Legal

Privacy Policy

The confidentiality of your personal data is important to Hedron Corporation ("HEDRON") and we are dedicated to safeguarding and preserving your privacy when you browse or use our website.

This privacy policy (the "Policy") will explain what general steps HEDRON has taken to protect your personal data (i.e. any information that can be used to identify you either directly or indirectly, hereinafter "Personal Data") that we collect through our Website.

More specifically this Policy will describe:

• Why we collect and process your Personal Data
• On what legal basis we process your Personal Data
• How we collect your Personal Data
• Who may access your Personal Data and where they may do so
• The security measures we take to protect your Personal Data
• How long we store your Personal Data
• The rights you have with regard to your Personal Data
• How you can contact us.

Key definitions in the Policy:

• The terms "we", "our", and "us" refer to HEDRON.
• The terms "you" and "user" refer to the person or persons browsing the Website.

Why Does Hedron Collect and Process Your Personal Data?

We process your Personal Data for the following reasons:

• managing recruitment processes related to the job offers we post and, in this regard, assessing your suitability for employment;
• providing you with access to the online services available on our Website;
• enabling us to communicate with you, to respond to your questions and requests, and to send you information about our recruiting campaigns;
• monitoring Website security;
• abiding by HEDRON's statutory and regulatory obligations;
• maintaining and improving our services, understanding how you use our Website, developing new services and personalising your experience when using our services;
• responding to requests from administrative or legal authorities in keeping with applicable law.

On What Legal Basis Does Hedron Process Your Personal Data?

Depending on the processing in question, HEDRON will process your Personal Data on one of the following legal grounds:

• A contractual relationship between you and HEDRON: the processing of your Personal Data is usually necessary to perform a contract between you and HEDRON or to carry out pre-contractual steps to that contract. Therefore, if you do not want us to process your Personal Data, we will not be able to enter into a contractual relationship with you. If you have already entered into a contractual relationship with HEDRON and withdraw your consent to processing your Personal Data, it will be deemed a termination of that contractual relationship by you and may impact your rights and liabilities vis-à-vis HEDRON;
• Your consent: you have the possibility to consent to the retention of your Personal Data contained in connection with your interactions with HEDRON (e.g. employment applications, solicitation of investment opportunity information, etc), which allows us to consider your eligibility/standing to continue interacting with us and to permit us, if necessary, to contact you later. Please note that your refusal or lack of consent may affect the processing of your application or interaction;
• Our legitimate interest: within the meaning of personal data laws and regulations. In this case we will consider your interests and fundamental rights when determining whether processing is legitimate and lawful;
• Legal obligations:applicable to HEDRON's business.

HEDRON may also need to process your personal data to respond to and defend itself in legal proceedings.

How Does Hedron Collect Your Personal Data?

HEDRON collects your Personal Data from the following sources:

• when you disclose your Personal Data through the Website or during other interactions (e.g. email correspondence, in person meetings, etc). For example, when you provide us with information when submitting an online job application or requesting information (data might be contained in your application forms or CV) and collected through interviews or other forms of assessment, including online tests;
• automatically, for example when we track your activity on our Website through the use of cookies;
• lawfully from third parties, for example when we need to confirm your contact information. In this case we receive Personal Data from third parties authorised to provide it under their own privacy policy or in accordance with law (such as references supplied by former employers or information from employment background check providers).

You are under no statutory or contractual obligation to provide your data to HEDRON during most interactions; however, if you do not provide required information, HEDRON may not be able to process your application properly or at all.

Who Does Hedron Allow to Access Your Personal Data?

In service of the purposes described above, we give access to your Personal Data to authorised HEDRON employees who need to process it.

In addition, we provide access to or transfer your Personal Data to the following authorised third parties for the purposes described herein:

• HEDRON affiliates;
• Former employers (to obtain references for you) and employment background check providers (to obtain necessary background checks);
• Our service providers, including subcontractors acting on our instructions to host our websites, analyse Personal Data, provide equipment and IT services, etc.;
• Google LLC, which uses cookies to evaluate your use of the Website, compile reports on Website activity, and provide other services relating to Website activity and internet usage for HEDRON and its affiliates. We suggest you consult Google Inc.'s privacy policies and terms of use if you would like to know more about Google's processing of your Personal Data;
• Potential buyers and other stakeholders in any merger or restructuring operation, formation of a joint venture, sale, etc.;
• Administrative or legal authorities in order to satisfy the requirements of any applicable law, regulation, legal procedure or enforceable governmental request.

Where May Hedron Transfer Your Personal Data?

HEDRON is a multinational company with subsidiaries, partners, and subcontractors located in many countries around the world. For this reason, we may need to transfer your Personal Data to other jurisdictions, including to countries located outside the European Economic Area that may not be considered as offering the same level of protection as the country where you reside.

If we have cause to transfer your Personal Data from the European Union to a third country, we will make sure that appropriate safeguards under applicable data protection law are implemented.

What Security Measures Has Hedron Taken?

We take the security of your Personal Data very seriously.

We have established technical and organisational security measures appropriate to the risks at issue in order to guarantee the integrity and privacy of your Personal Data and protect it from unauthorised access, use, or disclosure.

For How Long Will Hedron Store Your Personal Data?

We will retain your Personal Data for as long as necessary for the purposes for which we originally collected it. This may include retention as follows:

• The Personal Data necessary to provide you with access to the online services available on our Site and to ensure the security of the Site.
• The Personal Data necessary to maintain and improve our services, to understand how you use the Site, to develop new services and to customize your experience when using our services.

We may retain your Personal Data for longer than the periods in which we are undertaking security or service maintenance/improvement activities in order to comply with legal and regulatory obligations applicable to HEDRON and to respond, if necessary, to requests from administrative or judicial authorities, in accordance with applicable law.

When the period HEDRON is authorized to retain your information has elapsed, your Personal Data will be (irreversibly) anonymised or destroyed.

What Rights Do You Have Over Your Personal Data?

In accordance with data protection laws and regulations, you are entitled to exercise the following rights:

• Right of access to your Personal Data, in which case we can provide you with a copy of your Personal Data;
• Right to correct your Personal Data if it is inaccurate, incomplete or out of date;
• Right to withdraw your consent where processing relies on your prior consent, and where processing is for marketing purposes;
• Right to object to the processing of your Personal Data that is carried out in our legitimate interest, insofar as your specific situation justifies the objection;
• Right to delete your Personal Data in situations provided for under applicable personal data protection laws (the right to be forgotten);
• Right to restrict the processing of your Personal Data;
• Right to receive your Personal Data for transfer to a third party, or to have your Personal Data transferred to a third party of your choice if this is technically feasible;
• Right to file a complaint with the competent data authority if you believe that the processing of your Personal Data infringes data protection laws or regulations.

You can send us a request with regard to the above at any time, as indicated in the Contact section of our website.

Please note that:

• We may need to verify your identity before we can follow up on your request;
• The exercise of these rights is subject to certain conditions and legal restrictions, and therefore we may refuse your request if those conditions are not satisfied or the legal restrictions apply;
• We may reject requests that are unreasonably repetitive, require disproportionate technical efforts (e.g., designing a new system or fundamentally modifying an existing practice) or that pose a risk to the privacy of others.

We will always try to address your request quickly and in any case within the period which we are required to act under applicable law. If we refuse your request, we will inform you of our reasons for doing so.