Workday Privacy Notice for McKesson Applicants

Effective Date: October 20, 2021

The Workday Privacy Notice for McKesson Applicants (“Notice”) describes how McKesson Corporation and its subsidiaries and affiliates (“McKesson”, “We” or “Us”) use and process personal information in connection with the recruiting process at McKesson through Workday Services. McKesson and Workday values the trust that you place in us to appropriately use and protect information shared with us. We encourage you to read this Notice: https://www.mckesson.com/about-mckesson/privacy-notice-careers-EN/ and Workday Service Privacy Policy before submitting or providing any personal information through McKesson Careers’ Workday Portal.

Your Consent

By making available your personal information, you confirm and consent that:

You have reviewed this Notice and agree that McKesson and Workday may process your personal information in accordance with this Notice, other applicable laws, and contractual obligations; and
Your personal information may be transferred to and processed in any country where McKesson, Workday or their service providers conduct business for the purposes and in the manner specified in this Notice.

Without your personal information, McKesson and Workday cannot process your application for employment. If you prefer an alternate way to apply to a job, please contact us for assistance. Any alternate way will still result in your personal information being stored on McKesson and Workday systems.

This Notice does not form any contract of employment offered to job applicants hired by McKesson.

Personal Information

This Privacy Notice covers any personal information McKesson or Workday may collect from you in connection with the recruiting process at McKesson. To submit your personal information, you may use various electronic and paper methods. In addition to collecting your personal information directly from you, McKesson may collect it from other third parties (i.e., recruiters, former employers, and law enforcement agencies) or through your interaction with the Workday environment and other sources.

This personal information may include:

Name and contact information, such as personal and business telephone number, fax number, physical address, email, and user name;
Emergency contact information;
Date of birth, Gender, Martial Status, Nationality, Racial/Ethnic/Cultural Background.
Social Security Number, Social Insurance Number, and National ID number, Passport number, Driver’s or Operator’s license number, and Financial institution / Bank account number.
Sexual orientation or preference, veteran status, gender pronoun, disability status.
Previous work experience, compensation, education, degrees, language, and other skills and employment related information;
Professional and other work-related licenses, permits, and certifications;
Awards and professional memberships;
Audio and video recordings of interviews; and
Background checks, related health information, and children’s information; and
IP address, users’ s browser type, user’s operating system, device/user activity (such as login-logout info, sites/pages visited, number of visits, click stream, navigation, beacon signal hits, errors, crash rate, or other user activities.

Sensitive Personal Information

During the recruiting process, McKesson may process and transfer sensitive personal information. In certain jurisdictions, express consent may be required for the collection and use of certain sensitive personal information. McKesson will obtain this consent as required by applicable law.

The personal information considered sensitive, depending on the jurisdiction, may include medical or health conditions, financial information, racial or ethnic origin, gender and sexual orientation, disability, military status, political opinions, religious or philosophical beliefs, trade union membership, and/or criminal convictions. Exceptions to express consent requirements may apply where the disclosure of sensitive data is necessary for McKesson to carry out its employment law obligations and for other reasons permitted by applicable law.

We would prefer that you avoid submitting your sensitive information, except where such information is legally required or needed for us to comply with our legal or contractual obligations and/or internal policies.

Collection and Use

McKesson will limit the collection and use of personal information to that which is relevant and reasonably necessary to accomplish legitimate business purposes for which it is collected and used. We will collect and use your personal information in accordance with this Notice, applicable law, and contractual obligations for the following purposes:

Search and evaluate candidate job qualifications;
Process job applications;
Record-keeping related to human resources and recruiting purposes;
Analyze the recruitment process and outcome;
Conduct criminal history, background, and employment checks;
Communicate regarding your inquiries, requests, applications, and/or send important notices;
Comply with applicable law and contractual obligations; and
Conduct surveys concerning your experience with McKesson.

Where permitted by law, if McKesson has the need to use and/or disclose your personal information for secondary purposes (for example, benchmarking), the data set will be aggregated, de-identified, or rendered anonymous prior to such use or disclosure.

After you provide your personal information to McKesson through the Workday environment, we will add it to McKesson’s candidate database and will use it for the purposes of considering suitability for other job vacancies at McKesson. If we elect to make you an offer, personal information you submit may be incorporated into McKesson’s human resources information system and used to manage the new-hire process. If you join the McKesson workforce, any personal information that you submit may become part of your employee file and may be used for other employment -related purposes, including:

Payroll, compensation, and benefits administration including stock administration;
Business travel and employee relocation administration;
Employee management and discipline;
Employee appraisal, training, and development;
Tracking the engagement of McKesson outside service workers (including temps and other non-employees);
Employee identification;
Reimbursement of expenses;
Compliance and risk management;
Business communication with employees;
Internal technical and operational support; and
McKesson facility, security, health, and safety management.

Tracking Technologies We Use

We use various technologies to collect personal information about you. These technologies include the following:

Web server logs

As is true of most websites and applications, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.

We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may utilize cookies. Cookies uniquely identify your device or user account associated with this site or service. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited.

Geo-location Services

When you enable a location-based service, we may collect information about your location for recruitment purposes. Your browser or other device may use various technologies to determine location, such as sensor data from your device that may provide information on nearby Wi-Fi access points and cell towers.

Other Tracking Technologies

We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use technologies, such as google analytics. We also use local storage such as HTML5 to collect and store content information and preferences. Third parties who we partner with to provide certain features on our site or to display advertising use local storage such as HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5 local storage.

How We Respond to “Do Not Track” Signals

Some web browsers have a ''Do Not Track'' feature. This feature allows you to tell websites you visit that you do not want to have your online activity tracked over time and across websites. These features are not yet uniform across browsers and not broadly supported. This site or application is not currently set up to respond to those signals

Choice

If you are offered an online digital interaction screening or recording interview process, you may always decline and opt to schedule in-person or over-the-phone discussions with our recruitment team.

Where McKesson intends to use personal information in a manner not directly related to the purposes listed in this Notice, you will be provided an opportunity to opt-out of the specific use of your personal information. Notwithstanding that you may have opted-out of the disclosure of your personal information, McKesson reserves the right to disclose your personal information:

To the extent and for the period necessary to avoid prejudicing McKesson's legitimate interests in making promotions, appointments, or other similar employment decisions;
To service providers acting as McKesson’s agent, that is, performing tasks on behalf of and under the instructions of McKesson; and/or
Where otherwise permitted under applicable law.

Disclosures

McKesson does not sell personal information about you to third parties. McKesson will limit disclosure of personal information to those with a business “need to know” and in accordance with this Notice, applicable law, and contractual obligations. McKesson will take steps to help ensure appropriate protections are in place before we share or disclose personal information with any third-party service provider.

We may provide your personal information to other third parties:

To provide services to support the recruitment process at McKesson as well as to facilitate post-offer processes and certain steps involved in initiating the employment relationship. These third parties are authorized to use personal information about you only as necessary to provide these services.
As required by applicable law, such as to comply with a subpoena or similar legal process.
To protect our rights or property, protect your health and safety, or the health and safety of others.
To detect and investigate fraud or illegal activity, or to respond to a government request.
To respond to an emergency.
As required for a merger, acquisition or sale of all or a portion of assets. In such a case, the successor company will acquire the same rights and obligations that McKesson has related to your personal information.

Your personal information will be also reviewed by McKesson employees or agents who have a business need to access such personal information and may include recruiters, human resources personnel, technical services personnel, and managers or their designees.

If you become a McKesson employee, McKesson discloses the following personal information to all McKesson employees: names, titles, company-provided user identifications, office mailing or physical address, work telephone numbers, company-provided or company-reimbursed mobile numbers and work email addresses. McKesson employees will use and disclose such personal information only for legitimate business purposes.

International Data Transfer

McKesson is a global company. McKesson may transfer your personal information to the United States and other countries where it operates or where its third parties operate. This allows us to provide you with access to job opportunities around the globe. McKesson maintains employment data protection standards globally that are consistent with this Notice. McKesson will not transfer your personal information to a third party unless the third party agrees to provide the level of privacy protection consistent with applicable law and in accordance with this Privacy Notice. We will have proper contracts or legal mechanisms in place (such as data protection agreements, Standard Contractual Clauses, etc.) prior to transferring personal information to another country.

Access, Correction, and Deletion of Personal Information

Where required by applicable law, McKesson will provide you with reasonable access to your personal information that we hold about you. In responding to a request for access, McKesson may require you to provide us with sufficient information to confirm your identity in order to locate responsive information, to identify your concerns which led to or motivated the request, and to identify which McKesson companies you interacted with, and the nature of the information requested.

You must ensure your information is accurate and up-to-date, and notify McKesson when there are changes so we can be sure that your personal information is reliable for its intended use. If your personal information is inaccurate or incomplete, you may, to the extent permitted or required by applicable law, request that your personal information be corrected.

You may also request deletion of your personal information. McKesson will take reasonable steps to correct or delete your personal information that is inaccurate or incomplete, except where retention is required by applicable law, contractual obligations, or McKesson policies.

McKesson may refuse your request for access to, correction, or deletion of your personal information in certain circumstances. If McKesson denies your access, correction, or deletion request, we will notify you of the reason of the denial.

Retention of Personal Information

McKesson retains personal information relating to candidates applying for jobs in accordance with McKesson policies and practices, applicable law and contractual obligations.

If there is no activity in relation to the personal information, McKesson may remove it from its database, subject to its data retention obligations, policies, and any applicable legal or regulatory obligations or for the period of time permitted by local laws, for the purpose of considering whether your skills are suitable for other opportunities. Note that McKesson may delete personal information about you at any time without any reason. Therefore, please retain your own copy of the personal information provided to us.

Although you may change your personal information, McKesson may retain in backup or inactive files the uncorrected or outdated personal information. Such information may be retained for several reasons, including backups for disaster recovery planning, dispute resolution purposes, troubleshooting, and enforcement of agreements.

How We Protect Your Information

McKesson works with Workday to ensure both parties use reasonable and appropriate physical, technical, and administrative industry safeguards to protect personal information from loss, misuse, unauthorized access or disclosure, alteration, and destruction. Notwithstanding our security safeguards, it is impossible to guarantee 100% security in all circumstances. McKesson users are responsible for safeguarding the security of any password, user ID, or other form of authentication involved in obtaining access to password protected or secure areas of any Workday environments. It is your sole responsibility to use the appropriate level of care whenever communicating with us through the McKesson Career’s Workday environment.

If you have reason to believe that your interaction with us is no longer secure (for example, you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting McKesson at privacy@McKesson.com. In order to protect you and your information, McKesson may request Workday to suspend your use of a website, without notice, pending an investigation, if any breach of security is suspected. Access to and use of password protected and/or secure area of any McKesson site is restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution.

Children’s Privacy

This application / portal is not intended for any user under the age of 13, and we do not knowingly collect personal information from children under the age of 13. We request children under the age of 13 not to submit any personal information through the application.

Changes to the Applicant Privacy Notice

We may periodically update this Notice. The updated version will be made available on this site for you to review.

Contact Information

If you have questions or concerns about McKesson privacy practices described in this Notice, please email McKesson at privacy@McKesson.com. You may also write to:

McKesson Corporation
ATTN: Privacy Officer (Careers)
Global Privacy Office, 3rd floor
2 National Data Plaza NE
Atlanta, GA 30329
U.S.A.

McKesson Canada Privacy Officer Contact:

McKesson Canada Corporation is committed to protecting your personal privacy. If you have questions or comments about our efforts to protect your personal privacy, or if you require additional information about McKesson Canada Corporation’s privacy commitment or practices, please contact us at compliance@mckesson.ca or call 1-855-292-5010. You may also write to our Privacy Officer at:

McKesson Canada Corporation
Attn: Privacy Officer
2300, Meadowvale Blvd.
Mississauga, ON, L5N 5P9