In the context of EY/Ethics we process your personal data for the following purposes:
- to enable you to ask questions;
- to report suspected violations of law, professional standards, and/or the EY Global Code of Conduct; and/or
- where relevant, for the establishment, exercise or defense of legal claims.
When submitting a question we may process the following personal data:
- name
- email address
- relationship to EY
- password for the question
When you make a report we may process the following personal data:
- name
- email address
- relationship to EY
- password for the report
- identification details, function, contact details, behavior, and other personal data of the person(s) involved in the suspected violation
- identification details, function, contact details, and other personal data of individuals who have knowledge of the suspected violation
Please note that it is also possible to submit your question or report anonymously. If you would like to receive an email when EY posts follow-up responses to you, you may provide a personal email address. Your e-mail won't be included with your report to EY, but will be held by NAVEX, subject to NAVEX's Terms and Conditions. Providing an email address isn't required to make a report, but enables NAVEX to notify you by email of updates or follow-ups to your report.
For more information on how EY/Ethics works, please consult the FAQs here.
We obtain your personal data in various ways:
- Provided by you. Some personal data we receive directly from you. An example of this is the information that you provide us with when submitting a question or report.
- Obtained from third parties. We may obtain personal data about you from other persons or external parties. Examples include information provided by other reporters, managers, and other authorized persons involved in investigations.
Sensitive personal data
It is not required to submit sensitive personal data (such as race or ethnic origin, sexual orientation or religious or other beliefs), and including criminal offence data, in connection with EY/Ethics. We strongly encourage individuals not to include any sensitive personal data in their report unless necessary to support the report. However, we might receive sensitive personal data because this is included in a report. We only use personal data as necessary to investigate a report and we will promptly delete any sensitive personal data that is not necessary to investigate a suspected violation.