Information Security Lead (OT Security, Video Data Privacy & SOC 2)

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR) (OJ EU. L. 2016 No. 119, p. 1), I hereby inform you that The data controller of your personal data is Transition Technologies MS S.A. with its registered office in Warsaw (00-801), ul. Chmielna 69 (hereinafter: The Data Controller). The Data Controller can be contacted at the following telephone number: +48 22 378 45 58 or by e-mail: rodo@ttms.pl. Personal data will be processed for the purposes of carrying out the recruitment process. The Controller processes personal data required under the Polish Labour Code or other provisions of law (including your name, surname, date of birth, contact details, education and professional experience) in order to comply with its legal obligations (Article 6(1)(c) GDPR). Personal data necessary to take steps at your request prior to entering into an employment contract or a civil law contract is processed because it is necessary to take such steps (Article 6(1)(b) GDPR) and providing it is required in order to participate in the recruitment process. If you voluntarily provide the Controller with other personal data that is not required by law and not necessary to take steps prior to entering into a contract (for example, your photo, interests or additional information), such data will be processed based on your consent (Article 6(1)(a) GDPR); refusal to give consent does not affect your ability to participate in the recruitment process. In addition, your personal data may be processed in order to establish, pursue or defend potential claims related to the recruitment process, which constitutes the Controllers legitimate interest (Article 6(1)(f) GDPR). In connection with your participation in the current recruitment process, your personal data will be processed by the Controller for a period of 12 months from the date the recruitment process you applied for is completed. This period may be extended only where necessary to establish, pursue or defend claims related to the recruitment process (for example, in the event of a dispute), until the relevant limitation periods expire or the proceedings are finally concluded by a final and binding decision. If you give your consent (Article 6(1)(a) GDPR) to the processing of your personal data for the purpose of participating in future recruitment processes organised by The Data Controller, your personal data will be included in a database and stored for a period of 24 months from the date of submission of the electronic form with attachments. If you wish to consent to participate in our future recruitment processes, this consent is also voluntary. If you do not wish The Data Controller to process any additional data about you, please do not include it in your documents, including the electronic form. Recipients of your personal data may include: Traffit Sp. z o.o. (the provider of the recruitment system we use) and other service providers we engage in connection with running the recruitment process and ensuring its operation, in particular providers of IT maintenance and support, hosting and email services, communication tools (for example, video calls), recruitment support, as well as providers of competency tests or assessments, where used in a given recruitment process. Access to your data may also be granted to the Controllers authorised employees and contractors involved in the recruitment process. Your personal data may also be shared with other companies within our corporate group where this is necessary to carry out the recruitment process (for example, where recruitment is conducted jointly or the role relates to another group company). Processors acting on our behalf process personal data under data processing agreements and solely in accordance with our instructions. You have the right to access the content of your personal data, as well as the right to correct, delete, restrict processing, request data portability, object to the processing of your personal data, and withdraw your consent to its processing at any time (without affecting the lawfulness of the processing carried out on the basis of the consent given before its withdrawal). A declaration of withdrawal of consent to the processing of personal data must be sent in writing to 69 Chmielna St., 00-801 Warsaw, with the reference GDPR, or by e-mail to: rodo@ttms.pl, specifying the consent to which it relates. In order to effectively carry out recruitment processes and to select candidates best suited for a particular position, The Data Controller may use procedures based on profiling. Profiling consists of assessing (analysing or predicting) your qualifications, skills, aptitudes or other characteristics that are relevant to the selection of a candidate for a specific job. In any case, the assessment does not lead to automated decisions regarding your participation in the recruitment or the results of the recruitment. The Data Controller shall use profiling in the following cases (a) Conduct competency testing: The Data Controller assesses your qualifications, competencies, skills and suitability for a particular job. The assessment is based on test results. We will only conduct testing and profiling for this purpose with your consent (legal basis: Article 6(1)(a) GDPR); (b) analysis of candidates in Traffit: using various search filters and candidate labels, candidates are assessed in terms of their qualifications, skills and work experience for a specific job. The assessment is carried out on the basis of the information provided by the candidate in the application documents (e.g. CV, application form), in which case The Data Controller carries out profiling on the basis of its legitimate interest (Article 6(1)(f) of the GDPR), which consists in finding and grouping candidates who are best suited for a specific job. As The Data Controller operates internationally, it may be necessary to transfer your personal data outside the European Economic Area. Any transfer of your data outside the European Economic Area will involve The Data Controller implementing solutions to protect your rights and freedoms. The transfer will be made on the basis of the safeguards permitted under the GDPR, i.e: (a) to a country for which the European Commission has issued a decision on the adequacy of the level of protection provided for personal data (Article 45(1) GDPR), or (b) using the standard contractual clauses referred to in Article 46(2)(c) GDPR. You have the right to lodge a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw) if you consider that the processing of your personal data violates the provisions of the GDPR. The provision of personal data is voluntary, but necessary for the recruitment process. *We would like to inform you that in accordance with the provisions of the Act of 14 June 2024 on the Protection of Whistleblowers (Journal of Laws of 2024, item 928), an internal reporting procedure has been implemented at Transition Technologies MS S.A., available at ttms.com.

I consent to the processing of my personal data in order to participate in future recruitment processes conducted by Transition Technologies MS S.A.