Privacy Policy

SkyShowtime Applicant Privacy Notice

SkyShowtime is committed to protecting the privacy and security of your personal information.

This privacy notice applies to the processing of personal data that you provide during your recruitment process with SkyShowtime (this includes registration of interest for future roles, application for specific roles, assessment, selection, hire and on-boarding). In this privacy notice, we will explain to you:

• Who we are

• Types of information we process and where it comes from

• How we use your information

• How we share your information and transfer it outside the UK and EU

• How long we keep your information

• Your data subject rights

• Contacting SkyShowtime

• How to raise a complaint

• Changes to this Privacy Notice

Depending on the company you’re submitting your application or registration of interest to, your personal data may be processed by the following controllers:

UK - SkyShowtime Ltd

Denmark - SkyShowtime Denmark, filial af SkyShowtime

Hungary - SkyShowtime CE Europe Kft

Netherlands - SkyShowtime Netherlands

Poland - SkyShowtime Poland sp z o o.

Spain - SkyShowtime Iberia S.L.

In this notice, we will use the terms “SkyShowtime”, “we”, “us” and “our” to refer to the company to which you have submitted an application or registration of interest, and also other SkyShowtime companies.

We will collect data directly from you when you communicate with us during the recruitment process (including your name, email address, phone number and any other information you choose to include). We may also collect data about you indirectly, where you have made it publicly available on external sources such as LinkedIn and job boards, but we will only continue to process this data if you agree.

The types of data we process will vary according to the country in which you are applying for a role and the stage of the recruitment process you reach.

The kind of information we may hold includes, where applicable:

• Name and contact information (such as your home address and telephone number).

• If you choose to provide it, your preferred name, marital status, disability information, ethnicity, gender identity, religion and sexual orientation, for the purpose of diversity and inclusion monitoring.

• Credentials (email address, username and password) required for you to create an online account to apply for roles and manage your application.

• Previous or current work experience (such as start date, employer and responsibilities).

• Education history and certifications held.

• Information required to offer you a role where your application is successful, including your national and/or government ID(s), date of birth, primary nationality and gender, and your citizenship status and proof of right to work in the relevant territory.

• Information required to complete the hire and on-boarding processes where you have accepted an offer, including your passport, visa status, bank details and emergency contact details.

You are under no statutory or contractual obligation to provide data to SkyShowtime during the recruitment process. However, if you do not provide the information, we may not be able to complete the recruitment process and your application will be rejected. In some cases, we may also be prevented from complying with our legal obligations (such as for diversity monitoring reporting

requirements).

Your personal data is used by SkyShowtime during the recruitment process for the following purposes and legal bases:

• Reviewing your skills, experience and interests and assessing your suitability for specific roles you apply for and where you have registered your interest for roles.

• Contacting you about the recruitment process including for the purposes of market research (including via SMS).

• If shortlisted for a role, sharing your data with the hiring managers to allow them to carry out the recruitment process. We will only pass on data necessary for the hiring manager to make a decision about whether to select you for the position. This data will not include any sensitive data (such as health or criminal record history).

• Selecting candidates for roles based on personal data and considering specific attributes such as previous experience, if relevant.

• Depending on the role you have applied for, our HR team may ask you to complete pre-employment vetting with a third-party provider, including credit reference and criminal record checks, address verification, confirmation of academic qualifications, and requesting employer or other references from people or companies that you have provided in your application. If the vetting is successful, we will share your data with our colleagues in HR to enable an offer of employment to be made and for on-boarding purposes.

• For the fulfilment of specific obligations laid down by law, company regulations, collective agreements, national and EU regulations and arising from provisions ruled by authorities.

• For reporting purposes when required to do so by law. This may include voluntary equality information and your data will be aggregated and anonymised for these purposes wherever possible.

• Collecting information to produce meaningful equal opportunity, diversity and inclusion monitoring and reporting, and to view our progress to becoming a diverse and inclusive workforce. It is your choice whether you provide SkyShowtime with your diversity and inclusion data. By choosing to provide us with this data, you consent to this processing. If your application is successful, your diversity and inclusion data will be transferred to your permanent HR record.

• Retaining your data in the Talent Community in order to review your skills, experience and interests and assess your suitability for roles you may not have specifically applied for but for which you may be suitable.

• For the prevention and repression of illegal acts, and the protection of the legitimate rights and interests of SkyShowtime and/or third parties, including legal proceedings and defences in court.

• To manage, monitor, assess and improve our recruitment process. Wherever possible, your data will be aggregated and anonymised for these purposes.

• To process the data you have made available on public sites such as LinkedIn, social channels and job boards in order to contact you about joining our Talent Community.

We care deeply about your privacy and do everything we can to protect your data. For this reason, we share your data only when strictly necessary and only with those who help us to offer you a better service. The information you provide during the recruitment process may be shared with the SkyShowtime’s Recruitment and HR teams, and:

• Employees, managers and/or collaborators of SkyShowtime in their capacity as internal data controllers and/or administrators.

• Other companies in the Sky Group, Paramount Global Group, and Comcast Group.

• Suppliers that provide services and activities on behalf or in support of SkyShowtime, such as: employment agencies and consultants, management and maintenance of website content, management of information technology systems, payroll data processing services, documentation storage, accountants, personnel accounting management services, health service providers, insurance companies, IT companies, job security companies, brokerage agencies, training companies, freelancers, etc. Where these suppliers act on our behalf, they must only process your personal data in accordance with our instructions.

• Competent authorities when required to do so by law, regulation or court order.

Your information may be held:

• by SkyShowtime or on systems operated on behalf of SkyShowtime by our data processors;

• by our recruitment partners, such as Reform Legal; or

• by our survey and onboarding partners, such as Pinpoint.

We may transfer the personal information we collect about you to countries outside of the UK and European Economic Area (“EEA”). Where the country has not been deemed by the UK and/or the EU to provide an adequate level of protection for your personal information, we will only transfer the data in a way that is consistent with and which respects the UK and EU laws on data protection. Most commonly we will rely on standard data protection clauses under Article 46(2) GDPR and the UK Information Commissioner’s Office’s International Data Transfer Addendum.

You may request a copy of the safeguards in place for protecting your data in the context of international data transfers by contacting us at: privacy@skyshowtime.com.

We will only retain your personal data for as long as necessary for the purposes described in this Applicant Privacy Notice, including for the purpose of satisfying legal and reporting requirements. To determine the appropriate retention period for applicant personal data, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process the personal data and whether we can achieve those purposes in other ways, the applicable legal requirements and our legitimate interests. For information about specific retention periods, please refer to our Data Retention Policy.

You have the following rights in relation to your personal data:

• To request access to, erasure of, and/or correction of the personal data we hold about you.

• To request us to restrict the processing of the personal data we hold about you.

• To object to us processing personal data relating to you.

• Where you have given us consent to process your personal data, to withdraw that consent at any time.

• To obtain certain personal data from us in a format that can be transferred electronically to a third party (also known as “data portability”).

Please note that some of these rights are not absolute, and whether you can exercise your right depends on the circumstances. We will keep you informed throughout the process.

You may update, correct or modify the information you have submitted during the recruitment process, or withdraw your consent where your data is processed on the basis of consent, at any time either by logging back into the online portal or by contacting us using the details below.

All data held by SkyShowtime is processed in accordance with all applicable data protection laws, meaning that the data will only be processed and retained for the purposes for which it was originally collected.

You can contact us using the details below if you wish to find out more about how to exercise your subject rights.

If you have any queries or comments about this Privacy Notice, please contact your local HR team. Alternatively, you may also contact our Legal team as follows: privacy@skyshowtime.com.

Our Data Protection Officer is Bird & Bird and their contact details are as follows:

Address: Bird & Bird DPO Services SRL, Avenue Louise 235 box 1, 1050 Brussels, Belgium

Email: DPO.SkyShowtime@twobirds.com

If you wish to make a complaint about how SkyShowtime uses your information, please contact the Legal team on the above email address and we will do our best to help.

You also have the right to lodge a complaint to the supervisory authority about our processing of your personal data with the relevant supervisory authority of your respective country in the country where you live (if that is an EU/EEA Member State) or in the country SkyShowtime is based (if you live outside the EU/EEA). For the EU/EEA, you can identify the relevant supervisory authority of your respective

country at: https://edpb.europa.eu/about-edpb/about-edpb/members_en. For the UK, you can contact the Information Commissioner’s office: https://ico.org.uk/make-a-complaint/.

Last updated: April 2023