PERSONAL DATA PROTECTION INFORMATION PROVIDED BY THE DATA CONTROLLER ON THE PROTECTION OF PERSONAL DATA OF JOB APPLICANTS In fulfilling the obligations relating to the protection of personal information as required by the Protection of Personal Information Act No. 4 of 2013 (POPIA), Clariter ZA Proprietary Limited, as a responsible party, hereby informs you (the data subject) of the purpose for the collection, processing, and retention of your personal information to allow you to consent thereto. In connection with the recruitment process of Clariter ZA Proprietary Limited the information you have supplied on your C.V and/ or job application form may be processed for the purposes of evaluating your application for employment. In this regard, the following information is required: 1. Full name and surname; 2. Identity number; 3. Contact details (cell phone, address, landline and email); 4. Employment history; 5. Education; 6. Qualifications; The information above may either be collected from your C.V, job application form, directly from you or from a credible source such as public record in accordance with POPIA. 1. WHO IS PROCESSING YOUR PERSONAL DATA? The responsible party collecting your information is Clariter ZA Proprietary Limited (Clariter) with registered office Umthiza Rd, ELIDZ Zone 1B, East London, Eastern Cape, South Africa. The contact details of the Information Officer are as follows: Full Name Vuyo Sikwebu Email Vuyo.sikwebu@clariter.com Contact Number +27 431010200 3. FOR WHAT PURPOSE DO WE PROCESS PERSONAL DATA? The data collected as described above, will be processed for the following purposes: a) in order to conduct the recruitment processes as required by Clariter, b) due to the need to fulfil a legal obligation imposed on Clariter as a potential employer, c) in the event of employment, to fulfil obligations ascribed to an employer, d) in order to consider the execution of a contract other than an employment agreement, in particular a service agreement or a contract similar thereto; e) for purposes resulting from the legitimate interests pursued by Clariter in the form of providing the necessary staff for its businesses; in compliance with a duty or obligation imposed in law including but not limited to the Basic Conditions of Employment Act, Labour Relations Act, Employment Equity Act, Occupational Health and Safety Act, Compensation for Occupational Injuries and Diseases Act, Companies Act, Income Tax Act, Disaster Management Act, Unemployment Insurance Act. If you have provided us with more of your data than required by the provisions of the labour law, the basis for the processing of this data is your consent, expressed by your clear actions in the affirmative, i.e. providing Clariter with your CV, resume etc. Your consent applies to all personal data that you have provided to Clariter and that is available from references you have provided (in particular covered by your CV, resume etc.). You are entitled to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted on the basis of consent granted prior to its withdrawal. In the event of your withdrawal, Clariter will not be able to further process your information for job offers, appointments and employment. To withdraw your consent or enquire about personal information held be Clariter relating to you as a data subject, you can contact the Information Officer identified above. 4. IS YOUR PERSONAL DATA SHARED WITH OTHERS? Clariter may share processed personal data with: a) an employment agency cooperating with Clariter, b) ICT service provider for Clariter or its affiliate, c) its affiliate and Clariter Group as per clause 7 , d) government bodies, e) legal, tax consultants, accountants. Clariter also warrants that the processing of personal data by the specified entities will be based on guarantees of implementation of appropriate technical and organisational measures to ensure that the processing complies with legal requirements and protects your rights. 5. FOR HOW LONG DOES CLARITER PROCESS & RETAIN YOUR DATA? Clariter will process your personal data for 5 years since the date you provided your consent. If you have withdrawn your consent to the processing of personal data, these data will be processed only until the end of the calendar month in which the consent was withdrawn. 6. WHICH REQUESTS CAN BE ADDRESSED TO CLARITER AS REGARDING YOUR PERSONAL DATA? The data subject has the right to request from Clariter: a) access to their own personal data, b) rectification of any inaccurate data, c) erasure of data, d) restriction of data processing, as well as the right e) to object to the processing. We also have an obligation to notify you of any personal data breach if this results in a high risk to your rights or freedoms. The aforementioned rights will be exercised in accordance with the legal requirements, including the provisions of POPIA. Please note, however, that we will also have to take into account, in each case, our rights and obligations as the responsible party. If you wish to exercise the above-mentioned rights, please contact Clariters Information Officer or send a request to Clariters address by traditional mail or via email. Contact details are provided above. 7. IS YOUR DATA GOING OUTSIDE OF SA BORDERS? As Clariter is part of a Group of companies, which include international counterparts, your information may be transferred outside South African borders to Clariters other offices or representatives based in Poland, Israel, the Netherlands and Luxembourg. Clariter warrants that your information shall at all times be protected as required by POPIA even when in other jurisdictions. 7. CAN YOU LODGE COMPLAINTS AGAINST US? A complaint can be lodged with the Information Regulator that is independent and that monitors the application of POPIA on the protection of personal data in order to protect the fundamental rights and freedoms in relation to the processing and facilitation of the free flow of personal data. You can email your complaint to complaints.IR@justice.gov.za. 8. IS PROVISION OF PERSONAL DATA VOLUNTARY? As a rule, provision of data is voluntary, but without the data it is impossible to properly implement the recruitment process. Clariter as a possible employer may also request from you a set of data due to the local applicable labour law provisions as set out above. 9. IS THERE ANYTHING ELSE TO BE ADDED? Personal data will not be used to make an automated decision, including profiling, or automated data processing, which consists of using personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning the economic situation, health, personal preferences or interests, reliability or behaviour, location or movement. To this end, Clariter shall not request, require nor process special personal data, that is, personal information relating to information concerning children, religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health, sex life or biometric data of a data subject (finger printing, blood typing, voice recognition), and criminal behaviour in certain instances unless: a) This processing is conducted with your consent, b) This processing is required for the establishment, exercise or defence of a right or obligation in law, c) This processing is necessary to comply with an obligation of international public law, d) The processing is necessary for historical, statistical or research purposes if this serves a public interest (e.g., disease control), e) The information has deliberately been made public by the employee, e.g. on social media. Clariter will not use your personal data for marketing purposes unless otherwise elected by yourself. You are informed that Clariter has a Privacy Policy available on request should you require further information.