Candidate Privacy Note

1. The Information We Collect

Most of the information we hold about you comes from you directly through the application form. We also collect information about you during the recruitment process itself, for example in interviews, assessments, and general correspondence. In some cases we may receive information from third parties, such as a recruitment agency, a referee, or a public professional profile like LinkedIn.

The information we process includes:

• Identifiers and contact details (name, email, phone, location)
• Professional and employment information (your LinkedIn profile, CV or resume, current or most recent employer, and work history)
• Work authorization and visa sponsorship status
• Compensation expectations and availability
• Your responses to the screening questions in the form
• Any other information you choose to share with us during the recruitment process

We do not ask for special category information (such as information about your race, ethnicity, health, or religious beliefs) as part of this application. Please do not include this kind of information in your responses or your CV.

2. How We Use It, and Our Legal Basis

We use your personal information to:

• Assess your suitability for the role and manage the recruitment process
• Communicate with you about your application
• Comply with our legal obligations

Our legal bases for this processing are our legitimate interest in evaluating candidates for our open roles, and taking steps at your request before potentially entering into a contract of employment. Where we are subject to a legal obligation, we process your information to meet it.

3. Who We Share It With

Your application is accessible to the Dapple hiring team and others across the Dapple group who are involved in the recruitment decision, including colleagues based in the United States. We also use trusted service providers who process information on our behalf under contract:

• Tally, our application form provider, which hosts the form and collects your responses
• Microsoft (Microsoft 365), which we use to receive application notifications by email (Outlook) and to store application files (SharePoint)

We do not sell your personal information, and we do not share it for marketing purposes.

4. Where Your Information Is Held, and Transfers

Your information is stored within the European Union, both in our form provider's systems and in our Microsoft 365 environment. Members of our team are based in both the European Union and the United States, and may access your information to assess your application. Where personal information is transferred outside the European Economic Area, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

5. How Long We Keep It

If your application is not successful, we keep your information for 6 months after the role closes, after which we delete it, unless we are required to keep it longer to meet a legal obligation. We do not currently keep candidate information on file to consider you for future roles. If your application is successful and you join Dapple, your application information moves to your personnel file and is processed for employment purposes.

6. Your Rights

Under data protection law, you have the right to:

• Access the personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete your information
• Object to, or ask us to restrict, our processing of your information
• Receive a copy of certain information in a portable format

To exercise any of these rights, contact our Data Protection Officer at ario@dapple.co.

You also have the right to lodge a complaint with a data protection supervisory authority. Our lead authority is the Irish Data Protection Commission (www.dataprotection.ie). If you are in another EEA country, you may also contact your local authority.

If you are applying from outside the European Economic Area, you may have rights under your local data protection laws. You can contact us at the address below and we will respond in line with the laws that apply to you.

7. Changes to This Note

We may update this note from time to time. The date at the top shows when it was last revised. If our form provider or where your data is stored changes, we will update this note accordingly.