Diageo Careers Privacy Policy

Diageo is committed to processing your personal data responsibly and in compliance with applicable law. This Notice explains how Diageo plc and its affiliates process the personal data of job applicants, including you. This Notice also summarizes the rights you have regarding the use of your personal data, the measures taken to protect the security of that data, and who you can contact regarding data protection practices at Diageo. For more information on Diageo, visit www.diageo.com

For simplicity, throughout the rest of this Notice, Diageo plc and its affiliates will be referred to simply as "Diageo", or using the terms "we", "us" or "our".

Personal data is broadly defined as any information which relates to an identified or identifiable individual. In the context of the job applications, such information may include, for example, your name, address, e-mail address, education and employment history. "Processing" of personal data is defined very broadly under the law, and means any use of personal data, whether or not by automated means, such as collection, recording, storage, alteration, retrieval, disclosure, sharing, deletion or destruction.

Please note that this notice only applies to information we collect in order to progress job applications, and to operate our Careers website. We also collect information elsewhere on our main website and you should refer to the Diageo Privacy and Cookie Notice for information on the handling of such information. You can access that notice at this link:

https://www.diageoprivacycentre.com/en-gb/our-privacy-and-cookie-notice

If your application is successful and we hire you as an employee of Diageo, our handling of your personal data will be covered by a separate employee privacy notice (which we will provide to you at the relevant time).

This notice applies to all job applicants, with the exception of applicants for roles in India and the US State of California. The relevant privacy notices for those jurisdictions can be found here:

In certain countries, locally applicable laws may limit our ability to collect and process your data, or may apply additional restrictions or requirements upon us. We will always comply with locally applicable laws, in particular those pertaining to the collection and processing of Sensitive Personal Data.

We may need to update this notice from time to time and any changes will appear on this page. We therefore recommend that you regularly check the Career Site to ensure that you have read the most recent version. This notice was last updated on 13 December 2023.

1. Who is responsible for my personal data?

The particular Diageo company with which you are applying for a role is known as the “Data Controller” for information collected about you during the recruitment and onboarding process, and this entity is primarily responsible for meeting the requirements of data privacy laws as far as your personal data is concerned.

2. Why does Diageo process my personal data?

The Appendix to this notice sets out in more detail the types of personal data we collect during the course of job applications.

In addition to processing your personal data on the basis of your consent, we may process your personal data on other grounds:

  • We may need to process your personal data in to comply with a legal obligation under locally applicable law (for example, to ensure that you have the right to work in the country where you are applying for a job with us);
  • We may need to process your personal data in order to perform our obligations under a contract with you (for example, the contact of employment that will be put in place between you and Diageo if your job application is successful); and
  • Where permitted under locally applicable laws, we may process your personal information because it is in our legitimate business interests to do so.

We will take all reasonable steps to ensure that we only collect personal data that is necessary to achieve these objective and will not use it for any other purpose not envisaged in this notice.

3. Who processes my personal data? Where will it be processed?

We will only grant access to your personal data on a need-to-know basis, and such access will be limited to the personal data that is necessary to progress your job application. Access may be granted to your potential line managers and senior Diageo managers, leaders and executives, and personnel in HR and associated teams.

Due to the global nature of our operations, we may disclose and transfer certain personal data to Diageo companies and affiliates in locations outside the Europe Region.  For example, we operate HR shared service centres outside the Europe Region, or your potential line manager may be based outside the Europe Region.  In line with the requirements of data privacy laws, such transfers will always be based on a legally adequate transfer method. Most commonly within Diageo, legal adequacy is ensured by way of intercompany data transfer agreements between Diageo affiliates across the world. These impose data protection obligations upon such affiliates based upon language approved by the European Commission (or as prescribed by the authorities in other nations, as applicable).

4. From which sources does Diageo collect my personal data?

We obtain your personal data from a number of sources, including the CV you submitted when you applied, interview notes and any associated talent assessments and from any details you subsequently provide to us during the application process.  We may source information on you from recruitment agencies and (where applicable) from universities and other educational establishments.

We may review information that you have made publicly available on social media sites such as LinkedIn.

Where permitted by locally applicable laws, we may also obtain personal data about you when we take references from referees whose names you gave us during the application process, and we may obtain information about you from other publicly available sources and databases, including credit reference agencies, fraud prevention services and criminal records bureaux.

5. Will my personal data be transferred outside Diageo?

We outsource support for many different business functions within Diageo. We may disclose your personal data, where it is necessary to do so, to our service providers and subcontractors, including those retained to perform functions on our behalf during the recruitment process. Examples include for the conduct of application assessments, psychometric testing and the provision of video interview facilities.

We may also need to disclose your personal data to our professional advisers, such as our accountants, auditors, lawyers, bankers, insurers and other advisers, as well as governments, government agencies, regulatory bodies and law enforcement authorities in countries where we do business.

We expect those with whom we do business to protect the confidentiality and security of personal data, and only use personal data for the provision of services to Diageo, and in compliance with all applicable law.

Occasionally, we may need to disclose your personal data to a third party in connection with a corporate reorganisation, sale of a portion of Diageo’s business or entry into joint ventures and other corporate or financial arrangements. In all such instances, your personal data will be shared or disclosed in full compliance with data privacy laws.

6. Does Diageo process "sensitive" personal data?

In certain circumstances, we may need to process personal data that data privacy laws define as "special category" personal data. This is more commonly referred to as "sensitive" personal data and can include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or health, genetic or biometric data or data about sexual orientation or sex life.

For the most part, we do not require you to provide sensitive personal data as part of our recruitment process, unless authorised by law or where necessary to comply with applicable laws.

When we do collect sensitive personal data, it will only be when it is necessary and where locally applicable laws mandate that we collect it or permit us to collect it. For example:

  • In some countries, we collect data about race and ethnicity because local laws pertaining to diversity and inclusion monitoring mandate that we collect it;
  • In some countries, we do not collect data about race and ethnicity because local laws prohibit the collection of such personal information (even with your consent); and
  • In other countries, we may collect race and ethnicity information because it is in our legitimate business interests to do so in order to further Diageo’s goal to be a diverse and inclusive workplace. In such instances, provision of that information is entirely voluntary, and the information you provide will be used only on an aggregate basis for the purposes of equal opportunities monitoring.

There may be other specific instances in which Diageo will process your sensitive personal data during the usual course of the recruitment process, but the processing of sensitive personal data will always be done in compliance with law. Your provision of any sensitive personal data during the application process will not affect our recruitment decision in any way.

7. Does Diageo use automated individual decision-making?

We use automated decision-making technology and software in our business, but where this is based upon your personal data, we will only do so where it is expressly permitted by data privacy laws and other locally applicable laws, or where you have given your explicit consent. In all such instances, we implement measures to safeguard your rights and your interests. You have the right to obtain human intervention, to express your point of view and to contest any decision made by automated decision-making.  We will never base automated decision-making on your sensitive personal data.

8. How does Diageo keep personal data secure?

We are committed to maintaining the security of your personal data. Diageo maintains appropriate physical, procedural, organisational and technical security measures intended to prevent loss, misuse, unauthorized access, disclosure, or modification of your personal data under our control.

9. How long does Diageo keep personal data for?

You can ask us to have your personal data securely deleted prior to the expiry of the relevant retention period. If however you have asked us to keep you informed of new positions within Diageo on an ongoing basis, we will continue to retain your personal data to keep you updated on such opportunities until we are no longer using your personal data for this purpose. 

Where you ask us to delete your data, we will retain a minimal amount of personal data for the purposes of confirming our response to this request. We may also retain personal data in order to meet our legal and regulatory obligations.

In all instances, we will not retain your personal data for any longer than is necessary for the purposes set out in this notice, nor will we retain any personal data about you which we know or which you have notified us is inaccurate or out of date. At the end of that required period we will purge your data from our systems and applications.

The periods for which we are required to retain personal data vary from country to country.

10. What are my rights?

In all instances, you are entitled to withdraw any consent that you might have given with respect to the processing of your personal data at any time with future effect.

If you are applying for a job in the EU/EEA, the UK or certain other locations, you may be entitled under law to obtain information on the processing of your personal data, to have your personal data rectified if incorrect, to object to processing of your personal data, and to have your personal data deleted or have its processing restricted. If you require further information on any of these rights, please email dataprivacyteam@diageo.com.

11. Who should I contact if I have any questions? Is there a data protection officer?

If you have any questions or concerns regarding this Notice, please email dataprivacyteam@diageo.com.

12. Appendix: Types of personal data collected

Type of personal information

Description

Financial

Details about your salary, bonus, pension and other benefits.

Contact

Where you live and how to contact you.

Professional

This includes details about your work or profession, education, skills, languages and qualifications.

Transactional

Details about bank accounts, salary, pension and tax payments.

Contractual

Details about performance of your employment contract.

Behavioural

Details about how you act in the workplace, including performance and disciplinary action.

Technical

Details on the devices and technology you use.

Communications

What we learn about you from letters, emails, and conversations between us.

Social relationships

Contact details of emergency contacts, next of kin and the beneficiaries of any occupational pension or insurance schemes.

Open data and public records

Details about you that are in public records such as registers of bankruptcies, births, or public offices held, or information that is in the public domain, including on social networks.

Usage data

Other data about how you use our systems and benefits you choose.

Documentary data

Details stored in documents in different formats, or copies of them. For example your passport, drivers licence, or birth certificate.

Consents

Any permissions, consents, or preferences that you give us.

National identifier

A number or code given to you by a government to identify who you are, such as a National Insurance or a Social Security number.

© Diageo plc 2022. 16 Great Marlborough Street, London, W1F 7HS, United Kingdom. All rights reserved