Privacy Notice

This Privacy Notice was last updated on 03 February 2024.

1. Introduction and Scope
AngloGold Ashanti (Pty) Ltd (“AGA”, “we” or “us”), a company incorporated in the Republic of South Africa, recognises the importance of privacy, and are committed to protecting and respecting your personal information that we handle in connection with your use of our website. This privacy notice (“Privacy Notice”) is relevant to you if you interact with AGA either by:
1. accessing our website: www.anglogoldashanti.com (“Our Website”), including filling out any forms on Our Website, entering any competition, promotion or completing a survey on Our Website;
2. applying for a role at AGA via our Careers Portal (or through a recruitment agent); or
3. corresponding or otherwise engaging with us.
This Privacy Notice explains the rights you have in this respect.

We encourage you to read this document thoroughly to understand our practices regarding your personal information and how we will treat it. We use sub-headings to help you find specific information more easily.
2. Identity and Contact Details of the Data Controller

AGA is the “Controller” of any personal information you provide to us via the channels listed under ‘Introduction and Scope’ at section 1 above. This means that it is responsible for deciding how it holds and uses your personal information.

If you have any questions about this Privacy Notice or our data practices, please contact us at:
AngloGold Ashanti
112 Oxford Road, Houghton Estate, Johannesburg, 2198
Private Bag X20, Rosebank, 2196, South Africa

Email: AGAdataprivacy@aga.gold
Tel: +27 (0) 11 637 6000

We collect and process your personal information to provide you with the best experience possible when you interact with us. The categories of personal information that we collect and process include:

Category	Details	Source
Contact and Identification Information	First name; Last name; Address(es); Date of birth; Email address(es); Telephone and Mobile number(s); and National Identity or Passport Number.	You
Job Application Information	Contact and Identification Information; Nationality; Languages; Qualifications and experience; and Any other personal information you include in your application.	You
Website Information	IP address; browser type and version; time zone setting; browser plug-in types and versions; operating system and platform; the full Uniform Resource Locators (URL); clickstream to, through and from Our Website and the date and time of the clickstream; products or services you viewed or searched for; page response times; download errors; length of visits to certain pages; page interaction information (scrolling, clicks, and mouse-overs); and methods used to browse away from the page.	Automatically collected

You are not under a legal obligation to provide us with any of your personal information but please note that, if you elect not to provide us with your personal information, we may be unable to provide certain services to you. If we become aware that this is the case, we will let you know.

Our Website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse Our Website and allows us to improve it. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Notice.

4. Special categories of information
There may be instances in which the personal information that you provide to us or that we collect is considered sensitive personal information (for example, if you choose to include this information in your job application as part of our Equal Employment Opportunity questionnaire – as set out in the table below). Sensitive personal information can mean personal information from which we can determine or infer your racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, membership in a trade union or professional, religious, philosophical, or political association, physical or mental health or condition, medical treatment, genetic data, biometric information, and information about an individual’s sexual orientation. In certain circumstances, we may also process criminal records information (for example, depending on the position applied for, we may process this information as part of our verification process for successful applicants). If we rely on consent to process this information, you have the right to withdraw that consent at any time. We only process this information if and to the extent permitted or required by applicable law (such as for equal opportunities monitoring, or compliance with employment law or regulatory obligations).
Category Details Source
Job Application Information
disability status; and sexual orientation
You
5. How we use your personal information
We collect, use, and disclose the categories of personal information set out in section 3 to:
- respond to your requests or questions when you contact us;
- allow us to evaluate, analyse, and improve the functionality of Our Websites and services;
- assess your job application and contact you in relation to the application;
- communicate with you about our relationship, such as updates to this Privacy Notice or other important legal or business changes;
- administer general record keeping; and
- fulfil other purposes as disclosed to you in accordance with applicable law or with your consent.
6. Third Party Websites

Our Website includes links to third party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third party websites and we are not responsible for their privacy statements. When you leave Our Website, we encourage you to read the privacy notice of every website you visit.
7. Automated Decision Making

AGA does not use fully automated decision-making processes in a way that produces legal effects concerning you, or similarly significantly affects you.
8. Sharing Personal Information
We share personal information with third parties in the following circumstances:
- To suppliers, contractors, and agents: from time to time, we engage or employ other companies and individuals to perform functions on our behalf, including:
  - hosting providers (located in South Africa);
  - providers maintaining Our Website (located in South Africa);
  - analytics and search engine providers (located in California, United States) who assist us in the improvement and optimisation of Our Website;
  - IT service providers located in South Africa who support and maintain the IT software and infrastructure we use; and
  - professional advisers located in but not limited to jurisdictions where AngloGold Ashanti operates, who provide legal and audit services.
Such recipients will only have access to your personal information as required by them to perform their functions and are contractually restricted from using such personal information for any other purposes. These recipients will also be subject to contractual confidentiality obligations.
- To other AGA global offices: who are involved in the provision or administration of Our Website, the services that we provide or to assist us in responding to your requests (e.g. when you contact us via email) or processing your job application.
- To government or law enforcement authorities (located in any applicable jurisdiction): if we determine in our sole discretion that we are under a legal obligation to do so.
Where we transfer your personal information to third parties that are outside of the UK, EEA or South Africa we do so in accordance with applicable laws. Where the jurisdiction is not considered adequate by the UK Information Commissioner (“ICO”) or the European Commission (as applicable), we put in place contractual appropriate safeguards.
9. What the law says about this
Our use of your personal information as described above is permitted by data protection law because it is:
- necessary for our legitimate interests in pursuing the purposes set out above, and such interests in each case are not overridden by your privacy interests;
- in some cases, necessary to meet our legal or regulatory responsibilities, such as disclosures to authorities, regulators, or government bodies;
- in limited circumstances, processed with your consent which we obtain from you from time to time, such as when you opt-in to receive marketing, communications and news via email, or where you consent to our collection and processing of equal opportunity employer data that you provide to us. See further information about this in “Communications” at section 10 below and section 4 above; or
- necessary for the performance of a contract with you, or in order to take steps at your request prior to entering into such a contract.
10. Data Security

We have implemented technical and organisational measures that are designed to keep your personal information secure. These measures differ, depending on the sensitivity of the data being protected and include encryption, access controls, regular assessments, and staff training on data protection.

Unfortunately, sending information via the internet is not completely secure. Although we put in place technical and organisational measures to protect your personal information, we cannot guarantee the security of personal information sent to Our Website.
11. Data Retention

We use and retain your personal information for as long as is necessary to fulfil the purpose for which it is being processed, and in line with our legal and regulatory obligations and risk management guidelines.

For further information on our retention periods, please contact us using the details above.

All job application and candidate profile personal information will be retained for the below period following the last time you accessed your profile:

Country Retention Period
Argentina 1 year
Australia 2 years
Brazil 1 year
Colombia 1 year
Ghana 2 years
Guinea 2 years
South Africa 2 years
Tanzania 2 years
United Kingdom 1 year
United States 3 years

12. Your Rights in Relation to Your Personal information

Data protection law grants you certain rights (‘information rights’) which we summarise below. To exercise any of these rights, please contact us using the details provided in section 2 above.

Please note that these rights are not absolute under applicable law, and they may not always apply in your circumstances. If we do not consider that you are to exercise one of these rights, we will give reasons.

Right of access and data portability	You have the right of access to information we hold about you and/or to have information that you have made available to us to be transferred to another data controller in some circumstances.
Right of rectification or erasure	If you feel that any data that we hold about you is inaccurate, you have the right to ask us to correct or rectify it. You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data. Your right of rectification and erasure extends to anyone we have disclosed your personal information to, and we will take all reasonable steps to inform those with whom we have shared your data, about your request for erasure.
Right to restriction of processing	You have the right to request that we refrain from processing your data where you contest its accuracy, the processing is unlawful and you have opposed its erasure, where we do not need to hold your data anymore but you need us to in order to establish, exercise or defend any legal claims, or we are in dispute about the legality of our processing your personal information.
Right to object	You have the right to object to our processing of your personal information. This includes the right to object to the use of your information for direct marketing and profiling purposes.
Right to withdraw consent	You have the right to withdraw your consent for the processing of your personal information where the processing is based on consent.

13. Complaints

If you are unhappy with how we have used or are handling your personal information, you may contact us at AGAdataprivacy@aga.gold. We appreciate the chance to deal with your concerns.

You also have the right to lodge a complaint with your local data protection authority.

If you are based in South Africa, this is the Information Regulator.

If you are based in the UK, this is the ICO.

If you are based somewhere else and require assistance identifying your local data protection authority, please contact us at AGAdataprivacy@aga.gold.
14. Changes to This Privacy Notice

We will review and update this Privacy Notice from time to time and will take reasonable steps to notify you of any substantive updates to it.

This Privacy Notice was last updated on 03 February 2024.

The company

Our portfolio

Sustainability

Investors

Careers

Country	Retention Period
Argentina	1 year
Australia	2 years
Brazil	1 year
Colombia	1 year
Ghana	2 years
Guinea	2 years
South Africa	2 years
Tanzania	2 years
United Kingdom	1 year
United States	3 years