Certificate Of Completion
Envelope Id: D856CBB16FAA4219B3921AC7C6EA8A27 Status: Delivered
Subject: EY Offer Letter_ DEBANGSHU ARI
Source Envelope:
Document Pages: 11 Signatures: 0 Envelope Originator:
Supplemental Document Pages: 15 Initials: 0 Recruitment GDS
Certificate Pages: 11
AutoNav: Enabled 6 More London Place
EnvelopeId Stamping: Enabled London, London SE1 2DA
Time Zone: (UTC-08:00) Pacific Time (US & Canada) docusign.recruitment.gds@xe04.ey.com
IP Address: 136.226.254.202
Record Tracking
Status: Original Holder: Recruitment GDS Location: DocuSign
5/27/2024 6:08:28 AM docusign.recruitment.gds@xe04.ey.com
Signer Events Signature Timestamp
Neha Bhatnagar Sent: 5/27/2024 6:08:29 AM
Completed
Neha.Bhatnagar@gds.ey.com Viewed: 5/28/2024 10:23:19 AM
Security Level: Email, Account Authentication Signed: 5/28/2024 10:23:36 AM
(None) Using IP Address: 136.226.250.98
Electronic Record and Signature Disclosure:
Accepted: 6/15/2023 11:09:17 PM
ID: d6cb4a77-b6b6-4c5f-b821-e65ca5830823
Company Name: EY
DEBANGSHU ARI Sent: 5/28/2024 10:23:39 AM
111everonlyi@gmail.com Viewed: 5/28/2024 10:30:07 AM
Security Level: Email, Account Authentication
(None)
Electronic Record and Signature Disclosure:
Accepted: 5/28/2024 10:30:07 AM
ID: ce2756b0-ace5-443d-865b-630b5ed10480
Company Name: EY
In Person Signer Events Signature Timestamp
Editor Delivery Events Status Timestamp
Agent Delivery Events Status Timestamp
Intermediary Delivery Events Status Timestamp
Certified Delivery Events Status Timestamp
Carbon Copy Events Status Timestamp
Witness Events Signature Timestamp
Notary Events Signature Timestamp
Envelope Summary Events Status Timestamps
Envelope Sent Hashed/Encrypted 5/27/2024 6:08:30 AM
Certified Delivered Security Checked 5/28/2024 10:30:07 AM
Payment Events Status Timestamps
Electronic Record and Signature Disclosure
Electronic Record and Signature Disclosure created on: 6/12/2023 3:54:13 PM
Parties agreed to: Neha Bhatnagar, DEBANGSHU ARI
ELECTRONIC RECORD AND SIGNATURE DISCLOSURE
From time to time, EY (we, us or Company) may be required by law to provide to you certain
written notices or disclosures. Described below are the terms and conditions for providing to you
such notices and disclosures electronically through the DocuSign system. Please read the
information below carefully and thoroughly, and if you can access this information electronically
to your satisfaction and agree to this Electronic Record and Signature Disclosure (ERSD), please
confirm your agreement by selecting the check-box next to ‘I agree to use electronic records and
signatures’ before clicking ‘CONTINUE’ within the DocuSign system.
Getting paper copies
At any time, you may request from us a paper copy of any record provided or made available
electronically to you by us. You will have the ability to download and print documents we send
to you through the DocuSign system during and immediately after the signing session and, if you
elect to create a DocuSign account, you may access the documents for a limited period of time
(usually 30 days) after such documents are first sent to you. After such time, if you wish for us to
send you paper copies of any such documents from our office to you, you will be charged a
$0.00 per-page fee. You may request delivery of such paper copies from us by following the
procedure described below.
Withdrawing your consent
If you decide to receive notices and disclosures from us electronically, you may at any time
change your mind and tell us that thereafter you want to receive required notices and disclosures
only in paper format. How you must inform us of your decision to receive future notices and
disclosure in paper format and withdraw your consent to receive notices and disclosures
electronically is described below.
Consequences of changing your mind
If you elect to receive required notices and disclosures only in paper format, it will slow the
speed at which we can complete certain steps in transactions with you and delivering services to
you because we will need first to send the required notices or disclosures to you in paper format,
and then wait until we receive back from you your acknowledgment of your receipt of such
paper notices or disclosures. Further, you will no longer be able to use the DocuSign system to
receive required notices and consents electronically from us or to sign electronically documents
from us.
All notices and disclosures will be sent to you electronically
Unless you tell us otherwise in accordance with the procedures described herein, we will provide
electronically to you through the DocuSign system all required notices, disclosures,
authorizations, acknowledgements, and other documents that are required to be provided or made
available to you during the course of our relationship with you. To reduce the chance of you
inadvertently not receiving any notice or disclosure, we prefer to provide all of the required
notices and disclosures to you by the same method and to the same address that you have given
us. Thus, you can receive all the disclosures and notices electronically or in paper format through
the paper mail delivery system. If you do not agree with this process, please let us know as
described below. Please also see the paragraph immediately above that describes the
consequences of your electing not to receive delivery of the notices and disclosures
electronically from us.
How to contact EY:
You may contact the sender of your envelope to let them know of your changes as to how we
may contact you electronically, to request paper copies of certain information from us, and to
withdraw your prior consent to receive notices and disclosures electronically.
To advise EY of your new email address
To let us know of a change in your email address where we should send notices and disclosures
electronically to you, you must send an email message to the envelope sender and in the body of
such request you must state: your previous email address, your new email address. We do not
require any other information from you to change your email address.
If you created a DocuSign account, you may update it with your new email address through your
account preferences.
To request paper copies from EY
To request delivery from us of paper copies of the notices and disclosures previously provided
by us to you electronically, please contact the envelope sender and in the body of such request
you must state your email address, full name, mailing address, and telephone number. We will
bill you for any fees at that time, if any.
To withdraw your consent with EY
To inform us that you no longer wish to receive future notices and disclosures in electronic
format you may:
1. decline to sign a document from within your signing session, and on the subsequent page,
select the checkbox indicating you wish to withdraw your consent, or you may;
2. send us an email to global.data.protection@ey.com and in the body of such request you
must state your email, full name, mailing address, and telephone number. We do not need
any other information from you to withdraw consent. The consequences of your
withdrawing consent for online documents will be that transactions may take a longer
time to process.
Required hardware and software
The minimum system requirements for using the DocuSign system may change over time. The
current system requirements are found here: https://support.docusign.com/guides/signer-guide-
signing-system-requirements.
Acknowledging your access and consent to receive and sign documents electronically
To confirm to us that you can access this information electronically, which will be similar to
other electronic notices and disclosures that we will provide to you, please confirm that you have
read this ERSD, and (i) that you are able to print on paper or electronically save this ERSD for
your future reference and access; or (ii) that you are able to email this ERSD to an email address
where you will be able to print on paper or save it for your future reference and access. Further,
if you consent to receiving notices and disclosures exclusively in electronic format as described
herein, then select the check-box next to ‘I agree to use electronic records and signatures’ before
clicking ‘CONTINUE’ within the DocuSign system.
By selecting the check-box next to ‘I agree to use electronic records and signatures’, you confirm
that:
You can access and read this Electronic Record and Signature Disclosure; and
You can print on paper this Electronic Record and Signature Disclosure, or save or send this
Electronic Record and Disclosure to a location where you can print it, for future reference and
access; and
Until or unless you notify EY as described above, you consent to receive exclusively through
electronic means all notices, disclosures, authorizations, acknowledgements, and other
documents that are required to be provided or made available to you by EY during the course of
your relationship with EY.
PRIVACY NOTICE - DOCUSIGN
1. Introduction
This Privacy Notice is intended to describe the practices EY follows in relation to
DocuSign (“Tool”) with respect to the privacy of all individuals whose personal data is
processed and stored in the Tool. This Privacy Notice should be read together with
the ey.com Privacy Statement, and in case of any conflict with the ey.com Privacy
Statement, the terms of this Privacy Notice will prevail. Please read this Privacy Notice
carefully.
2. Who manages the Tool?
“EY” refers to one or more of the member firms of Ernst & Young Global Limited
(“EYG”), each of which is a separate legal entity and can determine the purposes and
means for data processing in its own right (i.e., act as a data controller or in a similar
capacity).
The entity that is acting as data controller (or similar capacity) by providing this Tool on
which your personal data will be processed and stored is:
o For the personal data of EY personnel: The data controller is the EY entity which
employs you.
o For the personal data of third-party personnel (including EY clients): The data
controller is the EY local member firm with which the third party has a
relationship
You can find a list of local EY member firms and affiliates on the ey.com Privacy
Statement.
The personal data in the Tool is shared by the above data controller with one or more
member firms of EYG (see “Who can access your personal data” section 6 below)
The Tool is hosted externally by the vendor, DocuSign, in data centers (referred to by
DocuSign as data center “rings”) in North America, Canada, Germany, France and
Netherlands and Australia. Documents/envelopes will be hosted in the applicable ring
where they are initiated from. When an envelope is initiated for signature in a different
ring to the intended recipient, a link to the envelope is written in the inbox of the recipient
and when they click the link they are taken to a web server in the ring where the envelope
has been initiated. Account administrators select either the NA, CA, EU or AU for an
account user’s data center ring when an account is initiated depending on the data transfer
requirements and restrictions in the account user’s jurisdiction. Japan has selected the EU
as its data center ring. If no data centre ring is selected by the account administrator,
hosting will default to the North America ring. Some document processes will utilize
Microsoft Power Automate. Power Automate is hosted on servers in Germany.
3. How does the Tool process personal data?
The Tool is a vendor product which will allows electronic signature of internal and
external documents. The Tool provides a global standard for an electronic signature that
increases efficiency of e-Signature for the enterprise, improve document signing process
for internal and external clients and allow for integrations with other 3rd party tools. The
intention is for the tool to be used across all service lines within EY with the aim to
ultimately replace physical signatures with electronic signatures.
Your personal data processed in the Tool is used as follows:
o You will log into the Tool by going to the DocuSign website and using Single
Sign-On. Once you have logged into the Tool, you can create an envelope which
contains the relevant documents. In order to create an envelope, your first name,
last name and email address is used. The EY signatory uses DocuSign to sign the
document (which involves the processing of their first name, last name and
signature) and this is then sent to the counterparty (i.e., future employee, vendor,
client etc.) to provide any requested information and signature.
EY relies on the following basis to legitimize the processing of your personal data in the
Tool:
o Processing is necessary for the purposes of the legitimate interests pursued by the
data controller or by a third party, except where such interests are overridden by
the interests or fundamental rights and freedoms of the data subject which require
protection of personal data. The specific legitimate interest(s) pursued is to
streamline and speed up the signature process to ensure timely executions of
documents.
You have the right to object at any time, on grounds relating to your particular situation,
to the processing of personal data concerning you based on the above legitimate
interest(s).
4. What type of personal data is processed in the Tool?
The Tool processes these personal data categories:
o First and last name
o Email address
o Signature
This data is sourced from:
o Directly from you
o Directly from any other EY partner, employee and/or contractor, former EY
partner, employee and/or contractor
o directly from clients and former clients
o directly from vendors and former vendors
o directly from any other third parties who will be a party to the document which is
being signed
5. Sensitive personal data
Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or
philosophical beliefs, trade union membership, genetic data, biometric data, data
concerning health or data concerning sex life or sexual orientation.
EY does not intentionally collect any sensitive personal data from you via the Tool. The
Tool’s intention is not to process such information.
6. Who can access your personal data?
Your personal data is accessed in the Tool by the following persons/teams:
o DocuSign Organization Administrator
o DocuSign Account Administrator
o DocuSign Sender
o DocuSign Viewer
o DocuSign support
o IBM IT Support Team
What is the purpose
Where are they
Role for which they need Level of access rights
located?
access?
Overall admin of EY
DocuSign
Organization. Control
Full Admin control,
This is limited to Organization-wide
DocuSign with oversight of all
members of the EY settings and access.
Organization accounts within the EY
DocuSign Centre of
Administrator DocuSign
Excellence (COE). Act as Account Admin
Organization.
on all Accounts for
setup and escalation
purposes.
Multiple administrators Admin rights to change
To admin the account
although limited to account settings, add
including setting up
DocuSign Account only those who need users but can’t access
users in the system to
Administrator and have been envelopes unless they
create envelopes,
authorized to have are given permission
reporting etc.
admin rights. by envelope creator.
Only to their
DocuSign Sender Globally. Create envelopes.
envelopes.
All on the All on the
understanding that it understanding that it
DocuSign support is
would only be to would only be to
DocuSign support located in US and
perform support perform support
Europe.
services as requested services as requested
by IT. by IT.
The access to this tool
Canada, China, Czech To provide IT support will be given based on
Republic, Hungary, Services including the need and role. For
India, Malaysia, Digital Talent System Level 2 and Level 3
IBM IT Support Team Mexico, Oceania, Support Services to support, access will be
Philippines, Poland, level 2 and 3 provided to 40
the UK, the US, Costa operational and release (approx.) IBM IT
Rica and Australia. management. support team members.
IBM IT Support Team
will have read, update
and add access.
The access rights detailed above involves transferring personal data in various
jurisdictions (including jurisdictions outside the European Union) in which EY operates
(EY office locations are listed at https://www.ey.com/en_gl/locations). An overview of
EY network entities providing services to external clients is accessible here (See Section
2 (About EY) - “View a list of EY member firms and affiliates”). EY will process your
personal data in the Tool in accordance with applicable law and professional regulations
in your jurisdiction. Transfers of personal data within the EY network are governed by
EY’s Binding Corporate Rules.
We transfer or disclose the personal data we collect to third-party service providers (and
their subsidiaries and affiliates) who are engaged by us to support our internal ancillary
processes. For example, we engage service providers to provide, run and support our IT
infrastructure (such as identity management, hosting, data analysis, back-up, security and
cloud storage services) and for the storage and secure disposal of our hard copy files. It is
our policy to only use third-party service providers that are bound to maintain appropriate
levels of data protection, security and confidentiality, and that comply with any
applicable legal requirements for transferring personal data outside the jurisdiction in
which it was originally collected.
To the extent that personal data has been rendered anonymous in such a way that you or
your device are no longer reasonably identifiable, such information will be treated as
non-personal data and the terms of this Privacy Notice will not apply. The transfer of
personal data from the Tool to IBM is governed by an agreement between EY and the
service provider that includes standard data protection clauses adopted by the European
Commission.
For data collected in the European Economic Area (EEA) or which relates to individuals
in the EEA, EY requires an appropriate transfer mechanism as necessary to comply with
applicable law. The transfer of personal data from the Tool to IBM is governed by an
agreement between EY and IBM that includes standard data protection clauses adopted
by the European Commission.
7. Data retention
Our policy is to retain personal data only for as long as it is needed for the purposes
described in the section “How does the Tool process personal data”. Retention periods
vary in different jurisdictions and are set in accordance with local regulatory and
professional retention requirements.
In order to meet our professional and legal requirements, to establish, exercise or defend
our legal rights and for archiving and historical purposes, we need to retain information
for significant periods of time.
The policies and/or procedures for the retention of personal data in the Tool are: account
managers for each envelope can set their own retention periods, which can be anything
between one day and seven years. If the account managers do not set a customized
retention period for their envelopes, then the EY Records Retention Global Policy
retention period shall apply.
After the end of the data retention period, your personal data will be deleted.
8. Security
EY protects the confidentiality and security of information it obtains in the course of its
business. Access to such information is limited, and policies and procedures are in place
that are designed to safeguard the information from loss, misuse and improper disclosure.
Additional information regarding our approach to data protection and information
security is available in our ey-protecting-your-data-2018.pdf brochure.
9. Controlling your personal data
EY will not transfer your personal data to third parties (other than any external parties
referred to in section 6 above) unless we have your permission or are required by law to
do so.
10. Your rights in relation to your personal data
Depending on the applicable jurisdiction, you may have certain rights in relation to your
personal data, including:
o To request details of the personal data EY processes about you and to access the
personal data that EY processes about you
o To have your personal data corrected, for example, if it is incomplete or incorrect
o To restrict or object to the processing of personal data or request the erasure of
your personal data
o To receive a copy of the personal data which you have provided to EY in a
structured, commonly used and machine-readable format which you can re-use
for your own purposes (known as “data portability”)
o Where you have provided consent to the processing of your personal data, the
right to withdraw your consent.
o The right to complain to a data protection authority (see section “Complaints”)
If you have any questions about how EY processes your personal data or your rights
related to your personal data, please send an e-mail to global.data.protection@ey.com.
11. Complaints
If you are concerned about an alleged breach of privacy law or any other regulation,
contact EY’s Global Privacy Leader, Office of the General Counsel, 6 More London
Place, London, SE1 2DA,United Kingdom or via email
at global.data.protection@ey.com or via your usual EY representative. An EY Privacy
Leader will investigate your complaint and provide information about how it will be
handled and resolved.
If you are not satisfied with how EY resolved your complaint, you may have the right to
complain to your country’s data protection authority. You may also have the right to refer
the matter to a court of competent jurisdiction.
Certain EY member firms in countries outside the European Union (EU) and the UK
have appointed representatives in the EU and the UK respectively to act on their behalf if,
and when, they undertake data processing activities to which the EU General Data
Protection Regulation (GDPR) and/or the UK General Data Protection Regulation (UK
GDPR) applies. Further information and the contact details of these representatives are
available below:
EU data protection representative | EY
UK Data protection representative (ey.com)
12. Contact us
If you have additional questions or concerns, contact your usual EY representative or
email global.data.protection@ey.com.
