This policy provides individuals looking to work with CME Group with information about how we handle candidates’ personal data.
CME Group Inc. and each of its subsidiaries and affiliates (collectively known as "CME Group") are committed to safeguarding your personal information. The purpose of this policy is to make all individuals that apply for employment or engagement by CME Group (“Candidates” "you", "your") aware of how CME Group processes their personal data. Such processing may include the collection, storage, modification, access, or destruction of personal information, and may be completed manually or through automatic means.
Personal information, or personal data, means any information relating to you from which you can be identified. It does not include anonymous data.
If you accept employment with or are otherwise engaged by CME Group, we will need to collect more information about you and make other uses of your information, and this will be covered by the CME Group Inc. Colleague Privacy Policy, which you will be provided access to once you are provided with your offer letter.
We may collect, store, and use the following categories of personal data about you to the extent relevant, necessary and permitted by applicable local law:
We may also collect, store and use the more sensitive categories of personal data ("special categories") to the extent relevant, necessary and permitted by applicable local law:
To the extent relevant, necessary and permitted by applicable local law,
You may not be required to provide us with certain information requested and the provision of such is voluntary. However, some information is necessary for the purposes described in this policy and, therefore, if you fail to provide certain information requested as mandatory, we may not be able to process your application successfully. For example, if we require references for the role that you have applied for and you fail to provide us with such details, we may not be able to progress your application in relation to that role.
CME Group has determined that under this policy, children will be considered as individuals under the age of 18. We occasionally allow children to be onsite for work experience/job shadowing as well as engage in the offering of scholarship programs. As a result, personal information (such as name, contact details and parent/guardian, work history and potential sensitive information) may be collected, processed and shared to both determine applicability and to administer access to relevant CME Group facilities and while such individuals are onsite.
The purposes for which we may process your personal data are as follows:
The additional purposes for which we may process special categories of personal data are as follows to the extent relevant, necessary and permitted by applicable local law:
For some roles, we are required by law to undertake criminal background screening checks and we can process your personal information in this way because processing is necessary for the purposes of complying with a regulatory requirement which involves us taking steps to establish if you have committed an unlawful act or been involved in dishonesty, malpractice or other seriously improper conduct. In any other circumstances, we will only collect and process criminal records information with your explicit consent and in accordance with applicable law.
Subject to the foregoing we will only conduct criminal background screening if your recruitment exercise has been successful and we have offered you a role at CME Group. In such an instance, our offer will be conditional upon satisfactory completion of such background screening checks.
How will we use information about your dependents?
Subject to applicable law, we may collect personal information about your dependents to comply with our legal obligations under immigration law. To in order to administer benefits to them in accordance with your benefit entitlements.
We may share personal information about your dependents in accordance with this privacy policy or with governmental authorities where we are legally required to do so. All personal information about your dependents will be processed by us in accordance with this privacy policy and applicable law.
Automated Decision-Making
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention.
We do not envisage that any decisions that will have a significant impact on you will be taken based solely on automated decision-making.
We may share your data with CME Group entities, service providers, or other third parties. We require the receiving entity to protect the security of your data, to process your personal data only in accordance with our instructions and to treat it in accordance with the law. We my share your personal information for certain purposes and with the entities described in this section.
We process information collected from or about you in any country in which the CME Group operates, as permitted by applicable law. In some cases, your information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for information under applicable laws (such as those in the European Union). When we conduct such transfers, we put in place appropriate safeguards (such as standard contractual clauses) in accordance with applicable legal requirements. Information located outside of your home country may be subject to access by that country’s government or its agencies under a lawful order. For more information on the appropriate safeguards in place or to obtain a copy, please contact us at privacy@cmegroup.com.
We retain your personal information for as long as necessary to carry out the purposes set out in this privacy policy, unless a longer retention period is required by applicable law or is necessary for us to protect our rights.
If the recruitment exercise is successful, information will be retained, and its use will be covered by the CME Group Inc. Colleague Privacy Policy, which [you will have access to prior to the start your employment with CME Group.]
If the recruitment exercise is unsuccessful, we may also retain your personal data and process it to assess your suitability for future positions and roles within the organization, with your consent where required by applicable law. We may also retain your information in case a recruitment-related dispute arises between us. We will delete your information afterwards in accordance with our data retention policies and applicable law.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you (as, once anonymized, it will cease to constitute personal data).
We use technical, administrative, and physical security safeguards to protect the information that we collect or receive against loss and unauthorized access, use, modification, or disclosure. Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable. Moreover, we are not responsible for the security of information that you transmit to us over networks that we do not control, including Internet and wireless networks.
Subject to local law, you may have certain additional rights regarding your personal information. For example, residents of the European Union and other countries may have rights to: access personal information; correct personal information; request deletion of personal information; restrict our use of personal information; object to certain uses of personal information; receive personal information in a usable electronic format and transmit it to a third party (also known as the right of data portability); lodge a complaint with a local data protection authority; or withdraw any consent supporting uses or disclosures of personal information. If you have questions about the rights you may have, please contact us via the channels listed in Section 12.
If you reside in California, you may have certain rights with respect to your personal information, including the right to access the personal information we hold about you and the right to opt out of the sharing of your personal information in certain circumstances. Requests to exercise your rights may be submitted to us in writing at privacy@cmegroup.com or by phone at +1 866 716 7274.
Please note that, to exercise any rights, we may require that you provide additional personal information to confirm your identity.
We are committed to only using your personal data to the extent relevant, necessary and permitted by applicable local law. Where we rely on our legitimate business interests, we have undertaken an assessment where we have balanced your rights against ours to ensure that our interest is not overridden by the interests you have to protect your information.
The lawful bases for the different purposes set out in this policy will be as follows as applicable under local law:
Lawful basis
|
Purposes
|
---|---|
Necessary to take steps at your request prior to setting up our contractual relationship with you |
|
Compliance with legal obligations |
|
Consent |
|
Legitimate interest |
|
Yes. We may update this privacy policy at any time. For any material changes, we will provide you with an updated copy of this policy as soon as reasonably practical. The current version of this policy from time to time can be accessed on our Privacy Page.
We may also notify you in other ways from time to time about the processing of your personal data.
If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as paying you or providing a benefit), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers).
If you have any questions about this privacy policy or how we handle your personal data or to exercise any right, please contact Privacy Compliance at privacy@cmegroup.com.
CME Group, Inc.
20 S Wacker Drive
Chicago, IL 60606
1.312.930.1000
1.866.716.7274 (US Only)
privacy@cmegroup.com
For the purposes of data protection in the EU/EEA, Singapore or India:
Please see below for a PDF version of this policy.