PRIVACY NOTICE PURSUANT TO ART. 13 EU REGULATION 2016/679 FOR THE PROCESSING OF PERSONAL DATA

Pursuant to art. 13 of EU Regulation 2016/679 ("Regulation ") Cerved Property Services Single Member S.A., with registered office at 7 Eslin and 20 Amaliados Str, 11523, Ambelokipoi, Athens, tax code 094158466 (“Company”) informs you about the process of your personal data (“Data”) as Data Controller.

For communication or requests, the Company can be reached by e-mail at CervedPropertyServices@cerved.com .

Data controller and Data Protection Officer

Pursuant to articles 4, 9 and 10 of the Regulations, the Company acts as Data Controller of the Data collected in order to manage your application.

For communications or requests, the Company can be reached by e-mail at CervedPropertyServices@cerved.com .

Pursuant to articles 37 et seq. of the Regulations, the Company has appointed a Data Protection Officer ("DPO"), who can be reached by e-mail at CPS.DPO.GR@cerved.com.

Categories and types of data being processed

Data processed by the Company may include:

a) common data entered in the online form to submit the application. In particular personal data, contact details and any data entered in the " Comments" section,

b) through the collection of its curriculum vitae.

Purpose and legal basis of the processing of personal data

In compliance with current legislation on data protection and without the need for your specific consent, the Data will be processed by the Company for the following purposes:

1. management of the selection procedures for collaborators and personnel;

2. creation of contacts for the planning of any and all necessary interviews, using the contact data provided by you;

3. to evaluate the consistency of your profile with the open job positions and in general for the management of the selection procedures for collaborators;

4. management of a possible and future relationship of collaboration and/or work with the Company;

5. management of the legal obligations deriving from the specific regulations of the sector to which the Company is subject due to the activity carried out.

The legal bases of the treatment are Article 6(1)(a), (b) and (c) of Regulation and Article 6(1)(f) of Regulation as regards the pursuit of the legitimate interest to verify the candidate's suitability.

The provision of the Data with an asterisk (*) in the online form is required to send your application to the Company. Failure to do so will not allow the Company to consider your application, schedule interviews and/or evaluate your profile.

The other sections of the online form, on the other hand, are optional. failure to provide the Data will still allow the Company to evaluate your application but will have less information and/or methods to contact you. The provision of Data in the online application form is mandatory to send your curriculum to the Company.

With regard to the comments section, please do not enter personal data or information not related to your application.

Please do not send us special categories of Data. If you send us special categories via the online form, the company will not be able to take your application into consideration.

Furthermore, it is possible that the Data of third parties sent by you to the Company may be processed. With respect to this hypothesis, you would be the autonomous data controller, assuming the obligations and responsibilities of the law. In this sense, you hereby grant the widest indemnity with respect to any dispute, claim and/or request for compensation for damages for processing that may be received by the Company from third parties whose Data have been processed by you in violation of applicable data protection regulations. If you process personal data of third parties, you guarantee from now on, assuming all related responsibilities, that this particular processing hypothesis is based on a suitable legal basis, legitimizing the processing of such information.

Data processing methods

The Data will be processed by means of filing on automated, paper, computerized, manual and/or telematic instruments and/or supports with related logics, for the purposes of processing and in compliance with current legislation and specific Company instructions, guaranteeing the confidentiality and security of the Data, as well as compliance with the specific obligations laid down by law.

Scope of communication and disclosure of Data and recipients and transfer of Data

The Data will be processed by authorized personnel in accordance with article 29 of the Regulation.

In addition, for the above mentioned purposes, the Data may be communicated in Italy and abroad to other companies of the Cerved Group and to third parties appointed as data processors and sub-processors pursuant to article 28 of the Regulation.

The data may be accessible to other companies of the Cerved Group for the same purposes as above and/or for administrative-accounting purposes pursuant to art. 6, paragraph 1, letter f) and recitals 47 and 48 of the Regulation.

If necessary, the Data will be accessible to authorities, entities and/or autonomous data controllers, to whom it is mandatory to communicate your Data pursuant to legal provisions or orders of the authorities.

The Data will not be diffused.

Transfer of data outside the EU

Regarding the possible transfer of Data to Third Countries, the Data Controller discloses that the processing will take place according to one of the methods permitted by the law in force, such as the consent of the data subject, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for free circulation of data (eg. EU-USA Privacy Shield) or operating in countries considered secure by the European Commission. It is possible to have more information, upon request, from the Data Controller at the above contacts.

Storage of Data

The Data will be stored on paper and/ or computer media only for the time necessary for the purposes for which they have been collected, in compliance with the principles of limitation of storage and minimization set forth in article 5, paragraph 1, letters c) and e) of the Regulation, and will be usable for any future contacts and interviews.

The Data will be stored in order to comply with regulatory obligations and pursue the above mentioned purposes, in compliance with the principles of indispensability, non-surplus and pertinence; then, the Data will be destroyed.

Upon request, you may obtain further information from the DPO and/or the Company at the above mentioned contacts.

Your rights

You have the right to access your data at any time, pursuant to arts. 15 to 22 of the Regulation. In particular, you may request access (Article 15 of the Regulation), correction (Article 16 of the Regulation), deletion (Article 17 of the Regulation), limitation of processing of the data in the cases provided for by art.18 of the Regulation, to obtain the portability of data concerning you in the cases provided for by art.20 of the Regulation, as well as making a complaint to the competent supervisory authority (Data Protection Authority).You also have the right to withdraw your consent at any time, pursuant to Article 7 of the Regulation; it is specified that the withdrawal of consent does not prejudice in any case the lawfulness of the treatment based on the consent prior to the revocation.

You can make a request for opposition to the processing of your data pursuant to art. 21 of the Regulation in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate your request, which would not be accepted if there are legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms.

Requests must be sent in writing to the Data Controller at the address indicated above or to the DPO at the address CPS.DPO.GR@cerved.com.