Amadeus Careers Site Privacy Notice

Data Controller

Each company of Amadeus is a separate legal entity and a separate controller in terms of the applicable privacy legislation with respect to the processing of the personal data of its employees. Amadeus IT Group, S.A. as headquarters is a controller regarding the processing of personal data of Amadeus employees as a consequence of the management of global purposes, centralized applications, design, performance and control of the Amadeus policies (HR and others), and hieratical reporting.

This Privacy Statement (“Notice”) is applicable to all the information collected by Amadeus, as data controller, from you for the purpose of global recruitment functions and for related management and planning purposes, centralized applications, design, performance, and control of the Amadeus policies (HR and others), and hieratical reporting (the “PURPOSE”).

Purpose of the Personal Information processed

Personal information you share with us and that we collect from you within the PURPOSE will be used, transferred and disclosed (if applicable) (“processed”) as permitted by local law, to:

• process your application;
• assess your capabilities and qualifications for a job;
• conduct reference checks;
• provide to you any services available on the Careers Site from time to time;
• communicate with you;
• comply with any applicable law or regulation;
• monitor and record services whether provided by Amadeus or a third party;
• improve our recruitment and employment practices;
• ensure the effectiveness of Amadeus' efforts, as well as enable the identification of future initiatives to improve gender diversity in the employee population; and
• conduct background checks if you are offered a job, if applicable and legally allowed; and

When submitting an application, candidates will be included in the candidate’s International Data Base of Candidates to assess and manage the talent and opportunities based on their profiles. If you become an employee, any personal information that you submit may become a part of your employee file and may be used for potential employment/work-related purposes.

The provision of personal information on the Careers Site is voluntary. Please note, however, that failure to provide sufficient information may result in Amadeus being unable to consider your employment application or, if employment is offered, your subsequent promotion, transfer, or relocation.

Microsoft Teams transcription may occur during interviews or other recruitment-related calls. Transcriptions are generated to support the evaluation process and are accessible only to authorized recruiting stakeholders (e.g., Primary Recruiters, Recruiter Managers, Hiring Managers) within their defined scope. Transcription data is handled in accordance with applicable data-protection and privacy regulations.

Legal Grounds for Processing

We process your personal data based on:

• The performance of a contract (or any action in order to take steps at the request of the data subject prior to entering into a contract): to process your application and the management of the recruitment process from the moment you provide it to us via (i) your candidate profile and specific job applications, and (ii) t collection during and after the recruitment process.

Processing your personal data allows us to attract the best candidates, manage the hiring process effectively, assess and confirm a candidate's suitability for employment and decide whom we want to offer the job.

• The legal basis of Amadeus legitimate interest: When a candidate applies to Amadeus through Workday, the data collected during the application process is stored in the Amadeus candidate database. Based on legitimate interest, Amadeus may use this information to assess future opportunities that match the candidate’s profile and contact them if a suitable position becomes available.
  

Please note that we have considered your privacy and carried out a balancing test to verify that your interests and fundamental rights do not override ours before applying the legitimate interest as lawful basis for the uses of your data set out in this section. If you do not agree to any of the uses of your data mentioned in this section, you can exercise your right to object by sending an email to: Hr.Privacy.Support@amadeus.com

Information Amadeus collects from you

This Notice covers any personal information you provide us with when you submit your information and that we collect within the PURPOSE, such as:

• information you submit through the Careers Site as part of the job application or job search process, including:
  
  • Full name;
  • Contact information;
  • Username;
  • Gender and age range;
  • CV, résumé, cover letter, previous work experience and education information;
  • Employment preferences, willingness to relocate, current salary, desired salary and how you heard about the Amadeus job posting;
  • Professional and other work-related licenses, permits, and certifications held;
  • Language and other relevant skills;
  • Awards and professional membership;
  • Eligibility to work in country where the job applied for is located, available start date;
  • Comments, feedback, and suggestions provided by you;
  • Information relating to references; and
  • Other specific work experience / qualification details as per the position requirements

When submitting your information, please fill in the fields required and avoid including any other information not specifically asked for by Amadeus. Please do not submit sensitive information (like your sexual orientation, race, ethnic origin, religion, beliefs, and disability), except where such information is legally required or to help us make reasonable adjustments for candidates who have a disability. We will process such infor-mation only to carry out our obligations and exercise specific rights in relation to employment.

• Information we collect during interviews and other forms of assessment, for ex-ample language tests.
• Information we collect about you from other sources, like:
  - Your named referees, from whom we collect your personal data such as full name or periods of previous employment.

If you intend to provide us with details of a reference or any other third party as part of your CV/résumé, it is your responsibility to properly inform and obtain consent from that third party prior to passing the personal information to us.

• Accessible sources, such as LinkedIn, etc., where we collect your full name, email, work history, and other data included on your profile, according to the cor-respondent terms and conditions of such sources to do so.
• If you are an Amadeus employee, additionally, we will collect and process the information included by you in your employee Career Profile, if you choose to complete it.

You are responsible for the content of the information you provide to us, and you must ensure it is legal, truthful, accurate and not misleading in any way and does not infringe on any third party’s rights or is not otherwise legally actionable by such third party.

Recipients of the Personal Information

We may share personal data with Amadeus affiliates, who may be in any location around the world. These Amadeus affiliates may process personal data for the purposes described in this Notice. A link to the complete list of Amadeus affiliates and their locations can be found here.

In addition, and as explained above, we may also disclose your information:

• To employees, consultants and/or service providers of Amadeus around the world for the purposes set out in this Notice above.
• To a third party in the event of any reorganizations, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including without limitation in connection with any bankruptcy or similar proceedings), and;
• If necessary: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal processes; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety, property, and/or that of our affiliates, you, or others; and (g) to permit us to pursue available remedies or limit the damages that we may sustain.

If you have been referred to the position you applied for, the status of your application will be visible to your referrer.

If you are an Amadeus employee, please note that fields between the Employee Career Profile and the Candidate Profile (internal application) will be synchronized to minimize your efforts when updating the forms. These fields are Education, Languages, Internal/Amadeus Work Experience and External Work Experience.

Where such disclosures take place Amadeus requires the appropriate technical and organizational security measures to be in place to protect personal data, and for personal data to be processed lawfully.

Amadeus only allows affiliates and third parties service providers to use personal data for specified purposes and in accordance with Amadeus’ instructions.

Amadeus may also disclose personal data when requested by government or law enforcement authorities or as otherwise required or permitted by law, subpoena, or regulation.

International Transfers of Data

When Amadeus shares your personal data with its affiliates who process personal data on behalf of Amadeus, this may involve transferring personal data outside the European Economic Area (“EEA"). When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements put in place with Amadeus´ affiliates. For these transfers, at least one of the following appropriate safeguards will be implemented:

• Personal data will be transferred to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
• Standard contractual clauses as approved by the European Commission which, together with supplementary measures, will ensure personal data transferred will retain the same protection it has in EEA; or
• Any other lawful transfer mechanism as foreseen in applicable laws and/or as approved by the European Commission or relevant Data Protection Authority.

Further information on the appropriate safeguards used when transferring personal data outside the EEA can be requested through the contact details set out below in the legal rights section. When requesting this information please make a reference to the transfer of personal data outside the EEA.

Retention Period

Amadeus retains personal data for as long as necessary to fulfil the purposes it was collected for. Your data will be deleted after six months, except for the countries where a longer retention period of one¹, two², three³ or six⁴ years is allowed.

Deletion of your application form will not affect your candidate profile, which will remain intact as long as you are still using it.

You can delete your candidate profile at any moment by logging into your account. Follow these steps:

1. Select ‘Settings’ under the Options tab.
2. Click ‘Delete Profile’ button.
3. Confirm the decision to delete all data by clicking ‘Delete All Data’ button in the popup box.

Cookies

We may use technical cookies. These cookies are strictly necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site may not work or be displayed properly.

Security and Integrity of Personal Information

We use reasonable organizational, technical and administrative measures to protect personal information under our control. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. Please do not send us sensitive information through e-mail. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting us in accordance with the contacting section of this document. Please note that e-mail communications will not necessarily be secure; accordingly, you should not include health or financial information in your e-mail correspondence with us.

When Personal Data is processed on behalf of Amadeus, access is limited to those who have a business need to know. Personal Data will be processed in accordance with the instructions of Amadeus and those who have access are subject to a duty of confidentiality.

Amadeus has procedures in place to deal with any suspected personal data breach and will notify individuals and any applicable regulator of a breach where they are legally required to do so.

Your rights

You may exercise your rights of access, erasure, to object, to rectification, data portability and/or to restrict the processing of your personal data by sending a request via email: hr.privacy.support@amadeus.com or by sending your request to the applicable registered office.

When exercising your rights please make specific reference to the purpose your request refers to.

Although Amadeus intends to carefully address any request and/or claim from you, as well as carefully process your Personal Data, you are entitled to file any claim or complaint before the relevant data protection authorities.

Contacting Us

If you have any questions regarding this Privacy Statement, please contact us at: hr.privacy.support@amadeus.com.

¹ Countries with one year of retention period: Bangladesh, Bosnia and Herzegovina, Chile, Costa Rica, Portugal, Spain, and Ukraine.

² Countries with two years of retention period: Argentina, Armenia, Australia, Bolivia, Canada, China, Congo, Denmark, Dominican Republic, France, Guatemala. Greece, Hong Kong, Hungary, India, Indonesia, Jordan, Kenya, Luxembourg, Mozambique, Poland, Republic of Ireland, Ski Lanka and Thailand.

³ Country with 3 years of retention period: United States of America.

⁴ Countries with 6 years of retention period: Singapore and Israel.