APPLICANTS PRIVACY NOTICE

DOTCOM GROUP COMERCIO DE PRESENTES SA, headquartered in the city of São Paulo / SP, at Doutor Geraldo Campos Moreira Street, nº 240, 7th floor, set 71, Cidade Monções, Postal Code 04.571-020, registered with CNPJ / MF under nº 05.753.951/0001-55 and AVENUE HOCHE COMÉRCIO VAREJISTA DE PRODUTOS LTDA., Headquartered in the city of São Paulo / SP, at Doutor Geraldo Campos Moreira Street, nº 240, 11th floor, sets 111 and 112, Cidade Monções, Postal Code 04.571- 020, registered with CNPJ / MF under nº15.048.124/0001-14 (together “Sephora,“ we” or “our”), attaches great importance to the protection of personal data relating to its employees, apprentices, interns, work-experience students, temporary works and representatives (hereinafter ‘you‘).

Sephora respects your concerns relating to the protection of your privacy and your personal data. This Applicants Fact Sheet (hereinafter referred to as the “Fact Sheet”) describes how we use information about you collected when you apply to join Sephora.

This Applicants Fact Sheet contains information regarding the nature and the use we make of your personal data, as well as your rights relating to this use.

This Applicants Fact Sheet is therefore an important resource for you, helping to ensure that you have a positive and confident experience of Sephora’s handling of your personal data and enabling us to provide accurate and complete answers to any questions you may have and to take account of your wishes in this area.

In order to give this requirement to ensure protection of your personal data - and that of our clients - the priority it deserves, Sephora has decided to designate a Data Protection Officer  (hereinafter “DPO”),  who may be contacted at the following address: encarregado@sephora.com

1.      Modification of the Fact Sheet

We may occasionally wish to modify the terms of this Fact Sheet. In such an event, we shall notify you of this by changing the date indicated at the beginning of this document, which is permanently available for consultation through your applicant space (We are Sephora or any other communication resource relating to Sephora recruitment). We would encourage you to consult the Applicant Sheet on a regular basis, in order to keep abreast of the procedures implemented by Sephora for processing your personal data, as well as the methods by which you can send us inquiries regarding our use of the data.

2.      Why do we collect your personal data?

Sephora collects and processes your personal data for the following purposes:

(i) management of your application for employment;

(ii) management of the job offers for which you may be suited;

(iii) compilation of statistics regarding Sephora employment opportunities;

(iv) to conduct the process of selecting the candidates and arrange the interviews, analyze the information and suggest who are the most qualified candidate.

These processing arise from Sephora’s fulfilment of its statutory and contractual obligations and from Sephora’s legitimate interests in its capacity as a recruiter.

3. What type of personal data do we process?

We only process data that is strictly necessary for the purposes described in paragraph 2.

We collect your personal data when you send your curriculum vitae, whether online or in paper form, or when you apply for employment by indirect means, for example via an agency or recruitment firm, and more generally throughout the Sephora recruitment process.

For your information there follows a list of the categories of your personal data that we may process, depending on the purposes to be achieved by this processing:

·     data relating to your civil status and identity, such as: surname and forename, address, telephone number;

·     data relating to your educational and professional background, such as: training, professional experience, references, distinctions; and

·     data enabling connection to IT equipment.

The information we collect that are required in order to process your application are marked with an asterisk on the forms presented for you to complete on our online recruitment platform. If you do not complete these mandatory fields, we shall be unable to process your application. In the case of other forms of application, if Sephora has been unable to identify the information required in order to process your application, Sephora reserves the right to re-contact you in order to collect the missing information.

4.      Who can access your personal data?

Within the Groupe Sephora, your personal data are only accessible to those individuals who need to use it in order to carry out their respective duties.

More specifically:

o   Within the company:

§ Employees in Sephora’s HR department;
§ Employees in Sephora’s recruitment department;
§ Sephora’s IT department, for the purposes of maintenance;

o   Outside the company:

§ Groupe LVMH’s HR department;
§ The HR departments of the Groupe Sephora subsidiaries and / or of Groupe LVMH; and  

§ Service providers working for Sephora and involved in achieving all or some of the purposes set out in paragraph 2.

In particular, for purposes connected to maintenance of the IT systems, your personal data may be accessible to Sephora employees or to the employees of external providers of certain IT services. These employees shall only be able to access your data in order to carry out maintenance activities on the IT systems. They shall carry out their duties in accordance with Sephora’s instructions and in total compliance with the legislation on personal data.

5.      Where are your personal data stored?

As Sephora is part of an international group, your personal data (as described in paragraph 3) may be transferred to organizations within Groupe Sephora (parent company and subsidiaries) located outside Brazil, and more specifically in the following countries: Saudi Arabia, Canada, United Arab Emirates, Italy, Monaco, Czech Republic, Slovenia, Russia, Australia, China, Spain, Kuwait, Poland, Romania, Switzerland, Hong Kong SAR, Bahrain, Croatia, USA, Luxembourg, Portugal, Serbia, Thailand, Denmark, Greece, Malaysia, Qatar, Singapore, Turkey, France, to organizations within Groupe LVMH (parent company and subsidiaries), and to external service providers.

These transfers are carried out within the context of management of recruitment within Groupe Sephora and Groupe LVMH for the purposes set out in paragraph 1 above. The processing activities carried out are: organization, reading, inputting, adaptation or modification, extraction, use, communication, deletion and destruction of your personal data.

Given the fact that some of these countries does not ensure an adequate level of protection of personal data as in the European Union, Sephora shall in accordance with applicable regulations, ensure the protection of your personal data as follows:

-        within Groupe Sephora, through adoption of Binding Corporate Rules (or “BCR”) applicable in each of its subsidiaries; and

-        with its external service providers, through the implementation of standard contractual clauses.

Copies of these documents may be obtained by sending an email to the following address: encarregado@sephora.com or rh.lgpd@sephora.com.

6.      How long do we store your personal data?

Sephora keeps your data for a maximum period of 2 years after the last contact between Sephora and yourself. In this way we will be able to re-evaluate your application if a similar post becomes vacant and Sephora believes it may interest you.

7.      Your rights

As specified in the legal provisions applicable in this area, you, as a data subject, have the following rights:

Know if we process any of your personal data;

Know what personal data about you are processed by us;

Correct incomplete, inaccurate or outdated data, by the means required by specific regulations, when necessary;

Request the anonymization, blocking or elimination of unnecessary, excessive or data that, by chance, have been processed in non-compliance with the law;

Request data portability from another service or product provider;

Request the deletion of data processed with or without your consent;

Obtain information about the public or private entities with which we share your data;

When the processing activity requires your consent, you can refuse to consent. In that case, we will inform you about the consequences of not carrying out such an activity;

When the processing activity requires your consent, you can revoke it at any time.

We would invite you to exercise these rights by writing to the following address: rh.lgpd@sephora.com or by contacting the DPO at this address: encarregado@sephora.com

Finally, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD). We would however suggest that you first send us any claims via the DPO, so that we can deal with your questions and work together to find solutions that will resolve any issues you may have.

We would however suggest that you first send us any claims via the DPO, so that we can deal with your questions and work together to find solutions that will resolve any issues you may have.

8.      Notification of changes

We will keep you informed of any modifications to our Applicants Fact Sheet.

This Applicants Fact Sheet was last updated and revised on June 7, 2020.