1. Purpose

At Tekion, we are building the next-generation automotive retail experience founded on transparency and trust. This begins with empowering you. This Candidate Privacy Notice (the “Notice”) explains how Tekion Corp and its affiliates and subsidiaries (“Tekion” or “we” or “us”) collect, use, store, and otherwise process Personal Information relating to candidate (“you”) globally as part of our recruitment process, including when you access or use our careers websites, e.g., https://tekion.com/careers. Where local regulations require deviations from this Notice, those are set out in the applicable jurisdiction-specific Schedule below. The Tekion entity acting as data controller for your jurisdiction is identified in the applicable Schedule.

We encourage you to read this Notice carefully, so you understand how your data is handled during the recruitment process.

This Notice does not cover your use of any third-party websites and applications that you may use, including those to which we link in our websites, or your use of Tekion’s products or services as a customer (for more information, please read our website Privacy Notice at https://tekion.com/privacy/privacy-policy). You should review the terms and policies for third-party websites and applications before clicking on any links.

See SCHEDULE 1 for a full list of all Tekion entities that handle your Personal Information.

2. Collection, Use, and Disclosure of Personal Information

For the purposes of this Notice, Personal Information is any information about you that, either by itself or in conjunction with other information, can be used to identify you (“Personal Information”). Where applicable law uses a different definition (e.g. Personal Information under “GDPR”), that definition applies to you.

Depending on the role you are applying for and the country in which you are located, we may collect the following categories of Personal Information. Not all categories will be collected from every candidate.

2.1. What Personal Information Do We Collect?

We collect and maintain different types of Personal Information that we require to manage our relationship with you. The Personal Information that we collect and maintain may begin at the point at which you apply to work with us.

Personal Information that We collect from You:

1. Your identifiers. This includes your name, date of birth, and contact information such as telephone number, email address, postal address, video images, photograph, video verification/KYC details, and other similar contact data.
2. Demographic information. This includes your age, compensation details and expectations, marital/civil partnership status.
3. Professional or employment-related information. This includes your CV, application form, references supplied by your former employer, interview/assessment performance related data and assessments, personal references and contact details, and other similar contact data;
4. Educational information. This includes your educational history, academic degrees, qualifications, certifications, and skills;
5. Right to work information. This includes citizenship, work permit, visa application information, passport, social security number and other similar right to work data;
6. Sensitive Personal Information. This includes information requiring special handling related to gender, racial and ethnic origin, national origin, veteran status, and health and medical information such as disability status or vaccine status. We collect this information only where permitted or required by applicable law and only to the extent necessary for the purposes described in this Notice. The legal basis for collecting this information varies by data type and jurisdiction and is set out in the applicable Schedule.
7. On-premises monitoring. To the extent permitted by local law, we monitor our workplaces through video-monitoring (e.g., closed-circuit television) and badge scans to ensure the safety of our employees and to prevent theft of Tekion assets and information. Such monitoring may capture your image and voice data when you visit a Tekion facility or office for an in-person interview;
8. Internet or other electronic network activity information. This includes information you submit through applications or software made available to you. If you consent to receive SMS or text messages from us, we will collect your mobile phone number and records of text message communications sent to you through our recruitment platforms in connection with interview scheduling and application updates.
9. Other Information. Any other information that you voluntarily provide directly to us in connection with your application for employment including that which you provide via webform, during an interview, or as other forms of assessment as part of your application process.
10. Inferences. We may draw inferences from the Personal Information listed above, including using AI-assisted tools, to create profiles reflecting your qualifications, skills, and suitability for a role.

Personal Information We Collect from Other Sources:

We may utilize the services of third parties in our business and may receive Personal Information collected by those third parties during the performance of their services for us. Where this is the case, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose your Personal Information to us and we enter into appropriate data processing agreements where required. This includes employment screening agencies, background check agencies, recruiting agencies, service providers, former employers and/or schools and educational institutions, publicly available information on websites and social media, and other third parties where they are legally allowed to share your Personal Information with us.

1. Referred to Us. This includes individuals who may refer you to us and provide your Personal Information, such as your contact details and resume, to us.
2. Combining Personal Information. We may combine the Personal Information we receive from various sources with Personal Information we collect from you and use it for purposes as described in this Notice.
3. Video Recording. We may use videoconferencing and video recording as part of our interview process. You will be notified by through our videoconference tools prior to recording, and such recordings will be securely stored and deleted as per our Data Retention Schedule.
4. Information required for background checks. This includes criminal record checks (where permitted by local law), prior employment verification, driving record, credit history, and other information revealed including your information available on social media platforms, where permitted by local law;

2.2. How Do We Use Your Personal Information?

When you interact with us during our recruitment activities, we use your Personal Information in the following ways:

1. Communicate with you. We use your Personal Information to engage with you, including contacting you during the screening and interviewing process, interview coordination, application status communications and communicating with you through our recruitment activities.
2. With your consent, we may use SMS or text messaging to communicate with you during the recruitment process, including to schedule interviews, confirm appointments, and provide application status updates. You may opt out of receiving text messages at any time by replying STOP to any message or by contacting us at privacy@tekion.com. Opting out of text messaging will not affect your ability to participate in the recruitment process through other communication channels.
3. Engage in our recruitment activities. We use your Personal Information to engage with you in providing, operating, monitoring, and maintaining our recruitment activities. We need your information to (a) assess your skills and suitability for the role (b) evaluate and verify your application and qualifications for employment (c) prepare for and conduct interviews, assessments and screenings (d) prepare contractual and application/employment related documentation (e) support diversity and inclusion efforts at Tekion (f) general recruitment correspondence.
4. Promote the security of our recruitment activities. We use your Personal Information to investigate and prevent fraudulent behavior, unauthorized access related to our recruitment activities and other illegal activities by verifying that the information that we collect about you is true and accurate, such as for reference checks.
5. Develop and improve our recruitment activities. We process your Personal Information for our legitimate business purposes, such as internally evaluating our recruitment process, submitting reports as required by law, and conducting analytics using aggregated data.
6. Legal, Regulatory, Safety and Compliance purposes. We use your Personal Information to comply with laws or regulations, respond to regulatory, court, or government authority requests when necessary for enforcement or protection against harm, resolve legal disputes, and verify work eligibility and right to work in the country of employment.
7. Other purposes. If we need to use your Personal Information for other purposes not described above, we will notify you in advance and ask for your consent.

2.3. Use of Artificial Intelligence and Automated Processing Tools

As part of our recruitment process, Tekion uses enterprise-licensed artificial intelligence ("AI") tools to support our recruiting activities. These tools are subject to contractual data protection commitments from the relevant service providers, and Personal Information processed through them is subject to the same protections described in this Notice.

The AI tools we currently use in recruitment include:

1. AI-assisted application review and candidate screening
2. AI-generated candidate summaries and feedback summaries
3. AI-assisted interview scheduling and coordination
4. AI content assistance for job postings and recruiting communications
5. AI-assisted reporting and analytics
6. AI Candidate Assistant

Human oversight. AI tools are used to support, not replace, human decision-making. Tekion does not make final recruitment decisions, including decisions to reject, advance, or hire a candidate, based solely on automated processing. Where AI tools generate scores, summaries, or recommendations, a qualified member of our recruiting or hiring team reviews that output and makes the final determination.

Your rights regarding automated processing. You have the right to request that your application be reviewed without AI-assisted processing. To exercise this right, please see the relevant option in the consent options on the portal. Requesting manual review will not disadvantage your application. Additional rights regarding automated processing available in your jurisdiction are described in the applicable Schedule. You may also exercise your right to opt out of AI-assisted by submitting a request through our privacy portal at https://tekion-privacy.relyance.ai/ or write to us at privacy@tekion.com.

Personal Information processed through AI tools is subject to the same security safeguards, data sharing restrictions, and retention practices described in this Notice.

2.4. When Do We Share Your Personal Information?

We share your Personal Information with third parties as required by law and as part of our business practices, as described below. We do not sell your Personal Information.

1. Corporate Affiliates. We may share your information with our successors or acquiring entity to Tekion in the event of an organizational transaction such as sales, divestitures, mergers, reorganization, collaboration/joint venture for all or part of its business or as part of Tekion’s regular reporting activities to another subsidiary or affiliate of Tekion (including outside of your home jurisdiction). We will provide you with notice before transferring your Personal Information to the new entity.
2. Service Providers. We work with service providers such as skills evaluation providers, candidate tracking systems, skills assessment tools, and video interviewing platforms, recruiting and HR software providers, recruiting agencies, and consultants to help us with our recruitment activities. Under contract with Tekion, these third parties are authorized to use your Personal Information only as necessary to provide these services or perform them on our behalf.

   We require third-party service providers acting on our behalf or with whom we share your information to provide appropriate security measures in accordance with industry standards and in compliance with this Notice, contractual obligations, their privacy and security obligations, and any other appropriate confidentiality and security measures.

3. Public Authorities, Officials, or Others. We disclose your Personal Information when disclosure is:
   1. Reasonably necessary to comply with any applicable law, regulation, subpoena, legal process, or
   2. Enforceable governmental request.
   3. Necessary to protect or defend Tekion's legal rights or to respond to legal claims.
   4. Necessary to protect against harm to the rights, property, or safety of Tekion, you, or the Public as required or permitted by law.
   5. During emergency situations or where necessary to protect the safety of a person or group of persons;
   6. Where the Personal information is publicly available.

3. International Data Transfers

Tekion operates globally, and your Personal Information may be transferred to, stored in, or processed in countries other than the country in which you are located. These countries may have data protection laws that differ from those in your home jurisdiction.

Where such transfers occur, Tekion takes appropriate measures to ensure your Personal Information receives a level of protection consistent with applicable data protection law. We will maintain appropriate administrative, physical, and technical safeguards to ensure an adequate level of protection of the Information for instance by entering into the appropriate data transfer-agreements and, if required, standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators.

You may request further information about the measures we have put in place for cross-border transfers by contacting us at privacy@tekion.com.

4. Lawful Basis for Processing Your Personal Information

We process your Personal Information only where we have a lawful basis to do so. The basis on which we rely depends on the type of Personal Information, the purpose of processing, and the jurisdiction in which you are located, and may include: the necessity to take steps prior to entering into an employment relationship with you; compliance with a legal obligation; our legitimate business interests where not overridden by your rights; or, in limited circumstances, your consent. Where jurisdiction-specific requirements apply, the applicable lawful bases are set out in the relevant Schedule.

Where we rely on your consent, you may withdraw it at any time by contacting our Data Privacy Officer at privacy@tekion.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal and does not apply where processing continues on another lawful basis.

5. How Is Your Personal Information Protected?

Tekion maintains physical, technical and procedural safeguards that are appropriate to the sensitivity of the Personal Information in question. These safeguards are designed to protect your Personal Information from loss and unauthorized access, copying, use, modification or disclosure.

Despite these safeguards, no method of transmission over the Internet or data storage is fully secure.

In the event of a data breach that affects your Personal Information, we will notify you as required by applicable law and, where a breach poses a significant risk to your rights or interests, without undue delay. Notification may be provided electronically, in writing, or by telephone depending on the circumstances and applicable legal requirements.

6. How Long Is Your Personal Information Retained?

We retain your Personal Information only for as long as necessary to fulfil the purposes for which it was collected, in accordance with Tekion's internal Data Retention Schedule. Retention periods may vary depending on the type of information, the outcome of your application, and the jurisdiction in which you are located.

Where your application is unsuccessful, we may retain your Personal Information for a limited period after the conclusion of the recruitment process in order to: respond to any queries or disputes arising from the process; consider your application for future suitable roles where you have given consent; or comply with applicable legal or regulatory obligations.

Where your application is successful, your Personal Information will be retained as part of your employment record, subject to Tekion's employee privacy notice.

At the end of the applicable retention period, your Personal Information will be securely deleted or anonymized.

7. Your Privacy Rights

Laws in certain jurisdictions may provide individuals with rights relating to Personal Information, such as those listed below. Tekion will honor these rights to the extent required by law. To exercise any of these rights, please contact us at privacy@tekion.com or submit a request through our privacy portal at https://tekion-privacy.relyance.ai/. Additional jurisdiction-specific rights are set out in the relevant Schedule.

1. Right to Access. You can access the Personal Information that we hold about you, including details of why we are processing it.
2. Right to Correct. You can correct Personal Information about you that is inaccurate or incomplete.
3. Right to Delete. In certain circumstances, you may request that we delete your Personal Information. Please note that we may be required or permitted by law to retain certain information, and deletion of your Personal Information may affect our ability to process your application.
4. Right to Withdraw Consent. Where we rely on your consent to retain your Personal Information for future employment opportunities, you may withdraw consent at any time. This will not affect the lawfulness of processing prior to the withdrawal of your consent. At any time, you can request that we stop using Your Personal Information for recruiting purposes.
5. Right to Complaint. We are committed to resolving valid complaints about your privacy and our collection, use, storage, or other processing of your Personal Information. You have a right to raise a complaint with your local data protection authority at any time if you are unsatisfied with our response to your complaint. Contact details for the relevant authority are set out in the applicable Schedule.

Verifying your Identity. We may ask you to provide additional information to validate your identity if you or your authorized agent exercises your privacy rights. The information that we collect will be limited only for verification and only to the extent that we need to confirm your identity or your agent’s authority to act on your behalf.

8. Supplemental Privacy Disclosures for Candidates in Certain Countries

If you are located in, or are applying for a role based in Canada, Germany, the United Kingdom, India, or the United States, the below applicable Schedules also apply to the processing of your Personal Information under this Notice. To the extent there is a conflict between the country-specific language in each Schedule and this Notice, the applicable Schedule shall control to the extent of that conflict.

Schedule 2: Canada

Schedule 3: Germany

Schedule 4: United Kingdom

Schedule 5: India

Schedule 6: United States

If you are offered and accept a position with Tekion, the Personal information collected during the recruitment process may be incorporated into your employee record and will thereafter be governed by Tekion's Employee Privacy Notice, a copy of which will be provided to you at the time of hire.

9. Revisions to this Notice

We may from time to time make changes to this Notice to reflect changes in its legal or regulatory obligations or in the manner in which we deal with your Personal Information. We will communicate any revised version of this Notice. Any changes to this Notice will be effective from the time the changes are communicated, except for any changes where your consent is required before we can collect, use, share, store or disclose your Personal Information. In those circumstances, the changes will be effective once we have obtained your consent to such change. Changes will apply to Personal Information collected after the effective date of the revised Notice. Where required by applicable law, we will seek fresh consent or provide additional notice to candidates whose data is affected by material changes to the Notice. This Notice was last reviewed as of the Effective Date set forth below.

10. Interpretation of this Notice

This Notice includes examples but is not intended to be restricted in its application to such examples. Accordingly, where the word “including” is used, it shall mean “including without limitation.”

This Notice is a transparency document and does not create or confer upon any individual any rights or impose upon Tekion any rights or obligations outside of, or in addition to, any rights or obligations imposed by applicable privacy laws. Should there be any inconsistency between this Notice and any applicable privacy laws, this Notice shall be interpreted in a way that complies with those privacy laws.

11. Effective Date

July 8, 2026

Schedule 1: Tekion Entities

1. Tekion Corp (United States of America)
2. Tekion Canada ULC (Canada)
3. Tekion Germany GmbH (Germany)
4. Tekion UK Limited (United Kingdom)
5. Tekion India Private Limited (India)
6. Tekion Digital Processing Inc (United States of America)

Schedule 2: Canada

Supplemental Privacy Disclosures for Candidates in Canada

Controller. For candidates located in Canada, the controller is Tekion Canada ULC located at Tekion Canada ULC, 2600 - 1066 West Hastings Street, Vancouver BC V6E 3X1, Canada.

Your Additional Privacy Rights. In addition to the rights described in the main Notice, the following rights apply to candidates in Canada:

1. Right Regarding Automated Decision-Making (Quebec candidates only): If you are located in Quebec and a decision based solely on automated processing of your Personal information produces effects on you, you have the right to:
   1. Be informed that such a decision has been made;
   2. Request that a human review the decision; and
   3. Be informed of the Personal information used and the reasons and principal factors that led to the decision.

   As noted in the main Notice, Tekion uses AI-assisted tools in our recruitment process. These tools support, and do not replace, human decision-making. A qualified member of our recruiting or hiring team reviews all AI-generated outputs before any decision affecting your application is made. You may exercise your right to opt out of AI-assisted processing. To exercise this right, please see the relevant option in the consent options on the portal. Requesting manual review will not disadvantage your application. You may also exercise your right to opt out of AI-assisted by submitting a request through our privacy portal at https://tekion-privacy.relyance.ai/ or write to us at privacy@tekion.com.

2. Right to Data Portability (Quebec candidates only): If you are located in Quebec, you may request that we provide you with a copy of your Personal information in a structured, commonly used technological format.
3. Right Against Discrimination: We will not discriminate against you for exercising any of the rights described in this Notice or this Schedule.

To exercise any of the rights described above, please use the means provided in the ‘Your Privacy Rights’ section of this Notice. We will respond within the timeframe required by applicable law.

Lawful Basis for Processing Personal Information. Under PIPEDA and applicable provincial privacy legislation, the lawful basis for processing your Personal Information is your consent. By submitting your application, you consent to the collection, use, and disclosure of your Personal Information as described in this Notice.

Complaints to Supervisory Authority. If you are unsatisfied with our response to your complaint or if you have questions about your privacy rights in Canada, you have a right to raise questions or complaints through The Office of the Privacy Commissioner of Canada (OPC). The OPC can help individuals and organizations identify, address and report concerns related to possible mishandling of Personal Information. There are numerous ways to connect with the OPC through https://www.priv.gc.ca/en/report-a-concern/, by phone at Toll-free: 1-800-282-1376 or Phone: (819) 994-5444, or mail to Office of the Privacy Commissioner of Canada, 30, Victoria Street, Gatineau, Quebec, K1A 1H3.

Schedule 3: Germany

Supplemental Privacy Disclosures for Candidates in Germany

Controller: For candidates located in Germany, the controller is Tekion Germany GmbH located at Preilmayerstraße 3, 80335 München, Germany.

Your Additional Privacy Rights. In addition to the rights described in the main Notice, the following rights apply to candidates in Germany under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz — BDSG):

1. Right to Object: You have the right to object at any time to the processing of your Personal information where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.
2. Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal information in certain circumstances, including where you contest the accuracy of the data, where processing is unlawful, or where you have objected to processing pending verification of whether our legitimate interests override yours.
3. Right to Data Portability: Where we process your Personal information on the basis of your consent or pre-contractual necessity, and processing is carried out by automated means, you have the right to receive your Personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
4. Right Regarding Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects on you. As noted in the main Notice, Tekion uses AI-assisted tools to support recruitment. These tools support, and do not replace, human decision-making. A qualified member of our recruiting or hiring team reviews all AI-generated outputs before any decision affecting your application is made. You may exercise your right to opt out of AI-assisted processing. To exercise this right, please see the relevant option in the consent options on the portal. Requesting manual review will not disadvantage your application. You may also exercise your right to opt out of AI-assisted by submitting a request through our privacy portal at https://tekion-privacy.relyance.ai/ or write to us at privacy@tekion.com.

To exercise any of the rights described above, please use the means provided in the 'Your Privacy Rights' section of this Notice. We will respond within the timeframe required by applicable law.

Lawful Basis for Processing Personal Information. We process your Personal Information in accordance with the GDPR. The primary lawful basis for processing your Personal Information in the context of recruitment is the necessity to take steps prior to entering into an employment contract with you (Article 6(1)(b) GDPR). We may also process your Personal Information to comply with a legal obligation (Article 6(1)(c) GDPR) or where necessary for our legitimate interests (Article 6(1)(f) GDPR). Where we process sensitive Personal Information, we do so on the basis of your explicit consent (Article 9(2)(a) GDPR).

Complaints to Supervisory Authority. If you are unsatisfied with our response to a complaint, you have a right to raise questions or complaints with the Hessee DPA (Hessischer Beauftragter für Datenschutz und Informationsfreiheit) at https://datenschutz.hessen.de/, by Telephone +49 611 1408 – 0, or at The Hessian Commissioner for Data Protection and Freedom of Information, PO Box 3163, 65021 Wiesbaden (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden).

Schedule 4: United Kingdom

Supplemental Privacy Disclosures for Candidates in United Kingdom

Controller: For candidates located in the United Kingdom, the controller is Tekion UK Limited located at C/O CSC CLS (UK) Limited 5 Churchill Place, 10th Floor, London, United Kingdom, E14 5HU.

Your Additional Privacy Rights. In addition to the rights described in the main Notice, the following rights apply to candidates in the United Kingdom under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018):

1. Right to Object: You have the right to object at any time to the processing of your Personal information where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.
2. Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal information in certain circumstances, including where you contest the accuracy of the data, where processing is unlawful, or where you have objected to processing pending verification of whether our legitimate interests override yours.
3. Right to Data Portability: Where we process your Personal information on the basis of your consent or pre-contractual necessity, and processing is carried out by automated means, you have the right to receive your Personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
4. Right Regarding Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects on you. As noted in the main Notice, Tekion uses AI-assisted tools to support recruitment. These tools support, and do not replace, human decision-making. A qualified member of our recruiting or hiring team reviews all AI-generated outputs before any decision affecting your application is made. You may exercise your right to opt out of AI-assisted processing. To exercise this right, please see the relevant option in the consent options on the portal. Requesting manual review will not disadvantage your application. You may also exercise your right to opt out of AI-assisted by submitting a request through our privacy portal at https://tekion-privacy.relyance.ai/ or write to us at privacy@tekion.com.

To exercise any of the rights described above, please use the means provided in the 'Your Privacy Rights' section of this Notice. We will respond within the timeframe required by applicable law.

Lawful Basis for Processing Personal Information. We process your Personal Information in accordance with UK GDPR and the DPA 2018. The primary lawful basis for processing your Personal Information in the context of recruitment is the necessity to take steps prior to entering into an employment contract with you (Article 6(1)(b) UK GDPR). We may also process your Personal Information to comply with a legal obligation (Article 6(1)(c) UK GDPR) or where necessary for our legitimate interests (Article 6(1)(f) UK GDPR). Where we process sensitive Personal Information, we do so on the basis of your explicit consent (Article 9(2)(a) UK GDPR).

Grievance Redressal. If you have any concerns, complaints, or grievances regarding the collection, use, or handling of your Personal Information under this Notice, we encourage you to contact us first so that we can attempt to resolve the matter directly. To raise a grievance, please contact our Data Protection Officer: Email: privacy@tekion.com.

Please include sufficient details about your concern so that we can investigate and respond effectively. We will acknowledge your grievance within five (5) business days of receipt and aim to provide a substantive response within thirty (30) days. If the matter is complex or requires additional time, we will inform you of the expected timeline and keep you updated on our progress.

If you are not satisfied with our response, you may escalate your complaint to the Information Commissioner's Office as described below.

Complaints to Supervisory Authority. If you think Tekion is processing your data unlawfully, you also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK data protection regulator. More information can be found on the Information Commissioner’s Office website at https://ico.org.uk/. Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom Phone: 0303 123 1113 Website: www.ico.org.uk/make-a-complaint.

Schedule 5: India

Supplemental Privacy Disclosures for Candidates in India

Data Fiduciary: For candidates located in India, the controller is Tekion India Private Limited located at XPC5+MPC, Bagamane Solarium City, 6th, 7th & 8th floors, Neon Building, Kundalahalli Colony, Brookefield, Bengaluru, Karnataka 560037, India.

Your Additional Privacy Rights. In addition to the rights described in the main Notice, the following rights apply to candidates in India under the Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules):

1. Right to Grievance Redressal: You have the right to have your grievances relating to the processing of your Personal information addressed by us. If you raise a grievance, we will respond within the timeframe prescribed under applicable law. To raise a grievance, please contact our Data Protection Officer: Email: privacy@tekion.com.
2. Right to Nominate: You have the right to nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity.
3. Right to Withdraw Consent: You may withdraw your consent to the processing of your Personal information at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Please note that withdrawal of consent may affect our ability to process your application or consider you for future roles.

To exercise any of the rights described above, please use the means provided in the 'Your Privacy Rights' section of this Notice.

Lawful Basis for Processing Personal Information. Under the DPDPA, the primary lawful basis for processing your Personal Information is your consent (Section 6 DPDPA). By submitting your application, you consent to the collection and processing of your Personal Information for the recruitment purposes described in this Notice. In addition, we may process your Personal Information without consent under the legitimate use exemption in Section 7 of the DPDPA, to the extent necessary for purposes related to evaluating your application and assessing your suitability for employment with Tekion.

Schedule 6: United States

Supplemental Privacy Disclosures for Candidates in United States

Controller: For candidates located in the United States, the controller is Tekion Corp, located at 5934 Gibraltar Drive, Suite 201, Pleasanton, CA 94588, United States.

Your Additional Privacy Rights. In addition to the rights described in the main Notice, the following rights apply to candidates located in California under the CCPA/CPRA:

1. Right to Opt-Out of Sale or Sharing: You have the right to direct Tekion not to sell your Personal information or share it for cross-context behavioral advertising purposes. Tekion does not sell Personal information and does not share it for cross-context behavioral advertising.
2. Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you employment consideration, provide a different level of service, or otherwise penalize you for exercising your privacy rights.
3. Right Regarding Automated Decision-Making Technology (ADMT): California's ADMT regulations require businesses using automated decision-making technology for significant decisions, including application screening and hiring, to provide pre-use notice and offer candidates the right to opt out. As noted in the main Notice, Tekion uses AI-assisted tools in our recruitment process. These tools support, and do not replace, human decision-making. You may exercise your right to opt out of AI-assisted processing. To exercise this right, please see the relevant option in the consent options on the portal. Requesting manual review will not disadvantage your application. You may also exercise your right to opt out of AI-assisted by submitting a request through our privacy portal at https://tekion-privacy.relyance.ai/ or write to us at privacy@tekion.com.

To exercise any of the rights described above, please use the means provided in the 'Your Privacy Rights' section of this Notice. For California candidates, we will respond to verified requests within 45 days as required by the CCPA/CPRA, with one permitted extension of a further 45 days where reasonably necessary.