in part, the Company from collecting, Processing, or using such information in the manner described below. Accordingly, in the event that any portion of this policy conflicts with applicable federal, state, local, or other law(s), such law(s) shall supersede and govern. Similarly, the Company will not collect, Process, or use any such information in a manner that violates any applicable federal, state, local, or other law(s). By way of example only, while the below notice states that the term “Personal Data” may include “salary information,” the Company will not collect, Process, request, or inquire about a job applicant’s salary information or history where applicable federal, state, local, or other law(s) bars the Company from doing so. In addition, any information that we collect via the Site and through other means, or Process or use, shall be in compliance with local laws.
The purpose of this information notice is to make you aware of how the Company will Process Personal Data that we obtain about Candidates through the Site and other means. Please refer to Annex 1 for details of the data controller of the Personal Data if you are based within the European Economic Area.
“Candidate” means any individual who makes an application (directly or indirectly via a representative) to join the Company through the Site.
“Processing” includes the collection, stincludes the collection, storage, retrieval, alteration, disclosure or destruction of personal data.
“Personal data” means information in any format relating to an identified or identifiable individual, which can include (but is not limited to) personal identifiers (for example: name, address, photographs, email address, credit card number, employment details, salary information, etc.).
This notice may be amended from time to time and does not form part of a Candidate’s contract of employment, if successful with their application to join the Company.
The Company Processes the Personal Data of Candidates, as necessary to evaluate an Candidate’s application for employment and for our legitimate business interests relating to processing and considering a Candidate’s application to join the Company.
The Company may also Process personal data, including Special Categories of personal data as described below, where necessary to do so for compliance with any legislative duty, as required in relation to legal proceedings or law enforcement or government investigations or where proportionate to a Candidate’s job function, e.g. the results of background risk screening and the results of credit reference checks for Candidates applying for risk-exposed financial roles (see Notice of Background Check and Authorisation/Acknowledgement for further information).
The categories of Personal Data collected by the Company through the Site and via other means include but are not limited to the following:
The Company may also collect further categories of Personal Data that a Candidate provides in any cover letters or work samples, uploaded on the Site.
Not all countries’ laws treat this type of data in the same way, but typically “Special Categories” of personal data include, for example, data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, biometric data, health, sex life, sexual orientation or data relating to offences, criminal convictions or security measures, or any other data identified as such under applicable local laws.
The Company only collects Special Categories of personal data when permitted by law and only after establishing appropriate safeguards. Processing of the following Special Categories will only be carried out by the Company where permitted by law and in the following circumstances:
Criminal convictions - only where information relating to a Candidate’s past criminal convictions would be directly relevant to determining his or her fitness and suitability for a particular position, where relevant to potential or on-going litigation or legal proceedings that could impact the Candidate’s future employment relationship with the Company or where necessary to satisfy the Company’s obligations arising under health and safety or other applicable laws. Where the Company intends to obtain information relating to a Candidate’s commission of past criminal offences, the Candidate shall be notified beforehand;
Trade union membership - within the limits provided for by law or by any collective bargaining agreement;
Racial or ethnic origin and religious or philosophical beliefs - in accordance with local laws, such as anti-discrimination laws, where required for tax purposes or for equal opportunities monitoring purposes; and/or
Health information - to comply with occupational health and safety laws and or regulations or when necessary to manage and administer leave or absences, or to make or consider making reasonable adjustments.
Specific legal requirements may apply. These vary by jurisdiction. In some jurisdictions, explicit consent may be required and will be sought from you, as appropriate.
If you are located in France: Special Categories of personal data shall only be processed by the Company provided that you give your consent and that the processing of Special Categories of personal data is precisely justified by the particularities of a position.
The Company will take all steps reasonably necessary to ensure that there are appropriate security measures in place to safeguard Personal Data. In determining the appropriate security the Company takes into account technological developments and assesses the measures in place against the risk of harm that may result from a security breach. The security measures implemented by the Company are appropriate to protect against the risks presented by the Processing and are put in place to prevent unauthorised or unlawful disclosure as well as to protect against accidental loss, destruction or damage to Personal Data.
The Company uses a range of IT security tools on its network in order to protect the information held, including monitoring the sending of data and documents to recipients outside the network, in order to detect unauthorised sharing or transmission of Personal Data or Company confidential material. Alerts are generated automatically based on system triggers. The Company takes reasonable measures to preserve the confidentiality in Candidate communications.
The Personal Data obtained through the Site and via other means may be shared across the Company and the Alibaba Group, where necessary for legitimate business purposes relating to the recruitment of the Candidate or to comply with applicable legal requirements.
The Company may also share Personal Data with third party service providers (e.g. translation services and background check providers) that it has retained to perform services on its behalf or for legal/regulatory purposes. Where Personal Data are disclosed to third parties, appropriate safeguards shall be implemented to ensure that the data will be Processed legitimately and protected appropriately.
The Company reserves the right to transfer any Personal Data in the event that the Company sells or transfers all or a portion of its business or assets, without offering you the opportunity to opt out of such transfer (except where required by local law). In the event of such a sale or transfer, the Company will use reasonable efforts to direct the transferee to use Personal Data in a manner that is consistent with this notice.
The Company may, from time to time and subject to the appropriate safeguards, need to transfer Personal Data to other Alibaba Group companies or to relevant third parties internationally, for the purposes of recruitment.
If you are located in the European Economic Area (“EEA”) or Switzerland: the personal data that the Company Processes about Candidates may be transferred to, and stored at, a destination outside the EEA and Switzerland. It may also be Processed by Company staff operating outside the EEA and Switzerland, or at another Alibaba Group company, or data processor(s) engaged by the Company. Some of these destinations do not offer the same statutory protection for Personal Data as exists within the EEA and Switzerland. Such transfers will be for the same limited purposes, and under similar security conditions, as those applicable to the Processing of the Personal Data of Candidates in the applicable country. The transfers are made subject to appropriate Legal safeguards, such as use of the EU Commission approved Standard Contractual Clauses.
If you are located in Germany: We may transfer your personal data outside the EEA and Switzerland, pursuant to an International Data Transfer Agreement.
If you have applied for a position with the Company, we may send you marketing communications if your application was unsuccessful, for example to inform you of recruitment events or to make you aware of any future employment opportunities that you may be interested in. You can opt out of receiving these marketing emails by following the instructions contained in any such message or by contacting us at any time.
If you wish to exercise your rights under applicable local laws with regards the processing of your Personal Data via the Site and other means, you must do so in writing and direct the request to your local HR contact. We may ask you for additional information to confirm your identity and for security purposes, before disclosing information requested to you.
If you are located in the European Economic Area (“EEA”) :You may have the right to request access to your Personal Data, to have it rectified or erased, to object to its processing or to have access to it restricted. You may also have the right to receive a copy of your Personal Data in a machine-readable format, the right to not to be subject to any decision that significantly affects you being taken solely by automated processing, including profiling.
We retain Personal Data for the duration of the Candidate’s application period to join the Company. In the event that the Candidate does not join the Company, we will retain their Personal Data for as long as is necessary for the purposes of our legitimate business interests as listed above, and in accordance with applicable laws and with our retention policies and procedures, after which time such data will be deleted or put beyond use.
If you have any questions about the Processing of Personal Data via this Site, please contact our International HR legal by email at IHRLegal@list.alibaba-inc.com. The processes described in this notice supplement any other remedies and dispute resolution processes which may be provided by the Company and/or which may be available under applicable local laws, including your right to lodge a complaint with a supervisory authority in your country.
If you are located in Germany: If you have any questions about the Processing of your Personal Data, please contact our German Data Protection Officer by email at firstname.lastname@example.org.
The following Alibaba affiliates or subsidiaries are controllers of Personal Data within the European Economic Area:
In Belgium, the controller is Alibaba (Netherlands) B.V., with registered offices at Prins Bernhardplein 200, 1097 JB Amsterdam, the Netherlands.
In France, the controller is Alibaba (France) SASU, with registered offices at 20, rue Cambon - 75001 Paris, France.
In Germany, the controller is Alibaba (Germany) GmbH, with registered offices at Theresienhöhe 30, c/o Blitzstart Holding AG, 80339 München, Germany.
In Italy, the controller is Italy, Alibaba (Italy) S.r.l., with registered offices at Corso Europa, 13 20122 Milano.
In The Netherlands, the controller is Alibaba (Netherlands) B.V. with registered offices at Prins Bernhardplein 200, 1097 JB Amsterdam, the Netherlands.
In United Kingdom, the controller is Alibaba.com (Europe) Limited, with registered offices at 3rd Floor, Davidson Building, 5 Southampton Street, London, WC2E 7HA, United Kingdom, and Alipay (UK) Limited, with registered offices at 3rd Floor, Davidson Building, 5 Southampton Street, London, WC2E 7HA, United Kingdom.
In Spain, the controller is Alibaba E-Commerce (Spain), S.L. with registered office at C/ Zurbaran 9 – Local Derecha Madrid 28, Madrid, Spain.
本公司亦会在以下情况「处理」个人资料（包括下文述及的特殊类别个人资料）：本公司为履行任何法例义务而有需要时；法律诉讼程序、执法行动或政府调查有所要求时；或与求职者的职务相关的情况下（例如：如求职者应征涉及风险的财务职位，其背景风险筛查结果及信贷资料查核结果则与该职位相关）（见：背景筛查通知及授权书／确认书（Notice of Background Check and Authorisation/Acknowledgement），以作进一步参考）。
如果您身在欧洲经济区（「欧洲经济区」）或瑞士境内：本公司「处理」的求职者个人资料，可能会转移至及储存于欧洲经济区及瑞士以外的目的地，亦可能由欧洲经济区及瑞士以外地区的本公司员工、或另一家阿里巴巴集团公司员工，或本公司聘请的一名或多名数据处理人「处理」。在上述某些目的地，个人资料的法定保障措施会有别于欧洲经济区及瑞士的个人资料法定保障措施。于该等目的地的数据转移，将与在适用国家「处理」求职者的个人资料的目的相同，亦同样受限制，并且会在类似的安全环境下进行。转移个人资料将在适当法律保护措施下进行，例如采用经欧盟委员会批准的《标准合约条款》（Standard Contractual Clauses）。
比利时的个人资料控制中心是Alibaba (Netherlands) B.V.，注册办事处位于Prins Bernhardplein 200, 1097 JB Amsterdam, the Netherlands。
法国的个人资料控制中心是Alibaba (France) SASU，注册办事处位于20, rue Cambon - 75001 Paris, France。
德国的个人资料控制中心是Alibaba (Germany) GmbH，注册办事处位于 Theresienhöhe 30, 80339 München, Germany，由Blitzstart Holding AG转交。
意大利的个人资料控制中心是Alibaba (Italy) S.r.l.，注册办事处位于 Corso Europa, 13 20122 Milano。
荷兰的个人资料控制中心是Alibaba (Netherlands) B.V.，注册办事处位于 Prins Bernhardplein 200, 1097 JB Amsterdam, the Netherlands。
英国的个人资料控制中心是Alibaba.com (Europe) Limited，注册办事处位于3rd Floor, Davidson Building, 5 Southampton Street, London, WC2E 7HA, United Kingdom，以及Alipay (UK) Limited，注册办事处位于3rd Floor, Davidson Building, 5 Southampton Street, London, WC2E 7HA, United Kingdom。
西班牙的个人资料控制中心是Alibaba E-Commerce (Spain), S.L.，注册办事处位于C/ Zurbaran 9 – Local Derecha Madrid 28, Madrid, Spain。