Johnson & Johnson's Careers Privacy Policy

Last Update: [September 10, 2024]

Johnson & Johnson values your privacy and is committed to the responsible management, use, and protection of personal information. This Careers Privacy Policy (“Policy”) describes our practices in connection with the information that Johnson & Johnson Services, Inc., located in the United States of America, or other affiliates of the Johnson & Johnson Family of Companies (collectively referred to in this Policy as “Johnson & Johnson”, “we” or “us”), collect about you online or offline in connection with your job application and future career opportunities at Johnson & Johnson. Related website pages from which you may be accessing this Policy are collectively referred to in this Policy as “Careers Sites”.

PERSONAL INFORMATION WE COLLECT

Information You Provide

We collect personal information from you in connection with your job application, communication and future career opportunities at Johnson & Johnson.

• Contact Information: name, address, telephone number, e-mail address, and other contact information
• Application Materials: CV, résumé, and cover letter
• Experience: previous work, practical and other relevant experience
• Education: education, including level, type, subject-matter, degrees, diplomas and certificates, and institutions
• Position of Interest: positions, roles and opportunities of interest, and if applicable, position offered
• Skills: knowledge, skills, languages, and other competencies
• Certifications: professional and other work-related licenses, permits and certifications held
• Reference Details: information you provide relating to character and work references
• Online Account Information: username and password to access the Careers Sites, application identifiers, internet protocol (IP) address and device identifiers that may be automatically collected
• Communication Preferences: preferred communication method and language
• Event Information: dietary restrictions, travel and accommodation details, government-issued identification to access one of our physical premises, and other details specific to a particular recruiting interview, meeting or other event
• Work Authorization: Work authorization status and relevant visa or other immigration information
• Conflict Check Information: Information on personal relationships and external board memberships to non-J&J companies, appointments, roles and other information that may present potential conflict of interest with Johnson & Johnson, only when requested in relation to shortlisted candidates
• Other Information: Any other information you otherwise elect to provide to us (e.g., employment preferences, willingness to relocate, current salary, desired salary, awards or professional memberships)

As allowed by applicable law, we may ask questions about your race/ethnic origin, gender, and disability (“Diversity Information”), for the monitoring of equal employment opportunity. We may also inquire about criminal records (“Criminal Records”) following a conditional offer of employment, where permitted by applicable law. Except as specifically requested or legally required, we ask that you avoid submitting information in your application which may be deemed as sensitive information. Sensitive information includes data about your race, religion, ethnicity, nationality or national origin, age, gender identity, sex life or practices or sexual orientation, marital status, medical or health information (including disability status), genetic or biometric information, political or philosophical beliefs, political party or trade union membership, veteran status, photographs, background check information, judicial data, such as criminal records or information on other judicial or administrative proceedings.

Any information you submit through the Johnson & Johnson Careers Sites or which you otherwise share with our Talent Acquisition specialist must be true, complete, and not misleading. Purposely submitting inaccurate, incomplete, or misleading information may lead to rejection of your application during the application process or, if identified after employed with Johnson & Johnson, disciplinary action including immediate termination of employment. In addition, it is your responsibility to ensure that information you submit does not violate any other person’s rights.

If you provide us with personal information of a reference or any other individual as part of your application, it is your responsibility to obtain consent from that individual prior to providing the information to us. By providing personal information of another individual, you are affirming that you have obtained such consent.

Information from Other Sources

For the purpose of background check reports in connection with your application, and as permitted by applicable law and/or with your consent, Johnson & Johnson will obtain information about you from other sources.

• References: details about work experience, education, skills, character and other information or otherwise from identified references and prior employers (may be in writing or through a phone call)
• Educational Records: transcripts, diplomas, degrees or certifications received, and letters of attendance or verification from educational or vocational institutions attended
• Credentials: credentialing, licensing and debarment status

REASONS WE COLLECT THIS INFORMATION

We collect and process information about you for one or more of these reasons:

• Because you voluntarily provide this information and consent for us to process it.
• Because this information is necessary to take steps with respect to your candidacy at your request prior to your employment.
• Because this information is of particular importance to us, and we have a specific legitimate interest under law to process it.
• To comply with a legal obligation; or
• Where necessary to protect the vital interests of you or any person.

Where the collection or processing is based on your consent, you may withdraw your consent at any time, to the extent permitted by applicable law, by contacting us as indicated on the “Contact Us” section.

The following chart contains more detailed information about how we use your personal information and the legal bases for such use.

Purpose	Description of Use	Specific Personal Information Collection	Legal Basis
Application Evaluation	Evaluate suitability and fit for applicable roles and work opportunities.	Contact Information; Application Materials; Experience; Education; Position of Interest; Skills; Certifications; Reference Details; References; Educational Records; Credentials; Work Authorization; and Other Information.	Manage our prospective contractual relationship with you.
Application Processing and Recruitment	Facilitate access to Careers Sites, submission, transmission and efficient processing of applications, interviews and recruitment events, including any related travel and meals.	Contact Information; Application Materials; Position of Interest; Reference Details; Credentials; Online Account Information; Communication Preferences; and Event Information.	Manage our prospective contractual relationship with you.   Based on our legitimate interests, such as facilitating in-person meetings for interviews.
Communication and Updates	Respond to your inquiries and communicate with you about your application.   Send you information regarding the Careers Sites and changes to our terms and policies.	Contact Information; Application Materials; Position of Interest; Online Account Information; Communication Preferences; and Other Information (such as information specific to your request).	Manage our prospective contractual relationship with you.
References	Contact references to obtain additional information about your candidate suitability.	Reference Details; and References.	Manage our prospective contractual relationship with you.
Application Verifications and Background Checks	If we offer you or intend to offer you a position and as required by the role, conduct verifications and background checks, including by contacting references, to confirm the veracity of application details, such as education, experience, work authorization and qualifications, and in some countries, to obtain criminal history.	Contact Information; Application Materials; Experience; Education; Certifications; Position of Interest; Reference Details; References; Credentials; Educational Records; Work Authorization; Other Information; and Criminal Records.	Manage our prospective contractual relationship with you.   Comply with our legal obligations, where applicable.   Based on our legitimate interests, such as ensuring the accuracy of your application and promoting a safe work environment.   Based on your consent.
On-boarding	If we hire you, incorporate personal information into our human resources and IT systems and use it to manage the new-hire process. Any such information can become part of your employee file and used for other employment-related purposes.	Contact Information; Application Materials; Experience; Education; Position of Interest; Skills; Certifications; Educational Information; Work Authorization; Credentials; Online Account Information; and Communication Preferences.	Manage our contractual relationship with you.
Diversity and Inclusion	Monitor and foster equal opportunity in recruitment processes, including to comply with related applicable laws and regulations.	Diversity Information; Contact Information; Application Materials; Experience; Education; Position of Interest; Skills; and Certifications.	Comply with our legal obligations where applicable.   Based on your consent.
Compliance	Comply with legal, regulatory or contractual requirements, including conducting audits to verify that our internal processes function as intended, identifying potential conflicts of interest, and managing and further mitigating subsequent risks.	Contact Information; Application Materials; Experience; Education; Position of Interest; Skills; Certifications; Reference Details; References; Credentials; Educational Information; Work Authorization; External board memberships to non-J&J companies; Close personal relationships which may present conflict of interests risks such as close personal relationships with healthcare professionals, government officials, third party intermediaries, competitors, suppliers etc; Appointments, roles and other information that may present conflict of interest risks; and Other Information.	Comply with our legal obligations.   Based on our legitimate interests, such as ensuring compliance with internal policies.
Improving Recruiting Processes	Identify opportunities and implement changes to make our recruitment processes more effective, efficient and engaging, including through analytics and aggregate reporting.	Contact Information; Application Materials; Experience; Education; Position of Interest; Skills; Certifications; Reference Details; Work Authorization; Online Account Information; Communication Preferences; Event Information; and Other Information.	Based on our legitimate interests, such as making it easier to navigate the job postings and other material on our Careers Sites.
Future Opportunities	Create a profile about you based on your capabilities and qualifications which can be used to identify additional professional opportunities that may be of interest to you.	Contact Information; Experience; Education; Position of Interest; Skills; Certifications; Reference Details; Work Authorization; Online Account Information; Communication Preferences; Event Information; and Other Information.	With your consent.
General Business Operations	Carry out legitimate internal business activities, such as internal training, monitoring for and preventing fraud, and detecting and preventing cyberattacks.	Contact Information; Application Materials; Experience; Education; Position of Interest; Skills; Certifications; Reference Details; Work Authorization; Online Account Information; Communication Preferences; Event Information; Credentials; and Other Information.	Based on our legitimate interests, such as training our recruiting personnel on how to evaluate applications.

With your consent, the information about you will be added to our Careers system(s) or database(s) and may be retained, as specified below, and used to consider you for opportunities at Johnson & Johnson and its affiliates other than the one(s) for which you apply. We may contact you by email or by phone about other opportunities that may be aligned with our needs and your interests. We may also send you general talent acquisition communications that may be of interest to you.

If we hire you, personal information we collect in connection with your application may be incorporated into our human resources system and used to manage the new-hire process. Any such information can become part of your employee file and used for other employment-related purposes.

Providing personal information to us through the Careers Sites or to our Talent Acquisition specialists is voluntary, but necessary for the recruiting process. Consistent with applicable law, if you do not provide sufficient information, the Johnson & Johnson company considering you for the hiring process may be unable to consider your employment application or, if you are hired, your subsequent promotion, transfer or relocation.

DISCLOSURE AND TRANSFER OF INFORMATION

Johnson & Johnson shares personal information of candidates with its affiliates that are involved in evaluating candidates for available positions. Johnson & Johnson will remain responsible for personal information that is transferred and used by each entity. A list of our affiliates is available in Exhibit 21 to the Company’s last filed Form 10-K which is available at www.investor.jnj.com/financials/sec-filings/

We will limit access to such personal information to personnel that need to know the information for the purposes described in this Policy, including personnel in the recruiting, human resources, and information technology departments, in the department responsible for the position for which you are applying, or which may be of interest to you, or otherwise involved in the recruiting process. Johnson & Johnson also shares personal information with approved third-party service providers to facilitate the services they provide to us, including hosting and operating the Careers Sites, recruiting assistance, and background check processing.

Disclosing your personal information to us can include transferring your personal information to other countries, including to the United States or any other country in which we or our service providers have operations. For transfers to other countries, we have put in place adequate measures to protect your information.

OTHER USES AND DISCLOSURES OF INFORMATION

We also use and disclose your personal information as necessary or appropriate, especially when we have a legal obligation or legitimate interest to do so:

• To comply with applicable law.
  • This can include laws outside your country of residence.
• To respond to requests from public and government authorities.
  • These can include authorities outside your country of residence.
• To cooperate with law enforcement.
  • For example, when we receive law enforcement requests and orders.
• For other legal reasons.
  • To enforce our terms and conditions.
  • To respond to subpoenas or other judicial orders from competent courts of law; and
  • To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
• In connection with a sale or business transaction.
  • We have a legitimate interest in disclosing or transferring your personal information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).

DATA RETENTION

We will retain personal information for the period necessary to fulfil the purposes outlined in this Policy. The criteria used to determine our retention periods may include one or more of the following: (a) as long as we have an ongoing relationship with you; (b) as required by a legal obligation to which we are subject; and (c) as advisable in light of our legal position (such as with respect to applicable statutes of limitations, litigation, audits, or regulatory investigations). We also follow our Johnson & Johnson’s Enterprise Retention Schedule, which provides for compliance with laws and regulations across the globe, while meeting local and country specific requirements.

We may remove personal information for inactive accounts from our database, subject to any applicable legal or regulatory obligations. Furthermore, Johnson & Johnson can delete personal information about you (including your CV/résumé) from our database at any time and without providing any reason. Therefore, please retain your own copy of the personal information provided to us.

PASSIVE INFORMATION COLLECTION: COOKIES AND SIMILAR TECHNOLOGY

We and our service providers may collect certain information automatically as you navigate around the Careers Sites. On any Careers Site, in the footer, you may access the Cookie Notice or Cookie Policy detailing the use of cookie (and similar) technologies. The Cookie Notice or Policy includes information on how you may consent to these technologies, if applicable.

We and our service providers may automatically collect and use information in the following ways:

• Through your browser: Certain information is collected by most browsers, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, and Internet browser type and version. We may collect similar information, such as your device type and identifier, if you access the website through a mobile device. We use this information to ensure that the website functions properly.
• IP address: Your IP address is a number that is automatically assigned to your computer by your Internet Service Provider. An IP address is identified and logged automatically in our server log files whenever a user visits a Careers Site, along with the time of the visit and the pages visited. Collecting IP addresses is a standard practice and is done automatically by many online services. We use IP addresses for purposes such as calculating website usage levels, diagnosing server problems, and administering the website. We may also derive your approximate location from your IP address.
• Device Information: We may collect information about your mobile device, such as a unique device identifier, to understand how you use the service.

CHOICES AND ACCESS

If you register on the Careers Sites, you may access, review, and change your personal information stored therein by logging into the Careers Sites and updating your account information, as appropriate. The updated profile will be used as the default the next time you apply for a job using your account online. To change personal information that you have already submitted for consideration for a specific position, please update your profile and resubmit your application for that position. We encourage you to promptly update your personal information if it changes or is inaccurate.

As permitted by applicable law, you may request to review, access, correct, update, restrict, suppress, or delete your personal information; request that we cease using your personal information; or request a copy or portability of your personal information. You may make any such request by contacting us as indicated below in the “Contact Us” section. We will respond to your request consistent with applicable law, and if any circumstances cause delay in our response, you will be promptly notified. If you make such a request, please make clear what personal information you would like to access or have changed, whether you would like to have personal information that you have provided to us suppressed from our database, or otherwise let us know what limitations you would like to put on our use of your personal information.

For your protection, we only implement requests with respect to the information associated with the email address that you use to send us your request, and we may also need to verify your identity before processing your request. Please note that certain personal information may be exempt from such requests pursuant to applicable data protection laws or other laws and regulations.

SECURITY

Johnson & Johnson will implement appropriate administrative, physical, and technical measures to protect personal information consistent with applicable privacy and data security laws and regulations. When Johnson & Johnson retains a third-party service provider to store or process personal information, that provider will be assessed for their ability to meet industry standard security measures to ensure the confidentiality and integrity of the personal information.

Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below.

Johnson & Johnson hereby disclaims, as far as permitted by local laws, any liability for itself and its affiliates and contractors for any personal information we collect in connection with your application that is lost, misused, illegally accessed, disclosed, altered or destroyed or not timely delivered to our Careers Sites.

LINKS TO THIRD-PARTY WEBSITES

The Careers Sites may contain links to other sites. This Policy does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any website or service to which the Careers Sites links. The inclusion of a link on the Careers Sites does not imply endorsement of the linked site or service by Johnson & Johnson or our affiliates. Candidates are encouraged to read the privacy policies or terms of use of those sites when accessing those sites.

Johnson & Johnson is an equal opportunity employer, which means we offer equal treatment to all applicants. Johnson & Johnson does not discriminate, either directly or indirectly, on protected grounds: race, color, sex, gender identity, sexual orientation, nationality, national origin, ethnic origin, religion, beliefs or creed, age, disability, marital status, veteran status or genetic information in any area of recruitment.

AUTOMATED PROCESSING

For certain roles, we use automated tools to assist us in processing and evaluating job applications. These tools leverage complex algorithms and machine-learning technology to assist with the following operations.

These tools compare the information collected in connection with your application with the specific requirements and qualifications of the target role(s) in order to flag any missing qualifications and assign a ranking to your application. These rankings are then used to prioritize the review of applications and are visible to members of the recruiting team as one of several factors to consider in making decisions about whether to advance a candidate in the recruitment process.

• Minimum requirements: We use automated tools to determine whether, based on the information you have provided to us, you meet the minimum requirements for a position. For example, if the job requires three years of experience as a software developer, these tools will analyze the selections you make in forms you submit through the Careers Sites and/or the words and textual patterns collected in connection with your application to determine whether this type of experience is present or not. In some cases, these automated tools may lead to the rejection of your application without any additional review by a member of our recruitment team.
• Job match ranking: We use automated tools to assign a percentage value to your application that assesses how strong the fit is between your application and the requirements of the target role. Our tools may rely on several factors in assigning these percentages, which may vary per job. For example, for certain jobs specific practical experience may be of more relevance than certifications, for others it may be the other way around. Based on the analysis, our automated tools can provide a Johnson & Johnson recruiting employee with an overview of candidates that are potentially qualified for the relevant position. The Johnson & Johnson employee will then assess these recommendations and, based on our standard processes, move the candidate forward in the recruitment process.

LAW APPLICABLE TO JOB APPLICATION

The Careers Sites allow you to apply for jobs world-wide, as a benefit of Johnson & Johnson’s centralized global recruitment function. The Careers Sites are operated from the United States. Accordingly, any personal information you submit to the Careers Sites or to our Talent Acquisition specialists will be processed and stored in the United States and will also be subject to U.S. laws. If we share your personal information with an affiliate located in another country in its capacity as a potential employer, the affiliate will handle your personal information in accordance with this Policy. Any hiring or other employment-related decisions will be made by the hiring affiliate in accordance with the laws of the country where the job will be located.

ABOUT CHILDREN

The Careers Sites are not intended for minors in any jurisdiction. Please know that you will be required to prove you are over the age of majority in your country to continue in the talent selection process.

CURRENT PERSONNEL OF JOHNSON & JOHNSON

If you currently work for Johnson & Johnson or one of our affiliates, you must be eligible to apply for a different position within Johnson & Johnson to use the Careers Sites. If you accept such a position, your benefits programs and Human Resources policies may change. Please consult with the HR manager for the new position concerning application eligibility, benefit programs, and HR policies applicable to that position.

The Careers Sites is not intended for distribution to, or use by, any person or entity in any jurisdiction or country where such distribution or use would be contrary to local law or regulation.

CHANGES TO THE POLICY

We reserve the right to amend this Policy at any time in order to address future developments of Johnson & Johnson, the Careers Site, or changes in industry or legal trends. The “Last Updated” legend at the top of this Policy indicates when this Policy was last revised. Any changes will become effective when we post the revised Policy on the Careers Sites.

CONTACT US

If you have questions or requests, please feel free to contact us at http://www.careers.jnj.com/contactus-faq

Because email communications are not always secure, please do not include sensitive information in your emails to us.

ADDITIONAL PROVISIONS FOR SPECIFIC JURISDICTIONS

Additional Provisions for Africa

Kenya

“Sensitive Information” is considered to include personal information revealing your race, health, status, ethnic social origin, conscience, belief, genetic data, biometric data, property details, marital status, family details including names of your children, parents, spouse or spouses, sex or your sexual orientation.

Nigeria

If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Policy or relevant Nigerian laws, you may contact our Data Protection Officer at: PrivacyRelatedRequestsNG@its.jnj.com. You may lodge a complaint with the National Information Technology Development Agency about the collection or processing of the personal information.

South Africa

If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Policy or relevant South African laws, you may contact our Information Officer at emeaprivacy@its.jnj.com. You can lodge a complaint with the South African Information Regulator, which can be contacted at inforeg@justice.gov.za.

Additional Provisions for Americas

Brazil

If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Policy or relevant Brazilian laws, you may contact the Data Protection Officer at Privacidade_Brasil@its.jnj.com. You may lodge a complaint with the National Data Protection Authority (Autoridade Nacional de Proteção de Dados). Further information will be available at www.gov.br/anpd/pt-br.

Canada

We may also collect and process personal information without your consent where this is allowed under applicable law.

In addition to the types of personal information set out above, we may also collect a number similar to a Social Security number.

Colombia

If you would like to request to correct, update or delete your personal information, or if you believe that we have not complied with this Policy or relevant Colombia laws, you may file a claim with Johnson & Johnson using the channels indicated in the “Contact Us” section of this Policy.

Costa Rica

If you would like to request to correct, update or delete your personal information, or if you believe that we have not complied with this Policy or relevant Costa Rican laws, you may file a claim with Johnson & Johnson using the channels indicated in the “Contact Us” section of this Policy. You may lodge a complaint with the National Data Protection Authority (Agencia de Protección de Datos de los Habitantes -Prodhab-). Further information will be available at www.prodhab.go.cr.

Mexico

If you would like to request to correct, update or delete your personal information, or if you believe that we have not complied with this Policy or relevant Mexican laws, you may file a claim with Johnson & Johnson using the channels indicated in the “Contact Us” section of this Policy. You may lodge a complaint with the National Data Protection Authority (Instituto Nacional para la Transparencia, Acceso a la Información y Protección de Datos). Further information will be available at home.inai.org.mx.

Panama

If you would like to request to correct, update or delete your personal information, or if you believe that we have not complied with this Policy or relevant Panamanian laws, you may file a claim with Johnson & Johnson using the channels indicated in the “Contact Us” section of this Policy. You may lodge a complaint with the National Data Protection Authority (Autoridad Nacional de Transparencia y Acceso a la Información – ANTAI). Further information will be available at www.antai.gob.pa.

Peru

If you would like to request to correct, update or delete your personal information, or if you believe that we have not complied with this Policy or relevant Peruvian laws, you may file a claim with Johnson & Johnson using the channels indicated in the “Contact Us” section of this Policy. You may lodge a complaint with the National Data Protection Authority (Autoridad de Protección de Datos Personales). Further information will be available at www.gob.pe/anpd.

Uruguay

If you would like to request to correct, update or delete your personal information, or if you believe that we have not complied with this Policy or relevant Uruguayan laws, you may file a claim with Johnson & Johnson using the channels indicated in the “Contact Us” section of this Policy. You may lodge a complaint with the National Data Protection Authority (Unidad Reguladora y de Control de Datos Personales). Further information will be available at www.gub.uy/unidad-reguladora-control-datos-personales/.

Additional Provisions for Asia Pacific

Australia

If you have any questions, comments or complaints about Johnson & Johnson’s collection, use or disclosure of personal information, or if you believe that Johnson & Johnson has not complied with this Policy or relevant Australian laws, you may contact the Privacy Officer of Johnson & Johnson at RA-JNJAU-PrivacyOffi@ITS.JNJ.com.

China

In addition to the information above, we collect and process personal information about you in accordance with the legal bases provided under Chinese law.

Sensitive information is personal information that if breached or illegally used may lead to the infringement of your personal dignity or harm to personal or property safety, including information revealing aspects such as biometrics, religious belief, specific identity, medical health, financial accounts, and whereabouts.

In principle, personal information generated or collected within the territory of Mainland China will be processed and stored within Mainland China. To fulfill the purposes described in the chart above, your personal information may be disclosed to members of the Johnson & Johnson Family of Companies (for the latest list of our affiliates, please visit https://johnsonandjohnson.gcs-web.com/financial-information/sec-filings) and authorized third parties located in countries or regions outside Mainland China, including but not limited to the United States, countries within the European Economic Area (EEA), Singapore, Australia, and New Zealand. We will abide by relevant laws and regulations as well as Johnson & Johnson’s information security policies to ensure the security of your personal information during the transfer and will require data recipients to provide adequate protection for your personal information through contractual clauses or other means. Requests for the exercise of access and other rights in respect to personal information disclosed to overseas recipients can be directed to us in accordance with the “Contact Us” section above.

If we process personal information based on your consent, you may withdraw your consent at any time by contacting us via the information provided in the “Contact Us” section.

If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Policy or relevant laws, you may contact the personal information Protection Officer at chinaprivacy@its.jnj.com. Alternatively, you can lodge a complaint with by contacting us via the information in the “Contact Us” section.

To the extent inconsistent with the provisions of this Policy, including but not limited to definitions (e.g., sensitive information), China’s Cybersecurity Law, personal information Protection Law, their implementing measures and other Chinese laws and regulations in relation to cybersecurity and data protection will prevail.

Cross-border transfers of your personal information out of Mainland China will be made in accordance with applicable law.

India

Japan

We will only use “Individual Number” as defined under Article 2, Paragraph 7 of the Act on the Use of Numbers to Identify a Specific individual in the Administrative Procedure (Act No. 27, of May 2013) consistent with applicable law.

South Korea

When we destroy personal information, we will do so in a manner that makes it unreadable or non-reconstructable.

You may contact our Privacy Officer of Johnson & Johnson at RA-JACKR-PrivacyComp@ITS.JNJ.com.

Thailand

If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Policy or relevant laws, you may contact the Data Protection Officer at ThailandPrivacy@its.jnj.com. Alternatively, you can lodge a complaint with the Personal Data Committee of Thailand.

Additional Provisions for Europe

European Economic Area (EEA)

We may transfer your personal information to countries located outside of the EEA. Some of these countries are recognized by the European Commission as providing an adequate level of protection according to EEA standards (the full list of these countries is available http://europa.eu). With regard to transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate safeguards, such as EU Standard Contractual Clauses, to protect your personal information. You may obtain a copy of these measures by contacting our Data Protection Officer at emeaprivacy@its.jnj.com. You may also contact our Data Protection Officer if you have questions about the interpretation or operation of this notice. You may lodge a complaint with a supervisory authority for your country. You may find the list of supervisory authorities under http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection- authorities/index_en.htm or by the search function of the European Commission website.

The local Johnson & Johnson affiliate hiring for the position you apply for is the data controller for your personal information. Johnson & Johnson Services, Inc. is also a data controller where personal information is shared among the Johnson & Johnson entities.

For individuals located in the European Union, the Johnson & Johnson hiring affiliate is the appointed European Union Representative of Johnson & Johnson Services, Inc. For job postings not identifying the hiring company (as in posting that allow for consideration of applicants in different locations), JNJ Global Business Services s.r.o., with offices located at Walterovo namesti 329/1, Jinonice, 158 00 Prague, Czech Republic, is appointed the European Union Representative of Johnson & Johnson Services, Inc. and can be contacted via emeaprivacy@its.jnj.com.

Switzerland

We may transfer your personal information to countries located outside of Switzerland, in which we have affiliates or service providers. Your data may therefore be processed in Europe, the United States, the Philippines and India; in exceptional cases, in any country in the world. Such countries may provide for different data protection rules than in Switzerland. Some countries outside of Switzerland are recognized as providing an adequate level of data protection; some, however, are not. For transfers to countries not recognized as providing an adequate level of data protection (such as, amongst others, the United States, the Philippines and India), we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by the revised European Commission’s Standard Contractual Clauses (including the necessary adjustments and additions made for use under Swiss data protection law) to appropriately protect your Personal Information.

The local Johnson & Johnson affiliate hiring for the position you apply for is the data controller for your personal information. Johnson & Johnson Services, Inc. is also a data controller where personal information is shared among the Johnson & Johnson entities.

You may contact our Data Protection Officer at emeaprivacy@its.jnj.com for data protection concerns.

Turkey

We will ask for your explicit consent to collect, transfer and process personal information if none of the reasons set forth under the chart above apply or if required to transfer personal information abroad.

Your personal information will be deleted or anonymized at the end of the applicable retention period. You may lodge a complaint with a supervisory authority in Turkey according to the Turkish Data Protection Law and applicable Turkish legislation.

United Kingdom (UK)

We may transfer your personal information outside of the UK. Some of these countries are recognized by the UK as providing an adequate level of protection according to UK standards. The UK will continue to permit the transfer of personal information to the EEA and any countries that were covered by a European Commission adequacy decision as of December 31, 2020 (the full list of these countries is available http://europa.eu). With regard to transfers from the UK to countries not considered adequate, we have put in place adequate safeguards, such as EU Standard Contractual Clauses, to protect your personal information. You may obtain a copy of these measures by contacting our Data Protection Officer at emeaprivacy@its.jnj.com. You may also contact our Data Protection Officer if you have questions about the interpretation or operation of this notice. You may lodge a complaint with the Information Commissioner’s Office (ICO) in the UK. More information on the ICO is available at https://ico.org.uk.