Job Application Privacy Notice

SIGNA Sports North America Holding Corp., together with its subsidiaries and affiliates (collectively, "Company" "us," "we," or "our") is committed to protecting the privacy of your Personal Information. This Privacy Notice describes how we use the Personal Information we collect when you apply for a job with us.

If you interact with our website, purchase our products or services, or otherwise engage with us outside of your job applicant relationship, our Privacy Policy (link) applies to any Personal Information we process through those interactions.

Types of Personal Information We Collect

“Personal Information” any information relating to an identified or identifiable natural person. This includes the following categories, which we may have collected over the last 12 months:

• Identifiers, such as your name, email address, physical address, telephone number, and other contact information.
• Records About You, such as
  o Signatures; and
  o Your physical characteristics or a description of you;
• Protected class and demographic information, such as your age (including birthdates), military or veteran status, and your gender.
• Commercial information, such as salary and wage information and history.
• Internet or other electronic network activity information, such as your browsing history, search history, and information regarding your interactions with and use of our Digital Properties.
• Non-precise geolocation data, such as your location as derived from your IP address.
• Audio, electronic, visual, or other sensory information, such as photographs or security camera footage in public areas of the Company’s facilities (including reception, the work floor, conference rooms, parking, and other general areas) if you participate in on-site activities, such as a job fair, job interview or aptitude test, as well as photographs, audio, or footage collected in the course of video interviews or through an online applicant platform, or other recordings.
• Professional or employment-related information, such as resume or curriculum vitae information, certifications, qualifications, membership in professional bodies, employment history, job preferences (including your willingness to relocate or travel), documentation required under immigration and employment laws (such as citizenship, visa data, details of residency, and work permit information), and such other information you provide. We may also collect and process information about you generated during or after interviews and related activities, such as tests or satisfaction surveys. This information may come directly from you or from our employees or contractors.
• Education Information, such as education history, professional qualifications, academic certificates and licenses, languages spoken, and other relevant skills.
• Inferences drawn from any of the information we collect, such as likelihood of your profile being a good fit with our internal team and long-term prospects with the Company.
• Sensitive Personal Information, including the following, where permissible or required under applicable laws and regulations:
  o Social Security number, driver’s license, passport, and other government-issued forms of identification (including both copies of documents and identifying numbers).
  o Account log-in information.
  o Racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership.
  o Information about your health, such as disability status and information about such disability, drug-test results, vaccination status, and food intolerances (if, for instance, we invite you for a meal or we book a flight for your job interview).

Sources of Personal Information

We may collect Personal Information about you from the following sources:

• Directly from you. We may collect Personal Information you provide to us directly, such as when you decide to complete questionnaires, such as a satisfaction survey or a diversity and inclusion questionnaire.
• From third parties.We may collect Personal Information from third parties, such as companies or individuals who direct or refer you to us (including third-party staffing or recruiting firms or individuals who suggest or identify you, as well as from publicly available sources and thirdparty professional social networking websites). Where permitted or otherwise authorized by law, we may also collect information received from third parties in connection with references or background checks.

We may combine and use information and make inferences from information that we receive from the various sources described in this Privacy Notice, including third party sources. We also use or disclose the combined information and inferences for the purposes identified below.

How We Use Personal Information

We may use your Personal Information for the following purposes:

• In connection with your applicant, such as assessing your application and interview and communicating with you concerning job openings or your applicant.
• For our internal business purposes, such as managing and improving our recruitment process (for example, enhancing our scouting and talent identification processes); enforcing our policies and rules; and operating our diversity and inclusion initiatives.
• For legal, safety or security reasons, such as complying with legal requirements, processes, or orders; complying with reporting and similar requirements; complying with government inspections and other requests from government or other public authorities; pursuing legal rights and remedies; investigating and responding to claims against the Company and its customers and employees; monitoring and managing equal opportunity programs; screening and conducting background checks (as required or permitted by law); protecting our, your, our customers’, and other individuals’ safety, property or rights; addressing security and health and safety issues (including managing spread of communicable diseases) and malicious, deceptive, fraudulent, or illegal activity; ascertaining your eligibility for work; and receiving legal advice or approval.
• In connection with a corporate transaction, such as if we acquire, or some or all of our assets are acquired by, another entity, including through a sale in connection with bankruptcy and other forms of corporate change.
• For promotional purposes, such as to notify you about new job openings in accordance with your preferences.

We may use anonymized, de-identified, or aggregated information for any purpose.

How and to Whom We Disclose Personal Information

When we disclose your Personal Information, we do so pursuant to the business purposes listed above. We may disclose Personal Information to the following limited categories of third parties:

• Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership with us.
• Service providers that work on our behalf to provide products and services, such as IT support providers, software service providers, background check vendors, and drug-screening providers.
• Professional consultants, such as recruiters, accountants, lawyers, financial advisors, and audit firms.
• Vendors necessary to complete transactions you request, such as shipping companies and logistics providers.
• Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements, to enforce or apply our policies, and to protect ours, our customers’, or third parties’ safety, property or rights.
• To other entities in connection with a corporate transaction, such as if we, or some or all of our assets, are acquired by another entity, including through a sale in connection with bankruptcy or other forms of corporate change.
• Business partners, such as certain travel services, recruitment firms, companies that operate cookies and other tracking technologies, social media companies, and certification providers. Where required by law, we will obtain your consent prior to disclosing your Personal Information to our business partners.
• Entities to which you have consented to the disclosure, where consent is required by law.

Data Security and Data Retention

We maintain reasonable security procedures and technical and organizational measures to protect your Personal Information against accidental or unlawful destruction, loss, disclosure or use. We also take reasonable steps to ensure that third parties who work with us agree to protect the Personal Information we disclose to them or that they process on our behalf.

We will retain your Personal Information only for as long as necessary to manage our employment relationship with you. We will also retain your Personal Information to the extent required to satisfy our legal obligations.

Your California Privacy Rights

California residents may have certain rights, subject to legal limitations, concerning the collection, use, and disclosure of Personal Information.

• Right to Know. You have the right to request information about the categories of Personal Information we have collected about you, the categories of sources from which we collected the Personal Information, the purposes for collecting, selling, or sharing the Personal Information, and to whom we have disclosed Personal Information and why. You may also request the specific pieces of Personal Information we have collected about you.
• Right to Delete. You have the right to request that we delete Personal Information that we have collected from you.
• Right to Correct. You have the right to request that we correct inaccurate Personal Information that we maintain about you.

We will do our best to honor your requests. However, due to legal limitations, we may have to deny certain requests, such as, for example, a request to delete information in your employment records if we are required by California or federal law to maintain such information.

California residents may exercise the Right to Know, the Right to Delete, and the Right to Correct by emailing us at HR-US@signa-sportsunited.com or by calling us at 1-888-505-4813.

We will not discriminate against you for exercising your privacy rights.

Verification: In order to process requests, we will need to obtain information to locate you in our records or verify your identity depending on the nature of the request. In most cases, we will collect some or all of the following data elements: first and last name, email address, and telephone number. In some cases, we may request different or additional information.

Authorized Agents: Authorized agents may exercise rights on behalf of California residents by submitting a request via email at HR-US@signa-sportsunited.com and indicating that they are submitting the request as an agent. We will require the agent to demonstrate authority to act on behalf of the resident by providing signed permission from the resident. We may also require the resident to verify their own identity directly with us or to directly confirm with us that they provided the authorized agent permission to submit the request.

Timing: We will respond to Right to Delete, Right to Correct, and Right to Know requests within 45 days, unless we need more time, in which case we will notify you and may take up to 90 days total to respond to your request.

Disclosure of Personal Information

We do not knowingly sell or share Personal Information of minors under the age of 16

Below please find a chart detailing the categories of Personal Information and with whom it was sold or shared or disclosed for a business purpose in the past 12 months:

Categories of Personal Information We Collect	Categories of Third Parties With Whom We Disclose Personal Information for a Business or Commercial Purpose	Categories of Third Parties to Whom Personal Information is Sold or Shared
Identifiers	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Vendors necessary to complete transactions you request Business partners
Personal information subject to the California Customer Records Act	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Vendors necessary to complete transactions you request Business partners
Characteristics of protected classifications under California or federal law	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Vendors necessary to complete transactions you request Business partners
Internet or other electronic network activity	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Vendors necessary to complete transactions you request Business partners
Audio, electronic, visual, olfactory, or similar information	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Not Sold or shared
Professional or employmentrelated information	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Business partners
Inferences	Affiliates and subsidiaries Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Vendors necessary to complete transactions you request Business partners
Inferences	Sensitive personal information Service providers Professional consultants Vendors necessary to complete transactions you request Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes In connection with a corporate transaction Business partners Entities to which you have consented to the disclosure	Not sold or shared

Sensitive Personal Information

We only use and disclose your Sensitive Personal Information for the following purposes: (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use, including nonpersonalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) for purposes that do not infer characteristics about you.

Children’s Privacy

Our hiring process is oriented towards applicants over the age of 18. We do not knowingly collect personal information from children under the age of 16. If we discover that we have inadvertently collected the information of a minor and are not required to retain it for legal purposes, we will promptly delete it.

Third-Party Websites

Our websites sometimes provide links to websites operated solely by third parties that are not under our control. This Privacy Notice does not apply to the practices of such third-party websites. Your access and use of such websites is covered by the privacy policies of those third parties.

Contact Information

If you have questions regarding this Privacy Notice or how the Company uses your Personal Information, please contact us at: HR-US@signa-sportsunited.com.