Effective April 30, 2020
- Walmart Anti-Corruption Due Diligence Privacy Notice Summary
- Information We Collect and How We Use It
- Information We Share
- Information We Transfer
- How We Protect Personal Information
- How Long Do We Keep Your Information
- Your Rights
- Updates to Our Privacy Notice
- How to Contact Us
Walmart Anti-Corruption Due Diligence Privacy Notice Summary
This privacy notice is available for download in the following languages.
This privacy notice describes the types of personal and business information Walmart Inc. and its holding, subsidiary and affiliated companies (herein after referred to as “Walmart”) collect as part of the anti-corruption due diligence process, how we may use the information, protect it, and with whom we may share it.
Information We Collect and How We Use It
Before making certain donations or engaging any contractor or supplier that falls within the definition of a third party intermediary, Walmart conducts due diligence including the collection of information, the specific purpose of which is to: (i) assess the anti-corruption risks associated with each potential donation recipient, contractor or supplier (together known as “Candidate”) for compliance with our legal obligations, specifically to determine if a Candidate represents a risk of non-compliance with the Foreign Corrupt Practices Act (FCPA), the UK Bribery Act 2010, and the UK Criminal Finances Act; (ii) evaluate, select, and approve or reject the Candidate; (iii) communicate with Candidates; and (iv) where required, to assess the suitability of suppliers providing specialist services; (v) monitor compliance with Walmart group anti-corruption process and (vi) obtain legal advice from external legal advisers (when applicable). For successful Candidates, these checks will be refreshed every 2 years.
This due diligence will include:
1. Completion of a Candidate questionnaire that, where applicable, requires information such as:
- Candidate’s personal and business information (information that personally identifies the Candidate and their business and qualifications);
- Contact information for the individual(s) responsible for the business relationship between Candidate and Walmart, including name, year of birth, country of residence, telephone number and email address.
- Information relating to the services provided or proposed donation.
- Information relating to any sub-contractors, subsidiaries and/or related parties (e.g., partnerships, sister companies, joint ventures), third parties, intermediaries, or other persons or entities the Candidate will engage when providing services, including name, year of birth, country of residence, telephone number and email address.
- Information relating to owners, partners or shareholders of companies Candidate will engage when providing services, including name, year of birth, country of residence, citizenship, ownership percentage and indication of whether they are associated with a government entity or political party or campaign.
- Reference information (company and individual contact information for Candidate’s references);
- Information regarding any formal charges or convictions against the Candidate, its trustees, officers, or its executives, including bribery or corruption related violations.
2. Searches on the Internet or other public sources of information (e.g. public data registries), and from a third party provided database (Dun & Bradstreet).
To the extent you have provided personal information about another individual in connection with this questionnaire, you must provide assurance that you have obtained their written consent for Walmart to process their information as outlined within this privacy notice and you agree that you will maintain a record of all these consents and provide them upon request.
The information collected from you and other sources will be stored on behalf of Walmart in an electronic database provided by Dun & Bradstreet. This database is hosted in the United States. Dun & Bradstreet may also use the business and contact information collected from you to update its global business database. The information maintained by Dun & Bradstreet as part of its global business database is the responsibility of Dun & Bradstreet as a data controller and is subject to their privacy notice available at https://www.dnb.com/utility-pages/privacy-policy.html.
Information We Share
We may share the information you provide with our domestic and international Walmart affiliates for the purposes described above. We also share this information with Dun & Bradstreet so that they can supply commercial data about organizations to the Walmart anti-corruption teams to inform the due diligence assessment. Walmart will engage Dun & Bradstreet to complete Candidate searches using their global business database. Walmart will act as the data controller in relation to its compliance activities and will capture the information required for the purposes outlined above.
In addition to Dun & Bradstreet, we may also share the information you supply with third parties who perform services for us or with whom we contract for the purposes described in this privacy notice. These third-party service providers are given the information that they need to perform their designated functions and are prohibited from using or disclosing your personal or business information for unrelated business purposes. These service providers are instructed to process the data in accordance with any applicable legal requirements regarding data protection and data security.
We may disclose your information in other special circumstances. These include situations when the sharing is necessary to protect the safety, property, or other rights of Walmart, our customers, our associates, or any other person, or where otherwise required by law. For example, we may be required to disclose your information as is required by law pursuant to lawful requests such as subpoenas, court orders, or when we believe disclosure is necessary or appropriate in connection with an investigation of reasonably suspected or actual criminal activity.
Information We Transfer
We may transfer the personal and business information we collect to other countries where we do business, which may not have the same data protection laws as the country in which you reside. We have taken steps to provide an adequate level of protection in accordance with applicable data protection laws in the countries in which we operate.
We may transfer any information we have about you in connection with a merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Walmart or as part of a corporate reorganization or stock sale or other change of corporate control.
How We Protect Personal Information
We require that our service providers maintain reasonable administrative and technical security safeguards to protect against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, use, and other unauthorized or unlawful forms of processing of the personal information you provide.
How Long Do We Keep Your Information
We keep Candidate’s information for as long as it’s required for the purposes described in this notice. Personal information related to due diligence checks, either in hard copy or electronically, is kept for five (5) years or as otherwise required by law or Company policy, from the date that the last related action occurred.
- Candidates screened to provide services for our Walmart Argentina entity: to understand your rights in relation to the personal information processed, contact Walmart Argentina Privacy at email@example.com.
- Candidates screened to provide services for our Asda or IPL entity: to understand your rights in relation to the personal information processed including how to lodge a complaint with the appropriate data protection authority and to view the contact information for Asda’s Data Protection Officer visit the Asda Privacy Centre.
- For Spain only, the electronic database managed by Walmart is registered under the name International Procurement and Logistics Spain, S.L. (Walmart, Inc.) with the Spanish Data Protection Agency. The data controller’s registered business address in Spain is Calle Venecia 1-1ZQ, 30700, Torre Pacheco Murcia, Spain.
- Candidates screened to provide services for our Walmart Canada entity: to understand your rights in relation to the personal information processed, contact Walmart Canada Privacy Office at firstname.lastname@example.org or by mail at Wal-Mart Canada Corp., c/o Privacy Office, 1940 Argentia Road, Mississauga, Ontario, L5N 1P9.
- Candidates screened to provide services for our Walmart Chile entity: to understand your rights in relation to the personal information processed, contact Walmart Chile Privacy Office at email@example.com.
- Candidates screened to provide services for our Walmart Central America entities: for process to address Revocation Requests and ARCO Rights (Access, Rectification, Cancelation and Opposition), contact Walmart CAM Privacy Office at CAMPRIVA6@email.wal-mart.com.
- Candidates screened to provide services for our Walmart China entities: to understand your rights in relation to the personal information processed, please contact firstname.lastname@example.org or mail at Walmart China, Ethics and Compliance, No. 3 Building SCP, Nonglin Road, Futian District, Shenzhen City.
- Candidates screened to provide services for our Walmart India entity: to understand your rights in relation to the personal information processed, contact Walmart India Privacy Office at email@example.com.
- Candidates screened to provide services for our Seiyu entity: to understand your rights in relation to the personal information processed, contact Seiyu Privacy at SEIYUCMP12@email.wal-mart.com.
- Candidates screened to provide services for our Walmart Mexico entity: for process to address Revocation Requests and ARCO Rights (Access, Rectification, Cancelation and Opposition) visit https://facturacion.walmartmexico.com.mx/arco/forma-arco.asp.
- Candidates screened to provide services for our Massmart entities: to understand your rights in relation to the personal information processed, contact Massmart Privacy at Privacy@massmart.com.
- Candidates screened to provide services for our Flipkart Group of Companies: to understand your rights in relation to the personal information processed, contact us at:
- Flipkart: firstname.lastname@example.org
Updates to Our Privacy Notice
Please check this privacy notice periodically for changes. We will post the date it was last updated at the top of the policy.
How to Contact Us
If you have questions or comments about this privacy notice, please contact the Privacy Office:
By Email: Privacy@wal-mart.com
Privacy Office (Mailstop #160)
702 SW 8th Street
Bentonville, AR 72716-0160