Effective March 9 2022
CME Group Inc. and each of its subsidiaries and affiliates (collectively known as "CME Group") are committed to safeguarding your personal information. The purpose of this notice is to make all individuals that apply for employment or engagement by CME Group (“Candidates” "you", "your") aware of how CME Group processes their personal data. Such processing may include the collection, storage, modification, access, or destruction of personal information, and may be completed manually or through automatic means.
Personal information, or personal data, means any information relating to you from which you can be identified. It does not include anonymous data.
If you accept employment with or are otherwise engaged by CME Group, we will need to collect more information about you and make other uses of your information, and this will be covered by the CME Group Inc. Colleague Privacy Notice, which you will be provided access to once you are provided with your offer letter.
We may collect, store, and use the following categories of personal data about you to the extent relevant, necessary and permitted by applicable local laws:
In addition, we may also collect the following categories of personal data about you, in very limited cases and in compliance with applicable laws, that may be of a sensitive nature:
Where we collect your personal data out of the scope above or for purposes beyond those specified in this notice, we will communicate with you of such change.
To the extent relevant, necessary and permitted by applicable local laws,
You may not be required to provide us with certain information requested and the provision of such is voluntary. However, some information is necessary for the purposes described in this notice and, therefore, if you fail to provide certain information requested as mandatory, we may not be able to process your application successfully. For example, if we require references for the role that you have applied for and you fail to provide us with such details, we may not be able to progress your application in relation to that role.
CME Group has determined that under this notice, children will be considered as individuals under the age of 18. We occasionally allow children to be onsite for work experience/job shadowing as well as engage in the offering of scholarship programs. As a result, personal information (such as name, contact details and parent/guardian, work history and potential sensitive information) may be collected, processed and shared to both determine applicability and to administer access to relevant CME Group facilities and while such individuals are onsite.
For children residing in the PRC and are under the age of 14, we process their personal information (if any) based on their parent or guardian's explicit consent.
The purposes for which we may process your personal data are as follows:
The additional purposes for which we may process special categories of personal data are as follows to the extent relevant, necessary and permitted by applicable local laws:
For some roles, we are required by law to undertake criminal background screening checks and we can process your personal information in this way because processing is necessary for the purposes of complying with a regulatory requirement which involves us taking steps to establish if you have committed an unlawful act or been involved in dishonesty, malpractice or other seriously improper conduct. In any other circumstances, we will only collect and process criminal records information with your explicit consent and in accordance with applicable laws.
Subject to the foregoing we will only conduct criminal background screening if your recruitment exercise has been successful and we have offered you a role at CME Group. In such an instance, our offer will be conditional upon satisfactory completion of such background screening checks.
How will we use information about your dependents?
Subject to applicable laws, we may collect personal information about your dependents to comply with our legal obligations under immigration law, and to administer benefits to them in accordance with your benefit entitlements.
We may share personal information about your dependents in accordance with this privacy notice or with governmental authorities where we are legally required to do so. All personal information about your dependents will be processed by us in accordance with this privacy notice and applicable laws.
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention.
We do not envisage that any decisions that will have a significant impact on you will be taken based solely on automated decision-making.
We may share your data with CME Group entities, service providers, or other third parties. We require the receiving entity to protect the security of your data, to process your personal data only in accordance with our instructions and to treat it in accordance with the law. We have agreements in place with these external third parties who process your personal data to ensure their compliance with the applicable data protection laws. We my share your personal information for certain purposes and with the entities described in this section.
We process information collected from or about you in any country in which the CME Group operates, as permitted by applicable laws. In some cases, your information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for information under applicable laws (such as those in the European Union). When we conduct such transfers, we rely on your explicit consent (as required under applicable laws) and/or put in place appropriate safeguards (including without limitation signing standard contractual clauses) in accordance with applicable legal requirements. Information located outside of your home country may be subject to access by that country’s government or its agencies under a lawful order, as permitted by applicable laws. For more information on the appropriate safeguards in place or to obtain a copy, please contact us at email@example.com.
We retain your personal information for as long as necessary to carry out the purposes set out in this privacy notice, unless a longer retention period is required by applicable laws or regulatory requirements that may be applicable to us or is necessary for us to protect our rights.
If the recruitment exercise is successful, information will be retained, and its use will be covered by the CME Group Colleague Privacy Notice, which you will have access to prior to the start of your employment with CME Group.
If the recruitment exercise is unsuccessful, we may also retain your personal data and process it to assess your suitability for future positions and roles within the organization, with your consent where required by applicable laws. We may also retain your information in case a recruitment-related dispute arises between us. We will delete your information afterwards in accordance with our data retention policies and applicable laws.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you (as, once anonymized, it will cease to constitute personal data).
We use technical, administrative, and physical security safeguards to protect the information that we collect or receive against loss and unauthorized access, use, modification, or disclosure. Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable. Moreover, we are not responsible for the security of information that you transmit to us over networks that we do not control, including Internet and wireless networks.
Subject to local law, you may have certain additional rights regarding your personal information. For example, residents of the European Union and other countries may have rights to: access personal information; correct personal information; request deletion of personal information; restrict our use of personal information; object to certain uses of personal information; receive personal information in a usable electronic format and transmit it to a third party (also known as the right of data portability); lodge a complaint with a local data protection authority; or withdraw any consent supporting uses or disclosures of personal information. If you have questions about the rights you may have, please contact us via the channels listed in Section 12.
If you reside in California, you may have certain rights with respect to your personal information, including the right to access the personal information we hold about you and the right to opt out of the sharing of your personal information in certain circumstances. Requests to exercise your rights may be submitted to us in writing at firstname.lastname@example.org or by phone at +1 866 716 7274.
Please note that, to exercise any rights, we may require that you provide additional personal information to confirm your identity.
We are committed to only using your personal data to the extent relevant, necessary and permitted by applicable local laws. Where we rely on our legitimate business interests, we have undertaken an assessment where we have balanced your rights against ours to ensure that our interest is not overridden by the interests you have to protect your information.
The lawful bases for the different purposes set out in this notice will be as follows as applicable under local laws:
Necessary to take steps at your request prior to setting up our contractual relationship with you
Compliance with legal obligations
"Legitimate interest" does not apply to processing of personal information of PRC residents. *
* If you are located in the People's Republic of China ("PRC", for the purpose of this CME Colleague Privacy Notice, excluding the Hong Kong SAR, the Macau SAR and Taiwan), we process your personal information based on explicit consent to this notice that you provide to us and other lawful basis permitted under Chinese data privacy laws (and not based on legitimate interests).
Yes. We may update this privacy notice at any time. For any material changes, we will provide you with an updated copy of this notice as soon as reasonably practical. The current version of this notice from time to time can be accessed on our Privacy Page.
We may also notify you in other ways from time to time about the processing of your personal data.
If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as paying you or providing a benefit), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers).
If you have any questions about this privacy notice or how we handle your personal data or to exercise any right, please contact Privacy Compliance at email@example.com.
CME Group, Inc.
20 S Wacker Drive
Chicago, IL 60606
+1 312 930 1000
+1 866 716 7274 (US Only)
For the purposes of data protection in the EU/EEA, Singapore or India: