Recruitment Privacy Policy

1. WHAT IS COVERED BY THIS PRIVACY NOTICE AND DO OTHER  NOTICES APPLY TO YOU?

This Recruitment Privacy Notice (“Privacy Notice”) applies to situations where we (as defined in the next section) access, collect, store, process, use, disclose or transfer your personal information. It also applies when our approved partners or other members of Kering Group use your personal information on our behalf. We are committed to protecting the privacy, confidentiality and security of your personal information by complying with the applicable privacy legislations. We are equally committed to ensuring that all our employees and agents uphold these obligations.

Any reference to “we,” “us”, “our” and “ours” in this Privacy Notice refers to the entity offering the position you are applying for (“Kering Entity”). You can find additional details on each of these entities in Schedule 1 below (List of Kering Entities acting as controller).

When applying to a Kering Entity’s job offers, such Kering Entity will access, collect, store, process, use, disclose or transfer your personal information for its own recruitment process. Should one Kering Entity share your personal data with another Kering Entity listed in Schedule 1, each Kering Entity will act as an autonomous data controller for specific purposes, as better described in section 13 “With whom do we share your personal information”.

Other privacy notices may apply when you use specific services, and in this case:  

• You will be notified of other privacy notices, when using services they apply to. 
• These privacy notices will supersede this Privacy Notice unless they expressly refer to it 

If you are a California resident, please also refer to Schedule 2.

This Privacy Notice does not cover services provided by other companies acting on their own, for example where you share information through job boards or social media (e.g., LinkedIn, etc.), or other online platforms owned and managed by other companies. These other companies have their own privacy notices in place. Any personal information you provide them is subject to their rules and not ours.

If your application is successful and you accept an offer of employment from us, please note that any processing of your personal information carried out from this moment on is subject to the Employee Privacy Notice, including any processing of your personal information during your onboarding. This Employee Privacy Notice will be provided to you in due time.

2. WHO COLLECTS AND USES YOUR PERSONAL INFORMATION?

The “data controller,” which means the Kering Entity that determines “why” and “how” our personal information is processed is the Kering Entity processing your application and offering the position you apply to. If you are unsure of the identity of such entity, we invite you to contact us as explained in section 17 “How can you contact us?”.

Where the entity offering the position you have applied to is not Kering S.A. (as better specified under section 3 “Definitions” ), then the latter is considered acting as “data processor” on behalf of the entity offering the position.

Your local privacy legislation may not use the terms “data controller” or “data processor,” but other terms like “data”, “owner”, “business”, “responsible party”, “data intermediary”, “operator” etc. To understand our role, we are the entity deciding on the methods and purposes to process your personal information by determining “why” and “how” your personal information is collected and used. Our “data processors” are entities who use your personal information on our behalf by receiving our instructions on “how” and “when” to use it.

When you make an application through our approved partners’ websites, such as job platforms or social media, these partners determine “why” and “how” your personal information is processed. They have their own privacy and cookies policies, so your personal data processed by them is subject to their own policies.

3. DEFINITIONS

For the purposes of this Privacy Notice, the definitions set forth herein shall apply.

• “Kering” or “Kering SA”: means the French corporation [“société anonyme”], located at 40 rue de Sèvres, 75007 Paris, France and registered under number 552 075 020, with the Paris Trade and Company Register.

• “Kering Entity” or “Kering Entities”: means any company or other legal entity, domestic or foreign, which directly or indirectly through one or more intermediaries, is controlled by or is under common control with Kering S.A. 

• “Kering Group”:  means Kering SA and all its Kering Entities, as better listed in Schedule 1.

• “Talent Acquisition Platform”: means the digital tools used to manage the recruitment process, including posting job openings, collecting applications, screening profiles, and supporting candidate selection.

• “Candidate”: means any person who applies for a job or is considered for a position within the organization, whether through the Talent Acquisition Platform, recruitment partners, or other approved channels. 

4. WHY DO WE COLLECT YOUR PERSONAL INFORMATION?

We collect, record, organize, store, hold, use and disclose your personal information for the purposes described in this section, in compliance with your local privacy legislation. The processing of your personal information complies with applicable privacy legislations and where required relies on the legal basis set out in this section:  

A. To manage our recruitment campaign 

Our recruitment process is divided into several successive steps that start at the moment we define our job offer and end at the moment your application is accepted or declined. These steps correspond to the various purposes described below.

As part of these activities, we process your personal information for the following purposes, in particular: 

1. To source candidates, meaning to identify candidates for a job offering. The sourcing process typically involves building a list of potential candidates' names (a step known as "name generation”) and finding contact information for each person. This can involve the use of internal and external platforms (such as databases, social networks, etc.) to find suitable candidates for open positions. 
2. When you formally apply for a job through a job posting on a career site; 
3. To screen candidates which refers to the process of reviewing job applications. This step following candidate sourcing and involves skimming through your resumes and cover letters to find the closest candidate-job-description matches, keeping in mind qualifications, experience, skill sets, and projected candidate-organization fit. 
4. To support and improve our recruitment processes. For instance, Kering Group uses an AI-enhanced Talent Acquisition Platform that incorporates a skills-based matching system; 
5. To assess candidates, through talent assessments designed to evaluate candidates’ abilities for employment and determine their suitability for our job vacancies; indeed, you may be required to complete “skills tests” to evaluate your aptitude for a particular position, or we may administer “personality tests” to better understand your expectations and general mindset. Our recruitment and evaluation methods are strictly relevant to the open position and will be systematically brought to your attention, in writing when necessary. The results will remain confidential and may be communicated to you upon request.
6. To select candidates. This refers to the process of hiring among the shortlisted candidates and recruiting you in our organization;
7. To hire candidates and comply with our legal obligations. This means we manage the onboarding process and gather documentation provided by the candidate to carry out the hiring process and comply with any of our legal obligations. 
8. To conduct background checks. This means that, after informing you in advance, we may contact your previous employers or other references to verify the information you have provided or to obtain additional information on your skills. By sharing the personal information of your references, you confirm that you have informed these individuals in advance that their personal information may be processed by us for the purpose of assessing your application as part of our recruitment process. 

For purpose no. 1, the applicable legal basis depends on the type of information and service concerned, either on the anticipation of a prospective contract or on our legitimate interest in sourcing suitable profiles linked to our job offers (where applicable). In China, South Korea, Japan, Russia and Singapore, this processing is based on your consent, either when you enter a contract or when you voluntarily share your information with us.

For purposes no. 2 to no. 7, the applicable legal basis (where applicable) is either the performance of a contract, the anticipation of a prospective contract, or our legitimate interest in verifying a candidate's qualifications required for the open position. This includes cases where we use innovative tools and technologies to assess your suitability for a job and measure your professional aptitudes, such as personality tests or video interviews, etc. In China, South Korea, Japan and Russia, this processing is based on your consent when entering into a contract or when you voluntarily share your information with us.

For purpose no. 8, the applicable legal basis is your consent granted to us in order to contact your previous employers or other references to verify the information you have provided or to obtain additional information on your skills. In China, Korea, Malaysia, Taiwan, Vietnam, Japan, Singapore and Russia this processing is based on your previous consent. 

B. To manage your candidate profile 

Once you create your candidate profile, your personal information is linked to this profile, where we store all information related to your applications. This could include personal information we obtain directly from you as well as from other sources, in accordance with applicable legislation. Such processing may also involve data cleansing and deduplication activities.

You may also choose to link your social media account information. If you choose to do so, your public account information will be made available to us and may form an integral part of your application to our job offer.

The applicable legal basis is, subject to the type of information and service concerned, and may be the performance of a contract or our legitimate interest in managing the job application platform (where applicable). Once your candidate profile has been created upon your request, we process your personal information to supplement it with the personal information you provide us during our interactions,  where such legitimate interest is not overridden by your own interests. In China, South Korea, Japan and Russia, this processing is based on your consent when entering into a contract or when you voluntarily share your information with us.

C. To assess and better understand our recruitment campaigns  

To analyze, develop and improve our recruitment campaigns, we may process information about you, for example, to understand the characteristics of candidates who apply to our job offers and interact with our recruitment teams or partners.

We may also use your information, or information related to our recruitment campaigns, to generate statistics or studies that allow us to enhance our recruitment strategies. This information can range from information related to the job offer you are applying for, as well as information directly concerning you, such as your characteristics or your skills. These analyses may be conducted internally or with the support of external partners involved in our recruitment campaign. In this case, the applicable legal basis is subject to the type of information concerned and is our legitimate interest in improving our products or services, when such interest is not overridden by your own interests or fundamental rights. In China, South Korea, Japan and Russia, this processing is based on your consent, either when entering a contract or when you voluntarily share your information with us. In Singapore, this processing is based on the business improvement exception.

D. To send you service communications or other work opportunities 

Service communications may be sent upon your request, and/or when necessary for your safety and the security of your personal information. The information communicated may be necessary for the correct performance of our contract with you or be mandatory to comply with some of our legal obligations.

Service communications can include, but are not limited to the following: emailing you to verify your identity when you sign up for our services; emailing you for password and/or username resets; notifying you that a particular service has been or will be suspended for maintenance or terminated; notifying you of upgrades, rectifications, or incident affecting our services that may involve your personal information; or notifying you of updates to our  Privacy Notice or Terms of Use.  

With your prior consent when required, you may also receive information and updates about job opportunities. Such communication can be global or local and may include updates about us and available career opportunities. 

Please note that we will never contact you to ask for personal information such as your password. 

As part of these activities, we process your personal information for the following purposes, in particular: 

• To provide you with the services and information that you request (i.e. identity verification, password or username resets, etc.) or that we need to send or provide you (i.e. information about the suspension of our services or about incidents that may involve your personal information, etc.). In this case, the applicable legal basis is the performance of a contract or compliance with a legal obligation, subject to the type of information or service we must provide. In South Korea, this processing is based on your consent when you enter into a contract or voluntarily share your information with us.
• To administer and manage your candidate profile once you have requested us to create it. The applicable legal basis is the performance of a contract. In South Korea, this processing is based on your consent when you enter into a contract or voluntarily share your information with us.
• To contact you about or send you information on work opportunities that may be of interest to you. Such work opportunities may be determined by the skills-based matching system incorporated in our AI-enhanced Talent Acquisition Platform. The applicable legal basis is your consent.

E. As part of a business transfer.

We may process your personal information in relation to any actual or proposed divestiture, merger, acquisition, joint venture, bankruptcy, dissolution, reorganization, or any other similar transaction or proceeding, in compliance with applicable laws and regulations. 

When we process your personal information in the context of such a business transfer, the applicable legal basis (where applicable) is our legitimate interest. In South Korea and Russia, this processing is based on your consent.

F. To optimize and manage our website and other communication methods 

We may take certain measures involving the use of your personal information to manage, optimize and improve our methods of digital or physical communication methods, such as our website.

The use of your personal information allows us to perform our contractual obligations or improve our services in accordance with our legitimate interest. When we use cookies or other tracking technologies, we comply with applicable laws and ask for your consent when required.

We may also use some of your personal information to administer, optimize and improve our platform, content, and our other digital offerings to ensure the most user-friendly online experience possible. We may use such personal information to fix operational problems such as website crashes and software bugs. Please note that we may use cookies or other online tracking technologies to achieve these purposes.   

G. To respond to requests from public and governmental authorities and to manage potential or actual litigation.

We may process your personal information where it is: (i) required under applicable laws or regulations; (ii) necessary to establish, exercise, or defend our legal rights; (iii) necessary to protect your interests or those of another person. Your personal information may be communicated to third parties (see section 13 “Whit whom do we share your personal information? ”).

As part of these activities, we process your personal information in compliance with a legal obligation or in accordance with our legitimate interests for the establishment, exercise, or defense of legal claims. In South Korea, this processing is based on your consent, or on compliance with a legal obligation or our legitimate interests.

H. To process your spontaneous application 

We may use some of your personal information to process your spontaneous application. You may send your resume to Kering Group without applying to a specific job position. Kering Group may use recruiting automation technologies incorporating artificial intelligence to analyze your skills and experience and to match you with our corresponding open job positions. In this case, the applicable legal basis is the anticipation of a contract.

5. WHAT PERSONAL INFORMATION WE COLLECT?

When you interact with us or our approved partners, you may provide us with various categories of personal information. The personal data collected may include contact information, gender, marital status (where relevant), education and legal work authorization. In some instances, and in accordance with applicable legislation, we may also collect sensitive data. 

This information is necessary for the recruitment process.

If your application is selected, we will ask you to provide the information and supporting documents necessary to complete the mandatory formalities. This information is required for the conclusion of the employment contract with selected candidates. In addition, the communication of certain categories of information and supporting documents (e.g. civil status, domicile, social security registration number, proof of legal stay, etc.) is mandatory for selected candidates. Consequently, not providing this information will make it impossible to conclude the employment contract.

The types of information we may collect are described in the categories below. However, the collection of this information is not systematic —we only process personal information when necessary for the purposes described. 

A. Your identifiers and candidate profile information 

This category of personal information enables us to identify you, manage your candidate profile and your job application, and, when necessary, contact you. 

It may include your first name and last name, pseudonym, signature, email address, postal address, login name, phone number, unique personal identifier, online identifier, social media account information (and related data collected through social login), gender and country of residence. 

B. Information about your employment history and qualifications 

We process the information you provide through our platform during your application, as well as details available on your CV, such as qualifications, references and professional experience. If you link your social media account, your public information will be made available to us and may form an integral part of your job application.

C. Data about your application 

If you are pre-selected, we may have a discussion with you (in person or remotely) to assess your suitability for the position and compatibility with our teams. During this process, we may collect interview data.

With your prior consent, this interview data may include audio or video recordings of our discussions and exchanges.

D. Information shared voluntarily by you during the application process 

As part of the recruitment process, you may voluntarily share information with us. We respect the data minimization principle and only collect data that is relevant to the position for which you applied. In addition, in this context we may keep a record of the correspondence and may record the communication for quality assurance, training, or monitoring of our recruitment process.

E. Information necessary for your onboarding 

If you are selected following the recruitment process, we may ask you to provide certain information and supporting documents (e.g. marital status where needed, domicile, social security number, resident permit etc.) to complete your onboarding and comply with our contractual and legal obligations toward public organizations or health insurance partners.

We may also communicate with you using the personal email address you provided when creating your candidate profile, to share relevant information with you that ensures your successful integration into the entity as part of the onboarding process.

F. Technical, electronicand localization information 

We may collect personal information automatically from your device, such as your IP address, device type, unique device identification number, browser type, time zone setting, languages preferences, localization data and general geographic location (e.g. country or city-level location). We may also collect information about your online activity, including your Internet and other electronic network activity information (such as browsing history, search history, and interactions with our websites, applications or advertisements), as well as other technical information shared by your device or service provider.

6. WHEN DO WE COLLECT YOUR PERSONAL INFORMATION?

During our sourcing activities, we may collect publicly available information online to identify potential candidates for professional opportunities that we believe may be of interest to them. We may contact such potential candidates from time to time regarding these opportunities.

When you interact with us, either online or in person, you may also share your personal information with us in the following situations: 

1. When you create a candidate profile or apply for one of our job openings online 
2. When you apply via our recruitment partners
3. When you interact with us during job interviews, whether in person or remotely, or through our websites or social media pages
4. When you use your device to browse our websites or other online platforms across different websites

7. HOW DO WE COLLECT AND USE YOUR PERSONAL INFORMATION?

When you interact with us, either online or in person, we may collect your personal information through: 

1. Our internal job platform or any external platforms we use to publish job offers
2. Electronic communications (such as e-mail) or any other means used to exchange with you  
3. Third-party sources such as social media or other partners involved in application screening
4.  Any means you use to interact with us, including our recruitment platform, phone, email, chat, text message, or any other channel used to apply for our job offers 

We collect your personal information in the country where the entity offering the position is located.

In addition, we may obtain personal information from services provided by other companies to update or supplement your personal information — for example, when you link your social media profile to  your candidate profile. These companies may have their own privacy and cookies policies, and the processing of your personal data by them will be subject to their respective policies, not ours. 

We may also implement specific tools that use data analytics and algorithms to enhance our recruitment process and effectively reduce time-to-hire. 

In addition, in case we receive a large volume of candidate information for opportunities within Kering Entities (as listed in Schedule 1), we may use data analytics and algorithms to help us review the large quantities of applications received. We have implemented an AI-enhanced Talent Acquisition Platform (as defined in section 3 “Definitions”) that incorporates a skills-based matching system to help us prioritize the application review process and sort candidates based on the information and skills provided on your resume. 

The automated results are always reviewed together with human judgment and never used as a substitute for it. This automatic analysis will not automatically exclude applications. 

As part of these activities, we process your personal information to automate certain recruitment campaigns. In this case, the applicable legal basis is subject to the type of information and service concerned and may rely on the anticipation of a prospective contract or on our legitimate interest to optimize our recruitment campaigns(where applicable). In China, South Korea, Japan, and Russia, this processing is based on your consent, either when entering into a contract or when you voluntarily share your information with us. 

8. WHO ARE OUR THIRD-PARTY SOURCES?

While we usually obtain information directly from you, we may also receive it from third parties, including: 

1. Recruitment partners (recruitment agency, temporary employment companies, headhunters, etc.) 
2. Job boards or other CV-library platforms 
3. Social media platforms, in accordance with their respective privacy policies, if you decide to share your social media account with us 
4. Enforcement or judicial authorities, or any other public authority, including government authority

9. DO YOU ALWAYS HAVE TO SHARE YOUR PERSONAL INFORMATION WITH US?

Any personal information that is required will be clearly marked as mandatory; otherwise, you are not obliged to provide optional personal information. 

You may always choose not to share your personal information with us. However, please note that in certain instances, we may not be able to proceed your application or comply with our legal obligations without it.

We may also ask you to provide certain personal information to meet legal or regulatory requirements. In such cases, we will notify you in due time and advise you as to whether your personal information is mandatory or not and explain the possible consequences of not providing it.

10. HOW LONG DO WE RETAIN YOUR PERSONAL INFORMATION FOR?

Our general approach is to keep your personal information for no longer than is necessary for the purposes for which it is processed: 

• If your application is successful, your personal information will be included in your employee file and kept it in accordance with our Employee Privacy Notice. 

• If your application is not successful, and with your prior consent, we will keep your personal data for a period of two years (2 years) from your last interaction with our recruitment system. This enables us to contact you about future job opportunities that may be of interest to you. You may, however, request the deletion of your personal data at any time before this period ends.

• If your application is spontaneous, and with your prior consent, we will keep your personal data for a period of two years (2 years) from your last interaction with our system.

After the applicable retention period, we will destroy your personal information stored electronically and will shred or securely dispose of any physical records.

11. HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

We are committed to keeping your personal information safe.  

Within our Kering Group, dedicated teams are responsible for managing and ensuring the security and privacy of your personal information. We have adopted appropriate technical and organizational security measures to protect personal information against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access.  

We have also implemented a personal information security management system. For example, we limit the number of employees who have access to personal information, and we regularly review our information collection, storage and processing practices — including physical security measures— to prevent any unauthorized access and use. 

We conduct regular security and privacy training courses and awareness tests on a regular basis to reinforce our employees’ awareness of the importance of protecting personal information. We also take appropriate steps to ensure that our business partners and third-party service providers maintain appropriate safeguards for your personal information. Our employees, business partners, and service providers who have access to your personal information are subject to enforceable contractual obligations of confidentiality and specific privacy provisions.

In the event of a security incident involving a breach of your personal information (as defined by applicable law) we maintain an emergency response plan to contain and mitigate such incidents. We will report any personal information breach to the relevant supervisory authority and, when required by applicable law, inform you via an appropriate communication channel. 

To keep your personal information secure, we may have to reset your password from time to time. 

Please note that no online service can be entirely secure, and you also play a key role in keeping your personal information safe. To ensure the best protection outside our control, we recommend that your devices are secured (for example, with up to-date antivirus software) and that your Internet service providers use appropriate measures for network security (such as firewalls and anti-spam filters). 

If you have any concerns that your personal information might be at risk — for example, if there’s a possibility that someone could know your password, please contact us immediately using the contact details provided in section 17 “How can you contact us?”

12. WHERE DO WE STORE YOUR PERSONAL INFORMATION?

We operate globally and may transfer your personal information (as described in this Privacy Notice) to other companies within the Kering Group or to approved partners worldwide via online network from time to time. For this purpose, we may have to share your personal information outside the country where you initially provided it to us. When we do so, such transfers will always be carried out for the purposes and within the retention period described in this Privacy Notice, and only where we are satisfied that adequate levels of protection and security are implemented in compliance with applicable privacy legislation. This sharing of your personal information may be necessary for us to perform the contracts we have with you or to take steps at your request prior to entering into a contract. In certain circumstances, you have the right to request that your personal information not be transferred overseas. If you wish to exercise this right, please contact us using the email address indicated in Schedule 1. Please note that such a request may affect our ability to assess your application and proceed with the recruitment process.

In most cases, the personal information we collect from you will be stored on servers located in the European Union. However, this may vary depending on the country in which the information is collected or on the applicable legislation. For more information about the location of where your personal information is stored, please contact us using the dedicated email address provided in Schedule 1 (List of Kering Entities acting as controller) or see section 17 “How can you contact us?”.

Personal information we collect from you in the People’s Republic of China will be received by Kering S.A., located at 40 rue de Sèvres, Paris 75007, Tel: +33 (0)1 45 64 61 00.

We want to ensure that your personal information is always used safely and remains accessible to you, wherever you are and for whatever reason you wish to use it for.  

When we share, use or transfer personal information — in particular from the European Union — we use standard contractual clauses approved by the European Commission, or we implement other measures under applicable privacy legislation to ensure that such transfer provides adequate safeguards. You may contact us using the dedicated email address provided in Schedule 1 (List of Kering Entities acting as controller) or see section 17 “How can you contact us?” for more information about these safeguards, including how to obtain a copy of them.  

As an example, when applying via our website, you will use a platform provided by one of our partners (i.e., Workday). Although our partner hosts your personal information within the European Union, it must provide, from time to time, remote access to teams located in the United States of America for maintenance and troubleshooting services, which constitutes a transfer to the United States. For such transfers to the U.S., we have performed a Transfer Impact Assessment (TIA) and implemented appropriate safeguards, including Standard Contractual Clauses based on the model published by the European Commission. You can obtain a copy of these clauses by contacting us using the dedicated email address provided in Schedule 1 (List of Kering Entities acting as controller). In the absence of an adequacy decision and where appropriate safeguards are unavailable, transfers may take place based on your consent. In such cases, we will inform you in advance of the possible risks associated with the transfer.

13. WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share and disclose your personal information with approved partners acting on our behalf, or approved partners acting also in their own capacity. The latter may determine the purposes (“why”) and means (“how”) of processing your personal information. 

We may also receive personal information about you from third-party sources. 

A. Our service providers 

Where they process personal data on our behalf, all approved partners are bound by an obligation to implement appropriate security measures to protect personal information in their possession. They are bound by a confidentiality agreement and specific contractual provisions defining “how” and “when” they are allowed to collect and use your personal information. You may request a list of our service providers by contacting the Data Controllers.

B. Kering and other affiliates of our Group 

If the position you apply for is not offered by our parent company, Kering S.A., the latter and its affiliates act as our main approved partners. They will have access to your personal information and act as autonomous data controllers when sharing your personal data for the purpose of recruitment activities.  Kering and its affiliates enables us to receive operational support during the recruitment campaigns, manage your candidate profile, assess and improve our recruitment processes, send non-marketing communications, and optimize and manage our website and other means of communication. If you join Kering Talent Network or one of its Houses’ Talent Networks, Kering’s Entities will also have access to your personal information as autonomous data controllers. They will not  use your personal information in any way that contradiction to this Privacy Notice.

C. IT service providers 

Our IT service providers support us in the management and delivery of our recruitment-related services. They allow us to: 

• Provide you with the services you have requested, for example, by managing our job platform and ensuring your candidate profile is accessible whenever you interact with us
• Send you service communications, such verifying your identity when you sign up
• Assess and better understand our business, for example, by providing tools that visualize and analyze personal information
• Optimize and manage our website and other means of communication, for example, by ensuring our website is always available and functions properly according to your browsing preferences  

D. Recruitment partners 

We may share information with recruiting firms, temporary employment agencies, or other service providers that assist us in identifying, assessing or managing potential candidates. These partners may process personal information on our behalf for recruitment-related purposes only, in accordance with our instructions and applicable data-protection laws.

E. Social networks and job boards 

These partners help us to identify individuals who may be interested in our job opportunities, communicate directly with such individuals, and receive applications through the submission modules available on their platforms. 

Please note that these partners may also determine “why” and “how” your personal information is processed. They have their own privacy and cookies policies, and any personal information you share with them will be subject to their own policies, not ours.

F. Public labor organizations, social security, mutual health insurance 

If you are hired, our HR department may need to share certain personal information with public bodies (e.g., unemployment insurance, health insurance, pension systems) and private organizations (e.g., mutual health insurance providers) to complete your onboarding and comply with applicable legal and administrative obligations. 

G. Audit, law firms and similar corporate professional service providers 

We may share your personal information with auditors, accountants, law firms, and other professional service providers who assist us in managing our business operations. These partners enable us to better understand and conduct our business. 

H. Data analysis providers 

We may use data analysis providers to help us provide relevant information, updates, and marketing content (e.g., by analyzing your answers to a survey, providing insights and helping us to analyze trends and improve our products and services).  

I. Actual or potential buyers as part of a business transfer 

We may disclose your personal information to an actual or a potential buyer (and their agents or advisers) in relation to any divestiture, merger, acquisition, joint-venture, bankruptcy, dissolution, reorganization, or other similar transaction, in compliance with applicable laws and regulations. Where required, we will take steps to minimize the amount of personal data shared.  

J. Law enforcement body, regulatory body, government agency, court, lawyers to comply with laws and defend our rights and interests 

We may disclose your personal information to any competent law enforcement body, regulatory body, government agency, court, or other third party when we believe such disclosure is: (i) required under applicable laws or regulations, (ii) necessary to exercise, establish, or defend our legal rights, or (iii) necessary to protect your interests or those of another person. In all such cases, we will take reasonable steps to limit the data shared to what is strictly necessary and ensure that the disclosure is made in accordance with this Privacy Notice.  

K. To anyone at your request, for our legitimate interests, or for compliance with laws and regulations 

We may disclose your personal information to any other party: with your consent, where necessary to pursue our legitimate interest, provided that such interests are not overridden by your rights and interests, or where required to comply with applicable laws, regulations, or local obligations.

14. WHAT ARE YOUR DATA RIGHTS?

Subject to the privacy legislation applicable to you, you may be entitled to one or more of the following rights, which you can exercise on your own or via a legal representative acting on your behalf. We are committed to protecting these rights and allowing you to exercise them. You will not be discriminated against for exercising any of your rights in good faith under applicable privacy laws. 

A. Right of access & correction

You may have the right to request access to and obtain a copy of your personal information. This includes the right to receive information on: the purposes of the processing, the categories of personal information concerned, the recipients (or categories of recipients) to whom your personal information may be disclosed, and the applicable retention period of your information. 

You may also request the correction of any inaccuratepersonal information. In many cases, you can view and update most of your personalinformation directly through our online platforms. You may also contact us via the dedicatedemailaddressspecifiedinSchedule 1 (List of Kering Entitiesactingascontroller)orcomplete theformavailable here .

Depending on the privacy legislation applicable to you, additional rights may apply:  

• If you are a resident of Aruba, the right to request whether and how your personal information has been processed, and whether it has been shared with any third party within the preceding 12 months. 
• If you are a Brazilian resident, the right to confirm that we process personal information about you, to request information about the public and private entities with whom we have shared your personal information, and to request details regarding the consequences of denying consent.  
• If you are a resident of New Zealand, and if we are unable to correct your personal information, the right to request that a statement of correction be attached to your record noting that a correction was sought but not made. 
• If you are a resident of Qatar, the right to be informed of any disclosure of inaccurate personal information about you.

B.  Right of deletion 

You may have the right to request that we delete your personal information. We will not delete personal information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law.

C. Right to withdraw consent

Where processing of your personal information is based on your consent, you have the right to withdraw it at any time. Please note that the withdrawal of your consent will not affect the lawfulness of processing based on your consent as carried out before such withdrawal. 

D. Right to personal information portability 

You may have the right to receive your personal information in a structured, commonly used and machine-readable format, and to ask us to transmit it to another data controller when this is technically feasible. 

Please note, however, that such rights are not recognized under the laws of all countries. For example, if you are a resident of Japan, this right does not apply under the current Act on the Protection of Personal Information (APPI).

E. Right to restriction of processing 

Subject to privacy legislation applicable to you, you may have the right to restrict our processing of your personal information, when:   

• You contest the accuracy of the personal information (until we have taken sufficient steps to correct or verify its accuracy)   
• The processing is unlawful, but you do not want us to delete the personal information 
• We no longer need your personal information for the purposes of the processing, but you require such personal information to establish, exercise or defend legal claims
• You object to processing that has been justified on legitimate interest grounds, pending verification as to whether we have compelling legitimate grounds to continue processing 

Where personal information is subject to restriction in this way, we will only process it with your consent or to establish, exercise or defend legal claims, in accordance with local legislation. 

Specifically, subject to your applicable privacy legislation, your right to restriction of processing may include:  

• If you are a Brazilian resident, the right to request the anonymization, blocking or deletion of any unnecessary or excessive personal information or personal information processed unlawfully.
• If you are a Vietnamese resident, the right to request us to stop transferring your personal information to a third party.           
  

F. Right to object to processing

Where we rely on legitimate interest to process personal information, you may have the right to object to that processing. In this case, we must stop using your personal information for that purpose unless we can either demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms or where we need to process the personal information to establish, exercise or defend legal claims. Where we rely on legitimate interest as a justification for processing, we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis. 

G. Deceased person rights to privacy 

To exercise rights on behalf of a deceased individual, you may have to prove us with proof that you are an immediate family member or executor of the deceased person. Subject to applicable privacy laws, we may not be able to support your request. Please be informed that under certain laws (for example in France), you can define directives for the storage, deletion and communication of your personal information after your death. 

H. Right to lodge a complaint

You also have the right to lodge a complaint with your local data protection authority if you consider that the processing of your personal information violates applicable law.  

If you are a resident of a Member State of the European Economic Area, you may refer to the list of data protection authorities in the European Economic Area available here.  

Under applicable legislation, you may have the right to bring complaints relating to the processing of your personal information before civil courts, in particular if you are a resident of Chile. 

I. Response to your requests, additional information and assistance  

If you need any further information regarding your rights, or if you have any complaints or questions regarding our privacy practices, please contact our privacy team and Data Protection Officer using the dedicated email address provided in Schedule 1 (List of Kering Entities acting as controller) or by completing the form available here  (or see section 17 “How can you contact us? ”). 

To protect your privacy and maintain data security, we take steps, and may require you to provide certain information, to verify your identity before complying with your request.  

Where permissible under applicable law, we reserve the right to charge a fee, for instance if your request is manifestly unfounded or excessive, to cover the administrative costs incurred by your request. We will make reasonable efforts to respond to your request as soon as possible and in any case within the applicable timeframe. 

In certain jurisdictions (for example, if you are a Californian resident), if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury stating that you are the person whose personal information is the subject of the request.   

If you designate an authorized agent to make a request on your behalf (i) we may ask you to provide the authorized agent written permission to do so, and (ii) for access and deletion requests, we may ask you to verify your own identity directly with us.

J. Right of information regarding the use of AI 

Where your personal information is processed with artificial intelligence technologies, you may also have the right to demand information on how the technology works. Please note that we may use these technologies only to support our recruitment teams and that you will not be subject to any automated decision.

However, if you do not wish to have your personal information processed by AI technologies, you can send your resume to the following email address: careers@kering.com

15. WHAT ARE YOUR OBLIGATIONS REGARDING YOUR PERSONAL INFORMATION?

Not matter how careful and committed we are, there would be no satisfying privacy without your individual involvement. Privacy therefore implies both rights and obligations, and, as part of your obligations, we expect you to take reasonable steps to help us protect and manage your privacy adequately.

 For example, in order for us to ensure we retain accurate, complete and up-to-date personal information about you, we request that you keep us informed, without undue delay, in the event your personal information becomes incorrect, incomplete and/or outdated.

We also expect you to take particular care to protect, secure and avoid illegitimate access to, use of and/or disclosure of your personal information. This includes for example: (i) complying with any applicable security rules provided to you; (ii) avoiding discussing any matter involving personal information in inappropriate environments; and (iii) informing and obtaining the consent of third parties prior to sharing any personal information related to them with us.

Failure to comply with the principles and rules of this Privacy Notice (including any other policies referred to therein, as the case may be) may have serious adverse consequences on you, us and/or third parties.

16. CAN THE PRIVACY NOTICE CHANGE?

We may occasionally make changes to this Privacy Notice, for example to comply with new requirements imposed by applicable laws. We will post the updated Privacy Notice on our website. We therefore encourage you to review this page. 

We may also notify you in case of material changes and, where required by applicable law, we will ask for your consent for those changes. 

If we wish to process your personal information for a new purpose not described in this Privacy Notice, where necessary we will inform you and where required we will ask for your consent.

17. HOW CAN YOU CONTACT US?

If you have any questions regarding our privacy practices or how we handle your personal information, please contact our privacy team and Data Protection Officer by using the dedicated email address provided in Schedule 1 (List of Kering Entities acting as controller) or by using the form available here.

SCHEDULE 1 – LIST OF KERING ENTITIES ACTING AS CONTROLLER

• Autumnpaper Limited (Alexander McQueen): For the attention of the Privacy Team, 5th Floor Rear Suite, Oakfield House, 35 Perrymount Road, Haywards Heath, West Sussex, RH16 3BW, United Kingdom 

Privacy email address: privacy@alexandermcqueen.com 

• Balenciaga S.A.S.: For the attention of the Privacy Team,16-18 rue Vaneau 75007 Paris, France  

Privacy email address: privacy@balenciaga.com 

• Bottega Veneta S.r.l.: For the attention of the Privacy Team, Località Conti Maltraverso, 36054 Montebello Vicentino, Italy 

Privacy email address: privacy@bottegaveneta.com 

• Boucheron S.A.S.: For the attention of the Privacy Team, 20 rue de la Paix, 75001 Paris, France 

Privacy email address: privacy@boucheron.com 

• Brioni S.p.A., For the attention of the Privacy Team, Piazza San Bernardo 101, 00187 Rome, Italy 

Privacy email address: privacy@brioni.com  

• Dodo S.r.l., For the attention of the Privacy Team, Via Neera 37, 20141, Milan, Italy 

Privacy email address: privacy@dodo.it

• Guccio Gucci S.p.A. (Gucci): For the attention of the Privacy Team, Via Tornabuoni 73/R, Florence, Italy 

Privacy email address: hrprivacy@gucci.com 

• Kering S.A. (Kering Corporate), For the attention of the Privacy Team, 40, rue de Sèvres 75007 Paris, France 

Privacy email address: privacy@kering.com 

• Kering Eyewear S.p.A., For the attention of the Privacy Team, Via Altichiero n. 180, Padova, Italy 

Privacy email address: keringeyewear.HR.privacy@kering.com

• Lindberg A/S: For the attention of the Privacy Team, Bjarkesvej 30, DK-8230 Aabyhøj, Denmark  

Privacy email address: receiver@lindberg.com

• Maui Jim, Inc.: For the attention of the Privacy Team, One Aloha Lane, Peoria, IL 61615, United States of America        
  Privacy email address: privacy@mauijim.com

• Pomellato S.p.A., For the attention of the Privacy Team, Via Neera 37, 20141 – Milan, Italy Privacy email address: privacy@pomellato.com 

• Qeelin Limited, For the attention of the Privacy Team, Room 1108, Harcourt House, 39 Gloucester Road, Wanchai, Hong Kong 

Privacy email address: privacy@qeelin.com 

• Richard Ginori S.r.l., For the attention of the Privacy Team, Viale Giulio Cesare n.50, 50019 Sesto Fiorentino, Italy 

Privacy email address: infoprivacy@richardginori1735.com 

• Yves Saint Laurent S.A.S., For the attention of the Privacy Team, 37-39 Rue de Bellechasse 75007 Paris, France   

Privacy email address: privacy@ysl.com 

SCHEDULE 2 – SPECIFIC INFORMATION FOR CALIFORNIA RESIDENTS

A. DISCLOSURES FOR CALIFORNIA RESIDENTS

If you are a California resident, the personal information collected from you includes information within the below categories. These categories represent the categories of personal information that we have collected over the past 12 month. The categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that, depending on the phase of the recruitment campaign, the information linked to the job offer proposed or any other information you feel necessary to share with us, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for each candidate. 

We may also collect, receive, or otherwise obtain and process sensitive personal information about you. If you are a California resident, the sensitive personal information collected from you includes information within the below categories of data. These categories represent the categories of sensitive personal information that we have collected over the past 12 months and which we have shared as per section 11 above. The categories listed are defined by California state law. Inclusion of a category in the list below indicates only that, depending on your relationship with us, your role, and the benefits we offer you, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for each candidate. To the extent we use any of your sensitive personal information for any purposes beyond what is necessary to the employment relationship or to offer you benefits, you may have the right to limit the processing of your personal information as described in section 12 above.

B. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION?

You have the right to make certain requests regarding your personal information. These include requests to:

1. access your personal information, including the categories of personal information we have collected about you; the categories of sources from which your information is collected; the categories of third parties to whom we disclose your personal information
2. delete your personal information;
3. rectify your personal information ;
4. opt-out of the sale or sharing of your personal information;
5. receive your personal information in a usable electronic format and transmit it to a third party (right to data portability); and
6. lodge a complaint with your local data protection authority.

We encourage you to contact us to update or correct your information if it changes or if the personal information, we hold about you is inaccurate.

We are committed to protecting your rights and allowing you to exercise them. You will not be discriminated against when you exercise your right in good faith under California privacy laws. 

To exercise certain rights, we may need to ask for additional information to verify your identity. 

If you would like to authorize someone to make a request on your behalf, please ensure we have that information on file, or you must provide us with a written, signed permission to submit privacy right requests on your behalf, or provide a letter from your attorney. Your agent or attorney must provide this authorization at the time of request. Note that we may require you to verify your identity with us directly before we provide any requested information to your agent.

If you would like to discuss or exercise such rights, please contact us at the details provided in Schedule 1 of this Privacy Notice.

SCHEDULE 3 – SPECIFIC INFORMATION FOR KOREAN RESIDENTS:

DELEGATION AND OVERSEAS TRANSFER FOR SOUTH KOREA

You may refuse the overseas transfer of your personal information by contacting our Data Protection Department. If you refuse the overseas transfer of your personal information, your personal information will not be transferred overseas. However, you may not be able to receive our services for which overseas transfer of personal information is necessary.