Amazon Privacy Notice and Data Policy
Privacy Notice
Personal Data Processing Policy Applicable to Colombia
We know you care about how we use your information, and we appreciate the trust you place in us to handle it responsibly. This Notice describes how Amazon Operation Services Colombia S.A.S. identified with NIT 901180732-2 ("Amazon") collects and uses the personal data of its candidates.
Who does this Notice apply to?
This policy applies to all individuals who apply for jobs at Amazon and its affiliated companies in Colombia.
What personal data does Amazon collect and how does it use it?
Amazon determines what data is collected and how it is used, therefore acting as Data Controller, in accordance with subsection (e) of article 3 of Law 1581 of 2012.
In general terms, the personal data we collect allows us to manage the recruitment and hiring process, develop Amazon's activities, and comply with our legal obligations.
As part of the selection process, we may collect, among others, the following personal info:
In general terms, the personal data we collect allows us to manage the recruitment and hiring process, develop Amazon's activities, and comply with our legal obligations.
As part of the selection process, we may collect, among others, the following personal info:
- Identification data
- Contact information
- Demographic data
- Responses to assessment questions
- Information for background verification
- Information about previous employment
- Work preferences and skills
- Resume data
- Information about certain health conditions (only when required by law)
- Interview notes
- Assessment results
- Transportation records
- Expense data
The collection and use of your data allows us to manage the hiring process, including the creation of the electronic HR file for the candidate, managing your application, conducting assessments, organizing interviews, coordinating or reimbursing transportation, managing accommodation, processing interview feedback, onboarding, and conducting background checks and verifications.
We may also use your data to inform you about other job opportunities at Amazon.
Likewise, we may process your personal data to comply with document retention obligations provided by law.
Your data may also be used in investigations or, when necessary, in legal proceedings.
We do not use your personal data to make automated decisions.
In any case, we will request your prior, express, and informed authorization if we were to process your data to execute automated decision-making processes.
If your application is not successful, most candidates prefer that we retain the data they provided so we can contact them about future opportunities at Amazon.
To make this possible, at the time of your first application we will ask if you want us to retain your data for an additional period and make it available to our recruiters within the Amazon group.
If you give your consent, we may consider you and contact you for new vacancies.
You can revoke your authorization for data processing at any time by changing the consent settings in your candidate profile.
We may also use your data to inform you about other job opportunities at Amazon.
Likewise, we may process your personal data to comply with document retention obligations provided by law.
Your data may also be used in investigations or, when necessary, in legal proceedings.
We do not use your personal data to make automated decisions.
In any case, we will request your prior, express, and informed authorization if we were to process your data to execute automated decision-making processes.
If your application is not successful, most candidates prefer that we retain the data they provided so we can contact them about future opportunities at Amazon.
To make this possible, at the time of your first application we will ask if you want us to retain your data for an additional period and make it available to our recruiters within the Amazon group.
If you give your consent, we may consider you and contact you for new vacancies.
You can revoke your authorization for data processing at any time by changing the consent settings in your candidate profile.
Where does Amazon obtain your personal data from?
Most of your personal data we obtain directly from you. In some cases, we may obtain certain data from third parties, such as recruitment agencies.
Who does Amazon share your personal data with?
Your personal data may be transferred or transmitted within and outside of Colombia. Transfers or transmissions will be made for the purposes described in this policy, or when required by law or competent authority.
In general, Amazon will transfer and transmit your personal data to its subsidiaries, subsidiaries, or affiliates.
Additionally, we may share data with:
In general, Amazon will transfer and transmit your personal data to its subsidiaries, subsidiaries, or affiliates.
Additionally, we may share data with:
- HR service providers.
- Insurance companies
- Government entities or agencies, including security bodies
- External advisors (for example, legal and accounting)
- Employee benefits providers
How do we protect your personal data?
We maintain appropriate technical and organizational measures to protect the confidentiality of your personal data, including security measures to safeguard them against unlawful or unauthorized processing and against accidental loss or damage.
How long do we retain your personal data?
If your application is successful and you begin working at Amazon, we will retain your personal data, at minimum, during the duration of your employment relationship with Amazon, without prejudice to document retention obligations provided by law.
If your application is not successful and you do not give us your consent to continue processing once the selection process ends, we will proceed to delete your personal data, except for legal obligation to the contrary.
If your application is not successful, but you give us your consent to retain your data in order to consider you and contact you for future opportunities, we will retain them for up to seven years.
If your application is not successful and you do not give us your consent to continue processing once the selection process ends, we will proceed to delete your personal data, except for legal obligation to the contrary.
If your application is not successful, but you give us your consent to retain your data in order to consider you and contact you for future opportunities, we will retain them for up to seven years.
What are your rights under applicable regulations?
In accordance with article 8 of Law 1581 of 2012, as a personal data subject you have the right to:
- Know, update, consult, or rectify your personal data, at any time, before Amazon, regarding those data you consider partial, inaccurate, incomplete, fragmented and/or that induce error or whose processing is expressly prohibited or has not been authorized.
- Request, at any time, proof of the authorization granted for the processing of your personal data.
- Be informed by Amazon, upon request, about the use that has been given to your personal data.
- Present before the Superintendency of Industry and Commerce the complaints you consider pertinent to assert your right to habeas data against Amazon.
- Revoke authorization and/or request data deletion when you consider that Amazon has not respected your constitutional rights and guarantees.
- Access, free of charge, your personal data that you have voluntarily provided to Amazon.
Questions and inquiries?
If you have questions or concerns about your privacy or the processing that Amazon has given to your personal data, send an email to hrrc-privacy@amazon.com.
Below are the procedures for submitting inquiries and complaints:
Below are the procedures for submitting inquiries and complaints:
- Inquiries: You can make inquiries at any time about the personal data that reside in the Company's databases, in order to request proof of authorization, know the personal data that has been collected and the processing that has been given to them. Inquiries will be addressed within a maximum term of ten (10) business days counted from the date of receipt. When it is not possible to address your inquiry within that term, we will inform you of the reasons for the delay and the date on which it will be addressed, which may not exceed five (5) business days following the expiration of the first term.
- Complaints: You can file complaints when you consider that the information contained in the databases should be corrected, updated, or deleted, or when you notice the alleged non-compliance with any of the duties of data controllers in accordance with article 17 of Law 1581 of 2012. Complaints will be addressed within a maximum term of fifteen (15) business days counted from the day following their receipt. When it is not possible to address your complaint within that term, we will inform you of the reasons for the delay and the date on which it will be addressed, which may not exceed eight (8) business days following the expiration of the first term.
This personal data processing policy is effective as of November 27, 2025.