GACC TALENT NETWORK DATA PROTECTION AND PRIVACY POLICY

GACC Talent Network – Data Privacy Notice

This data privacy notice is provided in connection with the processing of your personal data for registration in our Talent Network database. GACC online service is committed to protecting the privacy of our users. We aim to provide a safe and secure user experience in compliance with applicable laws and regulations, particularly the EU General Data Protection Regulation (GDPR). We ensure that the information you submit to our website at www.gacctalentnetwork.com is used only for legitimate recruitment and career services purposes.

Controllers

The following entities jointly determine the purposes and means of processing personal data within the GACC Talent Network and therefore act as joint controllers in accordance with Article 26 GDPR:

German American Chamber of Commerce of the Midwest, Inc. (GACC Midwest) 150 North Michigan Avenue, 35th Floor, Chicago, IL 60601, USA Tel.: +1 (312) 644-2662 E-Mail: info@gaccmidwest.org Website: www.gaccmidwest.org

German American Chamber of Commerce of the Southern U.S., Inc. (GACC South) 271 17th Street, NW, Suite 1750, Atlanta, GA 30363, USA Tel.: +1 (404) 586-6800 E-Mail: info@gaccsouth.com Website: www.gaccsouth.com

German American Chamber of Commerce, Inc. (GACC New York) 120 Wall Street, 20th Floor, New York, NY 10005, USA Tel.: +1 (212) 974-8830 E-Mail: dataprivacy@gaccny.com Website: www.gaccny.com

The three GACCs each independently determine their own recruitment processes, job postings, and candidate selection. However, they share the BreezyHR platform for technical administration. Designated admin users in each GACC may have access to the combined system for technical, support, or oversight purposes. Each of the GACCs maintains its own general Data Privacy Statement regarding the information collected on its respective website. You can find these statements at: - www.gaccmidwest.org/us/legal-information (GACC Midwest) - www.gaccsouth.com/us/legal-information (GACC South) - www.gaccny.com/en/privacy/ (GACC New York)

The GACCs have entered into an arrangement pursuant to Article 26 GDPR which allocates responsibilities for compliance with the Regulation, including the exercise of data subject rights and the provision of information. Under this arrangement all GACCs remain jointly responsible for ensuring that processing complies with the GDPR and that data subject rights can be exercised effectively with respect to any of them. Upon request, you may obtain further information on the essence of this joint controller arrangement by contacting any of the GACCs.

EU Representative

The representative of the GACCs in the European Union is:

Deutsche Industrie- und Handelskammer (DIHK) Breite Straße 29 D-10178 Berlin, Germany Tel.: +49 (0)30 20308-0 Fax: +49 (0)30 20308-1000 E-Mail: ahk-vertreter@dihk.de

Information We Collect and How We Use It

Your personal details, including your name, e-mail address, and résumé, are stored and used by us for the following purposes: 1. Matching your qualifications and skills to open positions at the relevant GACC (Midwest, South or New York,) and its external clients. 2. Keeping you informed about job opportunities through our Talent Network (e.g., job alerts). 3. Improving our website and user experience to provide the most relevant information. Your data is processed outside of the EU, namely in the United States, through an online web application. Because of this, full guarantees of confidentiality, integrity, and availability cannot be provided. You may submit your résumé either for a specific advertised position or for future consideration. Résumés are stored online within the database and accessible only to authorized recruitment staff of the relevant GACC. You may update your résumé at any time by contacting the respective GACC; your previous version will then be replaced. Legal Basis The collection, storage, and use of your data are based on the necessity to perform the Talent Network or recruitment services (Article 6(1)(b) GDPR) or, where applicable, your explicit consent (Article 6(1)(a) GDPR). For maintaining a candidate pool or sending job alerts, processing may also rely on legitimate interest (Article 6(1)(f) GDPR), provided your rights are not overridden.

Disclosures of Your Information

Your information is shared with Breezy HR, Inc., which provides the staffing platform used to manage the Talent Network. Breezy HR acts as a processor under a data-processing agreement and is GDPR compliant. Its privacy statement is available at https://breezy.hr/privacy. We may disclose your information to regulatory or law-enforcement authorities where required by law.

The GACCs will not forward your résumé or other personal data to external clients without your express consent. If your profile matches a client’s opening, the relevant GACC will contact you first to confirm your interest before sharing any information.

Designated admin users in each GACC may have access to the combined system for technical, support, or oversight purposes.

Storage Period

Your data will be stored in the GACC Talent Network database for up to 24 months, except for résumés which are stored for 12 months. If no renewals or extensions are requested, the data will be automatically deleted after the applicable period.

Objecting to Data Processing

You may object to processing and request deletion of your data at any time by contacting the relevant GACC. Please note that we cannot provide further Talent Network or career services without retaining the necessary data.

Your Rights as a Data Subject

Under the EU GDPR, you have the right to: - Access your personal data (Art. 15) - Rectify inaccurate data (Art. 16) - Request deletion or restriction of processing (Arts. 17 & 18) - Object to processing (Art. 21) - Data portability (Art. 20), where applicable Requests should be directed to the respective GACC (Midwest, South or New York).: privacy@gaccmidwest.org (GACC Midwest); info@gaccsouth.com (GACC South); dataprivacy@gaccny.com (GACC New York). In any event, if sent to one of the email addresses mentioned above, your request will be forwarded to the appropriate chamber.

Other Websites

Clicking on external links or banner advertisements may take you to other websites with different privacy practices. We recommend reviewing those sites’ privacy statements, as the GACCs are not responsible for data submitted to third parties.

Changes to This Privacy Policy

This privacy notice may be updated from time to time. Any changes will be published here. If you have questions or concerns about this privacy notice, please contact us at one of the following email addresses: privacy@gaccmidwest.org (GACC Midwest); info@gaccsouth.com (GACC South); dataprivacy@gaccny.com (GACC New York).