Infosys BPM Limited, its parent company Infosys Limited and its subsidiaries, associates, and affiliated companies (collectively referred to as “Infosys”, “us”, “we”) are committed to process your personal data as per the laws of your jurisdiction. We hereby notify you the following information about your personal data processing–

Personal data elements collected:

• Mandatory: First name , last name, city, country, zip/postal code, Email ID, Mobile phone (including country code), resume, Past employment with Infosys Ltd. or any of its subsidiary companies and if yes- employee number, subjected to any contractual restrictions including non-competition or other obligations that could prevent you from working for Infosys Ltd. or any of its subsidiary companies (including current and prior employer restrictive covenants), how did you hear about us, Interview feedback from Recruiter and panelist, IP address, Address.
• Optional data elements: state/region/province, home phone (including country code), Educational Details (including School/Educational Institution name, Major area of study), Work experience (including Company Name, start date, end date, Job title), skills, notice period required to serve in the current organization (in months), Middle name, Cover letter, web address, work phone, secondary mobile phone, graduation year, Degree Type, GPA, Work Responsibilities at previous company, percentage of travel (if you are open to travel), are you open to travel and to relocation, desired salary in your next position, other relevant training or professional qualifications or work related skills, Name of Assessor, Application Source, Willingness to go for a transition.
• For Shortlisted candidates: Passport details and PR details including details pertaining to visa/work permit processing as required by Immigration Authorities.

Data Recipients / Accessible to:
Your Personal Data will be accessible to certain authorized data recipients for the above Processing of Personal data may include but not be limited to the following:

• Internal recipients within Infosys Ltd., its subsidiaries, or affiliates such as Recruitment, Human Resources, Finance, Facilities, Immigration, Travel, Project Delivery Units, Infosys IT (IS, Computers and Communications Division/TIG), Hiring Mangers, Training, Units/Org Leadership.
• Infosys authorized service providers or vendors who provide services to Infosys.
• Government Bodies including statutory, regulatory authorities, law-enforcement agencies (where applicable).
• Auditors (internal/external) as applicable.
• Infosys’ Clients (where applicable) based on contractual obligations.
• Any other parties expressly or impliedly authorized by you for receiving such disclosures.

Lawfulness of Processing:
We process your Personal Data when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract. This applies in any case where we provide services to you pursuant to a contract. If you do not provide the Personal Data that we need in order to provide our services, we will not be able to provide our services to you. We process your Personal Data for the performance of a contract in the following circumstances:

• To assist in the recruitment, selection and other associated processes
• To carry out various employer related activities if you are selected to join the organization
• To reach out in case of any future openings that may suit your profile.

We process your Personal Data when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights). This applies in the following circumstances:

• To defend against any claim or investigation
• For transfer and storage of data on servers
• To respond to any Data Subject Rights requests arising from you or handling of incidents/breaches involving you.
• For troubleshooting purpose.

We process your Personal Data when we are required to do this by law in the following circumstances:

• To enable us to ensure that we are compliant with any applicable labor and/or other relevant laws

Your Rights:
You are entitled at any time to access, rectify or delete your Personal Data, as well as to object for legitimate purpose to the processing of your Personal Data. In addition, you have the right to receive Personal Data concerning you which you have provided to us directly. These rights may be exercised by reaching out to data privacy office by sending an email to privacy@infosys.com.

Secondary Purpose:
If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.

Data Transfer:

The Personal Data listed above may be transferred to countries located outside of the EU/EEA, for which data protection legislation may differ from that of the EEA, i.e. our offices located in India , our authorized vendor’s servers including our cloud service providers servers in Germany and US, to our auditors, our clients servers where applicable (based on contractual obligation).We shall take the necessary steps to ensure confidentiality and security of the transferred data. We have in particular implemented the following safeguards: Standard Contractual Clauses (Art. 46 para. 2 lit. c) GDPR), the copies can be obtained by writing to privacy@infosys.com.

Data Security:
Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data.

Data Retention:
Personal Data will not be retained for a period more than necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required by law or for directly related legitimate business purposes.

Contact your Local Data Protection Authority: If you are unhappy with how we safeguard your personal data, you have the right to bring a complaint to your local data protection authority.

Contact your Data Protection Officer: If you have any queries, comments or requests, please contact our data protection officer via email:privacy@infosys.com.

Updates to this Privacy Notice:
Infosys may change the data privacy practices and update this Privacy Notice as and when the need arises, and the same will be made available to You. But our commitment to protect your Privacy will continue to remain.

Effective Date: 2nd March 2026

By clicking the below button you are confirming that you have read this Privacy Notice for Infosys to hold and process your personal data for the above purposes. You also acknowledge that any personal data of data subjects (other than yourself), if any, is shared by you only after seeking consent from the person to whom the personal data belongs.