MYTALENT PRIVACY POLICIES_2018.11.5

US, Canada, China, Hong Kong, India, Puerto Rico, Sri Lanka, UK, and Vietnam – English

PRIVACY POLICY for careers.lb.com online applications.

This privacy policy explains what information is collected, used, disclosed and otherwise processed by subsidiaries of L Brands, Inc. when an individual requests information, an applicant applies, or a visitor creates a profile through our career website for a position related to our operations in the United States, Canada, China, Hong Kong, India, Puerto Rico, Sri Lanka, United Kingdom, or Vietnam. Specifically, it explains what personal information we collect when you request information, apply for such a position or create a profile, what information is observed or collected through technology, how information is used, what information is shared with third parties, and how information is safeguarded. By “personal information” we mean any information about an identifiable individual, like name, home address, email address and information in your resume and application; and any other information which we collect from other sources and associate with your application for employment. We may refer to L Brands, Inc., its subsidiaries or its brands as “we,” “us,” or “our” throughout this privacy policy.

By submitting your resume/CV, employment application materials, and any follow-up information to us, you are agreeing that we may collect, use and disclose your personal information in accordance with this privacy policy, as required or authorized by law or as further authorized by you.

WHAT PERSONAL INFORMATION IS COLLECTED AND HOW IS IT USED?

We collect personal information directly from you in order to respond to your requests, for you to create a profile or for us to evaluate you for a position at any of our brands’ stores or facilities and, if hired, to create your employment file and establish your employment relationship. Examples of the information we collect include name, address, telephone number, mobile phone number, email address, work experience, educational history, your resume, references, job preferences/interests, and other information that helps us evaluate your potential employment or, if hired, begin employment with us. If you register on our website, we also collect a username and password that you choose.

The information you submit is used to respond to your requests, evaluate your suitability for employment, obtain additional information from third parties for this evaluation, to set up your requested job alerts and send you email updates about jobs that match your skills and interests, contact you about prospective employment or other positions we think may interest you, and, if hired, begin employment.

We might contact you to obtain additional identifying information to complete the application process, including background checks. We will only carry out background checks that are considered relevant to the role for which you are applying.

If you are offered employment, we may also ask you to provide certain personal information required to complete the onboarding process for the role which you have been offered. For example, we may also collect social security number (or local equivalent), bank account numbers, dependent personal information, marital status, gender, date of birth, and emergency contact information.

WHAT INFORMATION IS OBSERVED OR COLLECTED THROUGH TECHNOLOGY AND HOW IS IT USED?

  • Navigational Information. When you visit this website, we and our third-party service providers may collect navigational information, such as browser type and version, operating system, service-provider identification, IP address, the site from which you came, and the site to which you navigate.
  • Cookies and Similar Technology. To better understand how you interact with our website, we and our third-party service providers may collect information using cookies, clear gifs (also known as web beacons or web bugs) and similar technologies. A cookie is a small amount of data that’s stored by your web browser on your device. A clear gif is a nearly invisible pixel-sized graphic image on a web page, web-based document or email message. In addition to cookies and clear gifs, we may also use device identifiers, web storage and other technologies to collect information about your interactions with our content and website. The information we and our third party service providers collect through cookies, clear gifs and similar technology includes your interactions with our website; the time of your visit to our website, and confirmation of when you open email from us, including the time you open the email and whether you click on any links in the email.
  • Use of Information Observed or Collected Through Technology. We and our third-party service providers use navigational information and information collected through cookies or similar technology for things like determining which parts of the website are most visited; monitoring the effectiveness of the website; detecting difficulties visitors may experience in accessing the website; and associating the information with your personal information if you provide it. This allows us to improve our visitor’s experience by recognizing and delivering more of the desired information and resolving access issues.

WHAT INFORMATION DO WE SHARE WITH THIRD PARTIES (OR WHAT INFORMATION MAY THEY ACCESS BECAUSE OF THE SERVICES THEY PROVIDE TO US)?

We may transfer your personal information to third-party service providers (including affiliates) who help us with some of our hiring processes, which may include hosting this website, collecting and then evaluating your application, and verifying the information you provide by way of background checks. L Brands will diligently choose such third party service providers and ensure that they adopt adequate technical and organizational security measures to safeguard your personal information.

In addition, it may be necessary to disclose specific information about you to regulatory bodies, government agencies and other third parties as required or permitted by applicable law, including to comply with legally valid processes such as subpoenas, court order or search warrants (which may include lawful access by U.S. and foreign courts, law enforcement and governmental authorities), in emergencies, for the administration of justice or for the purposes of our legitimate interests. In addition, we reserve the right to disclose and/or transfer your personal information to a third party in the event of a purchase, sale (including a liquidation, realization, foreclosure or repossession), lease, merger, amalgamation or any other type of acquisition, disposal, transfer, conveyance or financing of all or any portion of our business, assets or shares, including in connection with a prospective business transaction.

WHERE IS THIS INFORMATION STORED?

L Brands, Inc. is a global organization, with affiliated legal entities, business processes, management structures, and technical systems that cross borders. As the majority of our administrative and technical support functions are headquartered in the United States, we share store and process personal information with our affiliates and third party service providers located in the United States. We may also share or store your personal information among L Brands, Inc. brands and affiliates and our service providers globally. Our brands include, but are not limited to, Victoria’s Secret, PINK, Bath & Body Works (including White Barn Candle Co.), Henri Bendel, and La Senza International. When we transfer your personal information internationally we will take steps to ensure that your personal information is treated lawfully and in the manner we describe in this privacy policy. To address transfers of personal information from the European Union, L Brands Inc. and its European subsidiaries and affiliates have implemented data transfer agreements based on the EU standard contractual clauses or other appropriate mechanisms.

WHAT CHOICES DO YOU HAVE OVER HOW YOUR INFORMATION IS USED?

  • Application Withdrawal: If at any time you want to withdraw your application for employment or your consent to the continued uses and disclosures of your personal data described in this privacy policy, please login in to your account and select withdraw your application.Or write to us at:
    VP Human Resources
    L Brands, Inc.
    Three Limited Parkway
    Columbus, OH 43230
    USA

    We may, however, retain your personal data for a period of time as may be necessary in connection with any actual or prospective legal proceedings, for the purpose of obtaining legal advice or for establishing, exercising or defending legal rights or as may otherwise be required by law.

  • Job Alert Emails: If you would like to stop receiving job alert emails, you may follow the unsubscribe link located at the bottom of each email. Opting out of these emails will not stop operational or transactional messages such as emails related to submitted applications, password-reset, or account related information, and will not remove you from any of our brands’ marketing lists.
  • Cookies: You may always choose to block cookies or even clear cookies from your computer. Simply follow your browser’s instructions on how to block and clear cookies. Note that blocking cookies may not block the “first-party” cookies that are placed on your computer when you visit this website. By first-party cookies, we mean those cookies (whether placed by us or a service provider) that help us see how visitors use this site. Otherwise, clearing cookies after each visit here will prevent observations from multiple sessions being aggregated over time. Please consider the consequences of blocking or clearing cookies. Many websites rely on their cookies to provide you with services or features that you have requested or expect. You should also note that our systems do not recognize Do Not Track headers from Web browsers.
  • Mobile Text Messages. If you are receiving mobile text messages, for example related to an application or employment opportunities, but you no longer wish to receive these text messages, simply reply STOP to any text message.

HOW MAY YOU UPDATE OR ACCESS YOUR PERSONAL INFORMATION?

We prefer to keep your personal information accurate and up-to-date. If you need to revise the personal information you have provided, please login in to your account to make the changes or contact us at the address above.

You generally have the right to access, update, correct any inaccuracies in, block and/or request deletion of your personal information, subject to applicable law. Please send your written request to the mailing address provided under “What if You Have Questions or Concerns?” below. In your written request, please include your name, postal and email address and phone number so that we may verify whether we have any personal information about you.

WHEN WAS THIS POLICY LAST UPDATED?

This privacy policy is effective as of November 5, 2018. If we make revisions to this policy, we will notify you by revising the effective date and, in some cases we may provide you with more prominent notice (such as adding a statement to our homepage or sending you a notification) or seek your consent, where required. Should there be a material change to our information collection, use and sharing practices, it will be applied only to personal information collected on a going-forward basis, and we will update this privacy policy accordingly.

HOW IS YOUR INFORMATION SECURED?

We employ policies, procedures, technologies, and access controls in an effort to safeguard the personal information in our custody and control, and our employees are advised of the importance of confidentiality and we expect the same standards from our service providers. While we have implemented these security measures, you should be aware that 100% security is not always possible.

If you have registered on our website, your online access to certain of your personal information may be protected with a password you select. We strongly recommend that you do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication (such as letters, phone calls or email messages).

WHAT IF YOU HAVE QUESTIONS OR CONCERNS?

If you have questions or concerns with respect to this privacy policy or how we, our affiliates or service providers treat your personal information, please email privacy@lb.com with Privacy Matter in the subject line. Or write to:

ATTN: Privacy Matter
Legal & Compliance Services
L Brands, Inc.
Three Limited Parkway
Columbus, OH 43230
USA

Supplemental Privacy Notice for Visitors from the European Economic Area

If you are accessing this website from a member state of the European Economic Area (“EEA”), this Supplemental Privacy Notice applies to you in addition to our “PRIVACY POLICY for careers.lb.com online applications,” shown above (collectively, the “Policies”).

This Supplemental Privacy Notice does not otherwise apply to visitors who are accessing our Services from outside the EEA.

European Union Regulation 2016/679 of 27 April 2016, governing the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“EU GDPR”), requires us to provide additional and different information about our data processing practices to data subjects in the EEA.

We, the data controller, are L Brands, Inc., 3 Limited Parkway, Columbus, OH 43230, US (+1.614.415.7000). Our authorized representative in the EEA is Privacy Liaison, Victoria’s Secret UK Limited, 16 Garrick St. WC2E 9BA London, UK (08) 082340481.

Our data protection officer is:

Frank Triveri
Vice President & Chief Privacy Officer
L Brands, Inc.
3 Limited Parkway
Columbus, OH 43023
US

The legal basis for our processing of your personal data in connection with your application and our website is Art. 6.1(b) EU GDPR, which allows processing of personal data as necessary for the performance of a contract.

When you access our website, you form a contract with us based on our Site Terms, Conditions and Notices, and we need to process your personal data to consider your application for employment, respond to your requests, and satisfy our obligations with respect to the other purposes listed in the these Policies.

We rely on your consent for the purposes enumerated in these Policies per Art. 6.1(a) EU GDPR, and legitimate interests under Art. 6.1(f) EU GDPR for the same purposes and with respect to situations where it is necessary for us to process your personal data to comply with applicable laws (as a U.S.-based company, we are subject to U.S. laws and must comply, just like EEA-based companies have to comply with EEA laws).

Recipients or categories of recipients of your personal data are employees of our company and affiliated and non-affiliated services providers who have a need to know.

When you access our website, you transfer your personal data to the United States of America and India for which the European Union Commission has not yet issued an unlimited adequacy decision.

We will process and keep your personal information for as long as is necessary for the purposes set out in these Policies, for our legitimate business needs, and for compliance with the law.

You have a right to request from us the following GDPR rights concerning your personal data: access to data; rectification of data; erasure of data; restriction on processing; objection to data processing; and data portability. You can exercise these rights through a combination of actions: accessing the information in your account; and by calling +1 937 438 4197.

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with a supervisory authority. We do not use automated decision-making, including profiling, as referred to in Article 22(1) EU GDPR, that is, in a way that produces legal effects concerning you or significantly affects you. Our website’s customization technologies and e-commerce processes are automated, but do not produce legal effects or affect you significantly as contemplated by Art. 22(1) or (2) EU GDPR.

You can contact us with any questions, or to exercise your rights by calling our Customer Care Center at +1 937 438 4197.

Supplemental Privacy Notice for French Canadian Visitors