APPLICANT DATA PROTECTION NOTICE

This Data Protection Notice aims to give applicants applying for a job with Supernova UK Pty Ltd. ("Supernova") OR applicants located in the European Economic Area ("EEA") applying for a job with Supernova Pte. Ltd. or any of its affiliates ("Supernova") information on how their personal data are processed by Supernova when they apply for a role or vacancy with Supernova. For the purposes of UK data protection laws, Supernova is the controller of applicants’ personal data.

Data That May Be Collected. Supernova may collect certain personal data with respect to applicants both directly from the applicant and in certain cases via a third party recruiter or platform such as LinkedIn including, without limitation: (i) contact information (e.g., name, address, phone number, email address); (ii) personal information (e.g., date of birth, nationality); (iii) employment and education history; and (iv) any other information which may be voluntarily disclosed by the applicant in the course of the application process.

Purpose and Legal Bases for Processing Applicant Personal Data. Supernova processes applicants’ personal data for the purpose of carrying out the application process and where in Supernova’s legitimate interest for business management purposes. Should Supernova enter into an employment contract with an applicant, Supernova may process the personal data as necessary for the performance of the employment contract, as required by law, and where in the legitimate interests of Supernova for the performance of the employment relationship. In that case Supernova will provide further notification to the applicant about the processing of their personal data as an employee. Applicants have a right to object to processing of their personal data where that processing is carried out for Supernova’s legitimate interest.

Disclosure to Certain Third Parties. Supernova may disclose certain personal data for the above purposes to the following recipients: (i) to its affiliates (including Supernova Pte. Ltd. in Singapore), service providers (e.g., IT service providers) and advisors; (ii) to fraud prevention agencies and law enforcement agencies; (iii) to courts, governmental and non-governmental regulators and ombudsmen; or (iv) as required or permitted by law, including to comply with a subpoena or similar legal process or government request, or when Supernova believes in good faith that disclosure is legally required or Supernova has a legitimate interest in making a disclosure, such as where necessary to protect Supernova’s rights and property.

Transfer of Personal Data Outside the EEA. Supernova may disclose applicants’ personal data for the above listed purposes to recipients located in countries outside of the European Economic Area ("EEA"), including in Singapore and the U.S., which may not have data protection laws equivalent to those in the EEA. Supernova has entered into intra-group EU standard contractual clauses ("Model Contracts") for transfers of personal data to non-EEA affiliates. Applicants can request a copy of the Model Contracts by contacting Supernova as set out below. Where Supernova transfers personal data to other recipients outside of the EEA, Supernova will enter into Model Contracts with the recipient or seek assurances from the recipient that they are EU-U.S. Privacy Shield certified or have Binding Corporate Rules in place.

Rights of Applicants. Under UK data protection laws, applicants have a right to (subject to a limited number of exceptions): (i) request access to and rectification or erasure of their personal data; (ii) obtain restriction of processing or to object to processing of their personal data; and (iii) ask for a copy of their personal data to be provided to them, or a third party, in a digital format. Applicants also have the right to lodge a complaint about the processing of their personal data with the data protection authority.

Retention. Supernova will retain applicant personal data for no longer than is necessary for the purposes for which Supernova is processing such personal data and as follows: (i) for the duration of the application process; (ii) if the application was unsuccessful, after the notice of rejection, for 6 months; (iii) with the applicant’s consent in accordance with the period of time consented to; and (iv) in case of a legal or regulatory obligation requiring Supernova to retain specific records for a set period of time, for that period of time.

Enquiries, Requests or Concerns. All enquiries, requests or concerns regarding this Notice or relating to the processing of applicant personal data including all requests as detailed in the Rights of Applicants Section above, should be sent to [email protected].