The personal information we seek in the application form is used to help us assess your suitability for the roles for which you are applying and to manage the recruitment process. The information includes:

- Your name, address and contact information – which we need to make contact with you in relation to your application.

- Details of any government-issued identification – which help us verify your personal identification.

- Your Taxpayer’s Identification Number (TIN) and Social Security (SSS) Number – which enable us to comply with tax and benefits laws

- Details of any previous qualifications – which help us assess whether you have qualifications relevant to the role for which you are applying.

- Details of your previous work experience – which give us an idea of your relevant experience.

- Details of your language skills.

The personal information we seek in the application form is used to help us assess your suitability for the roles for which you are applying and to manage the recruitment process. The information includes:

- Your name, address and contact information – which we need to make contact with you in relation to your application.

- Details of any government-issued identification – which help us verify your personal identification.

- Your Taxpayer’s Identification Number (TIN) and Social Security (SSS) Number – which enable us to comply with tax and benefits laws

- Details of any previous qualifications – which help us assess whether you have qualifications relevant to the role for which you are applying.

- Details of your previous work experience – which give us an idea of your relevant experience.

- Details of your language skills.

- Whether you have the right to work lawfully in the Philippines (including citizenship, and existing work permit and/or visa details for foreign-national applicants) – as this is a legal requirement any employer must satisfy.

The application form and the personal information you have included will initially be held on a CRM database that is stored on a secure cloud server system operated by a third party vendor. The application will then be assessed by the hiring team supported by automated tools that help us give you an answer sooner on how the position’s requirements match your skills. Certain personal data of applicants considered potentially suitable, will be transferred to a secure assessment platform, (the rest remaining on the original CRM database for the time being) and those candidates will be invited to participate in a series of on-line tests to assess relevant skills. The results of those tests using an automated system will be sent to the hiring team and successful applicants will be sent a job offer. The personal data of applicants who accept a job offer will be transferred to our secure, cloud-based database.

We may also submit personal information of successful applicants to relevant government agencies to comply with labor and employment laws and other legal obligations.

Cross-border data transfer of personal information will occur only when it is in compliance with all applicable jurisdiction-specific laws and regulations. The level of protection and requirements for making cross border data transfers may differ depending on the country from which the data transfer originates. Where required by law, TELUS shall transfer data only to countries that provide an adequate level of data protection compliant with the requirements of the Philippine Data Privacy Act of 2012 (DPA).

Under the DPA and its implementing rules and regulations, you are entitled to the following rights as a data subject:

a. Right to be informed – You have the right to be informed of the following:

i. The fact of collection and processing of personal data pertaining to you;

ii. Description and categories of personal data being collected and processed;

iii. Purpose for the collection, and processing, including the purposes for data sharing or automated processing;

vi. Lawful basis of the collection and processing, when the data subject has not given consent;

v. Scope and method of personal data processing;

vi. Identities of intended recipients of personal data;

vii. Methods and logic used for automated processing, if any;

viii. Identity and contact details of the personal data controller (other than the Company) or its representative;

xv. Retention period; and

x. Rights of a data subject.

This information is set out in this notice.

b. Right to object – You have the right to indicate your refusal to the collection and processing of your personal data, including processing for direct marketing, automated processing, or profiling. You also have the right to be informed and to withhold your consent to further processing in case there are any changes or amendments to information given to you concerning the processing of your personal data. Once you have withheld consent, further processing of your personal data will no longer be allowed, subject to certain exceptions under the law.

c. Right to access – Upon request in writing, you should be given access to the following:

i. Contents of your personal data that were processed;

ii. Sources from which your personal data were obtained;

iii. Identities and addresses of recipients of your personal data;

iv. Manner by which your personal data were processed;

v. Purposes for granting access to the recipients of your personal data;

vi. Information on automated processing, in case the data was used as the sole basis for any decision that significantly affects or will significantly affect you as a data subject;

vii. Date when your personal data was last accessed or modified;

viii. The designation, identity, and address of the controller other than the Company, if any.

d. Right to rectification – You have the right to dispute any inaccuracy or error in your personal data and may request the controller to immediately correct any such inaccuracy or error. Upon reasonable request, and after the correction has been made, the controller should then inform any recipient of your personal data of its inaccuracy and the subsequent rectification that was made.

e. Right to erasure or blocking – In the absence of any other legal ground or overriding legitimate interest for the lawful processing of personal data, or when there is substantial proof that personal data is incomplete, outdated, false, or has been unlawfully obtained, you may request the controller to suspend, withdraw, or order the blocking, removal, or destruction of personal data from its filing system. The controller may also notify those who have previously received your processed personal data.

f. Right to damages – You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, taking into account any violation of your rights and freedoms as a data subject.

g. Right to data portability – In case personal data was processed through electronic means and in a structured and commonly used format, you have the right to obtain a copy of your personal data in such electronic or structured format for your further use, subject to the guidelines of the National Privacy Commission (NPC) with regard to the exercise of such right.

h. Transmissibility of rights of the data subject – In case of death, incapacity or incapability, your lawful heirs and assigns may invoke your rights as a data subject in your place and stead.

If you want to exercise these rights, or have any questions relating to the processing of your personal information, you can contact TELUS by emailing us at DPO.PH@Telusinternational.com.

The personal data of all candidates will remain in the system though the reminder of the current year and next year and stored on our Workday database as described above. To the extent it is relevant to the candidate’s employment, the data will be stored and processed for the purposes of their future employment with TELUS. The personal data of unsuccessful candidates will be retained for a period of up to one year after they made their application and thereafter, unless required for TELUS’ legitimate purposes (for example in the case of litigation with the candidate), or by law, the data will be deleted.