Job Applicants Privacy Policy - RightRez - Travel Automation Solutions

Last update: August 2025

Introduction

We at RightRez, Inc.(the “Company” or “we”, “us”, “our”) respect your privacy.

This privacy policy (“Policy”) explains your rights concerning the Personal Information (as such term is defined under applicable laws) we have about you as an applicant for one or more job openings in the Company, whether for a temporary, full-time or part-time job (“Applicant“). It also explains how we collect and use your Personal Information during our recruitment process.

We are committed to protecting our job Applicants’ privacy and rights, and to complying with applicable data protection laws, including the Israeli Protection of Privacy Law, 5741-1981, and the European General Data Protection Regulations (GDPR), as applicable.

This Policy applies to all Applicants’ Personal Information used by the Company, in any medium and format.

The Company is the Controller of the Personal Information for the purpose of this Policy. Our main offices are located at 227 W Grimes Ln, Bloomington, IN 47403, US and 3178 E Wyndam Crt, Bloomington, IN 47401. A “Controller” is the entity that determines the purpose and means of the processing of Personal Information.

You may contact us at privacy@mizetech.com.

How we Collect Personal Information and Why

We will collect and use your Personal Information for the purpose of administering employment applications and for performing necessary recruitment processes prior to making a hiring decision and, where relevant, entering into an employment agreement.

Your Personal Information as an Applicant may include, for example, your name, contact details, physical address, date of birth, LinkedIn profile picture, details of your qualifications, employment history, Information included in your CV or cover letter, job preferences, salary expectations, interview summaries, and home tests’ answers and results.

If you voluntarily provide us with additional Personal Information, such as information about your gender, racial or ethnic origin, health condition or military service, we will process that information as well.

Personal Information may also include recommendation letters, names and contact details for references. Please note that it is your responsibility to obtain consent from your references prior to providing us personal information about them.

You are not under any legal obligation to provide us Personal Information. However, we do need it to consider your job application.

The Company collects Personal Information about Applicants from a number of sources, including directly from you, from references, from the recruiting manager(s), and from third-party recruitment platforms such as LinkedIn, Glass Door and DrushimIL.

Should your application be successful, relevant data will be transferred to our HR information system in accordance with the Company’s internal privacy policy.

Your Personal Information will be Processed for the purposes and on the bases detailed below. We may Process the Personal Information for additional purposes, provided that we provide accordant notice to you, and provided that we receive your consent, if so required.

Purposes	Illustrative Scenario	Example of data categories	Legal Basis under EU law
Reviewing job applications	Reviewing job applications to decide whether to initiate recruitment process	name, contact details, physical address, date of birth, LinkedIn profile picture, details of your qualifications, employment history, Information included in your CV or cover letter, job preferences, recommendation letters and references	Our legitimate interest in properly reviewing your candidacy and making a recruitment decision
Performing a recruitment process	Carrying a recruitment process for Applicants identified as potentially suitable for an open role within the Company	The above information, interview summaries, home tests’ answers and results	Our legitimate interest in performing a successful recruitment process and hiring qualified personnel
Defending or asserting legal claims relating to your candidacy	If you or a third party assert a legal claim against us about how we handled your candidacy	Any of the above Personal Information	Our legitimate interest in asserting or defending legal claims that impact the course of our business or reputation
Retaining your candidacy for future positions in the Company	If you consent to it, we will retain your Personal Information to consider your candidacy for future open roles within the Company. We will contact you once every two years to reobtain your consent to the retention of your Personal Information	Any of the above information	Your consent and our legitimate interest in considering you for other job openings we may have

Sharing your Personal Information

We will share your Personal Information with our HR team and the manager(s) responsible for the recruitment process relating to the role you applied for. We may share some of your Personal Information with our service providers who provide services to us, that require to use your Personal Information for permitted purposes. These service providers operate under our instructions. We ensure that they take adequate measures to protect your Personal Information, inter alia by signing a data processing agreement with us.

Since we operate our business as a corporate group of companies, we also share your Personal Information with the parent company of our corporate group, Yanolja Co., Ltd., for the same purposes set out above.

Where required by law, we will also disclose your Personal Information to competent authorities or courts. The legal basis for this is our legitimate interest in complying with binding requests of authorities or courts.

If a dispute arises between you and us in relation to your candidacy, we will also share your Personal Information with our legal advisors. The legal basis for this is our legitimate interest in asserting or defending legal claims that impact the course of our business or reputation.

Retaining, Securing and Transferring Personal Information

Retention. In accordance with applicable data protection laws, the Company may retain your personal data following the conclusion of the recruitment process for the purpose of considering you for future opportunities. The Company will contact you once every twenty-four (24) months to request your confirmation to continue retaining such data. You may request the deletion of your personal data at any time, and the Company shall comply with such request, subject to any applicable legal obligations or overriding legitimate interests.

We will also retain your information to consider your candidacy for future open roles within the Company, if you consent to it. We will contact you once every two years to reobtain your consent to the retention of your Personal Information for this purpose. If you refuse to further grant your consent, we will delete from the pool of applicant information we use for open roles.

International transfers. Your Personal Information may be stored in various locations around the globe, including in the U.S. and in Israel, by the Company or by our service providers. The transfer of personal data outside your country will be done in compliance with applicable law, under a data transfer agreement (DPA) containing adequate safeguards as determined by applicable law. By engaging with us, you grant your consent to the international transfer of Personal Information, as may be necessary in the Company’s discretion.

Data security. We implement measures to secure Personal Information and protect it from unauthorized disclosure, use, and copying. While these measures reduce security risks, they do not grant absolute security from unauthorized access and use.

Your Rights

You have the following rights in relation to your Personal Information:

Right to review your information. You have the right to review, either by yourself or through an authorized representative, any Personal Information we have stored about you in our databases.
Right to request to rectify your information. If, upon reviewing your Personal Information, you find your information to be incorrect, incomplete or outdated, you have the right to ask us to rectify your information or delete it. We will inform you within 30 days whether we can comply with your request.
Right to have your information deleted, under certain circumstances, such as when the information is no longer necessary for the purposes the information was collected for.

If you wish to exercise any of the above rights, please contact us by email at privacy@mizetech.com.

Additional Information for Individuals in the EU and UK

If you are an individual in the EU or the UK, you may have the following additional rights:

Right to Access and receive a copy of your Personal Information that we process.
Right to Rectify inaccurate Personal Information we have concerning you and to have incomplete Personal Information completed.
Right to Data Portability, that is, to receive the Personal Information that you provided to us, in a structured, commonly used and machine-readable format. You have the right to transmit this Personal Information to another person or entity. Where technically feasible, you have the right to have your Personal Information transmitted directly from us to the person or entity you designate.
Right to Withdraw Consent to us processing your Personal Information, at any time, if the basis for our processing is your consent. We may continue to process Personal Information with respect to which your consent is not necessary. Withdrawing your consent will not affect the lawfulness of processing we carried out based on your consent before such withdrawal.
Right to Object to our processing of your Personal Information on the basis of our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such Personal Information for the establishment, exercise or defense of legal claims.
Right to Restrict us from processing your Personal Information (except for storing it) in the following situations if: (i) you contest the accuracy of the Personal Information, in which case the restriction applies only for a period enabling us to determine the accuracy of the Personal Information; (ii) the processing is unlawful and you prefer to restrict the processing of Personal Information rather than requiring the deletion of such data by us; (iii) we no longer need the Personal Information for the purposes outlined in this Policy, but you require the Personal Information to establish, exercise or defend legal claims; and (iv) you object to our processing based on our legitimate interest, in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours.
Right to be Forgotten. Under certain circumstances, you have the right to ask us to erase your Personal Information. However, notwithstanding such a request, we may still process your Personal Information if it is necessary to comply with our legal obligations, or for the establishment, exercise or defense of legal claims.

If you wish to exercise any of these rights, please contact us at privacy@mizetech.com.

When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with the information that you asked for, we will explain the reason.

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.

If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.

Changes to this Policy

This Policy may be amended from time to time. We will make efforts to inform you of any changes to this Policy by email, at a reasonable time prior to the changes taking effect (if we have your email address). The updated Policy will always be available on our website.