Data Protection North America

Legal Department

Applicant Privacy Notice (North America)

V1.0

Applicant Privacy Notice

CONFIDENTIAL

Aplicant Privacy Notice

Page 2 of 4

Purpose

Compliance with data protection laws and regulations is of great importance to our company. With this Privacy Notice, we would like to inform you about the processing of your personal data during the application process and your rights in accordance with data protection laws. Responsible Entity / Data Controller

The Lippert group entity (“company” “we”, “us”) named in the job vacancy to which you are applying is responsible for the collection and processing of your personal data ("data controller"). Sources of Personal Data and Relevant Data

We may process personal data, which we receive directly from you or via publicly accessible sources

(e.g. professional networks on the Internet), or data received from third parties (e.g. employment/recruitment agencies, universities, referrals, tax and social insurance authorities). The following (categories of) data may be processed:

• contact data (e.g. name, address, telephone number, e-mail address, home address etc.);

• CV (including pictures or images provided by you);

• motivation letter as well as reference letters;

• identification data (e.g. date of birth, gender, nationality, identity card or passport, etc.);

• employment data (e.g. work history, past employment, current employment status type of employment, function, work or a residence permit if necessary and required by law, etc.);

• education and qualification data (e.g. degrees, certificates as well as references and other related documents substantiating your professional expertise and experience);

• questionnaires and assessment results, background checks, health data when permitted and/or required by applicable law;

• bank account details (e.g., to reimburse travel expenses during the application process, if agreed). Purposes and legal bases of processing

We may process your personal data in particular for the following purposes (and legal grounds):

• evaluate your candidature, assess your skills, experience, and qualifications ((pre)contractual);

• set up interviews and assessments ((pre)contractual);

• conduct background checks and assessments as required or permitted by applicable law

((pre)contractual or legal requirement);

• check for your eligibility for the particular role ((pre)contractual and legal obligation);

• contact third party references provided by you in order to evaluate your previous performances

((pre)contractual);

Applicant Privacy Notice

CONFIDENTIAL

Aplicant Privacy Notice

Page 3 of 4

• contact you regarding the progress of your application ((pre)contractual);

• reimburse travel expenses during recruitment, if agreed ((pre)contractual);

• create an account for you in our application system ((pre)contractual);

• maintain records for hiring process ((pre)contractual);

• maintain our database of candidates to match with opportunities as they arise and consider you for roles ((pre)contractual);

• keep your application for the personnel files, in case of successful application (contractual);

• conduct satisfaction surveys in order to improve our recruitment process (legitimate interest); You always have the right to object to such processing by contacting us. More information on how to exercise your right can be found in section “Requests”;

• comply with legal and regulatory requirements and requests, deriving for instance from the field of employment and social security and social protection law (legal obligation);

• establishment, exercise or deference of legal claims to which we may be subject to (legal obligation). Recipients of Your Data

Within the company, certain departments and persons require on a need-to-know basis to process your personal data as part of the application process to assess your candidacy and to fulfil company’s contractual and legal obligations. Furthermore, trusted third party service providers contracted by us may also receive data for the aforementioned purposes. In particular, these are inter alia, service providers who support us in services related to HR, e.g. payroll and accounting, occupational healthcare, finance (e.g. banks and tax authorities), surveys, IT services, hosting, printing, archive, advisory and consulting services.

If you have any questions concerning the recipients of your personal data, please reach out to us. Data Retention

We retain your personal data as long as this is necessary for the processing of your application for which it has been collected. If your application was not successful, we will delete all data no later than two (2) years after the date of rejection of your application. In individual cases, certain personal information may be stored for a longer period (e.g., travel expense reports). The duration of the data retention depends on the applicable local legal requirements (e.g., under the respective national tax laws).

If you have not been selected during the recruitment process, but your application is still of interest to us, we will ask you whether we may keep your application available for potential future appointments. The legal basis for this data storage is your explicit consent, which is completely voluntary and can be withdrawn at any time for the future.

Applicant Privacy Notice

CONFIDENTIAL

Aplicant Privacy Notice

Page 4 of 4

Data Transfers to Third Countries

We may transfer your personal data to third countries (e.g., countries that require additional safeguards by applicable data protection regulations) only and insofar as this is necessary or required for the fulfilment of the purposes described in this Notice, there is a legal basis for the data transfer and appropriate data transfer mechanisms are implemented, if no adequacy decision exists. Your Rights

You may have the right to:

• access your data as well as receive a copy of your data;

• rectification and erasure;

• restriction of processing;

• data portability;

• object, especially if the data is processed pursuant to the legitimate interests of the company;

• lodge a complaint with a supervisory authority, if you believe that the processing of your personal data infringes applicable data protection regulations. If you have not been selected during the recruitment process, we may keep your application available for potential future appointments consistent with this privacy notice. The legal basis for ths data storage is your explicit consent, which is completely voluntary and can be withdrawn at any time for the future. Should you have any questions related to data protection, please contact us at: *******@****.*** End of Document

Contact this candidate