I hereby certify that the facts set forth in the above employment application are true and complete to the best of my knowledge. I will produce the original/certified copies of all identification and qualification documents as required by Onyx. I hereby authorize Onyx to verify their accuracy. I hereby release Onyx from any/all liability of whatever kind and nature which, at any time, could result from obtaining and having an employment decision based on such information.

I understand that Onyx may share the information contained in this application with other employees of Onyx for employment and administrative purposes, and I expressly consent to such transfer. I understand that, if employed, falsified statements of any kind or omissions of facts called for on this application shall be considered sufficient basis for dismissal.

I understand that should an employment offer be extended to me and accepted that I will fully adhere to the policies, rules and regulations of employment of Onyx. However, I further understand that neither the policies, rules, regulations of employment nor anything said during the interview process shall be deemed to constitute the terms of an implied or express employment contract.

Onyx - Applicant Data Protection Notice

Pegasus Business Intelligence, LP d/b/a Onyx CenterSource and its affiliates including without limitation Onyx CenterSource Spain, S.A. and Onyx CenterSource AS (together “Onyx,” “we,” “us,” or “our”) respects the privacy of job applicants. This Applicant Data Protection Notice (“Notice”) discloses the privacy practices of Onyx regarding your personal data collected when you apply for a role or vacancy with Onyx, how Onyx uses that information, and with whom Onyx may share it. For the purposes of applicable data protection laws, Onyx is the controller of applicants’ personal data.

Data That May Be Collected. Onyx may collect certain personal data with respect to applicants both directly from the applicant and in certain cases via a third party recruiter (referees or background check providers) including, without limitation: (i) contact information (e.g., name, home and business address, phone numbers, email addresses); (ii) personal information (e.g., date of birth, nationality); (iii) employment and education history; and (iv) any other information which may be voluntarily disclosed by the applicant in the course of the application process. Where Onyx carries out background checks on applicants when allowed by local law and an offer is being made to applicant, this may involve the processing of criminal record data and this will only be processed where such processing is specifically authorized or required by law.

If an applicant applies for a role with Onyx and fails to provide information when requested which is necessary for Onyx to consider the application, Onyx may not be able to: (i) process the application successfully; or (ii) comply with applicable legal obligations.

Purpose and Legal Bases for Processing Applicant Personal Data. Onyx may process applicants’ personal data for the purposes set out below:

Categories of Personal Data	Purpose	Lawful Basis
Contact information, identification information, prior employment/ qualifications history	Making a decision about the applicant’s recruitment or appointment, including the right to work and managing the recruitment process, including assessing the applicant’s skills, qualifications and suitability for the role.	This is necessary to adopt pre-contractual steps during the recruitment process and enter into a contract with applicants (Article 6(1)(b), GDPR)
Contact information, identification information, prior employment/qualifications history	Maintaining records regarding the recruitment process	We have a legitimate interest to ensure that we maintain accurate and comprehensive records regarding the recruitment process (Article 6(1)(f), GDPR)
Contact information	Communicating with the applicant, recruitment agents and other vendors and business associates	Onyx has a legitimate interest to ensure that it communicates promptly and effectively regarding the recruitment process (Article 6(1)(f), GDPR) This is necessary to take steps prior to entering into a contract with the applicant and, when appropriate, perform the contract to which the applicant may be a party (Article 6(1)(b), GDPR)
Contact information, identification information, prior employment/qualifications history and as necessary to fulfil purpose	Carrying out audits and to investigate and resolve complaints, grievances or misconduct	Onyx has a legitimate interest to manage its business (Article 6(1)(f), GDPR) Onyx may have a legal obligation to do so (Article 6(1)(c), GDPR)
	Preparing for and acting in relation to enquiries, investigations or proceedings, by governmental, administrative, judicial or regulatory authorities, including civil litigation	Onyx has a legitimate interest to manage its business and to ensure that all investigations and proceedings are managed efficiently and effectively (Article 6(1)(f), GDPR) Onyx may have a legal obligation to do so (Article 6(1)(c), GDPR)
	Providing reasonable diligence material to a third party or meeting any disclosure obligations in connection with a potential asset or stock sale or acquisition or reorganization of Onyx	Onyx has a legitimate interest to manage its business (Article 6(1)(f), GDPR)
Data concerning criminal convictions and offences
Contact information, criminal convictions and offences data	To the extent permitted by the legislation of the applicants' country, Onyx may process applicant’s data relating to criminal convictions and offences to determine whether an applicant should be offered a role with the organization	Onyx may have a legitimate interest to determine whether an applicant is suitable for a particular role in the organization (Article 6(1)(f) and 10, GDPR)

Disclosure and Recipients. Onyx may disclose certain personal data for the above purposes to the following recipients: (i) to the affiliates responsible for the published job vacancy, for the purposes of managing the recruitment process; (ii) to fraud prevention agencies and law enforcement agencies; (iii) to courts, governmental and non-governmental regulators and ombudsmen; or (iv) as required or permitted by law, including to comply with applicable laws, court orders, or government regulations, or when Onyx believes in good faith that disclosure is legally required or Onyx has a legitimate interest in making a disclosure, such as where necessary to protect Onyx’s rights and property.

Transfer of Personal Data Outside the EEA/UK. Onyx may disclose applicants’ personal data for the above listed purposes to recipients located in countries outside the European Economic Area ("EEA") and the United Kingdom ("UK"), including the U.S., which may not have data protection laws equivalent to those in the EEA. We have put in place appropriate safeguards so your personal data is and remain protected. These may include implementing the Standard Contractual Clauses promulgated by the European Commission regarding data transfers from the EU (the "SCCs") or in performance with the UK International Data Transfer Addendum. You may obtain further information and a copy of the relevant data transfer mechanisms that we have in place via contacting privacy@onyxcentersource.com

Rights of Applicants. Under applicable data protection laws, applicants have a right to (subject to a limited number of exceptions): (i) request access to and rectification or erasure of their personal data; (ii) obtain restriction of processing or to object to processing of their personal data; and (iii) ask for a copy of their personal data to be provided to them, or a third party, in a digital format. Applicants also have the right to lodge a complaint about the processing of their personal data with the corresponding data protection authority.

Verification of Identity – Access. We will ask you for two pieces of personal information and attempt to match those to information that we maintain about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

Authorized Agents

You may designate an agent to submit requests on your behalf. The agent can be a natural person or a business entity that is registered with the California Secretary of State.

If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our verification process. Specifically, if the agent submits requests to access, or know your personal information, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with California law pertaining to powers of attorney

Retention. Onyx will retain applicant personal data for no longer than is necessary for the purposes for which Onyx is processing such personal data and as follows: (i) for the duration of the application process;

(ii) if the application was unsuccessful, after the notice of rejection, for as long as necessary in order to resolve any queries or disputes; (iii) with the applicant’s consent in accordance with the period of time consented to; and (iv) in case of a legal or regulatory obligation requiring us to retain specific records for a set period of time, for that period of time.

Accessibility. We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us at privacy@onyxcentersource.com.

Enquiries, Requests or Concerns. All enquiries, requests or concerns regarding this Notice or relating to the processing of applicant personal data including all requests as detailed in the ‘Rights of Applicants’ section above, should be sent to privacy@onyxcentersource.com

Onyx CenterSource

Commercial

Finance