Introduction.

As part of our recruitment process, we will process your personal data, as set out in this
Recruitment Privacy Notice. Sonion is data controller with respect to the personal data collected
and processed as part of the recruitment process.

Your personal data.

In order to evaluate your application, we will process the information, including the personal
data, which you have disclosed in your motivation letter and resume. We will also evaluate your
performance and competencies during potential interviews. The legal basis for our processing
of your personal data is your request for our evaluation of your application prior to the potential
execution of an employment contract in accordance with the General Data Protection
Regulation article 6(1)(b).

Further, we might search the internet for relevant and available information, hereunder also
content from social media and will typically involve information regarding your previous jobs,
activities, competencies, performance, as well as your general appearance.
If the job position requires you to complete personality tests or similar you will be informed
hereof. The results of such tests will be treated confidentially but will be included in our
evaluation of your application. Our legal basis for such processing of personal data is the General
Data Protection Regulation article 6(1)(b).

We may also request that you provide us with a copy of your criminal record or a certificate of
conduct, depending on the position for which you are applying. Such information will also be
treated confidentially. In such case we will ask for your consent, whereas our legal basis for such
processing of personal data is the General Data Protection Regulation article 6(1)(a).
As part of our evaluation of you and your application, we may wish to take references from your
previous and/or current employers. We will only take up references if you have consented
hereto. In such case we will ask for your consent, whereas our legal basis for such processing of
personal data is the General Data Protection Regulation article 6(1)(a).

If the position in question involves financial responsibilities (e.g. bookkeeping or accounting),
we might – after a concrete assessment – collect information about your credit rating. Our legal
basis for such processing of personal data is the General Data Protection Regulation article
6(1)(f), where our legitimate interest is to verify your financial reliability given the nature of the
position.

We recommend that you do not disclose sensitive personal data, such as information revealing
racial or ethnic origin, religion, trade union membership, sexual orientation, health, etc. in your
application. In the unlikely event that a certain health condition is required for the ability to
perform the duties related to the position in question, we might – after a concrete assessment
– request health information from you. In such case we will ask for your consent, whereas our
legal basis for such processing of personal data is the General Data Protection Regulation article 9(2)(a).

The provision of personal data as part of your application is not a statutory or contractual
requirement. However, failure to provide necessary information may affect our ability to
consider your application for the relevant position.

Storage of your personal data.

If you are offered a position with Sonion, your motivation letter, resume and additional personal
data obtained during the recruitment process will become part of your employee file.
If you are not offered a job, we will store your motivation letter, resume and additional personal
data obtained during the recruitment process for a period of 4 weeks following our rejection
unless you have provided your consent to the storage hereof for a longer period of at maximum
1 year.

Any consent that you may have provided during the application and/or recruitment process may
be withdrawn at any time by contacting us.

Your personal data may be shared with other group companies in case the vacancy holder
(manager involved) is located in another group company. Such group companies include
companies situated in countries outside the EU/EEA which may not ensure an adequate level of
data protection as countries within the EU/EEA. In such case, the transfer will be based on the
EU Commission’s Standard Contractual Clauses in order to ensure an adequate level of data
protection with respect to such transfers.

We may also share your personal data with external service providers (such as recruitment
platforms, assessment providers, and background check agencies) who process data on our
behalf. These processors are bound by data processing agreements and are only permitted
to process your personal data in accordance with our instructions.

You have a right of access to the personal data processed about you, subject to certain statutory
exceptions. Furthermore, you can object to the collection and further processing of your
personal data. In addition, you have the right to request that any processing is limited, that your
personal data is corrected, if necessary, or under certain circumstances deleted.

In certain situations, you may also request that we provide you with an overview of your
personal data in a structured, commonly used and machine-readable format and request us to
transmit such data to another data controller.

Rights.

If you want to exercise any of your rights or if you have any questions regarding this privacy
policy or the processing of your personal data, you may contact us at jobsatsonionnl@sonion.com.

If you have any complaints regarding the processing of your personal data, please contact us at
jobsatsonionnl@sonion.com. You also have the right to lodge a complaint with the Danish Data
Protection Agency (Datatilsynet) or another competent supervisory authority

Last updated: August 2026