PRIVACY NOTICE TO CANDIDATES PURSUANT TO SEC. 13 OF THE GENERAL EU REGULATION ON PERSONAL DATA PROTECTION The company Musement S.p.A., with headquarters in Milan, via Polesine 13, tax code and VAT no. 07978000961 (hereinafter the Company), in its quality as data controller, informs you about how your personal data will be processed by the Company on the occasion of your application through the spontaneous submission of your curriculum vitae or your application through the registration form available on the website www.musement.com. Your personal data will be collected and processed by the Company in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and related implementing legislation (hereinafter, jointly referred to as the Regulation). 1. Data conferred and purposes of the processing by the candidates All data that you have provided by sending your curriculum vitae or completing the registration form will be processed for the following purposes: (i) (ii) (iii)

assessment of your profile, attitudes and professional skills; recruitment and selection of personnel; scheduling of recruiting activities.

In this stage of research and selection of personnel, the Company only needs to collect the data related to the possible inclusion to protected categories, without further details; therefore, we invite you not to include any sensitive information in your curriculum vitae (relating, for example, to health status, religious beliefs and political opinions), with the warning that, if these are indicated, they will be immediately cancelled. The processing for the purposes indicated under points (i), (ii) and (iii) above will be carried out only with your consent. 2.

Methods of processing

For the above purposes, the data processing by the Company will be carried out by manual, computerized and telematics tools with methods strictly related to the purposes themselves and, in any case, aimed at ensuring the safety of data and the full compliance with the applicable legislation concerning the protection of personal data. 3.

Legal basis of the processing

The processing for the purposes indicated under paragraph 1 above will be carried out only with your consent. 4.

Mandatory or optional nature of the provision of data

The provision of personal data is optional and voluntary. Failure to provide your data could make it impossible to be included in the selection of interest. 5.

Circulation and data communication

Your personal data will be processed by, and made accessible only to, processors appointed by the Company. Except for the above, your data will not be further communicated and / or disseminated outside the organization of the Company itself. 6.

Place and period of data retention

Your personal data will be stored on servers available to the Company located within the European Union. The Company will not transfer your personal data outside the European Union. Your personal

data will be kept for one year from the date of submission of the application or from the date of update of an application previously submitted. 7.

Applicant's rights

We remind you that you have the right to: -

-

-

obtain information in relation to the purposes for which Data are processed, to the period of processing and to the subjects to whom the data are communicated (right of access); obtain the rectification or integration of incorrect Data concerning the Data subject (right to rectification); obtain the deletion of Data concerning the Data subject in the following cases (i) the data are no longer necessary for the purposes for which they were collected; (ii) the Data subject has withdrawn his/her consent to the processing of Data, if these are processed on the basis of his consent; (iii) the Data subject has opposed the processing of Data concerning him/her, in case these are processed for our legitimate interest; or (iv) the processing of Data does not comply with the law. However, it is to be noted that the retention of Data by the Company is also lawful if it is necessary in order to fulfil a legal obligation or to ascertain, exercise or defend a right in Court (cancellation right); to obtain that the Data concerning the Data subject are only stored without any further use in the following cases: (i) the Data subject disputes the accuracy of the Data, for the period that is necessary for allowing the Company to verify the accuracy of such Data; (ii) the processing is unlawful but the Data subject objects to the deletion of the Data; (iii) the Data are necessary for ascertaining, exercising or defending a right in Court; (iv) the Data subject has opposed the processing and is awaiting the verification of the possible prevalence of the Company’s legitimate interest to the processing (limitation right); receive in a common, structured, commonly used and machine-readable format, all Data concerning the Data subject, if these are processed under a contract or on the basis of the Data subject’s consent (portability right).

Please also note that you have the right to contact the Data Protection Authority (Piazza di Monte Citorio n. 121, 00186 ROMA) in order to enforce your rights with regard to the data processing. 8.

Contact details for exercising your rights

The data controller of your personal data is Musement S.p.A., with registered office in Milan, via Polesine 13, tax code and VAT no. 07978000961. The data controller has appointed a Data Protection Officer (also known as DPO) pursuant to art. 37 ss. of the Regulation, domiciled for the office at the Company's headquarters and who may be contacted for matters relating to the processing of personal data at the email address [email protected]. By writing to the same address [email protected], you may exercise the rights indicated under paragraph 7 above.