Comprehensive
privacy
statement



July 2021


Privacy statement

This privacy statement was last updated on July 28, 2021

PwC is committed to protecting your privacy. This privacy statement describes why and how we collect, use and share personal information collected from individuals themselves or from other third parties, and provides information about individuals’ rights with respect to their personal information. We may use personal information provided to us for any of the purposes described in the relevant section of this privacy statement or as otherwise stated at the point of collection.

Our goal is to process personal information as necessary for our legitimate business purposes in a transparent manner. If you have any questions regarding our privacy practices, please contact us as set forth in the Contact Us section below.

“PwC” (and “we,” “us,” “our”) refers to PricewaterhouseCoopers LL P and such other PwC member firm in the US that: (1) is involved in providing or receiving services or products; (2) sends you communications; (3) posted a position for which you are applying; or (4) you have a role or relationship with, including through the use of and access to our websites and applications. Each member firm in the PwC network is a separate legal entity — be aware that if you are in a jurisdiction outside of the US, you may or may not have a direct relationship with us, but rather with one of our member firms. For further details, please see www.pwc.com/structure.

Our processing activities


To find out more, please go to the section(s) of this statement that are relevant to you.

Business contacts

Personnel

Corporate clients (and individuals associated with our corporate clients)

Sourcing and recruitment of candidates


Individual clients of PwC services

Suppliers (including subcontractors and individuals associated with our suppliers and subcontractors)


Users of our websites and applications

Visitors to our offices


Attendees of PwC corporate events

Others who get in touch with us

Business contacts

Information collection

We collect and use business contact details for individuals associated with existing and potential PwC clients to manage and maintain our relationship with those individuals. Like most businesses, we use a customer relationship management system (the “PwC CRM”) to store personal information about our business contacts.

The collection of personal information about contacts and the addition of that personal information to the PwC CRM is initiated by PwC staff and may include name, employer name, title, phone, email and other business contact details. In addition, the PwC CRM may collect data from PwC email and calendar systems concerning interactions between PwC staff and business contacts.

When we send you emails, we may use technologies to determine whether the email has been opened and whether the links contained within the message have been clicked on. We may combine information collected through these means with other information we maintain about you to measure interest in our specific offerings and email campaigns, improve our offerings to specific target audiences, and tailor our interactions with you.

Information use

We use this information for the following business purposes:

As with any provider of professional services, we are subject to legal, regulatory and professional obligations. We need to keep certain records to demonstrate that our services are provided in compliance with those obligations and those records may contain personal information.

Information retention

Personal information will be retained about our contacts at our suppliers for as long as it is necessary for the purposes set out above (e.g., for as long as we have, or need to keep a record of, a relationship with a contact, which is for the duration of our relationship with a contact or their organization). Personal information may be held for longer periods where extended retention periods are required by law, regulation, or professional standards and in order to establish, exercise or defend our legal rights.

Information sharing

We may share personal information with third parties as described in the Information disclosure section below.

Your California privacy rights

If you are a California resident, please click here for additional information about our processing of personal information and your California privacy rights.


Attendees of PwC events

We may collect personal information from attendees and participants of PwC-sponsored events. When we do so, such information is provided directly and voluntarily by the visitor. Unless separate privacy terms are provided to the visitor at or in connection with the event, any personal information collected will be treated in accordance with the applicable section of this privacy statement.


Visitors to our offices

We have security measures in place to protect our offices, such as secured entrance doors, visitor management procedures, security cameras, and an alarm activation system.

Security System

PwC offices are protected with security equipment at all entrance doors providing access control, auditing, and intrusion detection. The security camera system records activity at all entrance points and high security areas. The video images captured are securely stored and only accessed on a need to know basis for investigative purposes only (e.g., to look into an incident occurring at one of our locations). The recordings are stored for a minimum of 90 days. We may disclose video images to law enforcement bodies as requested and permitted by data protection law.

Visitor records

We require all visitors to first be screened through our video intercom at our reception floor before we provide access into our reception area. When at the reception desk, the visitor will record their visit and be greeted by their PwC contact person. The visitor log is maintained by the receptionist and is only used for investigative or emergency situations.

Guest WiFi

We monitor traffic on our guest WiFi networks using industry standard intrusion detection systems. This allows us to see limited information about a user’s network behaviors but will include being able to see at least the source and destination addresses the user is connecting from and to. We cannot inspect any encrypted traffic and therefore do not have access to any information (personal or otherwise) that the user might share via encrypted connections.

Information sharing

We may share personal information with third parties as described in the Information disclosure section below.

Your California privacy rights

If you are a California resident, please click here for additional information about our processing of personal information and your California privacy rights.


Others who get in touch with us

We collect personal information (such as name, contact details and contents of the communication) when an individual gets in touch with us with a question, complaint, comment, survey response or other feedback. In these cases, we will only use the information for the purpose of responding to and keeping a record of the communication. We may share personal information with third parties as described in the Information disclosure section below.

Your California privacy rights

If you are a California resident, please click here for additional information about our processing of personal information and your California privacy rights.

Security

PwC has implemented generally accepted standards of technology and operational security designed to protect personal information from loss, misuse, alteration or destruction. Only authorized PwC personnel and the third parties described in this privacy statement are provided access to personal information and these employees and third parties have agreed to maintain the confidentiality of this information. Please note that in the unlikely event that we might need to contact you about a matter involving your personal information, we may email you about the matter.

Cross-border transfer

We are part of a global network of firms and in common with other professional service providers, we use third parties located in other countries to help us run our business. As a result, personal information may be transferred outside the countries where we and our clients are located. This includes transfers to countries outside the European Economic Area (“EEA”) and to countries that may not have laws that provide the same degree of protection for personal information as your home country. In accordance with applicable legal requirements, we take appropriate measures to facilitate adequate protection for any information so transferred.

Where we transfer personal information outside of the EEA to a country or framework not determined by the European Commission as providing an adequate level of protection for personal information, the transfers will be under an agreement which covers European Union requirements for such transfers, such as standard contractual clauses. The European Commission approved standard contractual clauses are available here .

PricewaterhouseCoopers LLP and its affiliated U.S. subsidiaries also adhere to the EU - U.S. Privacy Shield Framework and the Swiss - U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce. To learn more, see our Privacy Shield Policy .

Information disclosure

We will only share personal information with others for a business purpose and when we are legally permitted to do so. When we share information with others, we put contractual arrangements and security mechanisms in place as appropriate to protect the information and to comply with our information protection, confidentiality and security standards.

In addition to any information sharing practices described in the relevant section under Our processing activities , we share personal information with the following categories of recipients:

We may disclose your information to a third party as necessary in connection with a corporate reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or capital.

Individuals’ rights


Unsubscribe

Should you wish to unsubscribe from our mailing list or any registrations, we will provide instructions in the appropriate area of the Site or in communications to you.


Users of our websites and applications

Please see the Users of our websites and applications section of this privacy statement for additional information about your choices in relation to personal information we collect through the Site.


California Privacy Rights


If you are a California resident, please click here for information about your California privacy rights.


European Economic Area Privacy Rights

If you are an individual located in the European Economic Area, in certain circumstances under applicable law (specifically in connection with certain services that we provide), you may have the right to access or obtain a copy of your personal information, to rectify your personal information, to have your personal information deleted, to restrict the processing of your personal information, to object to the processing of your personal information, to data

portability, and to withdraw your consent for processing (where processing is based on your consent). Please note that if you withdraw your consent, we may not be able to provide you the services for which it was necessary to process your information based on your consent.

To submit a request relating to any of these rights, please use our request form . We will respond to your request within a reasonable timeframe in accordance with applicable law.

We hope that you won’t ever need to, but if you do want to complain about our use of personal information, please send us a message with the details of your complaint by completing our general contact form . You may also contact our EU Representative, PwC Malta by completing our EU Representative contact form . Applicable laws may also give you the right to lodge a complaint with the data protection authority in your country.

Changes to this privacy statement

PwC may update this privacy statement at any time by publishing an updated version here. You can access the most current version of this privacy statement at any time on this site.

Contact us

If you have questions about this privacy statement or about our privacy practices, please contact us by completing our general contact form.