The Carlyle Group Applicant Privacy NoticeThis Carlyle Applicant Privacy Notice (“Privacy Notice”) applies in relation to certain individuals applying
to be employees or members (whether or not they are full-time, part-time or temporary) associated with The
Carlyle Group (“Carlyle”, “we”, “us” and “our”) or the Carlyle LLPs (as defined below).
We recognize the importance of your privacy and maintaining the confidentiality of your “Personal Data”(i.e. any information relating to a natural person, who can be identified from that information (either directlyor when combined with other information in Carlyle’s possession) in accordance with applicable dataprotection and privacy laws, including the General Data Protection Regulation (EU) 2016/679 of theEuropean Parliament and of the Council of 27th April 2016 (the “GDPR”) and the California Consumer
Privacy Act (the “CCPA”). This Privacy Notice sets out how we may collect, use, store, process, disclose
and transfer your Personal Data in accordance with these laws.
1. Definitions
1.1. Capitalized terms used in this Privacy Notice shall have the following meanings:“Carlyle”

means The Carlyle Group;“Carlyle LLP”

means any of the following: CECP Advisors LLP, CELF Advisors
LLP, and Carlyle Real Estate Advisors LLP;“CCPA”

means the California Consumer Privacy Act;

“EEA”

means the European Economic Area;“Employee Privacy
Notice”means Carlyle’s privacy notice for Employees, which notifies
such individuals of the purposes of which their Personal Data is
being collected, how it may be used and who it may be transferred
to, and their rights with respect to such data;“GDPR”

means the General Data Protection Regulation (EU) 2016/679 of
the European Parliament and of the Council of 27th April 2016;“Handbook”

means the Employee Handbook or Employee & Member
Handbook, as amended from time to time, that is applicable to you
and which sets out the basic policies, practices, and procedures ofCarlyle that apply to its Employees;“Personal Data”

means any information relating to a natural person (known as a“data subject”), who can be identified from that information(either directly or when combined with other information in
Carlyle’s possession);“Sensitive Personal
Data”

means special categories of Personal Data revealing racial or
ethnic origin, political opinions, religious or philosophical beliefs,
or trade union membership, and the processing of genetic data,
biometric data for the purpose of uniquely identifying a natural
person, data concerning health or data concerning a natural
person’s sex life or sexual orientation, and data concerning
criminal convictions and offenses or related security measures andrelated sentences;“Standard Clauses”

means the standard contractual clauses approved by EU
Commission Decision 2004/915/EC of 27 December 2004; and1

“You”

means you, an individual applying to be an employee or memberof Carlyle or a Carlyle LLP.

2.

Introduction

2.1.

Your privacy is important to Carlyle, and we have taken steps to ensure that we do not collect more
information from you than is necessary in relation to your potential employment with us or potential
membership in a Carlyle LLP.

2.2.

This Privacy Notice (and any other documents referred to in it) sets out the basis on which we willprocess and use any Personal Data that we collect from you, that you provide to us, or that we collectfrom third parties in connection with your provision of services to us. Please read this Privacy
Notice carefully, together with any other privacy notice we may provide to you from time to time,so that you are aware of how any why we are using your Personal Data. This Privacy Notice does
not form part of any contract of employment or other contract to provide services. We may update
this Privacy Notice at any time.

3.

General

3.1.

For the purposes of the GDPR, we act as a data controller and our headquarters is located in the
United States at 1001 Pennsylvania Avenue, NW, Washington, DC 20004. As a data controller, weare responsible for deciding how we hold and use Personal Data about you. We are required underdata protection legislation, including the GDPR, to notify you of the information contained in thisPrivacy Notice.

3.2.

To facilitate international transfers of Personal Data outside the EEA, we rely on agreements thatincorporate the standard contractual clauses approved by EU Commission Decision 2004/915/EC
of 27 December 2004 (the “Standard Clauses”). As applicable, we also rely on any otherframework for transferring Personal Data from the EEA to another jurisdiction that is approved by
the European Commission as providing an adequate level of protection. Questions about or requests
for copies of these materials should be addressed to dppc@carlyle.com.

4.

Data Protection Principles

4.1.

In respect of the collection, holding, storage, use, and processing of Personal Data about current andformer employees and members (such Personal Data is held by us in both manual and electronic
records), such data must be:(a)used lawfully, fairly and in a transparent way;(b)

collected only for valid purposes that we have clearly explained to you and not used in any
way that is incompatible with those purposes;(c)relevant to the purposes we have told you about and limited only to those purposes;(d)accurate and kept up to date;(e)

kept only as long as necessary for the purposes we have told you about; and(f)kept securely.

5.

Collection of Personal Data and Sensitive Personal Data

5.1.

Personal Data. The Personal Data we request from you includes, without limitation, names(including your full name), addresses, immigration or resident status, dates of birth, telephone
numbers, e-mail addresses, occupational details, CV information (such as details of your educationand qualifications, details of your work history, including the name of your former employer, job
2

title, length of services and reasons for ceasing employment), photographs, location data, certain ID
numbers, financial account information, credit or payment card information, marital status anddependents, performance reviews, and online account user names or passwords.
(a)Certain special categories of Sensitive Personal Data about certain employees and/or members,
including, without limitation racial or ethnic data, information regarding politicalcontributions, data regarding trade union membership, certain data concerning physical ormental health or condition, and information regarding criminal offenses or related
proceedings or outcomes.

(b)

Identifiers such as your full or partial name, postal address, tax ID, passport number, internet
protocol address, email address, social security number, driver’s license number, phone
number, or other similar identifiers.

(c)

Information classified as personal or protected information by state or federal law, including
your nationality, place and date of birth, immigration or residence status, gender, marital status,and dependents.

(d)Commercial information, including tax information, financial account information, credit or
payment card information.

(e)Geolocation data.

(f)Visual information, including photographs.

(g)Professional or employment-related information, including the name of your former employer,
job title, length of services, performance reviews, and reasons for ceasing employment.

(h)Education information, including your level of education.

5.2.

Please note that it is mandatory for you to provide certain categories of Personal Data (as specified
at the time of collection). Failure to provide certain Personal Data requested by us may prevent us
from completing the verification process, which is a pre-condition of your employment with Carlyle
and/or admission as a member of a Carlyle LLP.

6.

Use and disclosure of your Personal Data

6.1.

We will only use your Personal Data in a lawful manner.
(a)

6.2.

6.3.

We will use your Personal Data for the following business purposes:(i)where we need to perform your contract of employment or membership;(ii)

where we need to comply with a legal obligation; and(iii)

where it is necessary for our legitimate interests (or those of a third party) and yourinterests and fundamental rights do not override those interests.

We also use your Personal Data in the following situations, which are likely to be rare:(i)where we need to protect your interests (or someone else's interests); or(ii)

where it is needed in the public interest.

We will only use your Sensitive Personal Data in a lawful manner.
(a)

We will use your Sensitive Personal Data in the following instances:
3

(b)

6.4.

(i)

where the processing is necessary to carry out our obligations as data controller
and exercise your specific rights in the area of employment and social security andsocial protection law;(ii)

where collecting information about criminal convictions is appropriate given thenature of the role and where we are legally able to do so.

We also use your Sensitive Personal Data in the following situations, which are likely to
be rare:(i)where the processing is necessary to protect your vital interests or the vital interestsof another individual where you are physically or legally incapable of giving
consent. This legal basis for processing is only relied upon in “life or death” typesituations;(ii)

where the processing relates to Sensitive Personal Data which are obviously madepublic by you;(iii)

where the processing is necessary to establish, exercise or defend legal claims orwhenever courts are acting in their judicial capacity;(iv)

where the processing is necessary for reasons of substantial public interest, on thebasis of Union or Member State law, which are proportionate to the aim pursued,
respect the essence of the right to data protection and provide for suitable andspecific measures to safeguard your fundamental rights and interests.

We process Personal Data as set out in this Privacy Notice, for the following purposes (among
others):(a)to assess your suitability for a vacancy with us;(b)to verify your identity, employment history, education history, qualifications and language
proficiency;(c)to carry out a background or reference check;(d)to obtain references in relation to you;(e)

to enable communications with you;(f)

to comply with applicable laws or regulations; or(g)for any other purpose that you have consented to and/or which has been notified to you on
or before the time when the Personal Data is collected.

6.5.

Some of the above purposes for processing will overlap and there may be several purposes thatjustify our use of your Personal Data.

6.6.

We will only use your Personal Data for the business purposes for which we collected it, unless wereasonably consider that we need to use it for another reason and that reason is compatible with theoriginal purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you
and we will explain the legal basis which allows us to do so.

6.7.

However, in limited circumstances, we will approach you for your written consent to allow us toprocess certain particularly sensitive data. If we do so, we will provide you with full details of theinformation that we would like and the reason we need it, so that you can carefully consider whether

4you wish to consent. You should be aware that it is not a condition of your contract with us thatyou agree to any request for consent from us

6.8.

We disclose your Personal Data only to our service providers for the performance of businessservices on our behalf.

6.9.

We do not sell your personal information and have not sold your personal information in the lasttwelve (12) months.

6.10.

If you provide to us any Personal Data relating to third parties, such as your reference(s), you will
be deemed to have authorized us to collect, use, store and process their Personal Data, in any format
whatsoever, for the purposes of obtaining a reference in relation to you and other matters requiredin order to comply with applicable laws or regulations.

7.

How we collect Personal Data

7.1.

We collect Personal Data through the application and/or recruitment process, either directly fromcandidates or sometimes from an employment agency or background check provider.

7.2.

We sometimes collect additional information from third parties including former employers, credit
reference agencies or other background check agencies.

8.

Transfer and sharing of Personal Data

8.1.

We will, where necessary, disclose and transfer (both nationally and internationally) your Personal
Data and any other Personal Data provided by you to us:

8.2.

(a)

for the purposes outlined above, to any entity that is or becomes part of Carlyle (including
any affiliates of Carlyle);(b)

for the purposes outlined above, to any of Carlyle’s third-party service providers, including
their legal advisers, credit and reference agencies, recruitment agents, information
technology service providers or service providers engaged by a member of Carlyle to assist
with human resources or other departmental functions;(c)pursuant to any applicable laws, regulations or orders issued by a court or regulatory
authority, to any legal or regulatory authority or court of competent jurisdiction; or(d)to any other third party that you have consented to the transfer or disclosure of your
Personal Data to, and/or any other third party that you have been notified of on or before
the time when the Personal Data is collected from you; such third parties include, without
limitation, your past and prospective employers, employment and recruitment agencies,
central and local government agencies and quasi-government agencies and other relevant
regulatory bodies, credit reference agencies, IT services, business partners, businessassociates, advisers, suppliers, service providers, and sub-contractors to perform any
contract we enter into with them or you.

These transferees will be subject to a duty of confidentiality and will only be permitted to use your
Personal Data in accordance with the purposes outlined above, or as permitted under applicablelaws or regulations. We seek to ensure that our affiliates and third-party service providers takeappropriate security measures to protect your Personal Data in line with our policies. We do notallow our third-party service providers to use your Personal Data for their own purposes. We only
permit them to process your Personal Data for specified purposes and in accordance with our
instructions. In no other circumstances will we transfer or disclose any of your Personal Data to
any third party, without your prior consent, unless permitted or required to do so under applicablelaws or regulations. We will take all steps reasonably necessary to ensure that your Personal Datais treated securely and in accordance with this Privacy Notice and applicable law.
5

8.3.

We have put in place appropriate technical and organizational security measures to prevent your
Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered ordisclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors
and other third parties who have a business need to know. They will only process your Personal
Data on our instructions and they are subject to a duty of confidentiality.

8.4.

We have put in place procedures to deal with any suspected data security breach and will notify you
and any applicable regulator of a suspected breach where we are legally required to do so.

8.5.

The Personal Data that we hold about you will in some cases be transferred and stored or accessed
outside the jurisdiction in which it was collected.

9.

Confidentiality and safety

9.1.

Your Personal Data held by us will be kept confidential in accordance with the applicable Handbook
and applicable Carlyle policies and procedures. We will use all reasonable efforts to ensure that all
Personal Data is kept secure and safe from any loss or unauthorized disclosure or use. All reasonable
efforts are made to ensure that any Personal Data held by us are stored in a secure and safe place,and accessed only by our authorized employees and transferees.

10.

Retention period

10.1.

We will process and store your Personal Data for at least as long as it is necessary in order to fulfil
our applicable obligations. Subject to those qualifications, our goal is to keep such data for nolonger than necessary in relation to the purposes for which we collect and use the Personal Data (werefer to the purposes as set forth above). Carlyle will retain your personal data in accordance with
our Books & Records Policy. If you have any specific question in this respect, please feel free tocontact us.

10.2.

If your application is successful and you accept our offer, your Personal Data will continue to beheld and used in accordance with the Employee and Member Privacy Notice, which will be provided
to you on or around the time that you accept the offer.

11.

You must keep your Personal Data up-to-date

11.1.

You agree to promptly inform the human resources department when any of your Personal Data is
no longer accurate or up-to-date. It is your responsibility to report any changes in status that affectyour records and benefits, e.g., a change of address, etc.

12.

Individuals’ Rights

12.1.

Individuals in Andorra, Argentina, Australia, California, Canada, Europe, Faroe Islands, Guernsey,
Hong Kong, Israel, Isle of Man, Japan, Jersey, Mexico, New Zealand, Singapore, South Korea,
Switzerland, the United Kingdom, Uruguay, and certain other jurisdictions may have certain data
subject rights. These rights vary, but they may include the right to:

12.2.

Data access. If this right applies to you, we will confirm to you whether or not we are processing
and using Personal Data about you, at your request and, if so, provide you with access to and a copyof such Personal Data and the other details to which you are entitled. You will not have to pay a fee
to access your Personal Data (or to exercise any of the other rights). However, we may charge areasonable fee if your request for access is clearly unfounded or excessive.
If we are not legally obligated to provide you with the information requested we may refuse to doso. We may need to request specific information from you to help us confirm your identity andensure your right to access the information (or to exercise any of your other rights).

6

12.3.

Rectification. If this right applies to you, we will correct any inaccurate Personal Data and complete
any incomplete Personal Data (including by providing a supplementary statement) that we holdabout you at your request. It is important that the Personal Data we hold about you is accurate andcurrent. Please keep us informed if your Personal Data changes during your relationship with us.

12.4.

Prevention of Processing Likely to Cause Damage or Distress.* 1 If this right applies to you, wewill respect your rights to require us to cease or not to begin processing your Personal Data for a
specific purpose, or in a specific way, that is likely to cause unwarranted damage or distress, either
to you or a third party.

12.5.

Erasure. If this right applies to you, we will endeavor to erase your Personal Data in certain
circumstances (for example, among other things, if the Personal Data is no longer needed for the
purposes for which it was collected or otherwise used).

12.6.

Restriction.* We will restrict the processing of your Personal Data in certain circumstances (forexample, among other things, if you believe that their Personal Data held by us is inaccurate), if
requested by you to do so.

12.7.

Data Portability. We will respect your right to receive Personal Data about you (that you haveprovided to us) in a structured, commonly used and machine readable format and to transmit such
Personal Data to another data controller without hindrance from us in certain circumstances.

12.8.

Right to Object to Sales/Processing. We will respect your general right to object to the processingof your Personal Data in certain circumstances. In particular, we have not sold and will not sell
your Personal Data.

12.9.

Right to Object to Marketing.* We will respect your rights regarding the use of your Personal
Data for direct marketing purposes. In particular, we will not begin or we will cease processing any
Personal Data of individuals for direct marketing purposes, including profiling if it is related to suchdirect marketing, if at any time you ask us not to do so.
We will usually inform you (before collecting your data) if we intend to use your data for marketing
purposes or if we intend to disclose your information to any third party for such purposes. You can
exercise your right to prevent such processing by checking certain boxes on the forms we use tocollect your data, or otherwise at any time by contacting us using the contact details set out below
in the “Contacts and Complaints” section of this Privacy Notice.

12.10. Automated Individual Decision-Making, Including Profiling.* We respect your legal rights not
to be subject to decisions that are based solely on automated processing of your Personal Data,
including profiling, especially where such processing has legal or other significant effects on you.
We inform our employees and members about any such automated decisions. Subject to certain
exceptions, we usually obtain the relevant individual’s explicit consent before making any decisions
based solely on automated processing activities and put in place appropriate safeguards to protect
their rights, freedoms and legitimate interests in these circumstances. Among other things, weensure that individuals can always obtain a review by one of our staff members of any automateddecisions and are able to express their point of view and contest any such decisions.
We will not make any automated decisions based on Sensitive Personal Data unless we haveobtained explicit consent from individuals to do so, or this is otherwise necessary for substantial
public interest reasons based on applicable law.

12.11. Consent.* In the limited circumstances where you may have provided your consent to the collection,
processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw
1

Rights marked with an asterisk are applicable only to GDPR. If you have any questions about which rights
apply to you, please contact dppc@carlyle.com.
7

your consent for that specific processing at any time. Once we have received notification that you
have withdrawn your consent, we will no longer process your information for the purpose or
purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

12.12. Non-Discrimination. Under the CCPA, you cannot be discriminated against for exercising yourrights to access or request erasure of their personal data.
12.13. If you wish to exercise any of the rights described in this notice please email dppc@carlyle.com orcall 1-855-283-9736 (Domestic US only) or +1 202-729-4800.
12.14. Individuals who submit requests for access or erasure of personal information will be required toverify their identity by answering certain questions. We will not disclose or delete any information
until identity is verified.
12.15. You may designate an authorized agent to submit a CCPA request on your behalf by providing thatagent with your written permission. If an agent makes a request on your behalf, we may still ask
that you verify your identity directly with us before we can honor the request.
12.16. Agents who make requests on behalf of individuals, will be required to verify the request bysubmitting written authorization from the individual. We will not honor any requests from agents
until authorization is verified.
12.17. We will process all Personal and Sensitive Personal Data in line with your rights, including thoseset out below, in each case to the extent required by and in accordance with applicable law only
(including, without limitation, in accordance with any applicable time limits and requirements
regarding fees and charges).
13.

Changes to the Privacy Notice

13.1.

We reserve the right to update this Privacy Notice at any time, and we will provide you with a newpolicy when we make any substantial updates. We may also notify you in other ways from time totime about the processing of your Personal Data.

14.

Contact and Complaints

14.1.

Questions, comments, requests or complaints regarding this Privacy Notice and/or our use of your
Personal Data should be addressed to dppc@carlyle.com.

14.2.

If you have any complaints regarding this Privacy Notice, you may also contact your local dataprotection authority.

8