Click here to review Amicus Therapeutics Recruitment Privacy Notice.

RECRUITMENT PRIVACY NOTICE

 

SCOPE

 

The purpose of this Privacy Notice (“Notice”) is to inform our job applicants/potential candidates (hereinafter, “you” or “your”) on how Amicus Therapeutics UK Ltd or any of its subsidiary or affiliated companies worldwide (“Amicus” or “Company” or “we”, “us”, “our”) processes Personal Data for recruitment purposes in compliance with applicable data protection laws and regulations including but not limited to the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018 (“UK GDPR”), the Data Protection Act 2018 (the ‘2018 Act’), the Personal Information Protection and Electronic Documents Act (‘PIPEDA’), the federal Privacy Act 1988 (Cth) (‘Privacy Act’), the Act on the Protection of Personal Information (‘APPI’), and the Australian Privacy Principles (‘APPs’) as well as the data protection laws and regulations that apply in the territory where you reside or where the position is located (all together the “Data Protection Laws”).

This Notice applies to job applicants and potential candidates for employment with Amicus, either submitted as part of the online application and/or through alternative recruitment channels (e.g., via social channels, professional recruiting firms, optional recruiting programs and events). This Notice does not apply to Amicus employees, contractors or clients, or other personal data that Amicus collects for other purposes.

The Amicus entity that is your potential employer will be considered as the Data Controller, and you will be considered as the Data Subject(s) pursuant to the applicable Data Protection Laws.

 

DEFINITIONS

 

• Personal Data/Information: Any data of a Data Subject allowing them to be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. Examples: full name, date of birth, (email) address, photo.
• Processing: Any operation or set of operations performed upon Personal Data or sets of Personal Data, either by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction
• Special Categories of Personal Data: Personal Data of sensitive nature such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, data concerning Health or sex life and sexual orientation; genetic data or biometric data
• Data Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of personal data
• Data Subject(s): An identified or identifiable natural person.
• Consent: Indication and affirmation of a Data Subject’s agreement to the Processing of his/her Personal Data.
• Data Subject Request (DSR): A formal request submitted to Amicus by a Data Subject to exercise one or more of their data protection rights as provided by applicable laws and regulations including but not limited to a request to access, anonymize, delete, modify, complete or update or obtain a copy of the Personal Data of a Data Subject held, or otherwise processed by Amicus. A DSR can also include an enquiry for additional information, or a complaint made by a Data Subject regarding Amicus’ use or disclosure of a Data Subject’s Personal Data.

 

SOURCES AND CATEGORIES OF PERSONAL DATA COLLECTED

 

We collect your personal data from the following sources:

• you, the candidate;
• recruitment agencies;
• background check providers;
• your named referees; and
• publicly available sources (e.g., your social media profiles).

The types of personal data that we process are determined by the requirements of the country in which the position is located, and not the country in which you reside. Depending on the circumstances, the Personal Data and Special Categories of Personal Data that we process about you as necessary and to the extent permitted under applicable legislation for employment related purposes may include:

• Personal information (e.g., name, date of birth, gender, marital status and dependents, title, nationality (if required by the job role));
• Contact details (e.g., postal address, telephone number and personal email address, beneficiary and emergency contact information etc.);
• Identification information (identity card/passport number, government identification number like driving license details etc.);
• Recruitment/Employment information (e.g., letters of recommendation, prior employers, educational history and academic qualifications, career achievements, test results, accomplishments and honours, work permit/visa application information, and any other information that you have provided to us in your curriculum vitae (resume or CV), cover letter and/or during interviews or any other correspondence between you and us); and
• Information from using cookies and other tracking technologies, when you apply through an online recruiting platform/program used on Amicus’ behalf.

To the extent strictly required under local applicable laws and regulations or based on your explicit consent, we may also collect, store, and use the following Special Categories of Personal Data, such as:

• Health data (including but not limited to documents, data or reports related to handicaps for mandatory employment, sickness record, inability to work or inability to perform specific tasks); and
• Disciplinary actions and/or criminal proceedings and/or sanctions.

We do not seek to obtain and will not collect Special Categories of Personal Data otherwise. Unless required under local applicable laws and regulations, we encourage you to exclude any such information in your application including in your resume/CV and cover letter. Should you voluntarily provide such information, this information will be processed in accordance with applicable data privacy and data protection laws and our standard business practices.

 

PURPOSES OF DATA PROCESSING

 

Amicus, in its capacity as your potential employer processes, as a Data Controller, Personal Data belonging to you, for the following specific and lawful purposes and to the extent permitted by the applicable Data Protection Laws:

 

AUTOMATED DECISION-MAKING

 

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making. 

 

PERSONAL DATA RECIPIENTS

 

Your Personal Data will be shared internally within Amicus, including with Human Resources and Finance functions, the supervisors of the relevant job role, and other Amicus personnel if such access/disclosure is necessary for the purposes of Processing.

We may also share your Personal Data, as required and to the extent permitted under applicable laws, with public/governmental authorities and /or to certain third parties, acting on our behalf on a “need to know” basis due to their role as consultants, vendors, advisors, agents or representatives of Amicus related to your potential employment relationship. These third parties are required to only use or disclose your Personal Data as needed to provide the requested service, and their use of your Personal Data must be consistent with this Notice, applicable laws, appropriate security standards and confidentiality obligations. Personal Data will not be disseminated to unidentified and unauthorized third parties. In particular, Amicus may provide access to your Personal Data directly or indirectly according to a criterion of pertinence to the following categories of third parties:

• Public security & judicial authorities, banks or other credit institutions and other individuals and / or public and private bodies to which the data will be communicated in order to ensure compliance with specific obligations in relation to laws, regulations, EU regulations, the applicable collective labour agreement or any company agreement;
• Service Providers/Consultants/agencies for the provision of recruitment services (such as the identification and evaluation of candidates for potential employment with Amicus, development and maintenance of recruitment systems, carrying out interviews etc.;
• Amicus subsidiaries and/or affiliates for administrative and accounting purposes.

Some of the above-mentioned entities will act as independent Data Controllers with respect to their Processing operations and will be responsible for the further Processing of your data in their own right; while others will act as data processors, acting for and on behalf of Amicus, under written contractual arrangements and in accordance with its documented instructions and internal policies and procedures.

A list and contact details of the above mentioned third parties which act on behalf of Amicus, can be made available by contacting us at info@amicusrx.co.uk.

 

CROSS_BORDER TRANSFERS OF PERSONAL DATA

 

Your Personal Data may be transferred to other Amicus offices or third parties outside of your country of residence, including service providers and governmental bodies for the purposes identified above. Amicus takes all necessary measures (e.g., by entering into appropriate contractual agreements) to ensure security of Processing for any transfer of your Personal Data to third countries, where the level of data protection is not considered the same as within the country of your residence. This ensures that your data protection rights are protected.  

 

QUANTITY, QUALITY AND SECURITY OF PERSONAL DATA

 

We restrict the processing of Personal Data to the data that is reasonably adequate for and relevant to the Purpose of Processing and take reasonable steps to delete all data that is not required for the applicable business purpose.  

We take all reasonable steps to keep your Personal Data accurate, complete, and up to date. Please notify us if your personal details change or if you become aware of any inaccuracies in your Personal Data.  

The Processing of Personal Data is carried out in principle by electronic means or – only where it is required – in paper form. Amicus ensures that all appropriate technical and organizational measures are applied, in accordance with industry standards, to ensure the protection of Personal Data related to the working relationship from any accidental or improper Processing, unauthorized access, loss or destruction; these measures include but are not limited to  physical and electronic access controls, authorized user access to electronic systems, private network of remote servers (VPN), etc., while also utilizing a range of new technologies that guarantee the security of your data (e.g. SSL certificate, encryption).  

 

RETENTION OF PERSONAL DATA

 

We keep the Personal Data that we obtain about you during the recruitment process for no longer than is necessary for the purposes for which it is processed. How long we keep your information will depend on whether your application is successful, the nature of the information concerned and the purposes for which it is processed. 

If your application is not successful, we will keep your personal information for 12 months from the date on which we were last in contact with you, to show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way.  

Unless you are successful, all Personal Data which is held about you will be deleted or destroyed, at the end of the 12 months, and no record of your application will be held by us after then. We may also delete your personal data before the 12 months period has ended if you have exercised your right to object to the processing and we have no other legal right or obligation to continue the processing. 

If your application is successful, your personal information will be transferred to our HR department and processing will be subject to your employment contract and Employee Privacy Notice to initiate your onboarding process.  

In the event we wish to retain your Personal Data on file for a longer period than the above mentioned, so that we can re-engage with you should alternative suitable job roles arise in the future for which we may wish to consider you, we will contact you separately and ask for your consent to do so. 

 

DATA SUBJECT RIGHTS

 

Under certain circumstances set out in applicable Data Protection Laws, you have certain rights in relation to the Processing of your Personal Data. Indicatively, you may request access to your Personal Data we hold, request their rectification, modification, restriction, completion or deletion, object to further Processing, opt out of any “sale/sharing” (where such right is granted under the applicable Data Protection Laws) of your Personal Data, or request your Personal Data to be transferred to another organization.  

In specific, you have the following data protection rights: 

• Right of access: You have the right to obtain information on the processing of your personal data and to receive a copy these data. 

• Right to rectification: You have the right to ask us to correct or complete your personal data to the extent they prove to be wrong and/or incomplete. 

• Right to erasure: Under certain circumstances, you have the right to ask us to delete your personal data.  

• Right to restriction of processing: You may also have the right to ask us to limit the processing of your personal data. 

• Right to data portability: You have the right to receive your personal data in a structured, common, and machine-readable format and request that these data are transferred to another data controller. 

• Right to object: You have the right to object to the processing of your personal data by us, in particular if the processing of your personal data is based on (i) the necessity of the performance of a task in the public interest, or (ii) legitimate interests. We will then stop the processing of your personal data unless we remain legally authorized to do so. 

• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the competent supervisory authority of your place of residence or work. 

• • For EU residents, a list of the EU data protection authorities can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en) against the processing of your personal data if you believe that the processing of your personal data violates data protection regulations. 

• • UK residents may file a complaint at: https://ico.org.uk/make-a-complaint/. 

To exercise these rights, please contact our Data Privacy Office at: dataprivacyofficer@amicusrx.com. Amicus will respond to such requests within the deadline period provided for by Data Protection Laws. Please note that your rights may be restricted by law to the extent the Processing is necessary for Amicus to comply with its legal or contractual obligations.  

In case you granted us your consent to process your personal data, you may withdraw this consent with effect for the future. We will then stop the processing of your personal data unless we have a legal permission to do so. Please note that your withdrawal has effect for future processing operations only and does not make data processing operations, which we executed before such withdrawal, unlawful. To withdraw your consent, you may send an email to dataprivacyofficer@amicusrx.com. If you withdraw your consent, your application may no longer be able to be successfully processed, especially where your personal data processed in the exclusive basis of such consent are necessary for the application to move forward (e.g., provision of evidence of qualifications or work history or of referees’ contact details etc.). Apart from that, you will not suffer any further disadvantages. If you do not specify your withdrawal to a specific processing operation, we will assume that you withdraw your consent regarding all processing of your personal data that is based on your consent.

 

AMENDMENTS

 

This Notice is reviewed periodically to ensure its accuracy and compliance with applicable Data Protection Laws. We reserve the right to modify this Notice at any time. If we make any material changes in the way we collect or use your Personal Data, we will notify you promptly.  

Last Reviewed: October 2025