Privacy Notice

1.1 The Data Controller of your Personal Data is ARRISE. If you have any questions about this Privacy Notice or the processing of your Personal Data, please contact Our data protection officer (hereinafter referred to as the "DPO") at [email protected]

1.2 This Privacy Notice explains how We collect, process, use, store and protect your Personal Data as well as your rights with respect to your use of Our Website.

1.3 By using the Website and/or through the submission of an application or other Personal Data for an open position with Us, you acknowledge that the Company and any entities within its Group will process your Personal Data in accordance with this Privacy Notice. If you do not wish to provide your Personal Data on the basis set out in this Privacy Notice, you should not enter the relevant data on the Website forms or otherwise provide us with any of your Personal Data. However, if you do not provide this Personal Data, We may not be able to provide support on your use of the Website including your queries relating to job applications.

The capitalised terms shall have the meanings set out hereunder:

• "Data Controller": Is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
• "Data Processor": Is a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Data Controller.
• "Data Subject": A natural person whose Personal Data is processed by a Data Controller or Data Processor.
• "Data Subject Rights": As described in Articles 12 to 23 of the GDPR, Data Subjects have specific rights in relation to the data the Company holds. These are the right of access, erasure, restriction, portability and objection to automated decision-making.
• "Data Protection Officer": The individual formally appointed under Article 37 of the GDPR to oversee data protection strategy and implementation, monitor compliance, advise on DPIAs, act as a contact point for supervisory authorities, and serve as a resource for Data Subjects.
• "Group": All entities directly or indirectly, controlling, controlled by or under common control with the Company that process Personal Data in accordance with applicable data protection laws, including the GDPR.
• "Personal Data": The definition of personal data is intentionally broad and can be found in Article 4(1) of the GDPR. It refers to any information relating or that can be traced back to an identified or identifiable natural person ('data subject'). This includes direct, indirect identifiers such as name, identification number (IP address, employee ID etc.), location data (dynamic & static IPs), online identifiers (metadata, device ID, kiss metrics etc.), physical appearance, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
• "Services": The services provided by the Company through the Website.
• "User": Refers to any individual who accesses or browses the Website, or interacts with the Website in any other way.

3.1 We collect the Personal Data which you provide to us, including when you register interest on our registration forms or when you apply for an open position with Us. In addition, We collect information about your use of the Website and other information necessary for us as set out in this Privacy Notice.

3.2 Website Usage

3.2.1 In regard to your use of the Website, We collect the:

• IP address;
• age confirmation;
• Users' device data;
• General communication data;
• Browsing data and
• information on user preferences regarding the Website.

3.3 Recruitment

3.3.1 For the purposes of recruitment, We may collect and process the following categories of Personal Data:

• Identification data (e.g., full name, date of birth, address, nationality, passport);
• Contact data (e.g., email address, telephone number); and
• Application data (e.g., CV, cover letter, work experience, education history).
• Interview Information (e.g. audition video, interview notes and other supporting documentation)

4.1 In accordance with data protection laws, We will only process your Personal Data where We have a lawful basis for doing so.

4.2 Website Usage

4.2.1 The Company may process your Personal Data to comply with its legal obligations, and for the following purposes, based on the following legal bases:

• Administration and development of the Website – based on the Company's legitimate interests in accordance with Article 6(1)(f) of the GDPR, to ensure functionality, stability, and continuous improvement of the Website;
• Enhancement of User's experience – based on the Company's legitimate interests in accordance with Article 6(1)(f) of the GDPR, to improve usability and user satisfaction;
• Detection, investigation, and prevention of fraudulent activity and other illegal activities and protection of your rights and rights of the Company – based on the Company's legitimate interests in accordance with Article 6(1)(f) of the GDPR and its obligation to comply with legal obligations in accordance with Article 6(1)(c) of the GDPR;
• Collection, processing, and performing statistical and other research and analysis of information for enhancement of the Website and the Services – based on legitimate interests in accordance with Article 6(1)(f) of the GDPR; and
• Verifying compliance with the Terms and Conditions of the Website – based on legitimate interests in accordance with Article 6(1)(f) of the GDPR to enforce contractual terms and protect the Company's services and integrity.

4.2.2 The Company may request and process additional Personal Data only with your lawful consent in accordance with Article 6(1)(a) of the GDPR for the following purposes:

• For the purposes of commercial communication, marketing, and advertising of Our Services or third-party Services via SMS, telephone, e-mail, internet, fax, mail, social media and/or any other appropriate communication channels; and
• For personified market research and/or analysis purposes to better understand your needs, preferences, interests, experiences, and/or habits as a consumer.

You have the right to withdraw your consent to Our processing of your Personal Data at any time in writing to Our contact details mentioned in this Privacy Notice. Withdrawal of your consent does not affect the lawfulness of the processing based on consent before its withdrawal.

4.3 Recruitment

4.3.1 Your Personal Data is processed for the purpose of assessing your suitability for employment with the Company. The legal bases for such processing are:

• Article 6(1)(b) GDPR-Performance of a contract: Processing is necessary in order to take steps at your request prior to entering into a contract; and
• Article 6(1)(f) GDPR- legitimate interest: Processing is necessary for the purposes of the legitimate interests pursued by the Controller, namely the recruitment of suitable personnel.
• We use third parties who will collect Personal Data and further information from you directly, to support us in gathering and confirming (but not limited to): professional reference checks, criminal checks, identity, right to work check, adverse finance check (anti-money laundering) and qualification check. If you have any questions about the use of this data, please contact [email protected].
• As part of our External Referral Program, we may receive your Personal Data (such as your name, email address, phone number, and address) from an individual who has referred you for a potential employment opportunity with Us. Before any processing of this data occurs, We require your consent, which is obtained through our External Referral Program – Consent Form. This ensures your rights under Article 6(1)(a) of the GDPR are respected.
• The External Referral Consent Form outlines:
• What Personal Data we collect from referrals;
• The purposes of processing (contacting you and evaluating your suitability for employment);
• Your rights under the GDPR;
• How to withdraw your consent.