Recruiting Privacy Notice

This Recruiting Privacy Notice ("Notice") explains Movable Ink’s handling of your personal data. When we say "Movable Ink", "we" or "us" in this document, we mean the employer to which you are applying for a job, which is:

• Movable, Inc. (in the U.S.)

• Movable Ink Ltd (in the UK)

As with many other Movable Ink policies, this Notice does not guarantee that you will be hired and, if you are hired, this document will not be not part of your contract of employment, and we may update it from time to time.

What categories of personal data does Movable Ink collect about me and why does Movable Ink use it?

Movable Ink will collect, process and use the following categories of personal data about you (“Candidate Data”):

• identification data

  , such as your name, citizenship, photo, applicant ID, passport data, date and place of birth, national identification number, signature, as well as other government-issued identification information;

• contact details

  , such as your home address, telephone number and email address;

• social media profile information

  , if you choose to apply online by using your profile; and

• information about your job record, education, and additional application-relevant data, such as position, business title, employee type, management level, time type (full or part time and percentage), work location, division, department, position level, manager (name & ID), support roles, start and end date, job history (including position history, title history, effective dates and past pay groups), CV or resume, qualification testing results, education history, skills, certifications, background check results, reason for leaving, and other information from interviews with you, your references or other third parties.

We collect and use this Candidate Data for a variety of reasons linked to your candidacy. To help clarify these we have set out below a list of reasons why we collect and use this data (the "Processing Purposes") along with examples of some of the Candidate Data used for each of the Processing Purposes:

• evaluating and responding to your employment application, including reviewing your education and job history, facilitating interviews, checking references and conducting background checks, and notifying you of relevant additional vacancies with us that may interest you, which involves the processing of identification data, contact details, and information about your job record and, where appropriate and permitted by law, other personal history;

• setting up your employment and compensation, including to secure travel or employment visas, and establish payroll and other compensation and benefits, which involves the processing of identification data, contact details, information about your job record;

• complying with applicable laws and employment-related and pre-employment-related requirements along with the administration of those requirements, such as income tax, social security deductions, and employment and immigration laws, which involves the processing of identification data, contact details, information about your job record;

• monitoring and ensuring compliance with applicable policies and procedures and laws, including conducting internal investigations, which involves the processing of identification data, contact details, information about your job record and potential job;

• communicating with you, Movable Ink employees and third parties, which involves the processing of identification data, contact details, information about your job record and potential job; and other data relevant to your application; and

• responding to and complying with requests and legal demands from regulators or other authorities in or outside of your home country, which involves the processing of identification data, contact details, information about your job record, and could include processing of any other categories of Candidate Data depending on the nature of the demand.

Certain types of Candidate Data that Movable Ink collects, processes and uses fall into the following special categories of personal data which we describe as "Sensitive Candidate Data":

"Sensitive Candidate Data":

• health and medical data, such as information on disability for purposes of accommodating the work place and compliance with legal obligations;

• criminal records data, in the event you have go through a criminal records background check, where relevant and appropriate to your role;

• trade union membership where required to address labour law; and

• race or ethnicity data such as information contained in your passport or other citizenship and right to work documentation, and information which you have voluntarily provided to Movable Ink for the purposes of our equal opportunities and diversity monitoring and initiatives.

The California Consumer Privacy Act classifies such Candidate Data and Sensitive Candidate Data as:

• Identification and contact information and related identifiers;

• Professional or employment-related information;

• Education Information;

• Internet, electronic network, and device activity and device information and related identifiers;

• Geolocation information;

• Audio or visual information;

• Characteristics of potentially protected classification information; and

• Health information.

How does Movable Ink collect my information?

We collect Candidate Data and Sensitive Candidate Data from you:

• During the recruitment process, such as in interviews.

• In preparation for the start of employment.

At times, we may also receive data about you from third-party sources, including:

• Other Movable Ink companies.

• Recruiters and other referral sources.

• Background check agencies (e.g. Sterling Talent Solutions), if you participate in a background check process in compliance with local law.

• Other services that assist us with recruiting efforts, such as a travel agency.

• Your former employers, and other references you provide.

• Publicly available sources, such as your profile on LinkedIn profile or your employer’s website.

Why does Movable Ink need to collect, process and use my Candidate Data and Sensitive Candidate Data?

Where applicable, certain data protection laws outside the United States require Movable Ink to explain to you the legal bases for our collecting, processing and use of your Candidate Data and Sensitive Candidate Data:

For Candidate Data, our legal bases generally are:

• taking steps at your request prior to entering into a contract of employment or other contract with you;

• compliance with legal obligations, in particular in the area of labour and employment law, social security and social protection law, data protection law, tax law and corporate compliance laws;

• legitimate interest of Movable Ink or its affiliates;

• your consent, where that is appropriate and allowed by local data protection law.

For Sensitive Candidate Data, our legal bases generally are, where permitted by law:

• explicit consent as allowed by local data protection law;

• to carry out the obligations and to exercise the specific rights of Movable Ink or you in the field of employment and social security and social protection law as permitted by local data protection law and/or a qualifying collective agreement;

• to establish, exercise or defend legal claims or whenever courts are acting in their judicial capacity;

• for substantial public interest as permitted by local data protection law; and

• for assessment of your potential working capacity as permitted by local data protection law.

Where we talk about legitimate interests of Movable Ink or third parties, this can include:

• sharing information within our corporate family;

• human resources management;

• workplace safety;

• prevention of fraud, misuse of company IT systems, or money laundering;

• physical security, IT and network security;

• addressing certain domestic or foreign legal requirements;

• internal investigations;

• dispute resolution;

• responding to due diligence requests, and

• preparation for and participation in mergers, acquisitions, asset sales or transfers, or other similar transaction.

With whom might Movable Ink share my personal data?

Movable Ink may transfer personal data for the Processing Purposes to the following:

• Other members of the Movable Ink corporate family. Movable Ink companies process the data for the Processing Purposes and handle it pursuant to this Notice.

• Service providers. As necessary for the Processing Purposes described above, personal data may be shared with one or more third parties, whether affiliated or unaffiliated, to process personal data under appropriate instructions ("Service Providers"). For example, the Service Providers may carry out instructions related to recruiting administration, IT system support, training, compliance, and other activities relevant to the Processing Purposes, and will be subject to appropriate contractual obligations.

• Regulators, authorities and other third parties. As necessary for the Processing Purposes described above, personal data may be transferred to regulators, courts and other authorities (e.g., tax and law enforcement authorities), independent external advisors (e.g., auditors and legal advisors), directors of Movable Ink companies, insurance carriers, benefits providers, internal compliance and investigation teams (including external advisers appointed to conduct internal investigations).

• Acquiring entities. If a Movable Ink entity may be sold or transferred in whole or in part (or such a sale or transfer is being contemplated), your personal data may be transferred to the new employer or potential new employer as part of the transfer itself or as part of an initial review for such transfer (e.g., due diligence), subject to any rights provided by applicable law, including jurisdictions where the new employer or potential new employer are located.

Some of the recipients we may share Candidate Data and Sensitive Candidate Data with may be located in countries outside of Europe. In some cases, this may include countries located outside the European Union and/or European Economic Area ("EEA"), including in jurisdictions that the European Union has not recognized as providing an adequate level of protection. In such cases, we make the transfers in compliance with applicable law, typically in reliance on Standard Contractual Clauses approved by the European Commission for such purposes or in reliance on the recipient’s participation in the EU/Swiss-U.S. Privacy Shield program. You may request a copy of the Standard Contractual Clauses by contacting us as described below.

How long will Movable Ink keep my personal data?

It is our policy not to keep personal data for longer than is necessary for the Processing Purposes. Where personal data is kept beyond the time that we normally would need to keep it, that period will be determined based on the applicable local law.

What rights do I have in respect of my personal data?

Under the data protection laws applicable to our locations outside the United States, candidates have a number of special rights in relation to their Candidate Data and Sensitive Candidate Data. These can be subject to important exceptions and vary by countries. Where they apply, they can be summarized in broad terms as follows:

1. Right of access

   You have the right to confirm with us whether your personal data is processed, and if it is, to request access to that personal data including the categories of personal data processed, the purpose of the processing and the recipients or categories of recipients, and other information about the processing. We do have to take into account the interests of others though, so this is not an absolute right, and in some cases permitted by law we may charge a fee.

2. Right to rectification

   You have the right to rectify inaccurate or incomplete personal data concerning you.

3. Right to erasure

   You have the right to ask us to erase certain personal data concerning you.

4. Right to restriction of processing

   In limited circumstances, you may have the right to request that we restrict processing of your personal data.

5. Right to data portability

   You may have the right to receive certain personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to have the data transmitted to another entity.

6. Right to object and rights relating to automated decision-making

   You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling, by us and we can be required to no longer process your personal data. This may include requesting human intervention in relation to an automated decision so that you can express your view and to contest the decision.

7. Right to withdraw consent

   In the very limited cases in which we may process your personal data on the basis of your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, or other rights, please contact us as described below.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

Who can I contact about this?

If you have concerns or questions regarding this Notice or if you would like to exercise your rights as a data subject, you may contact:

Movable, Inc.
1065 Sixth Ave., 9th Floor
New York, NY 10018
Attn: People Department
Email: peopleteamhelp@movableink.com