PRIVACY NOTICE

Infosys Limited, its subsidiaries, associates and affiliated companies (collectively referred to as “Infosys”, “us”, “we”) are committed to process your personal data as per the laws of your jurisdiction. We hereby notify you the following information about your personal data processing -
FOR UAE Data Subjects (Except DIFC residents)

Personal data elements collected and processed:

• Mandatory: first name , last name, city, country, state/region/province, zip/postal code, email id, mobile phone (including country code), home phone (including country code), resume, cover letter, notice period required to serve in your current organization in months, previous employment with Infosys Ltd. or any of its subsidiary companies, and if yes then employee number, any contractual restrictions including non-competition or other obligations that could prevent you from working for us in the role for which you have applied, including current and prior employer restrictive covenants, are you open to travel, open to relocation, desired salary in your next position, how did you hear about us, work experience and related details, skills, educational history and related details, other relevant training, professional qualifications or work related skills, Interview feedback from Recruiter and panelist, IP Address.
  If work eligibility status in country is different than local citizenship, we may request your passport details and Immigration Status details, PR details including details pertaining to visa/work permit processing.
• Optional data elements: middle name, address, web address, work phone, secondary mobile phone, graduation year, degree, GPA, and work responsibilities at your previous company, percentage of travel you would be comfortable with (if you are open to travel).
• For Shortlisted candidates: A copy of your passport and/or other documents confirming your immigration status in the country, complete home address, legalized degree certificate.
• For Visa Sponsorship - Full name as per passport (given name, surname), father’s name as per passport, mother’s name as per passport, nationality, pre-nationality if any, gender, designation in current residence visa, religion, marital status, qualification, place of birth, country of birth, date of birth, passport number (current), passport place of issue, passport date of issue, passport date of expiry, passport size photograph, Emirates ID copy (if previously issued), previous UAE residence visa copy (if previously issued), UAE exit stamped page (if outside UAE), UAE contact number, UAE & home country address details

Purpose of processing: We process your Personal Data for the following purposes such as

• To assist in the recruitment, selection, and other associated processes
• To carry out various employer related activities if you are selected to join the organization
• To perform background verification.
• To enable us to ensure that we are compliant with any applicable labor and/or other relevant laws.
• To reach out in case of any future openings that may suit your profile.
• For troubleshooting purpose.

Lawful basis of Processing: The Processing of the Personal data may be required for the following scenarios as defined in law:

• When necessary for the Performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract;
• When the processing is necessary for compliance with a legal obligation;
• When the processing is based on your Consent;

Data Recipients / Accessible to: Infosys may share the Personal data (as detailed above) with trusted third parties who assist us in conducting our business, or servicing you, with customary legal protections being embedded into the legal arrangements with such third parties including the third parties agreeing to keep this information confidential. Subject to the foregoing, the data recipients for the above Processing of Personal data may include but not be limited to the following:

• Internal recipients within Infosys Ltd., its subsidiaries, or affiliates such as Human Resources, Recruitment, Finance, Facilities, Immigration, Travel, Project Delivery Units, Infosys IT (IS, Computers and Communications Division/TIG), Hiring Mangers, Units/Org Leadership.
• Infosys authorized service providers or vendors who provide services to Infosys.
• Government Bodies including statutory, regulatory authorities, law-enforcement agencies (where applicable).
• Auditors (internal/external) as applicable.
• Infosys’ Clients (where applicable) based contractual obligations.
• Any other parties expressly or impliedly authorized by you for receiving such disclosures.

Data transfer (International): If necessary, for the above stated purpose, the Personal Data listed above may be transferred to our offices located in India, our authorized vendor servers located in Germany and US, our auditors and our client servers where applicable (based on contractual obligation). We shall take the necessary steps to ensure confidentiality and security of the transferred data.

Data Storage: Your personal data will reside on Infosys Servers in India, our Client’s Servers (where applicable based on contractual obligations) and our vendors/ third party service providers’ cloud servers located in Germany and US.

Secondary Purpose: If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.

Data Security: Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data.

Data Retention: We retain your personal data as long as necessary for the purposes listed here above. Your personal information that is no longer required to be retained as per legal and business requirements will be deleted/disposed in a secure manner.

Data subject rights: You are entitled at any time to exercise your data privacy rights as per applicable DP laws by sending an email to our Data Privacy Office at Privacy@infosys.com.

Updates to this Privacy Notice:
Infosys may change the data privacy practices and update this Privacy Notice as and when the need arises, and the same will be made available to You. But our commitment to protect your Privacy will continue to remain.

Effective Date: 17th September 2025

PRIVACY NOTICE FOR DIFC RESIDENTS

Data Controller Contact Details
Infosys Limited (and its subsidiaries), a company registered under the laws of India and with a registered office at Plot No. 44 & 97A, Electronics City, Hosur Road, Bangalore: 560 100, India

Nature of data processing: Your personal data will be processed by the data controller:

• To assist in the recruitment, selection, and other associated processes
• To carry out various employer related activities if you are selected to join the organization
• To perform background verification.
• To enable us to ensure that we are compliant with any applicable labor and/or other relevant laws.
• To reach out in case of any future openings that may suit your profile.
• For troubleshooting purpose.

Data Protection Officer Name & Contact Details
Data Protection Officer- Srinivas P
Contact email ID: privacy@infosys.com
Contact via phone by dialing +91 80 2852 0261

Categories of Personal Data

• Mandatory: First name , last name, city, country, state/region/province, zip/postal code, email id, mobile phone (including country code), home phone (including country code), resume, cover letter, notice period required to serve in your current organization in months, previous employment with Infosys Ltd. or any of its subsidiary companies, and if yes then employee number, any contractual restrictions including non-competition or other obligations that could prevent you from working for us in the role for which you have applied, including current and prior employer restrictive covenants, are you open to travel, open to relocation, desired salary in your next position, how did you hear about us, work experience and related details, skills, educational history and related details, other relevant training, professional qualifications or work related skills, Interview feedback from Recruiter and panelist, IP Address.
  If work eligibility status in country is different than local citizenship, we may request your passport details and Immigration Status details, PR details including details pertaining to visa/work permit processing.
• Optional data elements: middle name, address, web address, work phone, secondary mobile phone, graduation year, degree, GPA, and work responsibilities at your previous company, percentage of travel you would be comfortable with (if you are open to travel).
• For Shortlisted candidates: A copy of your Passport and/or other documents confirming your immigration status in the country, complete home address, legalized degree certificate.
• For Visa Sponsorship - Full name as per passport (given name, surname), fathers name as per passport, mothers name as per passport, nationality, pre-nationality if any, gender, designation in current residence visa, religion, marital status, qualification, place of birth, country of birth, date of birth, passport number (current), passport place of issue, passport date of issue, passport date of expiry, passport size photograph, Emirates ID copy (if previously issued), previous UAE residence visa copy (if previously issued), UAE exit stamped page (if outside UAE), UAE Contact no, UAE & Home country Address details

Recipients or Categories of Recipients:
Infosys may share the Personal data (as detailed above) with trusted third parties who assist us in conducting our business, or servicing you, with customary legal protections being embedded into the legal arrangements with such third parties including the third parties agreeing to keep this information confidential. Subject to the foregoing, the data recipients for the above Processing of Personal data may include but not be limited to the following:

• Internal recipients within Infosys Ltd., its subsidiaries, or affiliates such as Human Resources, Recruitment, Finance, Facilities, Immigration, Travel, Project Delivery Units, Infosys IT (IS, Computers and Communications Division/TIG), Hiring Mangers, Units/Org Leadership.
• Infosys authorized service providers or vendors who provide services to Infosys.
• Government Bodies including statutory, regulatory authorities, law-enforcement agencies (where applicable).
• Auditors (internal/external).
• Infosys’ Clients (where applicable) based contractual obligations.
• Any other parties expressly or impliedly authorized by you for receiving such disclosures.

Lawful basis of Processing: The Processing of the Personal data may be required for the following scenarios as defined in law:

• When necessary for the Performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract;
• When the processing is necessary for compliance with a legal obligation;
• When the processing is based on your Consent;

Your Rights: You may exercise your data privacy rights as per applicable Data privacy laws by sending an email to privacy@infosys.com.

Secondary Purpose: If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.

Data Transfer: If necessary for the above stated purpose, the Personal Data listed above may be transferred to countries located outside of DIFC, whose data protection legislation differs from that of Dubai, i.e. offices located in India to authorized service providers’ servers in Germany and US, clients (where applicable based on contractual obligation) and auditors/ authorities where applicable. We shall take the necessary steps to ensure confidentiality and security of the transferred data. We have in particular implemented the following safeguards-Standard Contractual Clauses, the copies can be obtained by writing to privacy@infosys.com

Data Security: Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data.

Data Retention: Personal Data will not be retained for a period more than necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required by law or for directly related legitimate business purposes.

Contact your Local Data Protection Authority: If you are unhappy with how we safeguard your personal data, you have the right to bring a complaint to your local data protection authority.

Updates to this Privacy Notice:
Infosys may change the data privacy practices and update this Privacy Notice as and when the need arises, and the same will be made available to You. But our commitment to protect your Privacy will continue to remain

Effective Date: 17th September 2025