Privacy and GDPR-agreement

Personal Data Protection Policy – Recruitment

Data Controller

The data controller is, Jerónimo Martins, SGPS, S.A., with headquarters at Rua Actor António Silva, nº 7, in Lisbon, registered at the C.R.C. Lisbon under tax number 500 100 144, hereinafter referred to as Jerónimo Martins, within the scope of the recruitment processes, namely through the job opportunities dedicated area in the website www.jeronimomartins.com and the LinkedIn page www.linkedin.com/company/jeronimo-martins/.

Data collected and purposes

The data collected, with your consent, is the necessary to manage the applications, namely name, email address, telephone number, academic and professional information and CV for the recruitment purposes. Such data will be maintained for a maximum period of three years, at the end of which they will be eliminated.

Minors applications are not accepted.

Within the scope of Jerónimo Martins’ legitimate interest and always safeguarding the rights and liberties of its website users, Jerónimo Martins may also process users’ personal data for the following purposes: i) prevention and detection of fraud, ii) network and information security, iii) development and maintenance of the website, iv) providing technical assistance.

Login with CVWarehouse user

Registration on the platform is not mandatory to register your application. Using a CVWarehouse account facilitates the application process by sharing data which is relevant for the application form. Jerónimo Martins will not have access to your authentication credentials (user or password), being only shared the information published on this platform, that the user consents or according to the privacy settings of this platform.

Data Subject’s Rights and How to Exercise such Rights

Pursuant to prevailing legislation, data subjects have the right of access and rectification, portability and erasure of their personal data as well as the right of restriction of and to object to the processing of their data. When processing is solely on the grounds of user consent, you may also, at any time, withdraw your consent, without affecting the lawfulness of processing to date.

You may exercise any of the aforementioned rights, within the limits stipulated by applicable law, through an e-mail to recruitment@jeronimo-martins.com. You also have the right to lodge a complaint with the Supervisory Authority in Portugal (CNPD).

Security Measures and Communication of Personal Data

To ensure the security of the personal data processed, Jerónimo Martins has implemented the technical and organisational security measures it deems necessary for such processing.

Within the scope of the previously stated data categories and processing purposes, personal data may also be shared with other entities in accordance with: a) applicable legislation, b) compliance with legal obligations, c) or in response to requests from public or governmental authorities.

Personal data collected may be shared with Jerónimo Martins Group companies for the aforementioned processing purposes. The Jerónimo Martins Group, of which the Data Controller is a part, is made up of companies that, as the case may be, are involved in the management of equity holdings in associated companies and providing management services to such companies, as well as food distribution, food and specialised retail, catering, animal husbandry, dairy and aquaculture, located in Portugal, Poland and Colombia.

Within the scope of the previously stated processing purposes, the Data Controller may also use other companies that are part of the Jerónimo Martins Group or partners and external service providers, namely agencies related to content production, management and communication, development, maintenance, hosting and information systems. In either case, the appropriate security measures shall be ensured to safeguard your personal data. The personal data we process may be transferred to entities located in countries outside of the European Economic Area. However, the appropriate and legally stipulated security measures will be ensured when such occurs.

Notwithstanding the situations expressly mentioned in this Policy, the data collected is not transferred to third parties without your consent.

Data Protection Officer

Jerónimo Martins appointed a Data Protection Officer, whom you may contact should you have any doubts related to the processing of your personal data via the following e-mail dpo.portugal@jeronimo-martins.com.

Amendments to the Data Protection Policy

Jerónimo Martins SGPS reserves the right to amend this data protection policy, at any time, the amendments being duly publicised.

Last Updated: 8^th August 2019