Privacy Notice Applicants | Product Life Group

21/09/26

Version 2.0

ProductLife Group is committed to protecting your personal data.

On the Website Privacy Notice page, you will find additional information on how we process the personal data collected during your visit to the website

In the Applicant Privacy Notice, you will find further details on how we process the personal data you provide when submitting an application or when creating a profile on the career platform.

ProductLife Group Privacy Policy – Careers Application

ProductLife Group (hereinafter “PLG”, “we” or “us”) deems utmost important processing your personal data in compliance with data protection regulations. In this Privacy Policy, we inform you about how PLG processes your personal data collected in connection with your use of the website.

Please note that this Privacy Notice applies to the website careers.productlife.com and to the personal data (technically) processed as part of your visit to the website. With regard to the data processed in connection with an application or the creation of a profile on our career platform—and the personal data you provide in this context—please refer to the ProductLife Group Privacy Notice – Application.

Controller

The data controller may be Groupe ProductLife, a simplified joint stock company registered with the Company Registry of Nanterre under the number 392 639 266, whose head office is located at 8-14, avenue de l'Arche, 92400 Courbevoie, France or any one of its affiliates, whose contact details you can find here.

Purposes and Legal Bases

As a rule, we process your personal data only to the extent necessary to provide a functioning website and to deliver our content and services on the website. In addition, specific processing activities (via cookies) serve to make the website more convenient to use—provided that you have given your consent—or serve marketing, analytics, and evaluation purposes, also only with your consent.

Collection of General Data and Information (Log Files) When Visiting the Website

If you visit our website for informational purposes, only the internet connection data that your browser transmits to our servers will be processed. Each time the website is accessed, our system collects a series of general data and information that is temporarily stored in the server log files. A log file is created as part of an automatic system protocol. The following may be recorded:

· Access to the website (date, time)

· How you arrived on the website (previous page, hyperlink, etc.)

· Amount of data transmitted

· The browser and version you are using

· Whether the page was accessed from a mobile device

· The internet service provider you use

· The IP address assigned to your computer by your internet access provider when connecting to the internet

The legal basis for this data processing is Article 6(1)(b) GDPR, as the processing is necessary for the operation of the website to ensure its functionality and to correctly deliver its content. The data is stored for up to 90 days.

Necessary Cookies

The website is hosted on https://plglifesciences.com/. The following cookies are used to ensure optimal functionality.

These are strictly necessary basic cookies. The legal basis for this data processing is Article 6(1)(f) GDPR, as the processing is necessary for the functioning of the website to ensure its functionality and correct delivery of content.

Below you will find an overview of the necessary cookies used. Additional information on each cookie is available at: Cookie settings.

Comfort and Marketing Cookies

To enhance the user experience, additional cookies are used, which are activated only with your consent (Article 6(1)(a) GDPR). Comfort cookies improve functionality and personalization—our services may not function properly if these are disabled. Marketing cookies are used for evaluation, analytics, and marketing purposes.

Below is an overview of comfort and marketing cookies. More information about each cookie and the option to enable or disable them can be found at: Cookie settings.

Sharing Functions (Facebook, XING, LinkedIn, WhatsApp)

We would like to draw your attention to our presence on various professional and social networks. We have linked these platforms on our website using icons. These icons are not social plugins; therefore, no (personal) data is transmitted to these networks unless you actively choose to do so. To use the “Share” function, you must be logged in to the respective network and actively click on the link. Only then will your data be transferred to the relevant provider.

The legal basis for data processing when using the “Share” function is Article 6(1)(f) GDPR. Our legitimate interest is to allow our users to participate in active exchange on social networks. Before data is transmitted, the user must actively log in and click on the link.

The following data is transmitted when content is shared:

· Internet address

· Date and time of website access or clicking the “share” icon

· Browser and operating system information

· IP address

· Shared content

The shared content (job postings) may be visible to other users depending on your privacy settings in each network.

If you are already logged in to the network when clicking the “Share” icon, the provider may identify your username or even your real name. These data may also be processed in non-EU countries. We have no influence over the provider’s scope, type, or purpose of processing. Please refer to the respective network’s privacy policies/terms of use.

Retention Period and Routine Deletion of Personal Data

We process and store your personal data only for as long as necessary to fulfil the purposes of the processing or as required by laws or regulations. After the purpose ceases to apply, your data will be deleted or blocked. In the case of blocking, data will be deleted as soon as legal or contractual retention periods no longer prevent deletion.

Recipients of Personal Data

We may transfer your personal data to the following recipients, in compliance with applicable laws and ensuring the highest level of security:

· Affiliated companies – PLG is an international corporate group. Where necessary, PLG may transfer your data to its affiliates for the purposes outlined in this Privacy Policy.

· Service providers – Various service providers assist us in running our business. This includes IT service providers who host careers.productlifegroup.com and/or ensure the proper functioning of the website. In fulfilling their contractual responsibilities, they may come into contact with your data.

We require all recipients to ensure the security of your data and process it in accordance with applicable laws. Data is shared only where necessary and legally permitted, and contractual safeguards are in place to protect your information.

Cross Border Transfer of Data

ProductLife Group is a multinational organization with subsidiaries, partners and processors located in many countries around the world. For this reason, we may transfer your personal data (including by providing access to it, allowing it to be viewed, or by storing it) to other jurisdictions, including outside the European Economic Area, to countries that may not be considered to offer a level of protection equivalent to that of the country in which you reside.

If we need to transfer your personal data outside the European Union, or outside the country in which you reside, we will ensure that adequate safeguards such as those prescribed by applicable data protection legislation are implemented (such as the European Commission's Standard Contractual Clauses where applicable).

Data Security

The security of your personal data is our highest priority. We protect the data stored with us through technical and organizational measures to prevent loss or misuse. Our personnel handling personal data are bound by confidentiality.

Your data is transmitted in encrypted form, for example via SSL (Secure Socket Layer). You can recognize SSL encryption by the padlock symbol in your browser. Technical security measures are regularly reviewed and updated. These principles also apply to companies processing data on our behalf.

Your Rights

You have various rights enabling you to maintain control over your personal data:

- The right of access: you can obtain information about the processing of your personal data, as well as a copy of your personal data processed by ProductLife Group;

- The right of rectification: you may request the rectification of personal data that is incorrect or incomplete;

- The right to erasure: you may request the deletion of your personal data. N.B. We have a legal obligation to retain data for defined periods, and in some cases may not be able to honor your request;

- The right to restriction: in certain cases you may request the limitation of data processing (cf. article 18 of the RGPD) ;

- The right to object: the right to object to data processing;

- The right to portability: the right to request a copy of your personal data in a machine-readable format ;

- the right to withdraw your consent at any time. .

For further information on the processing of your personal data, or to exercise your rights, please contact our Data Protection Officer, whose contact details are given below.

If you are not satisfied, you have the right to lodge a complaint with the competent Data Protection Supervisory Authority and seeking a judicial remedy-

Data Protection Officer Contact Details

Data Protection Officer ProductLife Group

· Email: dpo@productlife-group.com

· Postal address: 8-14, avenue de l'Arche, 92400 Courbevoie, France

ProductLife Group Privacy Policy –– Application

Dear Applicant,

we wish to inform you that Groupe ProductLife, a simplified joint stock company registered with the Company Registry of Nanterre under the number 392 639 266, whose head office is located at 8-14, avenue de l'Arche, 92400 Courbevoie, France or any one of its affiliates, whose contact details you can find here https://www.productlifegroup.com/worldwide-presence/ (herein « ProductLife Group »), collects and processes your data for personnel selection purposes. Your data, stored in paper and electronic archives, will be processed by the Data Processors and Authorized Staff of the Company’s Human Resources Department for the purposes of assessment, selection, and recruitment. Moreover, if you pass the initial selection interviews, your data may also be processed by the business division for which you were deemed suitable.

Your data may also be processed by external Technology and Service Partners, duly appointed as external Data Processors, which the Controller relies upon. In addition, your personal data may be made available to other Group companies if they may have an interest in your professional profile. The provision of your data is optional; however, failure to provide the necessary information will prevent us from considering your application. The legal basis for processing your personal data is the necessity of such processing for the potential establishment of an employment relationship (Art. 6(1)(b) GDPR). The processing of your health-related data is necessary to comply with obligations in the areas of employment law, social security, and social protection (Art. 9(2)(b), and – where applicable under sectoral legislation – Art. 9(4) and Art. 88 GDPR). Your data may also be processed to evaluate your application for other opportunities more closely aligned with your experience and to manage any potential disputes in defense of ProductLife Group’s rights (Art. 6(1)(f) and Art. 9(2)(f) GDPR). If, when creating your profile, you consented to receiving notifications of job postings or career opportunities, you will receive automated emails regarding current job vacancies, campaigns, or career events offered by ProductLife Group. You have the right to opt out of these communications at any time by using the “unsubscribe” option in your candidate profile. The legal basis for this processing is consent (Art. 6(1)(a) GDPR).

Likewise, for background checks the legal basis is consent. The decision to authorise or not authorise the background checks will not prevent ProductLife Group from evaluating the application, but that ProductLife Group will take into account in the selection process the fact that it has not been able to obtain confirmation of the information provided in the resume.

CATEGORIES OF PERSONAL DATA

The data you provide falls into the following categories:

1. Personal identification data (e.g., name, surname, email address, phone number);

2. Professional data (e.g., education, past work experience), and any other information you share on job-related social networks such as LinkedIn;

3. Health-related data (membership in protected categories), classified as special categories of data under Art. 9 GDPR;

4. Criminal records: if it is authorised by applicable law providing for appropriate safeguards for the rights and freedoms of data subjects.

ProductLife Group reserves the right to collect additional information directly from you during interviews, relating to your education, experience, previous remuneration, and expectations, and to supplement such information with an attitudinal assessment.

Data processing is carried out using manual, IT, and electronic tools by ProductLife Group structures. In all cases, processing is carried out strictly in line with the purposes described above and in a manner that ensures data security and confidentiality. Data is managed and protected in environments with controlled access.

Personal data may also be collected directly from you or from third-party partners, such as employment agencies, recruitment firms, or training/academic institutions with which the Controller has partnership agreements, your former managers/employers as well as Linkedin, Workday, Job Boards such as Naukri.com, APEC, LEEM, France Travail

CONTROLLER AND DATA PROCESSORS

The Data Controller is ProductLife Group.

The list of Data Processors may be obtained by writing to the DPO at the email address shown hereinbelow.

DATA RETENTION PERIOD

Your data will be retained for 24 months for the evaluation of your application and for any additional period necessary to establish an employment relationship. If hired, we will retain your data for the duration of your employment and for an additional 10 years thereafter.

If your application is not suitable for the role you initially selected—and without prejudice to your right to object—your resumewill be retained for a further 12 months so that it may be considered for other opportunities more aligned with your experience.

If the selection process ends positively but the employment relationship does not begin, your data will be held for no longer than 12 months. After the retention period expires, we will destroy your resume and all attached documents. If you wish to continue providing us with your data, you must submit an updated resume after that date.