CANDIDATE PRIVACY NOTICE

1. PURPOSE OF THIS NOTICE

1.1 This Candidate Privacy Notice (the “Notice”) details the Personal Data (defined below) Hellman & Friedman LLC, a limited liability company incorporated in Delaware with a principal place of business at 415 Mission Street, Suite 5700, San Francisco, CA 94105, Hellman & Friedman LLP, a limited liability partnership incorporated in England and Wales with registered address The Brunel Building, 2 Canalside Walk, London, W2 1DG and/or any other entity in the Hellman & Friedman Group (as further defined below) or its portfolio companies (collectively “H&F”, the “Firm”, “we”, “us” or “our”) receives from you or thirdparties (such as recruiters, or your references or referees) in connection with your candidacy, how weprocess it and any of your rights in relation to it. This Notice also applies to Personal Data we collect regarding any candidate’s Restricted Persons (defined below), including but not limited to a candidate’s dependents and household members. This Notice and the rights contained in it apply to individuals located in Europe (“Europe Candidates”) and to individuals who are California residents (“California Candidates”), unless otherwise This Notice uses the terms Personal Information and Sensitive Personal Information to describe certain information practices applicable to California Candidates and Special Category Data, as applicable to Europe candidates. The term Personal Data may be used as applied to both Europe and California Candidates. If you are a Candidate located in a different location outside the United States, your Personal Data may be subject to similar laws as candidates located in Europe.

1.2 This Notice takes into account the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019 and the UK Data Privacy Act 2018, as amended from time to time (together, the “UK GDPR”), the Regulation 2016/679 of the European Parliament and of the Council of 27April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and any relevant local legislation (the “EU GDPR” and together with UK GDPR, the “GDPR”) and the California Consumer Privacy Act of 2018 (the “CCPA”), each as may be amended from time to time.

1.3 Should you be unable to access this Notice and wish to receive a copy in an alternative format, please contact privacy@hf.com or your recruiter.

2. FIRM AND DATA CONTROLLER CONTACT DETAILS

2.1 The Firm may be contacted at the below for all questions relating to this Notice:

   E-mail:   privacy@hf.com
Phone:     +1 (415) 788-5111
Post:        415 Mission Street, Suite 5700, San Francisco, CA 94105

2.2 The Firm is the data controller of Europe Candidates’ Personal Data for the purposes of the Europe Candidates may contact the Firm at the below with respect to matters relating to its responsibilities as the data controller:

   E-mail:    privacy@hf.com
Phone:     +44 (0)20 7839 5111
Post:        Hellman & Friedman LLP, The Brunel Building, 2 Canalside Walk, London, W2 1DG

3. SCOPE

3.1 This Notice applies to Europe Candidates whose Personal Data (defined below) is processed by the Firm and to California Candidates whose Personal Information (defined below) is collected by the Firm. Certain sections of this Notice apply only to Europe Candidates (Sections 2.2, 3.2, 4.4 (b)(i) and 9) and certainsections apply only to California Candidates (Sections 3, 4.4 (b)(ii) and 10). All other sections apply to Europe and California Candidates. If you are a Candidate located in a different location outside the United States, your Personal Data may be subject to similar laws as candidates located in Europe. This Notice also applies to candidates’ Restricted Persons (defined below), including but not limited to a candidate’s dependents and household members whose Personal Data is processed by the Firm.

3.2 Europe Candidates:

“Data Subject” means an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as aname, an identification number, location data, an online identifier or to one or more factors specific tothe physical, physiological, genetic, mental, economic, cultural or social identify of that natural
In relation to the GDPR, “Personal Data” means any information relating to a Data Subject who is a Europe
The Personal Data that we collect from you will be transferred to, and stored in, destinationsoutside of your country and the European Economic Area or the UK. The Personal Data that wecollect from you will be transferred to, stored at and otherwise processed in the United States pursuant to contractual or other legally permissible protections.
The GDPR also provides Europe Candidates with certain rights, as outlined at Section 9 (GDPR Rights of Europe Candidates in Relation to Their Personal Data Held by the Firm)

3.3 California Candidates:

In relation to the CCPA, “Personal Information” includes information that identifies, relates to, describes, iscapable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California Candidate.

4. WHAT INFORMATION DOES THE FIRM COLLECT ABOUT CANDIDATES AND HOW IS IT USED?

4.1 We may receive and use the following Personal Data about you (and your Restricted Persons, where noted and as defined below) either directly from you, our affiliates or from other third parties in connectionwith your application, and we may use it for the following purposes:

Information you provide as part of your application.
1. You will provide us information about you when you apply for or speak or correspond with us about a role. This may include some or all of the following:
  Identifiers — such as legal name, preferred name, online IDs, frequent travel or loyalty numbers, other unique ID numbers;
  
  Contact Information — such as home and work address, phone number(s), email address(es), emergency contacts;
  
  Protected classifications — such as national origin, sex, age (including date of birth), marital or family status, dependent information, in addition to race and ethnicity;
  
  Employment and education information — such as qualifications, employment and educational history, previous career performance including compensation (to the extent permitted by Law, defined below), memberships in professional associations or other groups, references, language(s) spoken and other resumé or curriculum vitae data; where we have extended an offer, data with respect to onboarding preparation, such as tentative date of hire, personnel category, and full time or part-time status;
  
  Compliance information — citizenship, visa/right to work status, marital or family status and data from background checks (civil litigation, criminal records, regulatory matters, directorships, social media accounts, credit check information, confirmation of education and professional licenses), membership in professional bodies, details of current and historicbusiness interests and directorships, political donations and investments including, once you receive an offer (and without limitation, name of broker, transaction and securities details, account holdings and balances, positions, amounts, account holder information and other account information), in respect of you or your spouse, registered domestic partner (or the equivalent), any child under the age of 18, any child under the age of 25 for whom you contribute materially to their support or any other relative residing with you (your “Restricted Persons”);
  
  Audio, electronic, visual and similar information — through voicemails, email and any video or CCTV recordings;
  
  Inferences — based on information concerning an individual to create a summary about, for example, skills and preferences; and
  
  Any other information about you that you disclose to us.
2. We use this information to determine and validate your qualifications and suitability for a role and, where appliable, if you are a successful candidate, to create an employment record. This is necessary for our legitimate interests to properly evaluate candidates and forto create employment records.
Special Categories of Data or Sensitive Personal Information you may provide.
1. Europe Candidates may provide certain Special Category Personal Data under the GDPR or other local law, with your consent, such as race or ethnic origin, sexual orientation or disability status, for the purposes of equal opportunities monitoring and diversity disclosures, to the extent permitted or required by applicable Law (defined below). If you decide not toprovide this data, your application will not be prejudiced. To the extent permitted by Law (defined below), you may be required to, or you may otherwise disclose certain health information, like vaccination status or other occupational health and safety-related information, food allergies, meal preferences, as applicable, should you attend an H&F or other event or visit an H&F office.
2. California Candidates may provide the following types of Personal Information which are Sensitive Personal Information under the CCPA:
  Citizenship and Immigration status – As applicable for right to work and immigration matters.
  
  Government ID — Social Security or passport number (if we are arranging or reimbursing you for travel)
  
  Race and ethnicity — Racial or ethnic origin, which may be revealed by a Government ID, or when disclosed by you or a recruiter;
  
  Health — vaccination-related information or other occupational health and safety-related information, disabilities, reasonable accommodation requests, food allergies, meal preferences, as applicable, should you attend an H&F or other event or visit an H&F office.
  
  Geolocation – Should you become an employee or intern with H&F, for Firm-enabled device tracking purposes.
3. We will use the minimum necessary of such Special Category Data or Sensitive Personal Information, as permitted or required by Law (defined below), for our legitimate interests toconduct equal opportunities and diversity monitoring and disclosures, for health and safety purposes or as otherwise requested or required by Law (defined below).
Information from third parties.
1. We receive information from third parties in connection with your application, such as references, referees, recruiters or recruitment platforms and organisations that provide background or sanctions checks (this will include right to work, criminal, civil and regulatory reference checks, sanctions lists, credit history, past work history, educational history, social media and professional licenses where applicable) some of which is Special Category Data.This may also include drug screening, to the extent permitted by Law (defined below).
2. We collect information from government agencies in connection with sanctions screening, a form of background check.
3. We use this information to identify and evaluate you for positions, and to identify potential conflicts of interest. This is necessary for our legitimate interests to properly evaluate and contact candidates and to properly screen candidates.

5. DISCLOSURES OF CANDIDATES’ PERSONAL DATA TO THIRD PARTIES

5.1 We disclose your information with selected third parties. These categories of third parties include, for the following purposes:

Members of the Hellman & Friedman Group (defined below), for the purposes set out in Section 4 (What Information Does the Firm Collect About Candidates and How Is It Used?);
Information Technology service providers that provide us with email, archiving, data management, data storage, archiving and general IT support services;
Human Resources and Compliance service providers, including background check providers, to verify the information that you provided as part of your application and as permitted or required by Law (defined below), to assess your creditworthiness, to perform sanctions screenings and to determine any other regulatory, litigation or criminal history;
if we are working with recruiting agencies, recruiters;
event organizers, to host or organize recruiting events;
consultants providing assessment services related to your candidacy;
where applicable, travel agencies, hotels, airlines, and relocation services, to help interview or relocate you for a role;
referees or references identified by you, to identify you and provide a reference;
cloud and other data storage providers, to store the Personal Data you provide and for disaster recovery services, as well as destruction of information;
depending on the role, our current and target portfolio companies, to assess your candidacy.
other third parties (to defined or exercise a legal claim, in response to legal or judicial process, or for regulatory or investigation purposes).
“Hellman & Friedman Group” means the Firm and any entity controlled by or under common control with the Firm, excluding any Portfolio Companies. “Portfolio Companies” means any portfoliocompanies in which funds affiliated with the Firm or any members of the Hellman & Friedman Groupare invested or propose to

5.2 We do not, and will not, sell or share Personal Information, as those terms are used in the CCPA, including on individuals under age 16.

6. CANDIDATES’ OBLIGATIONS IN RELATION TO PERSONAL DATA

6.1 It is important that you update us with respect to changes in your personal circumstances as soon aspossible by contacting your contact at the These include changes to the following:

name; and
contact details (address, phone number(s), email address(es)).

6.2 Further, it is your responsibility to inform your Restricted Persons, referees and references about the processing of their Personal Data pursuant to this Notice and to confirm that they have given their permission for such processing.

7. SECURITY OF PERSONAL DATA

7.1 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your information transmittedthrough electronic means; any transmission is at your own Once we have received your information, wewill take appropriate technical and organisational measures to safeguard your Personal Data against loss, theft and unauthorised use, access or modification.

8. PERSONAL DATA RETENTION

8.1 Your Personal Data will be retained in accordance with the policies and procedures of the Firm adopted fromtime to time, including for effective management of firm practices (“Policies”) and (a) as required by law,regulation, legal or judicial process or audit, decision of a court or arbitral tribunal, decision of a governmental authority with relevant powers, or by the rules of applicable stock exchange or recognizedmarket place, or by a regulator, bank examiner or self-regulatory organization or pursuant to mandatoryethics rules applicable to the Firm or its affiliates (collectively, “Law”) or (b) as reasonably required inrelation to any claim or investigation pursuant to any Law and/or any matter which may lead to such a claim or investigation (a “Claim or Investigation”). We will only retain your Personal Data for as long as reasonably necessary to fulfill the purposes under the “How We Use Personal Data” section above. Exceptions to this are where:

The law requires us to retain your personal data for a longer period, or delete it sooner; or
You exercise a legal right, where applicable, to have your Personal Data erased and we do not need to retain it in connection with any of the reasons permitted or required by Law.

9. RIGHTS UNDER GDPR AND SIMILAR INTERNATIONAL LAWS

9.1 Right to Access:
Depending on your location, you may have the right to ask the Firm to access the Personal Data we hold about you and be provided with certain information about how we use your Personal Data and who we disclose it to.

9.2 Right to Correct:
You may also have the right to ask us to correct your Personal Data where it is inaccurate or incomplete.

9.3 Right to Data Portability:
Where you have provided your Personal Data to us in connection with our consideration of your candidacy, you may have the right to ask us for a copy of this data in a structured, machine-readable formatand to ask us to share (port) this data to another data controller.

9.4 Right to Delete:
In certain circumstances, you may have the right to ask us to delete the Personal Data we hold about you:

where you believe that it is no longer necessary for us to hold your Personal Data (for example, when you are no longer in employment with us, subject to any requirement for us to retain your data pursuant to Law, our Policies or as reasonably required in relation to any Claim orInvestigation);
where we are processing your Personal Data based on our legitimate interests and you object to suchprocessing and we cannot demonstrate an overriding legitimate ground for the processing; or
where you believe the Personal Data we hold about you is being unlawfully processed by us.

9.5 Right to Restrict Certain Processing:

In certain circumstances, you may have the right to ask us to restrict (stop any active) processing of your Personal Data:

where you believe the Personal Data we hold about you is inaccurate and while we verify accuracy;
where we want to erase your Personal Data as the processing is unlawful, but you want us to continue to store it;
where we no longer need your Personal Data for the purposes of our processing, but you require us toretain the data for the establishment, exercise or defence of legal claims; or
where you have objected to us processing your Personal Data based on our legitimate interests and we are considering your

9.6 Right to Object:
You may have the right to object to our processing of your Personal Data based on our legitimate interests and we will no longer process your Personal Data unless we can demonstrate an overriding legitimateground.

9.7 Right to Contest Decision-making Based Purely on Automated Processing:
While you may contest a decision made about you based purely on automated processing, the Firm does not currently use automated decision making related to your candidacy. Accordingly, this right is inapplicable.

9.8 How to Exercise these Rights:
To exercise any of the above rights, please contact privacy@hf.com. In addition, you have the right to complain to the Information Commissioner’s Office or other applicable data protection supervisoryauthority, depending on your location.

9.9 Limitations:
Please note that these rights are limited, for example, where fulfilling your request would adversely affect other individuals or the interests of any member of the Hellman & Friedman Group (including their proprietary information, trade secrets or intellectual property), where there are overriding public interest reasons or where we are required by Law, Policies or in relation to any Claim or Investigation to retain your Personal Data.

10. RIGHTS UNDER THE CCPA

10.1 Request to Know:

If you are a California resident, you have the right to request that we disclose Personal Information that we have collected, sold or shared about you. Subject to verification and any limitations under the CCPA, we will disclose the following:

The categories of personal information we have collected;
The categories of sources from which the personal information was collected;
The business or commercial purpose for which we collected the personal information;
The categories of third parties with whom we disclose personal information; and
Specific pieces of personal information that we have collected about you.

10.2 Right to Delete:
If you are a California resident, you have the right to delete Personal Information that we collected from you, subject to exceptions.

10.3 Right to Correct:
If you are a California resident, you have the right to request that we correct inaccurate Personal Information that we maintain about you.

10.4 Right to Limit Use of Sensitive Personal Information:
If you are a California resident, you have the right to request that we limit the use and disclosure of your Sensitive Personal Information. We do not use or disclose your Sensitive Personal Information other than as permitted for purposes specified in section 7027, subsection (l) of the CCPA. Accordingly, this right is inapplicable.

10.5 Right to opt-out of sale/sharing:
If you are a California resident, you have the right to opt out of the sale/sharing of your Personal Information. We do not sell or share your Personal Information with third parties as those terms are used in section 7013, subsection (g) of the CCPA. Accordingly, this right is inapplicable.

10.6 If you are a California resident, you have the right not to be retaliated against for the exercise of your CCPA rights

10.7 How to Exercise these Rights:
To exercise any of the above rights, you may submit a request by:

Calling us toll-free at +1 (877) 215-0023;
Visiting https: https://hf.com/your-california-consumer-privacy-act-rights//; or
Emailing us at privacy@hf.com.

10.8 We will verify your identity prior to addressing or fulfilling a request made pursuant to the CCPA. The request must provide sufficient information that allows us to reasonably verify that you are the individual about whom we hold the Personal Information.

10.9 Only you or someone legally authorized to act on your behalf, may make a verifiable request under the CCPA. Any such authorization must be in accordance with California Civil Code section 1633.1 et seq., the Uniform Electronic Transactions Act. To act on such request, your authorized agent must provide sufficient information that allows us to reasonably verify that they have been authorized by you to act on your behalf.

11. CHANGES TO THIS NOTICE

11.1 We may update this Notice from time to time. This Notice was last updated on January 1, 2024. Any updated Notice will be made available to successful candidates on the Hellman & Friedman Group staff intranet and will be available to unsuccessful candidates on request by email to privacy@hf.com.