Privacy Statement for Applicants

1. Scope

<h2>1. Scope</h2>This privacy statement (hereinafter: “Privacy Statement”) applies to the processing of your personal data in the context of your job application by WEAREONE.world BV, a private limited company incorporated under Belgian law, having its registered office at Korte Vlierstraat 6, 2000 Antwerp, Belgium, and registered with the Crossroads Bank for Enterprises under company number 0867.239.782 and/or its affiliated companies within the meaning of Article 1:20 of the Belgian Code on Companies and Associations (such as TL International BV, TL Travel CommV, TL Winter BV, Lemon BV, Magnashow, LoT BV and MNKY BZZ BV), including its acquirers and legal successors (hereinafter collectively referred to as “WEAREONE Group”, “we”, “us”, “our” and each individually as “WEAREONE” or “WEAREONE Group Company”), and your rights in relation to that processing.This Privacy Statement exclusively applies to the processing of your personal data when you apply for a position at WEAREONE. If you wish to know more about how we process your personal data outside of this context, we refer you to our general privacy statement.We may change this Privacy Statement at any time. To find out when we last updated the Privacy Statement, please refer to the “Last Updated” date at the bottom of this page. Any changes to this Privacy Statement will become effective as soon as we make them available on our websites.If you have any questions about this Privacy Statement or about the way in which we process your personal data, please contact us by email at <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>.

2. Why we process your personal data

<h2>2. Why we process your personal data</h2>When you apply for a position at WEAREONE, we process your personal data to manage your application, communicate with you regarding potential employment, and comply with our legal obligations.To handle your application, we process your identification details such as your name, date of birth, gender, and nationality. Additionally, we process your contact details such as your email address and phone number, and the content and practical details of your communication, to correspond with you and follow up on your application.To evaluate whether your experience and skills align with the role and to determine whether your profile fits the team you may join, we process your professional information, including your employment status, work experience, professional interests, and any other information you share with us during the application process, such as your photo, favorite Tomorrowland moment, and hobbies.If you proceed to the later stages of the application process and we believe you could be a match for a position, we may invite you to complete an AssessFirst assessment to understand how you function within a team, what drives your ambitions, and how you manage the work-life balance. This assessment evaluates your potential for the role, your professional personality, motivations, and cognitive abilities.When we process your personal data during the application process, we do so at your request and based on your consent. This also applies to any information you share related to specific physical and/or medical needs and to data shared via AssessFirst.If your application leads to an offer or employment, further processing of your personal data is based on the necessity of taking steps to enter into your employment contract. At this stage, we will request additional details, such as your bank account number, to process your salary during your employment. We also process your personal data to meet our legal obligations, such as reporting your employment to the National Social Security Office (Dimona declaration), which requires us to process your national registry number. In special cases (such as your presence at our events), we may process your national registry number to comply with obligations under the Law of 2 October 2017 regulating private and special security.Your personal data is also processed based on our legitimate interest in ensuring the efficiency and security of the application process and in evaluating and improving our HR processes for the future.

3. How we obtain your personal data

<h2>3. How we obtain your personal data</h2>In most cases, we receive the personal data we process about you directly from you. This happens, for example, when you send us your CV and motivation letter via the Jobs Portal, communicate with us via email, or participate in the AssessFirst assessment.However, there are situations where we receive your personal data from others. This can happen, for example, when we contact references you have provided during the application process.

4. How long we keep your personal data

<h2>4. How long we keep your personal data</h2>We retain your personal data for as long as necessary to achieve the purposes outlined above or as required by applicable laws and regulations. When determining the appropriate retention period for your personal data, we consider various factors, such as the purposes for which we process the data and the categories of personal data involved.Generally, this means we retain your personal data until the position you applied for has been filled. If you are offered the position, your personal data will be retained as part of your employment records. If the position is filled by someone else, we will delete your personal data in principle after 4 weeks. However, we may retain your personal data for a longer period if there is an overriding interest for us or another party to do so, or if a legal obligation or judicial/administrative order prevents us from anonymizing or deleting your personal data.If we believe your profile is promising for a future opportunity within the WEAREONE Group, we may ask for your consent to retain your personal data for a longer period so we can contact you if a suitable position becomes available.If the processing of your personal data is based on your consent, we will delete your personal data when you withdraw your consent, unless other legal grounds permit or require us to retain your data longer. For example, this may apply if we are involved in legal proceedings, or if retaining your data is necessary to comply with our legal obligations.

5. How we share your personal data with others

<h2>5. How we share your personal data with others</h2><h3>5.1 Recipients of your personal data</h3>We ensure that access to your personal data is limited to those persons and departments within the WEAREONE Group who need to process these data in order to achieve the above-mentioned purposes.Also when we share your personal data with others, this is done exclusively for the same purposes. Possible recipients of your personal data include service providers, partners, advisors, and government authorities.For example, we may share your data with third-party recruitment partners (such as temporary employment agencies and AssessFirst) and service providers who help manage our services and infrastructure (such as IT service providers). In exceptional cases, we may share your data with courts and authorities when legally required or to protect our interests or safeguard our rights.<h3>5.2 Transfer of personal data outside the European Economic Area</h3>Some recipients of your personal data may be located in a country outside the European Economic Area (hereinafter: “EEA”). For certain third countries, the European Commission has determined that they provide an adequate level of protection of personal data. Such adequacy decisions exist for countries such as the United Kingdom and Switzerland.If we transfer personal data to a recipient in a third country for which no adequacy decision exists, and no exemptions for specific situations apply, we are required to observe appropriate safeguards for the processing of your personal data. Such safeguards may be provided, inter alia, by a contractual arrangement between us and the recipient in the third country that is based on the standard contractual clauses for international transfers of personal data established by the European Commission, or any other mechanism that allows for the international transfer of your personal data in accordance with applicable data protection laws.Where we rely on appropriate safeguards for the transfer of your personal data, we will assess whether these safeguards can provide sufficient protection for your personal data so that the level of protection guaranteed in the EEA is not undermined by the transfer. If this is not the case, we will take the necessary additional measures to provide adequate protection. If this is not possible, we will not transfer your personal data to that recipient, or will only transfer your personal data if and to the extent another mechanism makes the transfer possible. For more information about these applicable safeguards, you can send a request by email to <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>.

6. How we protect your personal data

<h2>6. How we protect your personal data</h2>We treat the personal data we process confidentially and we protect it in accordance with applicable regulations and our internal policies and procedures for data security.We use commercially reasonable efforts to ensure that your personal data is securely stored and protected against loss or unauthorized disclosure and use. However, you understand that security is an obligation of effort, not result, and that the outcome can never be guaranteed.

7. Your choices and rights

<h2>7. Your choices and rights</h2>In accordance with applicable data protection legislation, you have the following rights, if and to the extent applicable, regarding the processing of your personal data:<ul class="unordered_list"><li>You have the right to request access to the personal data we process about you. We may charge an administrative fee if we consider your repeated requests to be unfounded or excessive, or if we believe that your request is intended to harm our business or impose an administrative burden on us.</li><li>You have the right to request the correction of inaccurate personal data about you, free of charge. You must provide proof of the inaccuracies you want to have corrected.</li><li>When we process your personal data based on your consent, you have the right to withdraw that consent at any time.</li><li>Under certain conditions, you have the right to obtain the deletion of your personal data. Upon receiving your request, we will assess whether there are compelling grounds, such as legal or regulatory obligations, judicial or administrative orders, or a legitimate interest of us or someone else, that allow or require us to retain your personal data in an identifiable form rather than deleting it.</li><li>In certain circumstances, you have the right to restrict the processing of your personal data. This can be done, for example, if you contest the accuracy of your personal data or if your personal data is no longer necessary for the purposes described above, but you still require it in a legal proceeding.</li><li>When we process your personal data based on our legitimate interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. You can object to processing for the purpose of direct marketing at any time without cost or justification.</li><li>If we process your personal data based on your consent or to execute an agreement, and the processing is carried out by automated means, you have the right to obtain the personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.</li><li>You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, unless such a decision is necessary for the conclusion or performance of our agreement or if you have expressly consented to this type of processing. Currently, we do not engage in such decision-making, but if we were to do so, you have the right to object to it.</li></ul>You can send your request to exercise the above rights by email to <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>. In your request, clearly state which right you wish to exercise, and if required, provide the necessary explanation. We will acknowledge receipt of your request. If your request is valid, we will grant it. If we have any doubts about your identity, we may ask you for additional information to verify your identity.If you are not satisfied with the way we process your personal data, we ask you to let us know about your concern by sending an email to <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>. You have the right to lodge a complaint with a competent supervisory authority. In Belgium, this can be done via the complaints procedure on the website of the Data Protection Authority.Last Updated: December 17, 2024