PRIVACY POLICY FOR JOB APPLICANTS

Controller of your data is the societe anonyme company under the name “ALUMIL ALUMINIUM INDUSTRY SA”, seated in the Industrial Area of Stavrochori-Kilkis as legally represented, with the following telephone number +302341079300 and e-mail address [email protected] (“the Company”). The above Controller Company has appointed a Data Protection Officer with contact e-mail [email protected]. In the above e-mail address of the Data Protection Officer, you can address all requests for exercising all of your below mentioned rights (under 8).

To apply for a job position at ALUMIL Group, you must register on the ALUMIL - Current Openings Application Platform by filling out the respective form with your necessary personal data and uploading your CV. The Company does not consider resumes sent via email.

As part of the selection and recruitment process, the Company processes the data:

• You submit as part of your application,
• As well as any data contained in the attached documents (e.g., your CV).

For these purposes, the Company collects only the personal data you provide or those necessary based on the form to be completed. When connecting to our company’s social media account or participating in our activities (e.g., comments, liking, or sharing), the Company has access to your social network identity and the relevant details you have provided. This access is governed by the mechanisms of the social media platforms and the privacy policies they follow. The Company also collects personal data you provide during career days visits. Finally, your data is collected through your attached documents such as cover letters, CVs, and reference letters. When submitting your application, please avoid submitting sensitive personal data (such as health information, religious and political beliefs, etc.) as part of your application.

The categories of personal data the Company processes in relation to your application include:

• Personal details and contact information (e.g., name, address, email address, and phone number)
• Other information (e.g., foreign language knowledge, cover letter, hobbies, interests)
• Educational and work experience history.

The Company processes your personal data in relation to your application for the purpose of recruitment and specifically for:

• Processing of your application, including review and analysis of your skills and qualifications, as well as an overall evaluation of your suitability for the job position.
• If your application is successfully evaluated, your personal data will be processed in connection with the establishment of an employment relationship with the Company, in accordance with the specific terms of your contract and applicable law.
• If your application is evaluated negatively, the Company may evaluate your suitability for any other current or future employment opportunities that are available and for which you may be deemed suitable, provided that you have given your consent. In any case you shall have the right to withdraw your consent at any time.

The legal basis for personal data processing is recruitment and performance of the potential contract of employment, including steps prior to that, such as submission of cv, identification and communication with you [Articles 6(1)(b) and 88 of the EU Regulation on the protection of personal data (“GDPR”)]. Moreover, processing of personal data is necessary for compliance with a legal obligation to which the Company is subject or/and for the purposes of the legitimate interests pursued by the Company except where such interests are overridden by your interests or fundamental rights and freedoms. Your consent to processing of your data, in order to fulfil the above-mentioned relevant purposes, constitutes also a legitimate basis of this processing.

We assure you that the Company shall take any technical and organizational data protection means and shall make only the optimum, minimum and absolutely necessary use and processing of your data, as defined by the law, and strictly and exclusively for the purpose for which you have provided them to us.

Υour data shall be exclusively processed by and transferred to the Human Resources Department of the Company. However, there are cases when processing of personal data by third parties is necessary within the framework of our mandatory compliance with the national legislation and to the extent (and given) that it is necessary. The Company transfers your data to: (a) the competent tax authorities, labor inspectorate and insurance bodies and (b) the service providers for our Company’s electronic systems and networks – and for the sole purpose of the performance on their behalf of the contract to support our Company, (c) the hosting service provider for the "Workable" website for submitting your CV, and (d) to recruitment agencies. These providers have provided guarantees for the implementation of measures to protect your personal data, and the processing of your personal data is described in more detail in their privacy policies. Additionally, personal data may be transmitted to Public Authorities and Independent Authorities (such as Tax Authorities, EFET, Health Authorities, the Independent Authority for Public Revenue, Ministries), in order to comply with the law, judicial decisions, instructions, requests, or their decisions.

In order to fulfil the above-mentioned purpose of the processing we consider it reasonable and necessary to store your relevant personal data for a period of eighteen (18) months upon submission of your application and, in any case, as long as it is necessary according to national legislation. Following that period, the relevant data shall be permanently deleted, unless you provide us anew with your consent under the above conditions.

Without prejudice to the applicable law, you shall have the following rights:

• Right to be informed and access: You reserve the right to request information in relation to the personal data which we have received from you and we maintain for the above-mentioned purposes
• Right to rectification: You reserve the right to request from our Company rectification of your personal data, in case any of the data that we have the right to process has been altered or incorrectly submitted.
• Right to erasure: You reserve the right to request from our Company the complete or partial erasure of your personal data that we are entitled to store and process, either because they are no longer necessary for the purposes for which they were collected, either because you withdraw your consent, or because your data were collected for a purpose that you consider illegal.
• Right to restriction: You reserve the right to request from our Company to restrict the processing of your personal data, in terms of quantity, time or in relation to the purpose of their processing.
• Right to portability: You reserve the right to receive the personal data you have provided us with, in a structured, commonly used and machine-readable format, as well as the right to transfer them further without objection, given that the processing is being carried out on the grounds of your consent.
• Right to object: You reserve the right to object to the use of your personal data for legal purposes unless we have compelling legitimate grounds for the processing that override your interests, rights, and freedoms; or we need to continue processing your personal data to establish, exercise, or defend a legal claim.
• Right to revoke your consent: You shall have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

For each of the above-mentioned rights that you exercise, the Company will reply within one (1) month from the receipt of the request or in the case of objective difficulties, complexity of the request or the number of requests, the Company shall respond, within a maximum period of three (3) months in total, either by accomplishing your request or by justifiably refusing to perform what you have requested for legitimate reasons expressly specified in GDPR. You reserve the right to withdraw your previously given consent at any time by submitting a relevant written request to the e-mail address of the Data Protection Officer [email protected].

The present may be revised in case of changes in the Company’s activities or legislation. Any updates to the revision will be notified at the beginning of this document.