Recruitment Privacy Notice

Date issued: DD/MM/2024

Any references in this Policy to “GCS Accounting Malta Limited”, “GCS Assurance Malta Limited”,
“GCS Recruitment Malta Limited”, “Us”, “We”, “Our”, “Ourselves” or “GCS” relate to the Data Controllers,
namely, GCS Accounting Malta Limited, a Maltese company with registration number C79685,
GCS Assurance Malta Limited, a Maltese company with registration number C79687,
GCS Recruitment Malta Limited, a Maltese company with registration number C88514 and all
having their registered address at Agora Business Centre, Level 2, Valley Road, Msida MSD 9020.

We acknowledge the importance of privacy to you and are fully committed to respecting your privacy as well as protecting
your personal data. The scope of this Recruitment Privacy Notice (‘Privacy Notice’) is to clearly describe how We, on receipt
of your application, process your information for recruitment purposes and protect your personal data. All information
received is utilised for the sole purposes outlined in this Privacy Notice. Access to personal data is limited to authorised
personnel within the GCS Malta group, who are in turn required to maintain data confidentiality.

‘Personal Data’ means information submitted through your online registration, an online application, recruitment firm,
or referral through which you as a job applicant and/or potential candidate, can be identified as an individual person.

In submitting personal data, you as a job applicant or potential candidate, acknowledge that you have read and understood
this Privacy Notice and that, unless specifically stated otherwise, our legal basis to process your personal data for the
purposes described below shall be necessity for the performance of our contract with you or in order to take steps at your
request prior to you entering into a contract.

Collection of Personal Data

On receipt of your application and CV for a position at GCS Malta, We collect and process different types of information including:

• Personal details including name, address, date of birth, educational qualifications, work experience, skills and employment history given to Us by you.
• Other details of your application including the role applied for and the platforms utilised to apply for a vacancy.

Use of Personal Data

We collect and use personal data given to Us by you to:

• Consider your application in respect to the role for which you have applied on behalf of one of GCS Recruitment Malta Limited’s clients.
• Consider and match your profile to other potential opportunities within GCS Malta.
• Contact you throughout the progress of your application.
• Answer any queries which you may have.

Sharing of Data

Application for a Specific Role on behalf of one of GCS Recruitment Malta Limited’s clients:
We will share your personal data with relevant decision makers responsible for the role which you are applying for. You shall be given full disclosure of the company’s details.

Application for a Specific Role within GCS Malta:
We will share your personal data with relevant departmental managers responsible for the role which you are applying for. Your CV may also be shared with other relevant managers within the GCS Malta group for consideration in an alternative role suiting your profile.

Open Application:
On receipt of your ‘open’ application where the profile matches a particular role, your personal data will be shared with the client and/or within the GCS Malta group, with your consent.

Retention of Personal Data

Candidates offered employment with one of GCS Recruitment Malta Ltd’s clients:
Relevant personal data of candidates, who would have been offered and have accepted an employment offer and which would have been collected during the pre-employment phase, will be retained according to local legislation.

Candidates offered employment within GCS Malta:
Relevant personal data of candidates, who would have been offered and have accepted an employment offer and which would have been collected during the pre-employment phase, will be moved to the personnel records, and will be retained according to local legislation. Further processing of your personal data may also be required if a work permit is being applied for.

Other Candidates:
All personal data of candidates who have not been offered employment will be held for 5 years from the date of termination of the contractual relationship. Such personal data will be utilised to consider you as a candidate for a potential future role fitting your profile.

Deletion of Personal Data

Your details will be deleted from the recruitment system of GCS Malta after a maximum of 18 months from the date of receipt
of your details. Personal information will however also be immediately deleted upon receipt of written request of
‘deletion of personal information’ by you the candidate.

Storage of Personal Data

Appropriate measures are taken by Us to ensure that all personal data is securely kept internally. Access to personal data
is also limited to authorised personnel within the GCS Malta group, who are bound by a duty of confidentiality. Security of
your data transmission utilising an online means cannot however be guaranteed and remains at the candidate’s own risk.

Your Rights

We aim to ensure that personal data held about you is accurate and up to date. In this respect you also have the right to:

• Request access to your personal data.
• Request that We correct any mistakes in information held about you by Us.
• Request that We delete personal data held about you by Us.
• Request that We continue storing but not further processing your personal data.
• Request that We provide your personal data to you in a machine-readable format and/or that We provide it to another controller.
• Lodge a complaint with the data protection supervisory authority.

If you want to exercise any of these rights you can contact Us on
info@gcsmalta.com.
Requests have to be done in writing and proof of your identity will be required for any amendments and/or deletions of Personal Data.

Diversity, Equity, and Inclusion

We are committed to fostering a diverse, equitable, and inclusive workforce within GCS Malta. This commitment extends to
the recommendations we make on behalf of GCS Recruitment Malta Limited’s clients.

We value and respect the unique experiences, perspectives, and cultural background that each individual brings to our team.
As part of our recruitment process, we are dedicated to ensuring that all candidates are treated fairly and with respect,
regardless of race, colour, religion, gender, sexual orientation, gender identity or expression, national origin, disability,
age, or any other characteristic protected by applicable law.

In line with our DEI initiatives, we may collect certain demographic information from candidates on a voluntary basis.
This information is used solely to monitor and improve our recruitment practices and to ensure compliance with applicable
laws and regulations. The provision of this information is entirely voluntary and will not impact your application or
employment opportunities in any way. All demographic data is stored securely and treated with the highest level of confidentiality.

Non-Discrimination Policy

We strictly prohibit discrimination and harassment of any kind based on any protected characteristic as outlined above.
Our recruitment process is designed to ensure that all candidates have an equal opportunity to succeed, and we implement
fair and unbiased selection practices.

Contact

Any queries about this Privacy Notice or about information which We hold about you are to be sent to:
info@gcsmalta.com.

Changes to our Privacy Notice

GCS Malta reserves the right to amend this Privacy Notice. Any changes made to our Privacy Notice will be posted on this page.