CANDIDATE PRIVACY POLICYEUROPCAR MOBILITY GROUP UK & IRELAND
GeneralWelcome and thank you for your interest in Europcar Mobility Group UK and Ireland (“Europcar”). This
policy sets out the types of personal data we process as part of our recruitment procedures and thepurposes for which we use the data. By personal data, we mean information that identifies you either
directly or indirectly. This policy applies to applications made via the Careers section of our websites(Europcar.co.uk, Europcar.ie and gocar.ie), via a third party employment site and via an employmentagency.
If you are applying for a position in the UK, Europcar Group UK Limited (company registration number1089053) whose registered office is at 1 Great Central Square, Leicester LE1 4JS, United Kingdom, isthe data controller and is responsible for the processing of your data collected in relation to its
recruitment procedures.
If you are applying for a position in the Republic of Ireland, either Executive Trust Limited (companyregistration number 22423) or Gocar Carsharing Limited (company registration number 475845), bothhaving their registered office at 35 Northwood Court, Northwood Business Park, Santry, Dublin 9,Republic of Ireland, is the data controller and is responsible for the processing of your data collected inrelation to its recruitment procedures.
Categories of personal data
You do not need to supply us with any personal data to simply browse the Careers section of ourwebsite. You should be aware that we may use cookies whilst you are viewing our website. Cookies
serve to make the website more user-friendly, more effective and safer overall. For more information
on how we use cookies on the website, please click here to view our Cookie Policy.
On the Careers section of the website, we offer you the opportunity to apply for one of our vacancies
quickly and easily by uploading your CV onto the website in response to a job advert. When you apply
for a position via a third party website or agency, that third party organisation will forward any personal
data you supply to them, which will usually be in the form of a CV.
Regardless of the way in which you apply for a position with us, we will process some or all of thefollowing categories of personal data as part of your application:

a. Identification Data, including, surname, first name, postal or home address, date of birth,

national insurance number (in the UK) or personal public service number (in the Republic ofIreland).
b. Communication Data, including, e-mail address, home telephone number, mobile telephone
number, communication preferences (e.g. e-mails, letters, text message).
c. Education and Training Data, including where relevant, information about your school anduniversity education, including results obtained, as well as further training, both academic andvocational.
d. Professional and employment information, including your CV, details of past positions held,experience, qualifications gained in the workplace, details of referees, etc.
e. Details of the type of employment you are looking for (current and/or desired position, salaryand other job preferences).
f. Other information collected during interviews and from referees, if your application proceeds.
We would advise you to seek consent from any individual whom you would like to act as areferee before providing their details to us as part of your application. You should also informthem that we may contact them at any point in the application process.
g. Results of a basic Disclosure and Barring Service (DBS) check, as well as the result of crosschecking your name against our internal “Do Not Rent” list (UK only).

Date issued: 3August 2023

CANDIDATE PRIVACY POLICYEUROPCAR MOBILITY GROUP UK & IRELAND
h. Voluntary information that you provide to us on a voluntary basis without us expressly askingfor it.

i. Special categories of data such as your nationality.
j. Our IT systems also record the IP address (a numerical label assigned to each device

connected to a computer network that uses the Internet Protocol for communication) accessing
our website.

Purposes of data processing and legal basis for processing data at Europcar
We collect and process your Personal Data for the following purposes and on the following legal bases:
Purposes of the processing
Assess your skills, qualifications andexperience in line with the position for which you
have applied
Communicate with you about the recruitment
process and your application
Check information provided by you andverifying your qualifications and references

Legal basis for the processing
This processing is based on contract. In otherwords, because you have asked us to review yourjob application prior to potentially entering into acontract of employment with you.

Checking results of DBS checks and checking
your name against our internal “Do Not Rent”
list

This processing is based on our legitimate
interest in verifying that you do not have any
criminal convictions which would make you
unsuitable for employment and to minimise risk ofinternal fraudThis processing is based on your consent

Contacting one or more individuals whose
details you have provided as your referees
Keep you updated on other potential career
opportunities at Europcar

This processing is based on our legitimate
interest in checking the information provided by
you and to check your references

This processing is based on your consent for yourCV to be retained by us and to be and to becontacted for future opportunities at Europcar

International Sanctions checks
In addition to the processing activities above, we also use your data to check that you are not recorded
on a Sanctions List (namely any list of designated individuals against whom financial, economic orimmigration sanctions or other restrictions have been imposed, as issued and amended from time totime by any of the following bodies:a. the U.S. government, including OFAC’s list of Specially Designated Nationals (or “SDNs”) andBlocked Persons and lists maintained by the U.S. Department of State;b. the United Nations Security Council;
c. the European Union and any Member State (including the EU’s consolidated list of persons
subject to EU financial sanctions); andd. the United Kingdom (including the consolidated list of financial sanctions targets issued by theUK’s Office of Financial Sanctions Implementation (“OFSI”)).
This processing is necessary to meet our legal obligations and in the “legitimate interest” of Europcar
in ensuring that it is compliant with the International Sanctions regime.
Transmission of data by Europcar
I. Categories of recipientsYour personal data may be communicated to:Date issued: 3August 2023

CANDIDATE PRIVACY POLICYEUROPCAR MOBILITY GROUP UK & IRELAND
a. our employees. The data you have provided is only accessed by Europcar employees involvedin the recruitment process, including our HR teams and the relevant people within the businessinvolved in recruitment of the specific role.
b. our subcontractors, in particular our applicant management system, which is provided andmaintained by Broadbean (based in the European Union) and our IT service providers, forhosting, maintenance or development purposes.
c. third parties, for example to carry out DBS checks.
d. other group companies if your application relates to a job offer within a different company in
the Europcar Mobility Group.
Except as set out above, we do not share your personal data with any external third parties, unless weare required to do so, under any legal or regulatory obligation.
We want to make you aware that automated decision-making, in particular a decision about yourapplication or profiling, does not take place. This processing is based on the execution of precontractual measures adopted at your request and is necessary to enable us to process yourapplication.
II. Transmission of data
All information that you provide in the context of an application to Europcar is transmitted, stored andsecured in our applicant management system in encrypted form. Europcar uses technical andorganizational security measures to protect your stored data against accidental or intentional
manipulation, loss, destruction or against access by unauthorised persons. The security measures arecontinuously improved in line with technological developments.
The application process does not involve transfers of personal data to countries outside the European
Economic Area.
Duration of storage of personal data
Purposes of the processing
Assess your skills, qualifications andexperience in line with the position for which you
have applied
Communicate with you about the recruitment
process and your application
Check information provided by you andverifying your qualifications and references

Data Retention Period
If you are offered a position at Europcar, we willretain your information provided during theapplication and recruitment process as part ofyour employee record.
If the application process has been completed
and a rejection decision has been made, we willstore this information for a period of six months
and then delete it.

Checking results of DBS checks and checking
your name against our internal “Do Not Rent”
list
Contacting one or more individuals whose
details you have provided as your referees
Check that you are not recorded on a sanctions
list (namely any list of designated individuals)

Date issued: 3August 2023

5 years from the date of the sanctions list checkCANDIDATE PRIVACY POLICYEUROPCAR MOBILITY GROUP UK & IRELAND
Keep you updated on other potential career
opportunities at Europcar

Six months from the date of your consent to retain
your details. After six months, all CVs andapplications are routinely destroyed.

The only exceptions to the above storage periods are:a. If Europcar is legally obliged to store personal data, it will be stored for the duration of the legal
obligation; andb. anonymized data (where data relating to specific individuals cannot be identified) which iscreated as part of the application process (e.g. duration of the application process, result of theapplication process).
Your rights and how to exercise them
You have the right to request information regarding the personal data we hold about you and how we
use and process that data. You may also request that we correct, update, restrict, limit or delete yourpersonal data, as well as withdrawing your consent to the processing of some or all of your data at anytime. When making any request in relation to your personal data, please ensure that you include
information to identity yourself, such as your full name, contact details, the position for which you appliedfor, the date you submitted your application and date of interview (if applicable).
For more information regarding how to exercise these rights, as well as how to complain to theInformation Commissioner’s Office (which is the supervisory body for data protection in the UK) or the
Data Protection Commission (which is the supervisory body for data protection in the Republic ofIreland) regarding our processing of your data, please see sections 6 and 7 of our general privacy policy
which can be accessed by clicking here.
Changes to this Privacy Policy
We reserve the right to change this policy at any time in order to reflect the changes in our practices
and also to remain compliant with applicable data protection laws and regulations. The policy was last
updated on 3 August 2023.
Further questions
If you would like to know more about the provisions of this privacy policy or to contact our Data
Protection Officer (for the UK and Ireland), you can write to the Director of Legal Services, Europcar
Group UK Limited, 1 Great Central Square, Leicester LE1 4JS, United Kingdom, or send an e-mail todpo@europcar.com.

Date issued: 3August 2023