Candidate Privacy Statement
候选人隐私声明

 

Aon Enterprise Solutions (Shanghai) Co., Ltd., hereinafter referred to as ‘the Company’ pledges to meet fully the requirements of the law and standards, e.g. Cyber Security Law of the People’s Republic of China (CSL), Personal Information Protection Law of the People's Republic of China (PIPL), the Civil Code of the People's Republic of China ,but not limited to. This Candidate Privacy Statement (the “Statement”) describes how we will collect, store, use, process, transfer, provide, disclose, delete (collectively as “Handle”) your personal information.
怡安企业服务（上海）有限公司（以下称“公司”）承诺严格遵守相关法律、 法规及规定，包括但不限于：《民法典》、《中华人民共和国网络安全法》、《中华人民共和国个人信息保护法》。本候选人隐私声明(“本声明”)旨在告知您我们如何收集、存储、使用、加工、传输、提供、公开、删除(合称“处理”)您的个人信息。

I. Types of Personal Information to Be Handled/处理个人信息的类型

The Company may Handle the following types of personal information about you:
公司可能会处理关于您的下述个人信息:

1. In order to verify your identity and contact you, we may collect your name, birthday, gender, personal phone number, nationality, personal identification information (ID card or passport), personal email address and residential address.
   为了验证您的身份，并与您取得联系，我们可能收集您的姓名、生日、性别、手机号码、国籍、个人身份证明资料（身份证或者护照）、个人邮箱、居住地址。


2. In order to know your experiences and job intention, we may collect your following personal information: cumulative length of service , current annual salary, expected annual salary, work history, references to previous work experience, personal profile, personal occupation, job title, previous employers, educational background, degrees, work experience, transcripts, results of background checks, results of Company test and other information collected during the recruitment process.
   为了了解您的履历及求职意向，我们可能会收集您的以下个人信息：累积社会工龄、目前年薪、期望年薪、工作记录、过往工作经验参考、个人简历、个人职业、职位、前任雇主、教育背景、学位、工作经历、成绩单、背景调查结果、公司测试结果、以及招聘过程中收集的其它信息。


3. In addition, the Company may collect and use your personal information under the following scenarios:
   除上述目的外, 公司可能将基于以下情形收集和使用您的个人信息:
   
   To comply with any applicable laws, regulations, rules and court orders so as to protect the right, property and security we, our affiliates and employees are entitled to, and the public interest, including but not limited to:
   遵守任何适用的法律、法规、规则和法院命令, 保护我们、我们的关联公司及员工的权利、财产或安全以及公共利益, 包括但不限于:
   
   

   a. respond to inquiries and requests from competent authorities.
   回应有权机关的询问及要求;

   b. perform discovery and reporting obligations under the applicable laws; and
   履行适用法律要求的发现和报告义务; 以及

   c. human resource management of the Company and its affiliates
   公司的内部及关联方的人力资源管理

You have choices about the personal information on the profile provided by yourself , such as your education, work experience, skills, photo, city or area and endorsements etc. We do not require or collect personal information other than that is listed in this Statement for this collection. If you choose to post any other personal information (including sensitive personal information), we will not collect or store such information.
对于您自行提供的简历，您对简历上提供的个人信息有选择权，例如教育背景，工作经验，技能，照片，城市或区域以及背书等。除了本声明中列出的个人信息外，我们不要求或收集其他个人信息。如果您选择发布任何其他个人信息(包括敏感的个人信息)，我们将不会收集和存储这些信息。

II. Sensitive personal information/敏感个人信息

Sensitive personal information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used. We may collect and process your sensitive personal information in accordance with laws and regulations and as agreed in the Statement. we lists the sensitive personal information we collect and specify the corresponding purpose and manner of handling such information in Section I it in bold letters. Your confirmation to this Statement means that you consent to our handling of your sensitive personal information. If you do not consent to our handling of such sensitive information or need to withdraw your consent, you may exercise your rights by contacting us as indicated in these Statement.
敏感个人信息是指一旦泄露、非法提供或滥用可能危害人身和财产安全，极易导致个人名誉、身心健康受到损害或歧视性待遇的个人信息。我们可能会依据法律法规的和本声明的约定收集和处理您的敏感个人信息，我们会在第I节中列出了我们收集的个人敏感信息，明确我们将会收集的敏感个人信息及对应的收集目的和方式，并用黑体字进行标明。您确认同意本声明，即表示您已同意我们处理您的敏感个人信息。如果您不同意我们处理这些敏感个人信息或需要撤回同意的，您可以按照本声明提示的方式与我们进行联系，行使您的相关权利。

III. Disclosure of Personal information /个人信息披露

Personal information collected pertaining to the recruitment are primarily processed and retained by the Company’s management and the HR/Administration department. The Company may transfer some of the personal information to other department of the Company and the Aon Group headquarters, subsidiaries or associate companies for the purposes of HR management.
因招聘而收集的个人信息首先由公司管理层以及人力资源/行政部门处理及保留，并可能为人力资源管理目的传输至公司其他部门或怡安集团总部，子公司或联营公司。

1. Provision of Personal Information to a Third Party/向第三方提供个人信息
   
   If it is necessary for the Company to provide your personal information to any third party due to business needs, we will notify you of name and contact information of the recipient, the scopes and types of personal information to be Handled, the purpose and manners of handling, we will go through an appropriate assessment procedure according to applicable laws, and seek your separate consent prior to provision of your personal information to a third party.
   如因公司业务需要,公司确需向第三方披露您的个人信息, 我们在披露您的个人信息前, 将告知您接收方的名称与联系方式, 提供的个人信息的种类与范围,个人信息处理的目的和方式,我们将依照适用法律的要求进行适当的评估, 并征求您的单独同意。


2. Engaged Processing of Personal Information/委托处理个人信息
   
   For reasonable business needs, the Company may engage third-party vendors or service providers to Handle your personal information for the Company (Including the company’s selected banks, insurance companies, external auditors, accountants, lawyers and background checks company, and other services providers who provides administrative, personnel- matters-related, telecommunications, computer or other services to the Company). We will enter into agreements with such third-party vendors or service provides to regulate their handling purposes, methods, scopes and categories of your personal information, as well as to require them to adopt appropriate protective measures to ensure your personal information security.
   出于合理业务需要,公司将委托第三方供应商或服务商为公司提供服务(包括指定的银行、保险公司, 外部审计师、会计师、律师和第三方背调公司以及向公司提供运营所需的行政、人事、通讯、计算机等方面服务的第三方),我们将与该等第三方供应商或服务提供商签署相关的协议,以约束其处理您的个人信息的目的、方式、范围、种类, 并要求其采取适当的保护措施以保护您的个人信息安全。


3. Legal Obligations/法定义务
   
   In order to perform our obligations under applicable laws, we may provide your personal information to regulatory authorities. Moreover, if we are requested by any enforcement order or judicial order, we may also provide your information to a third-party subject to said order.
   为履行适用法律义务要求, 我们可能向相应监管部门提供您的个人信息。同时,若我们收到任何的执法要求或者法院要求,我们亦可能向第三方提供您的个人信息。


4. Merger, Separation, Dissolution of the Company/公司合并、分立、解散
   
   If the transfer of personal information is necessary in merger, separation or dissolution of the Company, we will provide your personal information to the relevant successor all or part of our business, who will continue being bound by this Statement.
   当合并、分立、解散时、被宣告破产等原因需要转移个人信息的,我们将向我们全部或部分业务相关的继受人转让您的个人信息, 其将继续受本声明的约束。

IV. Access and correction of Personal Information /个人信息的查阅及更正

Under CSL and PIPL, you have the right to request access to, and to request correction of your personal information in relation to the personal information retained by the Company. Such requests should be addressed to the Company directly through Email： [email protected]
依据《中华人民共和国网络安全法》和《中华人民共和国个人信息保护法》，您有权要求查阅及申请更正公司持有的您的相关个人信息。此类申请须直接向公司提出，邮箱为 [email protected]

V. Length of retention /保存期限

We will retain your personal information in accordance with other applicable laws and regulations. we will delete your personal information, or take anonymous measures against your personal information after the retention period permitted by law.
我们将根据适用法律法规规定的期限,对您的个人信息进行保存。超过法定保留期限后, 我们会将您相应的个人信息进行删除或匿名化处理。

VI. The reason why the personal information is provided to overseas parties / 个人信息境外传输的原因

As a multinational company, we may host your personal information in overseas due to globalized cloud infrastructure.
作为跨国企业。出于集团搭建全球云端架构需要，您的个人信息会存储到境外服务器上。

1. 境外传输个人信息的范围
   The scope of personal information to be transferred
   
   姓名、民族、住址、国籍、出生日期、性别、联系信息、电子邮件地址、身份证信息、照片、教育背景、过去的工作经历和档案信息。
   Name, ethnicity, residential address, nationality, birth date, gender, contact information, email address, ID information, photos ,education background, past working experiences and archive information.


2. 境外接收方信息：
   The overseas data recipient: Aon Service Corporation
   Address：200E Randolph Street, Chicago, IL 60601
   


3. 传输方式：通过全球平台iCIMS、outlook系统
   Means of transfer: through global platform iCIMS, outlook Systems.

VII. Security Measures/安全措施

1. We will adopt all practical and reasonable measures to protect the personal information in our possession or under our control to prevent any unauthorized or incidental access to, handling of personal information, as well as leakage, falsification or loss of personal information. These measures include:
   我们将采取一切切实可行的合理措施保护我们拥有或在我们控制下的个人信息, 以防止任何未经授权或意外的访问、处理个人信息, 以及个人信息的泄露、篡改、遗失。这些措施包括:


2. to implement classification management of personal information, and adopt corresponding encryption and other security technical measures;
   对个人信息实行分类管理, 并采取相应的加密等安全技术措施;


3. to formulate internal management policies and operation procedures, reasonably determine the access authority of personal information handling, and to deploy access control mechanism to ensure that only authorized personal can access personal information;
   制定内部管理制度和操作规程, 合理确定个人信息处理的操作权限, 部署访问控制机制, 确保只有授权人员才可访问个人信息;


4. to establish a convenient application acceptance and processing mechanism for individuals to exercise their rights, so as to facilitate your exercising rights in personal information handling activities;
   建立便捷的个人行使权利的申请受理和处理机制, 便于您行使个人信息处理活动中的权利;


5. to regularly conduct security education and training to employees, and organize security and privacy protection training courses to raise awareness of employees on the importance of personal information protection;
   定期对员工进行安全教育和培训, 举办安全和隐私保护培训课程, 加强员工对于保护个人信息重要性的认识;


6. we also require all persons that may have access to your personal information to perform relevant confidentiality obligations. Failure to comply with such obligations may result in legal liabilities or termination of cooperation relationship with the Company;
   我们同时要求可能接触到您个人信息的所有人员履行相应的保密义务。如果未能履行这些义务, 可能会被追究法律责任或被中止与公司的合作关系;


7. to develop and implement emergency response plan on personal information security incidents;
   制定并组织实施个人信息安全事件应急预案;


8. we will take all reasonable and practicable steps to ensure that no unnecessary personal information is collected. We will only retain your personal information for as long as necessary to achieve the purposes described in the Statement, unless an extended retention period is required or permitted by applicable laws; and
   我们会采取一切合理可行的措施, 确保未收集无关的个人信息。我们只会在达成本声明所述目的所需的期限内保存您的个人信息, 除非需要延长保存期或受到法律的允许; 以及


9. any other measures stipulated under applicable laws and regulations.
   法律法规规定的其他措施。


10. Nonetheless, please be aware of that the aforementioned measures cannot ensure that the transfer or storage of your personal information is completely secure or errorless.
    但是, 您需要注意, 前述措施无法确保个人信息的传输和存储是完全安全的或无错误的。