CANDIDATE PRIVACY STATEMENT

Updated on November 10, 2023

We are thrilled to have you as part of CHERY Corporation and its subsidiaries, joint ventures, and affiliates (“we” or “Company”). Your privacy is of utmost importance to us, and we are committed to protecting your privacy.

This Recruitment Information Notice (“Notice”) is a notice that describes broadly how we collect information relating to Candidates through our online recruitment system on a website on our domain, the exact website link of which may change from time to time (the “Site”) and through other means, as well as how we process and potentially use such information. The Company acknowledges that the laws of certain jurisdictions may restrict, limit, or prevent, either in whole or in part, the Company from collecting, processing, or using such information in the manner described below. Accordingly, in the event that any portion of this Notice conflicts with applicable federal, state, local, or other law(s), such law(s) shall supersede and govern. Similarly, the Company will not collect, process, or use any such information in a manner that violates any applicable federal, state, local, or other law(s).

The purpose of this Notice is to make you aware of how the Company will Process Personal Data that we obtain about Candidates through the Site and other means. Please refer to Annex 1 for details of the data controller of the Personal Data if you are based within the European Economic Area and the UK or the work location of job listings, we publish on the Site is within the European Economic Area and the UK.

We will try our best to provide you with all information in a clear and readable format. However, if you have any questions about our use of your Personal Data after reading this Notice, please contact our DPO at cheryinternational@mychery.com.

1. What personal data do we collect?

The Company processes the Personal Data of Candidates, as necessary to evaluate a Candidate’s application for employment and for our legitimate business interests relating to processing and considering a Candidate’s application to join the Company.

(a)The categories of Personal Data collected by the Company through the Site and via other means include the following:

Contact information: your name, email address, telephone number, home address Personal details: Gender, date of birth, Nationality and immigration status Employment and education information: previous employment history and positions held, qualifications, attendance at educational establishments and training received Background check information Resume details, cover letters, or work samples Competency assessments Current salary, and desired salary

(b)From Third Parties

We may obtain information about you from other sources to the extent permitted by applicable law, in connection with your application and as part of the interview process.

We may obtain information through your contact with us from third parties such as referees, identity verification, and background check service providers. You may also choose to provide us with access to certain Personal Data stored by third parties on professional social media sites, such as LinkedIn, and recruitment agencies.
The processing of your data is based on legitimate interests.

(c)Special Categories of Personal Data Collected

In general, we do not require Candidates to provide Special Categories of Personal Data, such as information about your health, race, ethnicity, religion, or sexual orientation or data relating to offences, criminal convictions or security measures, or any other data identified as such under applicable local laws.

We process Special Categories of Personal Data solely when there is a legal obligation or when we have obtained your explicit consent for processing such data. In those instances, we will notify you and, if necessary, according to the law, request your explicit consent for processing such data. It is important to note that your contract with us does not mandate your agreement to any consent requests made by us. Processing of the following Special Categories will only be carried out by the Company where permitted by law and in the following circumstances:

Criminal convictions - only where information relating to a Candidate’s past criminal convictions would be directly relevant to determining his or her fitness and suitability for a particular position, where relevant to potential or ongoing litigation or legal proceedings that could impact the Candidate’s future employment relationship with the Company or where necessary to satisfy the Company’s obligations arising under health and safety or other applicable laws. Where the Company intends to obtain information relating to a Candidate’s commission of past criminal offences, the Candidate shall be notified beforehand;

Health information or drug screening checks - to comply with occupational health and safety laws and or regulations or when necessary to manage and administer leave or absences, or to make or consider making reasonable adjustments.

In some jurisdictions, explicit consent may be required in terms of collecting and processing of Special Categories of Personal Data. In this case, Special Categories of Personal Data shall only be processed by the Company provided that you give your consent and that the processing of Special Categories of Personal Data is precisely justified by the particularities of a position.

2. How we use your Personal data

We may use your Personal Data in our recruitment process and human resources management purposes at a global level, including:

Carrying out and supporting human resources functions and activities, including assessing your qualifications, skills, and interests against our career opportunities; Facilitating the recruiting and interview process, including communicating with you about your application; Salary negotiation; Preparing an offer letter and your onboarding process, if your application is successful; Verifying the information, you or others provide and carrying out reference checks or conducting background and other pre-employment checks to the extent permitted by applicable law; Complying with applicable laws, regulations, legal processes, or enforceable governmental requests.

If you are offered and accept employment with us, the information collected during the application and recruitment process will become part of your employment record.

3. How we share your personal data

The Personal Data obtained through the Site and via other means may be shared across the Company and our subsidiaries and affiliated companies, where necessary for legitimate business purposes relating to the recruitment of the Candidate or to comply with applicable legal requirements. The Company may also share Personal Data with third-party service providers (e.g. background check providers) that it has retained to perform services on its behalf or for legal/regulatory purposes. Where Personal Data is disclosed to third parties, appropriate safeguards shall be implemented to ensure that the data will be Processed legitimately and protected appropriately. Compliance with laws or any competent law enforcement body, regulatory body, government agency, court or third party: We may disclose information where we believe disclosure is necessary or required by law or regulation, to comply with legal process or government requests (including in response to public authorities to meet equal opportunity laws, national security or law enforcement requirements); or to exercise, establish or defend our legal rights. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, dissolution, corporate reorganization or similar event. We will inform any buyer that your information shall only be used in accordance with this Notice. Any other person with your consent to the disclosure.

4. For which purposes and on what grounds do we process your personal data?

Our legal basis for processing your Personal Data, in the ways described in this Notice, include:

As necessary to prepare and enter into an employment contract with you; Consistent with specific consents, which you may revoke at any time; As necessary to comply with our legal obligations; To protect your vital interests or those of others; As necessary for our (or others’) legitimate interests, including our interests in considering candidates for current and future employment opportunities, and in managing and improving our recruitment and hiring processes, unless those interests are overridden by your interests or fundamental rights and freedoms, which require protection of Personal Data.

5. International transfers of your personal data

As a global organization data, we collect may be transferred internationally throughout our worldwide organization. By providing Personal Data for any of the purposes of recruitment, you acknowledge that your Personal Data may be transferred to or stored in China.

We transfer your personal data in accordance with legal frameworks required in different jurisdictions. Recipients of your personal data must agree to at least the same level of privacy safeguards required by applicable data protection laws. We rely on the following agreements:

EEA Standard Contractual Clauses (SCCs); and UK International Data Transfer Agreement (IDTA)

If you require further information about our international transfers of personal information, please contact us by using the contact details at the bottom of this Notice.

6. How are your personal data secured?

We have taken adequate safeguards to ensure the confidentiality and security of your Personal Data. We have implemented appropriate technical, physical and organizational measures to protect Personal Data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing.

7. How long we keep your data?

We'll retain your Personal Data for as long as required to comply with our legal obligations, resolve disputes, and enforce our contractual agreements, or as necessary for our legitimate interests, such as to consider you for other current and future employment opportunities in the Company.

If you're successful in your application for a position in the Company, we retain the information that you provide during the application process, and information about your application process, as part of your employee records.

If you do not want us to retain your information for consideration for other roles, or want us to update it, please contact us by using the contact details at the bottom of this Notice. Please note, however, that we may retain some information if required by law or as necessary to protect ourselves from legal claims.

8. How can you exercise your privacy rights

You are entitled to ask us for an overview of your Personal Data or ask for a copy. In addition, you may request us to correct or delete certain data, restrict processing of your data, or ask us to transfer some of this information to other organisations. In some cases you may object to the processing of your Personal Data and where we have asked for your consent to process Personal Data, you can withdraw this consent at any time.

You can exercise your rights by contacting our DPO at cheryinternational@mychery.com, and you also have the right to make a complaint to the data protection authority or to seek a remedy through the courts if you believe your rights have been infringed.

If you believe that your data protection rights have not been respected, you are encouraged to bring this to the attention of DPO.

9. Changes to this Notice

We will review and update this Notice periodically in response to changing legal, technical, and business developments. When we update this Notice, we will note the date of its most recent revision above. If we make material changes to this Notice, we may take appropriate measures to inform you in a manner that is consistent with the significance of the changes we make.

10. How can you contact us or lodge a complaint?

If you have any questions about the way we process your Personal Data, please read this Notice first. For additional questions please contact our DPO at cheryinternational@mychery.com. Please note that we take your satisfaction very seriously. Should you have a complaint, please also direct it to the same email address and we will respond to you as soon as we can.

If we are unable to resolve your concerns, you can of course also lodge a complaint with your local data privacy supervisory authority.

Annex 1

The following companies are controllers of Personal Data within the European Economic Area or UK:

CHERY Corporation can be reached via the following contact details:
Mailing address: Kingsfordweg 151,1043GR Amsterdam Email address: cheryinternational@mychery.com