PRIVACY STATEMENT RECRUITMENT Last Date of Revision: 01/06/2019 1. WHO DOES THIS PRIVACY STATEMENT APPLY TO? 1.1 This Privacy

PRIVACY STATEMENT RECRUITMENT

Last date of revision: 01/06/2019

1. WHO DOES THIS PRIVACY STATEMENT APPLY TO? 1.1 This Privacy Statement applies to Studio Plopsa SA (“Studio Plopsa”) a Belgian company with registered office address at 8660 De Panne, De Pannelaan 68. 1.2 Studio Plopsa, a subsidiary of Studio 100 SA, is the (sub-)holding company for all theme parks based on the Studio 100 characters. 1.3 Studio Plopsa is active in four different countries (Belgium, the Netherlands, Germany and Poland) and has different subsidiaries (“the Subsidiaries”) with employees: Country Legal entity Core activities Address(es) Company number Belgium Studio Plopsa SA Holding company 8660 De Panne, De BE0463938924 Pannelaan 68 Plopsa SA Owner and operator of PLOPSALAND (De BE0466400051 Plopsaland De Panne, Panne), met zetel te 8660 Plopsaqua De Panne, De Panne, De Pannelaan Mayaland Indoor, Plopsa 68 Theater, Plopsa Indoor PLOPSA INDOOR Hasselt and Plopsa Store HASSELT, met zetel te in Wijnegem 3500 Hasselt, Gouverneur Verwilghensingel 70 PLOPSALAND (store) met zetel te 2110 Wijnegem, Turnhoutsebaan 5 Ter Hoeve SA Owner and operator of 8660 De Panne, De BE0446258396 camping Ter Hoeve Pannelaan 68 Plopsa SPRL Owner and operator of 4970 Stavelot, Coo 0 BE0405853542 Plopsa Coo Plopsa Hotel nv Owner and operator of De Pannelaan 68, 8660 De BE0691787865 Plopsa Hotel Panne The Plopsa BV Owner and operator or 7751 SH Dalen, NL809 376 490 B01 Netherlands Plopsa Indoor Reinersdijk 57 Coevoorden Germany Holiday Park GmbH Owner and operator of 67454 Hassloch, Holiday DE149 372 868 Holiday Park Park Str. 1-5 Poland Kownaty Park I Sp. Owner and operator of 66-235 Torzym, Kownaty PL5252580471 Z o.o. Majaland Kownaty 17 All these subsidiaries (“the Subsidiaries”) are separate and independent legal entities. Depending on the processing activity in the context of which your personal data are processed, they may be qualified as a separate data controller or a joint controller with one or more of the other Subsidiaries. None of the Subsidiaries have any liability for the other Subsidiaries’ acts or omissions. 1.4 Studio Plopsa and the Subsidiaries (“We”) want to be great companies. In order to achieve that goal we are committed to work in the right way. We are committed to protect your privacy and to process your personal data in an open and transparent manner, in particular with respect of the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”). 1.5 With this Privacy Notice, we want to inform you why and how we process personal data, how we protect them and how long we keep them, when you apply for a job with us.

- 1 -

This Privacy Notice applies when you apply for any job with Studio Plopsa or one of the Subsidiaries, by completing one of the forms on the webpages with a URL http://www.plopsajobs.be or in any other way.

2. WHO WILL PROCESS MY PERSONAL DATA? 2.1 For recruitment purposes, each of the abovementioned Subsidiaries acts as data controller with respect to the recruitment and selection for their personnel. None of the Subsidiaries have any liability for the other Subsidiaries’ acts or omissions.

3. WHAT IS THE PURPOSE AND LEGAL GROUND FOR PROCESSING MY PERSONAL DATA? 3.1 The purpose for processing your personal data is to register your application for a job with us and, if this application leads to start our selection procedure, make a profile of you, meaning that we will process all the necessary data that is required for us to assess your job application in view of a potential recruitment. This assessment can also include an assessment by a third party. The processing of your data is therefore necessary in order to take steps prior to entering into an employment contract and is in our legitimate interests, i.e. the interest to assess and evaluate you before deciding on making an offer of employment, which is also in your interests (or at least our interests are not overridden by your interests). 3.2 In case of positive assessment and decision to hire, we will also process your personal data to prepare an employment contract. 3.3 In case of a decision not to hire you, we will retain your personal data for a period of time as well (see 8) in order to be able to contact you if any future job opportunities would seem to match your profile. This is also in our legitimate interests unless you would object to this. 3.4 Finally, we will store your personal data which we collected in the context of the recruitment process in order to protect us against potential legal claims during the statute of limitations (= the period during which a legal claim could be initiated against us).

4. WHICH CATEGORIES OF PERSONAL DATA WILL BE PROCESSED? 4.1 Personal data is all information relating to you or on the basis of which you may be identified. Anonymous data, without possibility to identify you, could thus not be considered as personal data. 4.2 For the purposes referred to here above, the processing of personal data will include the following: • standard data related to your identity (surname, name(s), address…); • personal data (date and place of birth, nationality, gender, phone number, email address, hobbies and interests, …); • your picture if you provide it to us voluntarily; • data with regard to your professional experience (profile, data on previous employers, termination of last employments and work carried out, special projects, …), including reference checks if you have provided us with references in your CV; • data with regard to your education (diplomas, certificates, internships, special trainings,…) • language skills; • if applicable, whether you possess a permit of working and/or reside in the European Economic Area (EEA); • any other personal data that you present us with as part of your application, related to the exercise of the role; • digital assessment through the internet (social media presence), insofar as this presence is open for us to see; • any other personal data (than mentioned above) that require processing by virtue of the law.

- 2 -

You are not required to provide us with these data. However, not doing so might adversely affect your chances of being hired.

5. WHO WILL HAVE ACCESS TO MY PERSONAL DATA? 5.1 HR and your envisaged hierarchic superior(s) will have access to your personal data on a strict ‘need-to-know’ basis for the purposes described above. 5.2 We do not pass on your information to any other third party, with the possible exception of assessments centres etc. or any other third party in case it is relevant for the recruitment process. 5.3 The confidentiality of your personal data will be guaranteed.

6. WILL MY PERSONAL DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EEA? We do not transfer your personal data to recipients located in countries outside of the European Economic Area whose laws may not provide the same level of data protection.

7. WILL WE MAKE USE OF AUTOMATED DECISION-MAKING? 7.1 Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects that significantly affect the individuals involved. 7.2 As a rule, your personal data will not be used for automated decision-making. Consequently, we do not base any decisions about your application solely on automated processing of your personal data.

8. HOW LONG WILL MY PERSONAL DATA BE RETAINED? 8.1 We will only hold your personal data for as long as it is necessary for the purposes described above. In case the recruitment does not result in an employment relationship, your personal data will be retained for a maximum period of five years after the end of the job application procedure for the purposes described under 2.

9. YOUR RIGHTS 9.1 You can contact us at any time for assistance on your application or regarding the management of your application. Furthermore, you have the right at anytime to request: • Access to your personal data. This also includes the right to request a copy of the personal data we hold about you; • The rectification of your personal data. This also includes adding personal data if the data we hold about you are not accurate or incomplete. • The deletion of your personal data as soon as there is no (longer a) lawful ground for us to process them; • The restriction of the way in which we process your personal data, if you would contest the processing or the correctness of the personal data, or if you wish to keep certain personal data in view of a possible legal claim, while we no longer need the personal data for the purposes mentioned above. You have also the right to object at any time to the processing activities for which we rely on legitimate interest (see above). In that event, we will immediately cease the processing activities unless there would exist compelling legitimate grounds for further processing. You will for instance be able to object to the processing of your personal data in the event of an unsuccessful application. In that event, we will delete your personal date immediately and cease any further processing. 9.2 Furthermore, if you are unhappy with the way we have handled your personal data or any privacy query or request that you have raised with us, you have the right to complain to the Data Protection Authority (“DPA”) in the country where you reside, where you work or where the alleged infringement has been committed.

- 3 -

10. HOW TO CONTACT US? 10.1 We hope that this Privacy Notice helps you understand, and feel more confident about the way we process your data. If you have any further queries about this Privacy Notice, the webpages with an URL http://www.plopsajobs.be and/or the way we handle applications general, please contact us: • by e-mailing us at [email protected]; or • by addressing your query to Studio Plopsa SA, Privacy Department, De Pannelaan 68, 8660 De Panne (Belgium). You may also use these contact details if you wish to make a complaint to us relating to your privacy.

11. CHANGES TO THIS PRIVACY NOTICE 11.1 We may modify or amend this Privacy Notice from time to time. Any changes we may make to this Privacy Statement in the future will be posted on this page. To inform when we make changes to this Privacy Statement, we will amend the revision date at the top of this page. The new modified or amended Privacy Notice will apply from that revision date. Please check back periodically to see changes and additions. If we are in the possession of your e-mail address and we are still processing your personal data, we will also inform you electronically about all changes to this Privacy Statement.

- 4 -