Privacy policy for QbD Group Date of publication: 10-10-2024

We at QbD Group and our affiliates handle the personal data of our (potential) job applicants as part of our recruitment process. This privacy policy explains how we process your personal data and outlines your rights when we collect, use, and protect your personal data.

Scope This privacy policy applies to:

• Quality for You BV, QbD Growth BV, QbD Flanders NV, QbD Wallonia BV/SRL, QbD Clinical NV, Quality by Design BV (Netherlands), Quality by Design France SRL, QbD Group UK Ltd, QbD PharmaProjects Spain SL, QbD Austria GmbH, QbD Foundation, Qarad BV, Qarad EC-REP BV, Qarad UK Ltd, Qarad Suisse SA, AZIERTA LIFE SCIENCES & HEALTH CONSULTING FIRM, S.L, BPF part of the QbD Group SA de CV, Healthtomarket BV, Monkeys not Donkeys BV, QPRO – Part of QbD, Quercus Labo BV, Turnstone Communications BV.

This privacy policy also covers all companies organized under the laws of Belgium, the Netherlands, France, the United Kingdom, Spain, Austria, Switzerland, Mexico, and Colombia that are part of the QbD Group.

1. What personal data do we collect? When you apply for a role, we collect the personal data you provide. This includes:

• First name, last name, date of birth, email address, telephone number, resident address, qualifications, skills and experience, employment history, resume.

2. How do we use your personal data? We use your personal data to:

• Consider your application for the role you applied for.
• Evaluate your application for other roles within the company.
• Communicate with you about current and future recruitment processes.
• Enhance the information you provide with third-party data.
• Build a talent pool for future job openings.
• Start the onboarding process after successful recruitment.

3. What are the legal grounds for processing your personal data? The legal basis for collecting and using your personal data is our legitimate interest in recruiting staff for our business. By applying, you consent to be included in our talent pool for future vacancies for a period of 3 years.

4. Who do we disclose your personal data to? We may share your personal data with:

• Members of the QbD Group.
• Trusted third parties who provide recruitment-related services on our behalf.

5. How do we protect your personal data? We use various measures to ensure your data is secure, including:

• Staff training on privacy obligations.
• Technological measures like firewalls, encryption, and restricted access.
• Physical security measures like badges and locked cabinets.

6. How long do we keep your personal data?

• If your application is successful, your data will be retained as part of your employment record for the duration of your contract and at least 3 years thereafter.
• If your application is unsuccessful, we will retain your data for 3 years with your consent for the talent pool, after which we will seek your consent again.

7. Where are your personal data stored? Your data is stored within the European Economic Area (EEA). In some cases, it may be transferred outside the EEA. When this occurs, we ensure appropriate safeguards are in place.

8. Your rights You have the right to:

• Access, update, or delete your data.
• Restrict or object to the processing of your data.
• Withdraw consent for data processing.
• Receive a copy of your data in a machine-readable format.

To exercise these rights, contact dpo@qbdgroup.com.

9. Right to complain If you believe your rights have been violated, you can lodge a complaint with the Belgian Data Protection Authority or the relevant authority in your country.

10. Changes to this privacy policy We may update this policy to reflect changes in laws or our practices. The latest version will always be available on our website.

Contact For questions or to exercise your rights, email us at dpo@qbdgroup.com.