At Levi9 we value the privacy of your personal data. Therefore, we comply with the General Data Protection Regulation (GDPR). This policy describes who, why and what personal data we process, your rights and contact details for GDPR related requests.

1. Who is interested in processing the personal data (controller): Levi9 Global Sourcing Balkan SRL  
2. The purpose of the processingis: recruitment and selection (for current and future vacancies), background screening, marketing, events and receiving promotional gifts.
3. What data could be collected and processed:

• Contact details (name, surname, contact phone and email address);
• CVs, other documents (cover letters, recommendations, university documents, etc.);
• Photos and videos (if applicable and only on the basis of the consent of the person concerned);
• Residence address;
• History of applications;
• Test results;
• Information related to recruitment processes (e.g. comments);
• Identity card for pre-onboarding process (if applicable);
• Contact persons from previous employers (if applicable).

4. Who we share the data with: we are using TeamTailor platform for the recruitment and selection process in Levi9. In some cases, your profile can be shared with Levi9 customers.

You can check TeamTailor Privacy Policy here: https://www.teamtailor.com/en/privacy-policy/. In some cases, a background screening process can be performed by specialized third parties.

5. Your rights:

• to be informed;
• to access your data;
• to update / rectify the data;
• to be forgotten (erasure right);
• to restrict processing;
• data portability;
• the right to object;
• to restrict an automated individual decision-making.

If you wish to use your above mentioned rights please write us to GDPR-Romania@levi9.com. If you use your right to be forgotten, your data will be automatically deleted in maximum 30 days.

6. In Levi9 we are taking all required technical and organizational measures to protect your personal data. All Levi9 delivery centers are ISO 27001:2022, ISO 27701:2019 and ISO 9001:2015 certified.
7. We will retain your data for a period of 4 years. After this time we will reach out to you again and ask for consent.
8. Contact: for any privacy related questions, requests or to withdraw your consent please send an email to the following address: GDPR-Romania@levi9.com.
9. Changes and updates to this policy: please revisit our Privacy Policy section from our website to check for updates to the current policy. Latest versions of this policy will be presented here.

Last update: 17th of September 2025