BASIC INFO

Data Controller - Exte Technologies, S.L.

- Registered Address: calle Almagro n.º 25, 1º Izq. – 28010, Madrid.

- NIF: B10517225

 DPO Data Protection Officer: gdpr@exte.com

Purposes of processing your personal data - Manage curricular data and selection processes.

- Contact for present and future jobs.

 Retention periods: Two years from the last day of its update.

Origin - Provided by the candidate.

- Facilitated by universities, business centers, or HR consultancies.

- Linkedin

Bases of Legitimacy - The execution of pre-contractual and contractual actions.

- The legitimate interest of the Company.

Recipients of assignments All of them are necessary for the fulfilment of the purposes indicated above.

Candidate's Rights They will be exercised by e-mail: gdpr@exte.com, or at Paseo de la Castellana, 130 – 4ª planta, Madrid 28046 (Spain)

 You can exercise, where appropriate, the rights of access, rectification or erasure, limitation of processing, opposition, data portability or not to be subject to a decision based solely on automated processing, as well as to withdraw the consent given.

 You can file complaints with the Spanish Data Protection Agency: www.aepd.es, Spain's Supervisory Authority.

 More information can be found in the full Privacy Policy here in.

In accordance with the provisions of the applicable regulations on the protection of personal data, the candidate is informed that the Company will process your data as the Data Controller of personal data. In this regard, it is reported on:

1. The Purpose of the Processing of Your Personal Data

The personal data provided by the candidate at the time of applying for a job offer will be incorporated into a processing register owned by the Company in order to manage their CV data and the selection process. The Company will also process the candidate's data in the event that they have participated in a recruitment and selection process for the coverage of other current and future jobs in the Company or in other companies of the Exte Group.

2. Retention periods and quality of personal data

the Company will process the personal data for as long as the selection process in which the candidate participates is in force. Your personal data will be kept for a period of two (2) years, computed from the day of its last update.

In this sense, the candidate is responsible for ensuring that the information provided is truthful and up-to-date. The validity of the employment contract that may be entered into with any of the companies of the group to which the Company belongs will be subject to the veracity of the information provided by the candidate.

3. Legitimacy for the processing of personal data

The legitimacy for the processing carried out is based on:

• The need to ensure compliance with the potential contractual relationship that would bind the candidate to the Company, as well as the possible adoption of pre-contractual measures for this purpose.

• The legitimate interest for sending communications about new jobs.

4. Source of data

The personal data that the Company will process for participation in the selection processes have been provided by the candidate in documents or materials they may have provided or during their personal interviews, or through the means and channels offered for contact for such purposes. The candidate acknowledges and agrees that their social media profile may be consulted exclusively for professional purposes (Linkedin, etc.)

Likewise, sometimes the data may have been provided by collaborating entities, such as universities and business schools, as well as by recruitment and selection consultancies with which the Company works.

5. Assignments and recipients of personal data

The Company does not transfer personal data of candidates to third parties for the processing of the same for the purposes described. However, if necessary, they will be transferred, always on a legal basis that legitimises such processing, guaranteeing the necessary legal safeguards, and the candidate will be informed in advance.

The candidate's data may only be transferred to the companies of the Group to which the Company belongs for the purpose of filling jobs. The Company will be entitled to international transfers of data out of the EEA only to other affiliates of EXTE Group for the purposes defined in section 1; to such extent, data protection applicable laws will be complied and high security standards will be applied.

6. Candidate's Rights

The candidate may exercise before the Company, if applicable, the rights of access, rectification or deletion, limitation of processing, opposition, portability and to oppose automated individual decisions. You may also revoke your consent for a specific purpose, and you may modify your preferences at any time.

The candidate may exercise their rights at the e-mail address: gdpr@exte.com or at Paseo de la Castellana, 130 4ª planta, Madrid 28046 (Spain). You must attach a scanned document proving your identity.

The candidate is informed that they can contact the Company's Data Protection Officer for inquiries regarding the protection of personal data, by e-mail: gdpr@exte.com and submit complaints to the Spanish Data Protection Agency www.aepd.es, the Spanish Supervisory Authority.