Candidate Privacy Notice

What is the Purpose of this Privacy Notice?

U.S. Direct E-Commerce Limited t/a eShopWorld and each of its group companies (“ESW”) is committed to protecting the privacy and security of your personal data.

This privacy notice (“Privacy Notice”) describes how we collect and use personal data about you during and after the process of applying to work with ESW, in accordance with applicable laws and regulations including the General Data Protection Regulation (GDPR).

The company that you are applying to work for, is the data controller of your personal data. This means that it is responsible for deciding how we hold and use personal data about you. It is required under applicable laws and regulations to notify you of the information contained in this Privacy Notice. If you are not sure which company you are applying to, you can ask the Recruitment Manager for more details.

This Privacy Notice applies to candidates for a position at ESW. This Privacy Notice does not form part of any contract of employment or other contract to provide services. We may update this Privacy Notice at any time.

It is important that you read this Privacy Notice together with any policies or notices that we may provide on specific occasions when we are collecting or processing personal data about you, so that you are aware of how and why we are using such data.

What Kind of Personal Data Do We Hold About You?

We may use various type of personal data during the process of applying for a position at ESW. For example, we need your CV to assess your suitability for a position at ESW.

The following is a list of categories of personal data that we may process about you:

• Employment Data
• Names
• Contact Information
• Biographic Information
• Correspondence with the Data Subject

How Do We Use Your Personal Data?

As you will be aware, we will need to process your personal data in a way that is normal and customary for companies to do. We will only use your personal data in accordance with this Privacy Notice or other notice that has been provided to you.

We will use your personal data for the following purposes:

• Recruiting and on-boarding new employees or other workers
  When we are recruiting new employees or other workers, we process various types of personal data. For example, if you apply for a job with us, we will review your CV and references, we may also conduct background screening.

We may also use your personal data for purposes compatible with the above purposes and where required by an applicable law or as part of any legal action in which ESW is involved.

In order to use your personal data, we must have a lawful basis. The following are the lawful bases we may use:

• Consent
  If we receive your consent for specific reasons, we may use your personal data. If we do ask for your consent, you are always free to refuse to provide your consent and withdraw it at anytime.
• Necessary for the performance of a contract
  Sometimes we must process your personal data to enable us to perform our obligations under or in preparation for entering into, a contract with you.
• Legitimate Interest
  When it is necessary for us to use your personal data because it is in our legitimate interests or the legitimate interests of others. The legitimate interest we expect to use your data for are outlined below.

What are the relevant legitimate interests?

When using your personal data, we or another third party may have a legitimate interest in using the data. These legitimate interests are detailed below:

• Sharing employee data within the corporate group for internal administrative purposes
  ESW is a global business and as such it is important that we are able to share information about our employees among our group.
• Managing the recruitment process
  We have a legitimate interest in ensuring that we run an effective recruitment process to assist us in finding the appropriate candidates.

What if I do not provide my personal data?

In certain circumstance, it required for you to provide your personal data in order for us to enter into or continue to perform our contract with you. If you fail to provide your personal data under these circumstances, then we will not be able to enter into a contract with you or may not be able to continue to perform the contract.

Who is my personal data shared with?

ESW may share your personal data with various third parties to help us operate our business. The categories of :

• Group and affiliated companies
• Technology service providers

We may also share your personal data if required by applicable laws or regulations.

Is my personal data transferred internationally?

ESW is a global company, and we process your personal data anywhere in the world. This includes to countries that do not have the same level of protection of personal data as the country you live in or where the company that you are applying to is based.

We will make sure that we put in place measures to ensure that your personal data is protected. This includes using binding corporate rules, standard contractual clauses, or other measures permitted by law.

If applicable law requires your consent to transfer your personal data, you give us your consent by providing us with your personal data.

For how long do you process my personal data?

The amount of time we process your personal data will depend on the various purposes for which it is processed. However, the maximum period is 2 years.

From where is my personal data obtained?

We obtain your personal data from a number of sources including:

• Directly from you
• From third parties like recruitment agencies.

What are my rights in respect of the personal data?

You have various rights under applicable laws including:

• The right of access
• Rectification
• Erasure
• Restriction of processing
• Objection
• Portability

Also if there are any circumstances where we rely on your consent to process personal data, you have the right to withdraw your consent at any time.

You can exercise your rights by contacting the DPO using the below contact information.

What if I am not happy with how my personal data is being used?

You can contact the DPO at dpo@eshopworld.com

You also have the right to lodge a complaint with an applicable supervisory authority.