This Applicant Data Protection Policy ("Policy") governs the processing of your personal data by Doosan Škoda Power a.s., with registered office at Tylova 1/57, 301 00 Pilsen, The Czech Republic, Company No.: 491 93 864, registered in the Commercial Register maintained by the Regional Court in Pilsen under file No.: B 2251 (hereinafter referred to as "Company Doosan" or "we", "us", etc.) in connection with your application for employment with the Company Doosan, whether through the use of this website www.doosanskodapower.com ("Website") or by any other means, and during subsequent communications with the Company Doosan, whether by email, telephone, fax or social media (e.g. LinkedIn) in connection with job offers.

NOTE 1. This Policy applies solely to the processing of personal data of applicants for employment with the Company Doosan. For our general policies regarding the use of our Website and our communications with you in any role other than that of an applicant for employment, please refer to our General Data Protection Policy.

NOTE 2. If you would like information on how we process personal data using cookies, social plug-ins and other types of tracking technologies, please refer to our Cookie Policy.

By using the form on the Website, clicking on "Submit Request" and submitting your request after you have been informed of this Policy in the legal notice (disclaimer) provided on the Website, you confirm that you have carefully read this Policy and that you accept it without reservation.

1. IN GENERAL

1.1 Your personal data is processed and controlled by the Company Doosan. You may contact us by email at [email protected].

1.2 Where reference is made in this Policy to certain laws or regulations, such reference shall be deemed to include any amendment, replacement or repeal of such laws or regulations, including any related decisions of public authorities.

1.3 The Company Doosan reserves the right to modify, amend or supplement this Policy at any time at its sole discretion. Such modifications, amendments or supplements will be posted on the Website.

2. CATEGORIES OF PERSONAL DATA WE PROCESS

2.1 If you apply for employment with the Company Doosan, we collect the following personal data about you:
• your contact details and basic information about your identity that you provide to us, such as your photograph, name, postal address, email address, telephone number, date and place of birth, nationality, etc,
• your biographical details, such as former and current employer, work experience, education, qualifications, references, etc,
• any other personal data you choose to provide us with in your application for employment,
• publicly available information from your social media profile (especially professional networks such as LinkedIn).

2.2 We generally obtain the above personal data directly from you. However, if you apply for employment through an external employment agency, we will receive your personal data through that agency. It is the responsibility of that agency to make you aware of the information contained in this Policy. We recommend that you read the privacy policy of your external employment agency to find out what personal data it processes about you, the terms of that processing and how you can exercise your rights against that agency. We will not send any personal data you provide to us through the Website or in any other way to external employment agencies unless you give us your express consent to do so.

2.3 If we offer you a position, our internal recruitment department may add personal data relating to your application to your personal profile.

2.4 When applying for employment with the Company Doosan, in particular by means of an application on the Website, no personal data that can be considered sensitive data is processed. Sensitive data is personal data relating to your racial or ethnic origin, political affiliation, religious beliefs, trade union membership, health, sex life or criminal record. If the need to obtain this information arises during the recruitment process, you will be specifically asked for this information and informed separately.

3. PURPOSES FOR PROCESSING

3.1 We process your personal data to enable you to apply for employment with our company and to process and assess your application and make a subsequent decision.

3.2 We process your personal data in order to defend ourselves in the event of a dispute relating to your application (e.g. in connection with a rejection of your application by us).

3.3 If you are successfully recruited for a particular position with our company, then the personal data you provide may be used for HR purposes in connection with all aspects of your employment with our company.

3.4 We process your personal data for the purpose of carrying out statistical analyses to improve our application and recruitment process as well as our overall service offering in general. Where possible, this processing is carried out in a pseudonymous manner.

3.5 We process your personal data in order to comply with our legal obligations or to comply with any reasonable request from the relevant administrative and judicial authorities, government agencies or supervisory authorities, including the relevant data protection authorities.

3.6 We may process your personal data to maintain the legitimate interests of the Company Doosan, our partners or third parties where your registration on or use of the Website, social media or other communication channels may be considered (a) a breach of the applicable Terms of Use or intellectual property rights or any other rights of any third party, (b) a threat to the security or integrity of the Website, social media or other communication channels, (c) a danger to the Website, social media or other communication channels or to the Company Doosan's or our subcontractors' systems due to viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) in any way deemed hateful, obscene, discriminatory, racist, defamatory, malicious, offensive or otherwise inappropriate or illegal.

4. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

4.1 We process your personal data for the purposes set out in Article 3.1, because this processing is necessary for concluding the contract or for carrying out measures at your request prior to the conclusion of the contract.

4.2 The processing of your personal data for the purposes set out in Article 3.2 is necessary to protect our legitimate interest in being able to defend ourselves in the event of a dispute.

4.3 The processing of your personal data for the purposes set out in Article 3.3 is necessary for the purposes of concluding the contract and for the performance of the legal obligations to which Doosan is subject in connection with the employment relationship.

4.4 The processing of your personal data for the purposes set out in Article 3.4 is necessary to protect our legitimate interest in saving time and resources so that we can run our business more efficiently by reusing information already available where possible.

4.5 The processing of your personal data for the purposes set out in Article 3.5 is necessary to enable us to comply with our legal obligations.

4.6 The processing of your personal data for the purposes set out in clause 3.6 is necessary to protect our legitimate interest in protecting our Website, social media, products and services from abuse and unlawful activity.

5. RECIPIENTS OF PERSONAL DATA

5.1 We use external processors to operate the Website and social media and to process your personal data. These external processors are only authorised to process your personal data for the Company Doosan on our express written instructions.

5.2 The Company Doosan is entitled to share your personal data with other entities within the Doosan group (DOOSAN CORPORATION and DOOSAN DIGITAL INNOVATION EUROPE LIMITED). However, we will ensure that all Doosan group entities take reasonable care to ensure that all processing of your personal data is in accordance with what is set out in this Policy.

5.3 In some cases, we are entitled or obliged to make further disclosures of your personal data by law. In particular, we may disclose your data to government authorities (e.g. the employment office). Your personal data may be transferred to the police or judicial authorities on our own initiative as evidence or where there is reasonable suspicion that you have committed an offence or crime in connection with your request.

6. LOCATION AND TRANSFER OF PERSONAL DATA

6.1 The Company Doosan processes your personal data primarily within the EU/EEA. However, in connection with the processing of your personal data for the purposes set out in Article 3 above, we may also in some cases transfer your personal data to other entities within the Doosan group (DOOSAN CORPORATION and DOOSAN DIGITAL INNOVATION EUROPE LIMITED) or to third parties located outside the EU/EEA.
When transferring personal data outside the EU/EEA, we ensure compliance with all legal requirements, in particular:
• the transfer takes place to a third country that provides an adequate level of protection on the basis of a decision of the European Commission,
• in the absence of a decision on the appropriate level of protection, we use standard contractual clauses approved by the European Commission,
• where it is not possible to ensure an adequate level of protection, we will require your explicit consent before transferring your personal data.

6.2 Doosan may transfer anonymised or aggregated data to organisations outside the EU/EEA. If such transfers occur, Doosan will ensure that safeguards are in place to ensure the security and integrity of your personal data and that any rights you may have under generally applicable law regarding your personal data are preserved.

7. OTHER PROVISIONS

7.1 Your personal data is processed only for as long as necessary to achieve the purposes set out in Article 3 of this Policy or until you withdraw your consent to its processing. We will anonymise your personal data where it is no longer necessary for the purposes set out in Article 3 of this Policy, unless:
• the overriding interest of the Company Doosan or any other third party in maintaining the identifiability of your personal data; or
• a legal or regulatory obligation or a judicial or administrative decision that prevents the Company Doosan from anonymising them.

7.2 You acknowledge that one of the important aspects of using our Website or applying for employment with our company or our affiliates is the assessment of your professional and personal characteristics in order to find a suitable position for you with our company or our affiliates or to assess your suitability for a particular position. This means that we create and then use your personal profile based on these characteristics. Please note, however, that this assessment is never fully automated and requires the involvement of the human factor.

7.3 We will take appropriate technical and organisational measures to secure your personal data against unauthorised access or theft, as well as accidental loss, manipulation or destruction. Our employees or our external processors will only have access to your personal data to the extent strictly necessary and will be subject to strict confidentiality obligations. You acknowledge, however, that ensuring protection and security is based on the principle of best endeavours and can never be fully guaranteed.

8. YOUR RIGHTS

8.1 You have the right to request access to all your personal data processed by the Company Doosan. The Company Doosan reserves the right to charge a reasonable fee for multiple subsequent requests for access that are manifestly unfounded and unreasonable.

8.2 You have the right to have any of your personal data that is inaccurate corrected free of charge. If a request for correction is made, this request must be accompanied by proof of the inaccuracy of the data whose correction is requested.

8.3 You have the right to withdraw your previously given consent to the processing of your personal data, in which case Article 8.4 shall apply.

8.4 You have the right to request that your personal data be deleted if it is no longer necessary in connection with the purposes set out in Article 3 or if you have withdrawn your consent to its processing. Please note, however, that the Company Doosan will consider a request for erasure on a weighted basis:
• the overriding interests of the Company Doosan, your financial institution, payment service provider or any other third party; and
• any legal or regulatory obligations or administrative or judicial decisions that conflict with such deletion.
Instead of erasure, you can also ask us to restrict the Company Doosan's processing of your personal data if (a) you contest the accuracy of the data, (b) the processing is illegitimate, or (c) the data is no longer needed for the purposes set out in Article 3 but is needed to defend yourself in legal proceedings.

8.5 You have the right to object to the processing of personal data by objecting to the processing if you are able to demonstrate that there are compelling legitimate grounds based on specific circumstances that justify your objection. However, if the intended processing is in the nature of direct marketing, you have the right to refuse this processing free of charge and without any justification.

8.6 You have the right to receive from us, in a structured, commonly used and machine-readable format, any personal data you have provided to us. You have the right to transfer this data to another controller of your choice. Where technically feasible, you also have the right to ask us to transfer your personal data directly to that other controller. This right can only be exercised for data that is processed by automated means and on the basis of your consent.

8.7 If you wish to make a request to exercise one or more of your rights set out above, you may send an email to [email protected]. An email requesting the exercise of a particular right will not be construed as consent to the processing of your personal data beyond what is required to process your request. The request should clearly state which right you wish to exercise and, if requested, the reasons for exercising that right. The request should also be dated and signed. If reasonable doubt arises as to the identity of the applicant, the Company Doosan may request the provision of additional information necessary to confirm the identity of the data subject. If you use the contact form, the Company Doosan may ask you to confirm the request and provide proof of identity.
The Company Doosan will inform you immediately upon receipt of your request. The Company Doosan will process Your request as soon as possible, but no later than thirty (30) days after receipt. This time limit may be extended by an additional two months if necessary and taking into account the complexity and number of requests.

If you have any complaint regarding the processing of your personal data by the Company Doosan, you can always contact the Company Doosan via the above-mentioned email address. You are also entitled to lodge a complaint with the competent data protection authority or take legal action in court if you believe that your rights have been violated as a result of the processing of your personal data.