Privacy Notice

How does Amazon handle your report and personal data?

Please be reassured that Amazon handles your report and any personal data included therein in an objective and confidential manner. Should you choose to disclose your identity, every effort will be made to keep your identity confidential and prevent any retaliation based upon the report (all such to the extent legally possible).

For further information on how Amazon handles your report and processes your personal data, please read the Privacy Notice applicable to you. In particular, if you are an Amazon employee, worker or contractor, you can visit Amazon Privacy Notice and Data Policy to discover more information on how your personal data are processed by Amazon.

In addition to this, below is more information on how your personal data may be processed as part of this hotline.

The hotline is operated by NAVEX (hereinafter, referred to as “NAVEX”). As part of your report, NAVEX will collect any contact details that you voluntarily submit (including your first and last name, email address, work location and phone number), as well as any other information that you voluntarily submit (such as information regarding an incident). These details will be shared with Amazon in order to address and attempt to resolve any incident you choose to report. Information regarding your identity will not be collected if you decide to submit a report anonymously.

Amazon processes the personal data you choose to submit to NAVEX to provide you with an open and confidential reporting channel and to be able to investigate and resolve any violations or other misconduct which can be reported through the hotline. When processing your personal data, Amazon relies on its legitimate interests to ensure compliance with Amazon Code of Conduct, as well as policies and procedures. Amazon has carefully assessed its legitimate interests against your rights and freedoms to ensure that a fair balance is made. Access to your personal data within Amazon is limited on a strict need-to-know basis. Access to any data is only granted to individuals that require access on the basis of their function (such as Legal or Compliance) and only for purposes of investigating and resolving a report. Amazon will retain any personal data processed through the hotline for as long as we need it to fulfill the purposes for which it was collected and in order to comply with legal and regulatory requirements. This may mean that some information is held for longer than other information.

Contractual arrangements are in place with NAVEX to ensure that adequate safeguards have been duly adopted in order to protect your personal data. NAVEX may have access to your personal data for purposes of providing technical support. Please refer to the NAVEX Privacy Statement (Section EthicsPoint) to read more about how NAVEX processes your personal data when you decide to submit a report.

You can exercise the privacy rights granted to you by the applicable data protection law. To make a data subject request, you can contact Amazon at EU-privacy-DSR@amazon.com. Please note that Amazon will not be able to comply with an access request if you are the subject of a report and there is a substantial risk that it would jeopardize Amazon’s ability to effectively investigate a report or to gather the necessary evidence.

If you have any questions or concerns about your privacy, you can contact your local HR department (if you an employee, worker or contractor), your Data Protection Officer (if appointed) or send an email to EU-staff-privacy@amazon.com.