Careers Privacy Notice We are committed to protecting and respecting your privacy. What is the Purpose of this Notice? 1.1 The United Group Ltd. (the “COMPANY”) is committed to protecting the privacy and security of your personal information,the company can be contacted on telephone number 23388000. 1.2 This privacy notice describes how the COMPANY collects uses and manages your personal data and shall apply with respect to all information provided and collected during the careers selection and recruitment process, in accordance with the General Data Protection Regulation 2016/679 and any applicable data protection laws. 1.3 The term “personal data” or “personal information” refers to all personally identifiable information about you and includes all the information incorporated into your curriculum vitae (CV) and information provided in the Careers Online Form, as well as all other information relating to you which is provided by an employment agency and/or background check provider and/or other third parties including former employers, referees or collected from publicly available sources. 1.4 Failure to provide the necessary information requested, will not allow the COMPANY to carry out the recruitment process. 1.5 All your personal data collected shall be processed exclusively for the purposes of the recruitment process. In the event that you are employed, the information will be retained and shall be subject to the Privacy Notice to Employees which shall be communicated upon employment. We may ask for your consent for the COMPANY to retain personal information beyond the recruitment process in the event of non-employment. 1.6 In addition to the above, COMPANY may process your personal information without your knowledge or consent where this is required or permitted by law. 1.7 This notice is not intended to form any contract of employment or other contract for you to provide services to the COMPANY. We may update this notice at any time but if we do so, we will provide you with an updated copy of this notice as soon as reasonably practicable. 1.8 It is important that you read and retain this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information and what your rights are under the data protection legislation. Recruitment and Selection 2.1 Information collected from you: The COMPANY will collect and process some or all of the following types of personal information directly from you: Personal details such as name, email address, residential address, date of birth, qualifications, experience, information relating to your employment history and employer references, skills and experience that you provide to us, compensation history and photographs; Correspondence, should you contact us; Generally, all information that you provide when you apply for a role, including information provided via email, in person at interviews and/or by any other method; and Special categories of information including but not limited to information about your health, including any medical condition, ill-health, injury or disability and Information about criminal convictions and offences, according to law. 2.2 Information collected from third parties and other sources: 1 The COMPANY will collect and process some or all of the following types of personal information about you, sourced from third parties and other sources: Personal details such as name, email address, residential address, date of birth, qualifications, experience, information relating to your employment history and employer references, skills and experience, compensation history and photographs that are provided to the COMPANY by an independent employment agency; Any personal information that is provided to the COMPANY by a common acquaintance, including contact details and other information provided by you through the common acquaintance; Information collected through internet searches and other publicly available information about you, including but not limited to LinkedIn and other social media platforms to perform due diligence on candidates in the course of recruitment and to determine suitability for the vacant role. Where the COMPANY carries out internet searches, it will act in accordance with data protection obligations; and Special categories of information including but not limited to information about your health, including any medical condition, ill-health, injury or disability and Information about criminal convictions and offences. Processing of the candidates personal information by third parties is subject to such third parties’ privacy notices. The COMPANY provides its privacy notices to all third party service providers.3 2.3General The COMPANY may also be required or have a legitimate interest to ensure that all prospective employees and/or potential candidates are entitled to work in Malta and/or be able to travel abroad. Assumptions about immigration shall not be made based on appearance or apparent nationality. All prospective employees, regardless of nationality, must be able to produce original documents (such as a passport and identity cards) during the recruitment process and at any time prior to the commencement of employment. Subject to the requirements and/or legitimate interests of the COMPANY, provision of information relating to race or ethnicity, religious beliefs, sexual orientation and political opinions is voluntary and it will not adversely affect an individual’s chances of recruitment or any other decision related to their employment. If provided, such information shall be kept in an anonymised format solely for the purposes of helping us to take appropriate steps to avoid discrimination and improve equality and diversity. 3. Lawful Basis and Purposes for Processing 3.2 The COMPANY relies on legitimate interest as the lawful basis on which we collect and use your personal data being the recruitment of staff for our business. We use information held about you in the following way: To consider your application in respect of a role for which you have applied or for which the COMPANY has a vacancy; To consider your application in respect of other roles; To communicate with you in respect of the recruitment process; To enhance and verify any information that we receive from you with information obtained from third party data providers; Compliance with our legal obligations; and / or To find appropriate candidates to fill our job openings. 3.3 In addition to the above, our legal bases for processing special categories of your personal data, if applicable, would include: Carrying out our obligations and specific rights in the fields of employment (insofar as authorised under applicable law); the establishment, exercise or defence of legal claims; and / or Protection of your interests. 4. Data Security and Data Retention Security 4.2 We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees who have a genuine business need to view it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. 4.3 We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. 4.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk. Retention 4.5 We will only retain your personal information for as long as necessary to fulfil the purposes the recruitment process. 4.6 We may request your consent for the COMPANY to retain your personal data with a view to a further job opportunity, in the event that you are not employed with the COMPANY. Where consent is granted, information shall not be retained beyond six (6) months. Where consent is not provided we will retain your personal data for as long as it is necessary, and where it is essential to store information and data submitted for a job application for the purpose of bringing or defending legal actions or any other legitimate purpose, the data will be stored only for the period necessary for the fulfilment of such purpose. General 4.7 For as long as the COMPANY will retain your personal data you may, under certain circumstances by law you have the right to: Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below). Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it. Request the transfer of your personal information to another party. 5. Right to Withdraw Consent 5.1 Where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact Data Protection Officer. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate or legal basis for doing so. 6. Automated Decision-Making and Profiling 6.1 Your personal data will not be used for any decision solely taken on the basis of automated decision-making processes, including profiling, without human intervention. 6.2 In the interest of transparency, note that We use systems which could profile you. Such systems are used by Us exclusively to help Us [enter description of how such profiling helps the company]. As stated, no automated-decision will result from Our use of such systems. 7. Recipients 7.1 We may share your personal data with third party recipients who are: selected individuals within our COMPANY, on a need-to-know basis; any service providers that may have access to your personal data in rendering Us with their support services, including IT; and third parties to whom disclosure may be required as a result of your application such as referees or local authorities; any business partners to whom you may have requested that we transfer your personal data; and third parties to whom disclosure may be required as a result of legal obligations imposed on Us. 7.2 Unless specifically instructed and consented by you, we do not share your personal data with any entity located outside of the EU or EEA. 8. Data Protection Officer 8.1 We have appointed a Data Protection Officer to oversee compliance with this recruitment privacy notice. If you have any questions regarding this privacy notice or how we handle your personal information, please contact the Data Protection Officer by sending an e mail to dpo@unitedgroup.com.mt or by calling on number 23388000 and ask for the Data Protection Officer. You have the right to make a complaint at any time with the Office of the Information and Data Protection Commissioner in Malta (www.idpc.gov.mt). 1 Processing of the candidates personal information by third parties is subject to such third parties’ privacy notices. The COMPANY provides its privacy notices to all third party service providers. News Careers Careers Privacy Notice Privacy Notice Disclaimer © 2021 — United Group of Companies.