Dolls Kill, Inc, Candidate Privacy Notice

Effective Date: January, 1, 2025

Thank you for your interest in joining Dolls Kill, Inc. ("Dolls Kill," "we," "our," or "us"). Protecting your privacy is important to us. This Notice describes how Dolls Kill, its subsidiaries and affiliates, collect, use, and share the Personal Information of job applicants (referred to herein together as "Candidates," "you," "your," "yours") when you apply for a job with us. It also explains the rights and choices you have relating to your Personal Information and how to exercise those rights.

This Notice is a supplement to our Privacy Policy available at https://www.dollskill.com/pages/privacy-policy. Depending on where you apply for a position with us, additional information may be provided to you. This Notice supersedes any other Dolls Kill privacy-related notices that describe how we collect and use Personnel Personal Information but must be read in harmony with other policies and procedures we maintain that are applicable to data use, data protection, and the appropriate treatment of Personal Information.

Dolls Kill is the data controller responsible for your Personal Information as defined in applicable legislation.

Scope and Applicability

This Notice applies to your Personal Information shared with us through an internal referral, through a job board or agency, or if you apply on our website or in person at one of our locations. This Notice applies regardless of the media on which the Personal Information is stored. Nothing in this Notice shall be interpreted to create a relationship of employment where one does not otherwise exist at law.

This Notice does not cover the following:

• Dolls Kill products and services for consumers - For more information about our products and services for our customers, please see our Global Privacy Policy.

• Dolls Kill employees (not applying for a new position) - Please email hr@dollskill.com  to learn more about our privacy practices regarding the Personal Information of our employees. We do not recruit or hire children under 16, and we do not direct job applicant information toward audiences under 16.

Information We Collect

We collect and process Personal Information for recruitment, interviewing, and hiring purposes as described in this Notice (collectively, "Recruitment Activities"). To learn about your information collection choices, see the "Your Privacy Choices and Rights" section below.

A. Information You Provide to Us Directly

We collect the following information directly from you when you engage with us directly or through one of our authorized application paths and as part of our Recruitment Activities:

• Your academic and professional experience, such as employment history, education history, skills, certifications, awards, accomplishments, recognition, references, license status, interests, skills, professional affiliations, and other relevant career information you choose to provide; and

• Your work eligibility, such as your eligibility to work in the United States where you applied for a job and your start date.

• Your employment information, such as information you have provided directly to us as a current employee when you apply for a new role or information you choose to add to your employee profile such as in our human resources information systems.

B. Publicly Available Information

During our Recruitment Activities, we also obtain information about you from publicly available sources, such as LinkedIn.

C. Information We Collect from Third Parties

We collect information about you from third parties as part of our Recruitment Activities, such as a recruitment agency or job board. The Personal Information shared with us includes:

• Contact information, including your full name, email address, phone number, and mailing address; and

• Your academic and professional experience, such as employment history, education history, skills, certifications, awards, accomplishments, recognition, references, license status, interests, skills, professional affiliations, and other relevant career information you choose to provide.

We take steps to confirm that information we receive from third parties has been collected with your consent or that these parties are otherwise legally permitted to disclose it to us.

D. Information We Collect Automatically

When you submit your application or information online, we may automatically collect the following information about you from your computer or device through cookies, pixels, and similar technologies (subject to choices you have made to opt in or opt out):

• Usage information, such as browser type and settings, usage details, language preferences, and device information, amount of time spent on the application or our website, and information about how you interact with our Recruitment Activities (e.g., clicks, scrolls, mouseovers, internal links, pages viewed, searches, page response times, download errors, and date/time stamps);

• Device information, such as IP address, location, device type, operating system, Internet service provider, mobile network, system configuration information, model, model number, push notification tokens, unique device identifiers, web browser, information about other websites you have visited.

How We Use Information

We use Personal Information we have about you in the following ways:

• Communicate with you - To engage with you, such as to schedule screening and interviewing or to send you a job offer.

• Provide our Recruitment Activities - To provide, operate, monitor, and maintain our Recruitment Activities, such as evaluating and verifying your application and qualifications for employment, preparing for and conducting interviews and applicable screenings, checking references, arranging travel where applicable, or reimbursing you for certain expenses.

• To make your experience more convenient - To deliver the necessary functionality required during Recruitment Activities (e.g., the operation of our website or application platforms); to streamline our processes, to perform testing or research, and improve functionality, quality, and user experience.

• For safety, security, and integrity - To investigate and prevent fraudulent transactions, unauthorized access, and other illegal activities by verifying that the information you and others provide is true and accurate, such as for reference checks, and to troubleshoot technical problems if they arise.

• Develop and improve our Recruitment Activities - For legitimate business purposes, such as internally evaluating our recruitment process, resource planning, talent management, reporting, and analytics.

• Legal, Regulatory, Safety, and Compliance purposes - To comply with laws or regulations or legal obligations such as pursuant to subpoenas or court orders, or to protect and enforce our legal rights, or to protect you, us, or others against injury or harm, resolving disputes, and to review compliance with applicable usage terms, such as work eligibility in the United States.

• Other purposes - For other purposes about which we notify you in advance or for which we receive your consent, to protect individuals' vital interests or for conducting other business initiatives as described when collecting your Personal Information or any specific purpose not listed above as otherwise permitted by law.

How We Share Information

We share your Personal Information with third parties as required by law and with:

A. Affiliates

We share information we have about you with our affiliates. If your Personal Information is shared or transferred to a party unaffiliated with us as part of a merger, acquisition, or sale of all or a portion of our assets, we will provide you with notice before transferring Personal Information we have about you to the new entity.

B. Service Providers

We share your Personal Information with external service providers we rely on to provide various tools or services such as outside counsel, cloud service providers, software, platform, application, system, and tool providers, recruiting service providers, headhunters, and recruiting agencies, and other third parties with whom we have contractual relationships ("Service Providers"). Service Providers will be given limited access to your Personal Information as is reasonably necessary to deliver the services they are engaged to provide. They are required by law and our contracts to safeguard your Personal Information and process it only based on our instructions.

C. Legal Requests and Public Authorities

Subject to receipt of a formal request under the process of law, such as a warrant or subpoena, we may disclose your Personal Information to comply with applicable law, regulation, legal process, or enforceable governmental request. We may seek protective orders, confidentiality agreements, redacting of Personal Information prior to production or disclosure, or pursue other legally permissible means to protect your Personal Information.

Safeguarding Your Personal Information

We care about protecting your information, so we employ physical, technical, and administrative safeguards designed to help keep it safe, including encryption and techniques to reduce the ability to identify an individual in some cases. Since no data transmission over the Internet or other network can be guaranteed to be 100% secure, we cannot and don't guarantee the security of any information. We require suppliers and other third parties that we share Personal Information with for the purpose of providing us with services to apply substantially similar protections and act in compliance with applicable data protection laws.

Your Privacy Choices and Rights

We believe in giving you choices about how your Personal Information is used. The laws that govern what Personal Information may be shared and how these rights are administered may differ depending on your location.

A. Your Choices

Where appropriate or legally required, we describe how we use the Personal Information collected, so you can make choices about your Personal Information. See our Privacy Policy to learn more about your choices.

B. Your Rights

Below are some rights that you may have subject to applicable laws, and information on how you may exercise these rights:

• To request information/confirmation on the processing of your Personal Information or access to your Personal Information.

• To obtain a copy of the Personal Information being processed.

• To request corrections of your Personal Information if it is inaccurate, incomplete, or out-of-date.

• To request, on legitimate grounds, your Personal Information to be deleted.

• To limit or withdraw your consent at any time where the processing of your Personal Information is based on consent.

You can take some of these actions directly on our job application site through your profile or through communications you receive from us, such as an "unsubscribe."

Unless otherwise explained to you in advance, you are not obligated to provide your Personal Information to us. If you decide not to provide your Personal Information, we will not be able to provide you with our recruitment activities. You may also request that we withdraw your application for a specific position without deleting your information.

Cross-border Transfers

Our corporate headquarters is located in Oakland, California. Dolls Kill transfers Personal Information across and within our respective organization within the United States. When Personal Information is transferred to the United States ("U.S."), it will be subject to the laws of the U.S. When Personal Information is transferred to the United States (“U.S.”), it will be subject to the laws of the U.S.

If you provide us with your Personal Information, we may transfer the Personal Information to servers or databases located in other states, provinces or countries including where we rely on hosting services providers, third party service providers, call centers, help desks and the like. Staff, agents and Service Providers accessing these databases and applications may be based in countries other than your country of residence. Some of these countries may have different data protection laws than the country in which you initially provided the information to us. If you do not want your Personal Information transferred to other countries, please do not submit any information to us.

We comply with laws governing the international transfer of Personal Information by establishing adequate safeguards through the execution of legally required data protection agreements incorporating, where applicable, standard contractual clauses approved for use by the European Commission for the EEA, the United Kingdom, Swiss government and/or the Brazilian Data Protection Authority.

Changes to This Notice

This Notice may be modified at any time and for any reason. We periodically review and update this Notice to describe changes to our practices. You can determine when this Notice was last revised by referring to the "Updated" date at the top of this Notice. We encourage you to review the Notice whenever you interact with us to stay informed about our privacy practices and the ways you can help protect your privacy.

Contact Us:

Please use the contact information provided to you at the time of your application or at hr@dollskill.com if you wish to cancel your application.