Candidates Privacy Notice

CANDIDATES PRIVACY NOTICE

[Last Updated: November 4, 2026]

This Job Candidate Privacy Notice (“Notice”) describes what Personal Information (as defined below) we, Natasha Denona Ltd., together with our affiliates and subsidiaries, (“Company”, “we” or “us”) collect and process on job candidates and applicants (“Candidates”, “you” or “your”) during the recruitment process and thereafter, if applicable. This Notice applies to Candidates in the territory where we offer job opportunities, and is subject to applicable data protection laws, including without limitation, the Israeli Privacy Protection Law 5741-1981 (“IPPL”), and the relevant US states privacy laws (“Data Protection Laws”).

This Notice applies to the processing, sharing, and storing of Personal Information (as defined below) during, or after, the hiring process, and is in addition to, and does not replace any other policy, including without limitation, the Privacy Policy governing the use of the website.

Please note that you are not obliged by law to provide us with Personal Information. However, we must obtain certain types of Personal Information to process and examine your job application, and without it we will not be able to consider your candidacy. In addition, if following the recruitment process a Candidate is hired or otherwise engaged by the Company, the Personal Information collected through the course of recruitment will be subject to the Company’s internal privacy policies, as provided to its employees and staff members.

The Company is considered the “controller of a database” or “business” (or any equivalent definition under Data Protection Laws) of the Personal Information collected from Candidates. This means that we are responsible for deciding how we process, hold, and use Personal Information about you, as well as for implementing applicable measures in order to secure the Personal Information we store, and where applicable, enable you to exercise your rights.

It is important that you read this Notice, together with any other notices that might be provided on specific occasions when we are collecting Personal Information about you so that you are aware of how and why we are collecting and using such Personal Information. For any questions or concerns you might have regarding your Personal Information please contact us at: cv@natashadenona.com

  1. THE TYPES OF PERSONAL INFORMATION WE COLLECT AND THE PURPOSE

“Personal Information” refers to information that identifies, relates to, or could reasonably be linked with an individual by reasonable means. For example, it could include your name, email address, and other contact information such as your address, telephone number, etc. Personal Information may further include types of information defined under applicable Data Protection Laws as “Data of Special Sensitivity” or “Sensitive Personal Information” (“Sensitive Information”) which may include, financial information (e.g., an individual’s salary data), health related information, etc.

We will collect, store, and use various types and categories of Personal Information about Candidates, which may further include Sensitive Information. Those categories are detailed in the table below. Please note that the specific categories or types of Personal Information collected may vary depending on the position and legal requirements.

This table represents the Personal Information collected by the Company:

TYPES OF PERSONAL INFORMATION PURPOSE OF COLLECTION AND USE
  • Personal identification information: such as name, date of birth, government-issued identification number, and a copy of identification certificate (e.g., ID, passport, SSN).

  • Contact information: such as email address, phone number, and address.

  • Employment history: such as previous employers, job titles, dates of employment, responsibilities, achievements, etc.

  • Education and qualifications: such as information on educational institutions attendance and dates, degrees or certifications obtained, fields of study, etc.

  • Skills, abilities, and expertise: such as information related to the Candidate's relevant competencies, skills, language proficiency, and any other expertise that may be pertinent to the position being applied for.

  • Assessment results: information gathered from tests, interviews, or assessments conducted during the recruitment process to evaluate the Candidate's suitability for the role.

  • Background check information: information obtained through background checks, subject to applicable laws, such as verification of employment and education history.

  • Eligibility to work: information regarding the Candidate's legal right to work in the relevant country, such as citizenship or visa status.

  • Communication and internal records: such as correspondence, and records of phone calls or other interactions between the Candidate and the Company during the recruitment process.

  • Any additional information voluntarily included by the Candidate in its resume (CV), and supporting documents submitted by the Candidate.

  • Job Application evaluation: to assess the Candidate's qualifications, skills, and suitability for the position applied for, and to identify potential matches with other open positions within the Company.

  • Communication: to facilitate our correspondence with the Candidate during the recruitment process, including scheduling interviews, providing updates, and addressing inquiries.

  • Verification and reference checks: to verify the accuracy of the information provided by the Candidate, including employment history, education, and professional references, as well as conducting background checks where necessary.

  • Compliance with legal requirements: to ensure adherence to relevant employment laws, regulations, and industry standards.

  • Eligibility to work: to confirm the Candidate's legal right to work in the relevant country and comply with immigration requirements, if applicable.

  • Decision-making and selection: to facilitate the decision-making process, compare Candidates, and ultimately select the most suitable individual for the position.

  • Record-keeping and documentation: to maintain a record of the recruitment process, including Candidate evaluations, assessments, and decisions, which may be used for future reference or to address potential disputes or legal claims.

  • Administration and performance of human resources related duties, obligations, and procedures.

  • Continuous improvement: to analyze and refine our recruitment strategies, practices, and processes.

  • Sensitive Information, Equal opportunity data: information provided voluntarily by the Candidate related to gender, race, ethnicity, national origin and citizenship, disability and medical or health condition, veteran or military status.

  • Record-keeping and documentation: to maintain a record of the recruitment process, which may be used for internal and external reporting responsibilities (e.g., legal and regulatory requirements), future reference or to address potential disputes or legal claims.

  • Equal opportunity monitoring: We may ask for such information for the purpose of monitoring equal opportunity and ensuring diversity and inclusion.

  • Administration and performance of human resources related duties, obligations, and procedures.

Note that, the Company does not discriminate, either directly or indirectly, on the grounds of sex, sexual orientation, gender, ethnic origin, religion, belief, marital status, nationality, national origin, color, age, or similar protected characteristics.

  1. CATEGORIES OF SOURCES OF PERSONAL INFORMATION

We typically collect Personal Information about Candidates, as follows:

  • Provided directly by the Candidate – this includes information you share when you submit your application, such as your name, email address, postal address, telephone number, age, education history, etc.; and

  • Information provided by third parties – such as recruitment agencies or your references former employers, social networks like LinkedIn, etc.

  1. WITH WHOM WE SHARE YOUR PERSONAL INFORMATION

We may share your Personal Information with third parties, including within our corporate group and with our employees, and service providers that help us with our business operation and human resources related duties, including the recruitment process. We take applicable measures to ensure your Personal Information will be accessed only by those who really need to in order to perform their duties, and to third parties who need such access in order to provide their services as required by the Company and in accordance with our instructions.

Below you can find information about the categories of such third-party recipients:

CATEGORY OF RECIPIENT PURPOSE OF SHARING
Company’s affiliated companies We may share Personal Information within our affiliated companies to manage our recruitment process at the organizational level, and for human resources management. This will include information shared with a third party including by way of merger, acquisition, or purchase of all or part of its assets, your Personal Information may be shared with the parties involved in such event.
Contractors and Service Providers We may disclose Personal Information to our service providers so that they can perform the requested services on our behalf. These entities are prohibited from using your Personal Information for any purposes other than providing us with requested services.
Governmental agencies, or authorized third parties In the event of legal and law enforcement, we may disclose certain Personal Information, such as in response to verified requests relating to criminal investigations or alleged illegal activity, or any activity that may expose us, you, or any other third party to legal liability, and solely to the extent necessary to comply with such purpose.

We may further share Personal Information where and to the extent needed to protect you, or third parties; enforce our policies and agreements or defend our rights, including the investigation of potential violations, alleged illegal activity, or addressing fraud or security issues; as well as in response to disputes, claims, demands, or legal proceedings involving you and us or any third party as required to defend our legitimate interests and as permitted under law. In addition, we may disclose Personal Information to third parties, in the event you request us to do so. In such event, the provision of your Personal Information will be subject to such third parties' policies and practices only.

We will not “sell” nor “share” your Personal Information (as such terms are defined under the Data Protection Laws) with third parties for their marketing purposes, or for other advertising purposes.

  1. INFORMATION SECURITY & CROSS BORDER DATA TRANSFER

We take great care in implementing and maintaining the security of your Personal Information. We employ industry standard procedures and policies to ensure the safety of your Personal Information and prevent unauthorized disclosure or use of any such. In addition, we limit access to your Personal Information to those employees, agents, contractors, and other third parties who have the “need to know”. They will only process your Personal Information on our instructions. We have implemented technical, physical, and administrative security measures to protect the Personal Information we collect and store, including procedures to detect and manage suspected or actual security breaches.

Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorized access or abuse our systems and network, and will not always be able to prevent such access. Subject to applicable Data Protection Laws requirements, we will notify you and the appropriate authorities in the event that we discover a security incident or breach related to your Personal Information.

Due to our global operation, your Personal Information may need to be processed or accessed in countries other than your jurisdiction, in such case the Company only transfers Personal Information to another country in accordance with applicable Data Protection Laws.

  1. DATA RETENTION

In general, we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, administrative, record keeping, or reporting requirements.

The criteria used by us to determine the retention periods are as follows:

  • The type of Personal Information and purpose of the collection – we consider the scope, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means. If and where we no longer have a legal justification for retaining Personal Information, we will delete it or de-identify it so it can no longer be associated with you by reasonable means. Please note that in general, we will maintain records of your CV for a limited period which may be used, subject to applicable law, for further and other recruitment processes.

  • Compliance with our legal obligations – we are required to retain certain types of Personal Information in order to comply with our obligations under applicable laws. In addition, we may retain certain types of Personal Information in the event we are required to do so subject to a binding legal request or a court order.

  • Dispute, claims, and legal proceedings – if you have a dispute with us, we may retain certain types of Personal Information as necessary and applicable to your claims, including any legal proceedings between you and us until such dispute is resolved, and following, if we find it necessary, in accordance with applicable statutory limitation periods. In addition, in the event you request to exercise your rights, we will maintain the applicable correspondence for as long as needed to demonstrate compliance, usually in accordance with applicable statutory limitation periods.

We may further retain your Personal Information where you were not hired, to allow us to reconsider your application for alternative or future positions at the Company, and where required under applicable Data Protection Laws, we will obtain your consent. In addition, we may retain limited Personal Information as a reference for any future applications submitted.

  1. YOUR RIGHTS RELATED TO YOUR PERSONAL INFORMATION

We respect your privacy and your rights to control your Personal Information. You have the right to control and request certain limitations or rights to be executed with regard to the Personal Information we hold and process.

Depending on the applicable Data Protection Laws and your country of residence, these rights may include one or more of the following principal rights:

  • The right to know what Personal Information we collect about you, the purpose of collection, with whom we share your Personal Information, and additional information such as the categories of sources from which the Personal Information is collected – as provided under this Notice;

  • The right to request access to your Personal Information This right entitles you to receive a copy of certain Personal Information we hold about you; and

  • The right to correct inaccurate Personal Information. This right entitles you to have any incomplete or inaccurate Personal Information we hold about you corrected

In addition to the rights listed above, and in accordance with your state of residency or subject to applicable law, you may have additional rights regarding your Personal Information, such as the right to request deletion of your Personal Information or the right to limit the use and disclosure of Sensitive Information. If you wish to exercise your rights, please contact us at: cv@natashadenona.com

We sometimes need to request specific information from you to help us confirm your identity and ensure the requested rights apply to you. Information provided in connection with such request will be processed only for the purpose of processing and responding to your request, and it may be shared with our legal and administrative teams.

If you believe your rights have been violated, you have the right to contact the Israeli Privacy Protection Authority or relevant applicable authority and submit a request for investigation.

  1. AMENDMENTS

We reserve the right to periodically revise this Notice, which will have immediate effect upon posting of the revised Notice. We recommend you review this Notice periodically to ensure that you understand our privacy practices and to check for any amendments.