Infosys Limited, its subsidiaries, associates, and affiliated companies (collectively referred to as “Infosys”, “us”, “we”) are committed to process your personal data as per the laws of your jurisdiction. We hereby notify you the following information about your personal data processing-

Personal data elements collected:

• Mandatory: First name, last name, city, country, state/region/province, Email ID, Mobile phone (including country code), resume, Education details (including School, Major area of study), work experience (including Company Name, start date, end date, Job title), skills, notice period required to serve in the current organization (in months), Past employment with Infosys Ltd. or any of its subsidiary companies and if yes- employee number, subjected to any contractual restrictions including non-competition or other obligations that could prevent you from working for Infosys Ltd. or any of its subsidiary companies (including current and prior employer restrictive covenants), are you open to travel and to relocation, desired salary in your next position, how did you hear about us, other relevant training or professional qualifications or work related skills, Interview Feedback from recruiter and panelist.
  If work eligibility status in country is different than local citizenship, we may request your passport details and Immigration Status details, PR details including details pertaining to visa/work permit processing.
• Optional data elements: Address, Cover letter, graduation year, Degree Type, GPA, Work Responsibilities at previous company, percentage of travel (if you are open to travel).
• For Shortlisted candidates: Passport details and Immigration Status details, PR details including details pertaining to visa/work permit processing, complete home address, PIN, ID Card number, postal address.

Data Recipients / Accessible to:
Your Personal Data will be accessible to certain authorized data recipients for the above Processing of Personal data may include but not be limited to the following:

• Internal recipients within Infosys Ltd., its subsidiaries, or affiliates such as Human Resources, Recruitment, Finance, Facilities, Immigration, Travel, Project Delivery Units, Infosys IT (IS, Computers and Communications Division/TIG), Hiring Mangers/panelists, Units/Org Leadership.
• Infosys authorized service providers or vendors who provide services to Infosys.
• Government Bodies including statutory, regulatory authorities, law-enforcement agencies (where applicable).
• Auditors (internal/external) as applicable.
• Infosys’ Clients (where applicable) based contractual obligations.
• Any other parties expressly or impliedly authorized by you for receiving such disclosures.

Lawfulness of Processing:
We process your Personal Data when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract or based on your consent as per applicable DP Laws. If you do not provide the Personal Data that we need in order to provide our services, we will not be able to provide our services to you. We process your Personal Data in the following circumstances:

• To assist in the recruitment, selection, and other associated processes.
• To carry out various employer related activities if you are selected to join the organization
• To reach out in case of any future openings that may suit your profile.
• To enable us to ensure that we are compliant with any applicable labor and/or other relevant laws.
• For troubleshooting purpose.

Your Rights:
You are entitled to exercise you rights as per applicable DP Laws by you sending an email to privacy@infosys.com.

Secondary Purpose
If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.

Data Transfer: The Personal Data listed above may be transferred to countries located outside of the EU/EEA, for which data protection legislation may differ from that of the EEA, i.e. our offices located in India , our authorized vendor’s servers including our cloud service providers servers in Germany and US, to our auditors, our clients servers where applicable (based on contractual obligation). We shall take the necessary steps to ensure confidentiality and security of the transferred data. We have in particular implemented the following safeguards: Standard Contractual Clauses (Art. 46 para. 2 lit. c) GDPR), the copies can be obtained by writing to privacy@infosys.com.

Data Security:
Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data

Data Retention:
Personal Data will not be retained for a period more than necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required by law or for directly related legitimate business purposes.

Contact your Local Data Protection Authority:
If you are unhappy with how we safeguard your personal data, you have the right to bring a complaint to your local data protection authority.

Contact your Data Protection Officer
If you have any queries, comments or requests, please contact our data protection officer, Srinivas P via email: privacy@infosys.com

Updates to this Privacy Notice:
Infosys may change the data privacy practices and update this Privacy Notice as and when the need arises, and the same will be made available to You. But our commitment to protect your Privacy will continue to remain.

Effective Date: 17th September 2025

By clicking the below button you are confirming that you have read this Privacy Notice for Infosys to hold and process your personal data for the above purposes. You also acknowledge that any personal data of data subjects (other than yourself), if any, is shared by you only after seeking consent from the person to whom the personal data belongs.