Candidate privacy notice

(Recruitment and selection)

1. Purpose of this Notice

This Candidate Privacy Notice explains how ArcelorMittal Group (“ArcelorMittal”, “we”, “us”, “our”) collects, uses, discloses and protects personal data relating to job candidates in the context of recruitment and selection activities.

This Notice should be read together with the ArcelorMittal Data Protection Policy which sets out the general principles, safeguards and governance framework applicable to all processing of personal data within the ArcelorMittal Group.

In case of any inconsistency, the Data Protection Policy shall prevail.

The latest version of the Data Protection Policy is available on ArcelorMittal’s corporate website.

2. Who is the Data Controller?

The data controller is the ArcelorMittal entity to which you apply or with which you interact during the recruitment process.

Certain recruitment activities may be supported at Group level (e.g. shared HR systems, IT platforms or recruitment services). In such cases, your personal data may be processed by other ArcelorMittal entities acting in accordance with the Group’s Binding Corporate Rules (Data Protection Procedure) and applicable data protection laws.

3. Scope

This Notice applies to:

  • external candidates,

  • internal candidates applying for another role,

  • speculative applications,

  • candidates using ArcelorMittal’s recruitment platforms or applying through third parties (e.g. recruitment agencies).

4. Categories of Personal Data Processed

Depending on the role and local legal requirements, we may process the following categories of personal data:

  • Identification and contact data (name, address, email, phone number);

  • Professional data (CV, employment history, qualifications, skills, references);

  • Application and assessment data (interview notes, test results, evaluation feedback);

  • Eligibility and compliance data (right-to-work documentation, background checks where legally permitted);

  • Communication data exchanged during the recruitment process.

  • Technical data related to the use of recruitment platforms.

We ask candidates not to provide personal data that is not requested or not relevant to the recruitment process.

5. Purposes and Legal Bases of Processing

Your personal data is processed for the following purposes:

  • managing and assessing your application;

  • communicating with you during the recruitment process;

  • verifying qualifications and suitability for the role;

  • complying with legal and regulatory obligations;

  • improving recruitment processes and workforce planning at Group level.

Processing is carried out on the basis of one or more of the following legal grounds, as applicable:

  • steps taken at your request prior to entering into an employment contract;

  • ArcelorMittal’s legitimate interests in managing recruitment and talent acquisition;

  • compliance with legal obligations;

  • your consent, where required by applicable law

6. Use of Automated Tools and AI Systems (EU AI Act)

As part of its recruitment activities, ArcelorMittal may use digital tools, including systems incorporating automation or artificial intelligence, for example to:

  • support the management of applications,

  • facilitate candidate screening or matching,

  • assist recruiters in organizing, prioritizing or analysing applications.

These tools are designed to support human decision-making, not to replace it.

ArcelorMittal does not take recruitment decisions producing legal or similarly significant effects solely based on fully automated processing, unless permitted by applicable law and subject to appropriate safeguards.

Where AI-based systems are used, ArcelorMittal applies a risk-based and human-centric approach, in line with applicable data protection laws and the EU Artificial Intelligence Act, including:

  • transparency towards candidates,

  • human oversight of recruitment decisions,

  • measures to prevent discrimination and bias,

  • appropriate governance and documentation of AI systems.

Candidates may request further information on the use of such tools and may exercise their rights as described below.

7. Data Sharing and International Transfers

Your personal data may be shared with:

  • relevant ArcelorMittal entities involved in recruitment or HR support;

  • authorised service providers (e.g. recruitment platforms, assessment providers, IT service providers);

  • public authorities where required by law.

Where personal data is transferred outside the EU/EEA, appropriate safeguards are implemented, including ArcelorMittal Data Protection Procedure (which includes our Binding Corporate Rules) or Standard Contractual Clauses, in accordance with the ArcelorMittal Data Protection Policy.

8. Data Retention

Personal data relating to candidates is retained only for as long as necessary for recruitment purposes and in accordance with applicable laws and ArcelorMittal’s data retention rules.

Where no employment relationship is established, candidate data is generally retained for a limited period, after which it is securely deleted or anonymised, unless a longer retention period is required or permitted by law.

9. Your Rights

Under applicable data protection laws, you have the right to:

  • access your personal data;

  • request rectification or erasure;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • withdraw consent, where applicable;

  • lodge a complaint with a competent supervisory authority.

Details on how to exercise these rights are set out in the ArcelorMittal Data Protection Policy.

Requests can be submitted via the dedicated form available on ArcelorMittal’s website or by contacting: dataprotection@arcelormittal.com

10. Contact and Further Information

For any questions regarding this Candidate Privacy Notice, the processing of your personal data, or the use of automated or AI-supported recruitment tools, you may contact:

ArcelorMittal – Group Data Protection Officer

Candidate privacy notice | Careers | ArcelorMittal