Re: Manyone opportunity

RECRUITMENT PRIVACY NOTICE

INTRODUCTION AND DEFINITIONS

At Manyone, we are committed to respecting your privacy. When you apply for a position with us, please be aware that Manyone as the controller collects, registers and processes personal data about you. The following describes how we process your application and which personal data we collect including which procedure we typically follow.

ACCEPTANCE OF APPLICATIONS

When we receive your application, we will send you a confirmation stating that we have received it. When we go through the applications, we will select the applicants that we call in for an interview. This selection is based on how your qualifications relate to the position. The call-ins for an interview will take place by email or telephone.

COLLECTION OF PERSONAL DATA AND REFERENCES

As a step in the recruitment process, we receive and process the personal data you have disclosed in your application, your resumé and other potential documents.

In addition to the above-mentioned, we will in most cases seek additional information about the applicant(s) that we deem most qualified. We will often seek out relevant available information on the internet, including social media. We might also ask you to send us some additional information. The information that we collect in this connection will, unless we specifically inform you of something else, include information about your activities at a former place of employment, including information about your job assignments and competencies, your performance, your personal appearance and interpersonal skills, and other information about you that has been made publicly available on the internet, to the extent that we deem this information as relevant for the assessment of your application.

If we would like to collect information about you from your current or former employer by collecting references, we will ask for your consent in advance. If you refuse to consent, we will not collect your references. The information that we collect in this connection will typically include information about your activities at a former place of employment, including information about your job assignments and competencies, your performance, your personal appearance and interpersonal skills, and the reason why you are no longer employed by or wants to be employed by the employer in question.

The legal basis for processing the personal data that you disclosed is your application is art. 6(1)(a) or art. 6(1)(b) of the GDPR. The basis for processing the personal data that we collect from your current or former employer is the consent you have given to the collection of references. The legal basis is art. 6(1)(a) of the GDPR.

If we seek out personal data concerning you on the internet, the basis for processing is either that you have disclosed the personal data yourself or that our assessment is that the collection follows a legitimate interest, because the purpose is to assess whether you are the right applicant for the position. The legal basis is art. 6(1)(f) of the GDPR.

INTERVIEWS

During the recruitment process, we carry out interviews where the focus is on both your professional and personal competencies, the challenges of the position and how it is to work at Manyone.

We take notes of some of the personal data that is mentioned during the interview(s). We only take notes of the personal data that are relevant for our assessment of whether we should offer you a position or not.

The basis for processing the personal data that you disclose during the interview(s) is either your consent or because it is necessary prior to entering into an employment contract (see subclause 3.4 above). Also, the collection may follow a legitimate interest because the purpose is to assess whether you are the right applicant for the position that you have applied for. The legal basis is art. 6(1)(f) of the GDPR.

USE OF PERSONALITY TESTS

During the recruitment process, we may use personality tests when filling out certain positions. This requires that you consent to our processing of the results.

The test is usually completed after we have carried out one or more interviews with you. The purpose of the test is to clarify your competencies, so we have a starting point for a dialogue about your personal resources, strengths and weaknesses.

The test will never stand alone, instead, it forms a part of the collected material that we use for our selection of the right applicant for the position.

The basis for the processing of the personal data that we take note of and store in connection with your personality test is the consent that you submit to us. The legal basis is art. 6(1)(a) of the GDPR.

THE PROCESS FROM HEREON

The applicant who has been interviewed will either receive notification by email or telephone. Once we have filled the position we will inform all the applicants we cannot offer a position in writing.

If you are employed by us, the personal data that we have received and processed during the recruitment process will be filed in your personnel file in accordance with our guidelines on this matter. You will receive information concerning the processing and storage of your personal information in the Employee Privacy Notice.

If we cannot offer you a position, we will delete your personal data as soon as possible and no later than 24 months after you have submitted your application to us, unless there are certain circumstances that indicate that we would have a common interest in storing your application material for a longer period.

CATEGORIES OF RECIPIENTS ETC.

Group companies

Your personal data mentioned in this notice will be transferred to other group companies for the purpose of general People administration and internal redeployment. In the case of third-country transfers to group companies, the appropriate or suitable safeguards are the use of EU Commission standard contractual clauses for the transfer of personal data to third countries. A copy of the relevant standard contractual clauses can be obtained by contacting privacy@manyone.com. The third-country transfer is based on GDPR art. 46(2)(c).

Use of processors

Also, the personal data that you have disclosed or transferred to us will be processed in our web-based hiring platform Breezy HR, who assist in our recruitment process. Breeze HR only process personal information in accordance with our instructions.

Breezy HR is located outside EU/EEA. Accordingly, the transfer of personal data to a third country will take place. In case of third-country transfer to Breezy HR, the appropriate or suitable safeguards are the use of EU Commission standard contractual clauses for the transfer of personal data to third countries. If you would like to receive a copy of the legal basis for transfers, please contact privacy@manyone.com. The third-country transfer is based on GDPR art. 46(2)(c).

Personal data collected in connection with the personality test will be processed by Master Danmark A/S. Master Danmark will only process personal information in accordance with our instructions.

Other

Personal data may also be disclosed to third parties in connection with collecting references (i.e. former or current employers). Please see clause 3 above.

INFORMATION ABOUT YOUR RIGHTS ETC.

Data protection law gives you a range of rights in connection with our processing of your application and your personal data.

In this regard, you have the right to:

• be notified if we collect personal data concerning you and store it in our IT system,

• gain access into which personal data concerning you that we have collected and used in our processing of your application,

• object against or request that we restrict the processing or rectify or erase the personal data etc., e.g. if you think that the personal data are inaccurate.

Additionally, you also have the right to data portability if it should become relevant.

Personal data that is collected as a part of the recruitment process will be processed with the necessary security and confidentiality and the personal data will only be available to a limited number of employees for whom the access to personal data is necessary and relevant, including future managers and employees in the People team.

You can withdraw your consent to the processing of your personal data at any time. This is done by contacting us using the contact information provided below in clause 10.

You can read more about data protection law and your rights on the webpage of Datatilsynet: www.datatilsynet.dk.

You have the right to file a complaint with Datatilsynet if you have reason to believe that the processing of your personal data does not comply with data protection law. The contact information of Datatilsynet is:

Datatilsynet

Carl Jacobsens Vej 35

2500 Valby

telephone: +45 3319 3200

email: dt@datatilsynet.dk

If you have any questions regarding this Privacy Notice, please contact privacy@manyone.com.