Search

Privacy Policy

Notice

Your privacy is important to us. This Notice will let you know what Personal Information (PI) the Lilly
controllers or affiliates identified in the How to Contact Us section below, (“Lilly” or “we”) may process
(e.g. collect, record, organize, structure, store, adapt or alter, retrieve, consult, use, disclose by
transmission, disseminate or otherwise make available, align or combine, restrict, erase or destroy), how
we protect it, and your rights and choices with respect to your PI.

PI We Collect and How We Use It

We collect PI necessary for our business purposes, including:

  • Basic Personal Details
    • e.g. name; alias; date of birth; gender; lifestyle & social circumstances; image/photograph/video; physical characteristics/descriptions; signature;
  • Education & Skills
    • e.g. academic transcripts; Curriculum Vitae (CVs); educational background; languages; qualifications/certifications; training records/test scores
  • Employment Details
    • e.g. contract type; end date & reason for termination; hours of work; job application details; job title/role; office location; previous work history; salary/wage; salary/wage expectation; start date;
  • Online/Electronic Resources Activity
    • e.g. account name, account age/number/password; browsing time; cookie information; email read receipts; website history
  • Personal Contact Information
    • e.g. online identifiers (e.g. personal IP [Internet Protocol] address), email address, postal address, telephone number, unique personal identifier
  • Professional Details
    • e.g. professional license number/status; professional memberships; reference/background checks
  • Professional Contact Information
    • e.g online identifiers (e.g. personal IP [Internet Protocol] address, email address, postal address, telephone number
  • Social Media Information
  • Transactional Data
    • e.g. interactions with Lilly for products and services; speaking engagements;
  • Travel & Expense Details
    • e.g. expense details; travel booking details; travel history

Lilly also may collect and process Sensitive Personal Information (SPI) for benefits administration, security purposes, and for compliance with or consistent with applicable law pertaining to the Lilly workforce, such as:

  • Criminal/Conviction Records
  • Financial Information
    • e.g. investment account number; personal bank account information; personal credit card number
  • Government Identifiers
    • e.g. driving license number; national identification number; national identity card details; passport number; social insurance number; tax ID number; U.S. Social Security Number; visa number
  • Health Information, and any other data that could easily result in an inferred health status
  • Location Data
  • Protected Characteristics
    • e.g. nationality/citizenship; privately held political/philosophical/religious beliefs and opinions; racial or ethnic origin

Information may be gathered in various ways in compliance with all applicable laws from:

  • Business partners
  • Employees, former employees, potential employees and their family members
  • Publicly accessible sources
  • Vendors, suppliers and contractors
  • You

As a Job Seeker, we will interact with you in many ways, and these interactions often have different business purposes. The basis under which we process your PI depends on several factors, including geography and the PI being processed itself, as well as the business purpose for which we are processing it. These bases may include:

  • Consent
  • To pursue Lilly’s legitimate interest as part of its normal course of business, provided there are no overriding interests of the person

Lilly, and/or Third Parties, may process PI pertaining to our workforce for the following legitimate business or commercial purposes:

  • Administration of our business processes
  • Legal, compliance, and regulatory activities (including investigations, administration of compliance and monitoring programs, and government reporting)
  • Meetings and events (e.g., town halls, global day of service, LillyX)
  • Merger and acquisition due diligence
  • Recruitment and job placement
  • Responding to requests for information
  • Safeguarding our physical and electronic workplace (including corporate risk management and workforce protection)
  • Statistical analytics
  • Other lawful and customary employment, human resources, and business related purposes
  • data analytics and
  • to meet legal or regulatory obligations, inclusive of company record retention, that are in the legitimate interest of Lilly.

From time to time, Lilly, its authorized representatives, or those providing services to Lilly may monitor and review workforce records, documents and other information, including but not limited to e-mail correspondence, sales workforce call notes, internet log files, security badge-reader data, and similar data, residing on Lilly-owned or Lilly-sponsored networks, computers, and other electronic devices used by our workforce. Some of these materials may contain PI or SPI relating to you. In these cases, Lilly will only act where there is justification for doing so and only in the manner permitted by law, including when Lilly must protect its legal rights and interests, investigate suspected violations of law or company policy, or respond to valid law enforcement requests. Lilly will apply due care to ensure that its efforts are targeted and proportionate, and will try to exclude, to the greatest extent practicable, irrelevant materials or information, including non-work related materials that workers have stored on company owned or company-sponsored systems to the extent reasonable practicable.

You may choose not to share your PI, but we may not be able to provide you with certain information, products or services. This may result in you being denied eligibility for employment or assignment or certain benefits or administrative requirements not being met. We do not sell PI.

Reasons We Share Your Personal Information

For purposes consistent with those identified in this notice, we may share your PI with:

  • Business partners
  • Government officials
  • Health care professionals
  • Lilly employees and affiliates
  • Vendors, suppliers and contractors

These Third Parties have agreed to protect the information and to process it as directed by us (if acting on our behalf) or as required by law.

We will also disclose PI, where legally required to do so or when doing so is necessary to protect the health and safety of you or other individuals or the vital interests of the company, to Third Parties such as government agencies, government officials or public authorities, including to comply with national security or law enforcement requests, when compelled by a subpoena or court order, or to your designated emergency contact in the event of an emergency.

Where We Transfer and Process PI

We may transmit your PI to other Lilly affiliates and Third Parties worldwide, which may in turn transmit your PI to other Lilly affiliates and/or Third Parties. These affiliates and/or Third Parties may be located in countries that do not ensure the same level of data protection, but are required to treat PI in a manner consistent with this notice. To obtain additional information regarding the basis for transfers that Lilly has in place for cross-border transfers of PI (which may include consent, Standard Contractual Clauses, existing adequacy decisions, etc.), or Lilly’s commitment to the EU-US and Swiss-US Privacy Shield frameworks, please contact us at [email protected] or visit https://www.lilly.com/privacy.

Eli Lilly Australia is bound by the Australian Privacy Principles contained within the Privacy Act 1988 (as amended from time to time).

Eli Lilly New Zealand is bound by the Privacy Act 1993 (as amended from time to time).

We may also provide your PI to a Third Party in connection with the sale, assignment, or other transfer of the business to which the information relates, in which case we will require any such buyer to agree to treat PI in accordance with this notice.

How Long We Keep PI

PI will be saved for the period of time needed to fulfill legitimate and lawful business purposes in accordance with Lilly’s records retention policies and applicable laws and regulations.

How We Secure PI

We provide reasonable physical, electronic and procedural safeguards to protect PI we process and maintain. We limit access to PI to authorized employees and Third Parties who need access to perform the business activities described in this notice . Although we strive to protect the PI we process and maintain, no security system can prevent all potential security breaches.

Your Rights and Choices

Upon verification of your identity, and as applicable by law, you have the right to:

  • request:
    • information from us on how your PI is being processed, and with whom it is being shared
    • to see and get a copy of the PI that we have about you
    • that we correct, restrict the processing of, and/or erase/delete your PI
    • to have your information transmitted to another entity or person in a machine-readable format, in limited circumstances
  • Where consent is required: change or withdraw your consent at any time
  • For EEA, UK, Serbia, Switzerland: object to the processing of your PI
  • For France: set expectations for the handling of your PI after your death

There may be exceptions that apply to your request. You can exercise your rights by going to the account settings and access, modify, or delete your information. Should you have a question about your PI beyond that which you can access directly, you or your authorized representative may submit a request to

You will not be discriminated against for exercising any of your rights

How to Contact Us

For more information about Lilly’s privacy practice, please view the Privacy Statement at https://www.lilly.com/privacy.

How to Submit a Complaint

If you wish to raise a complaint on how we have handled your PI, you can contact the following who will investigate the matter:

  • For US, UK, EEA, Serbia, and Switzerland: Global Privacy Office and Data Protection Officer at [email protected]
  • For all other countries, please see the How to Contact Us section

If you are not satisfied with our response or believe we are processing your PI out of accordance with the law, you can register a complaint with a relevant regulatory authority (e.g. a Data Protection Authority (DPA) or Attorney General).