Disclaimer

JOE & THE JUICE – RECRUITMENT PRIVACY

NOTICE

Updated: September 2025

JOE & THE JUICE A/S (we, our or us) are committed to protecting your privacy. We, or our entirely owned subsidiaries, are the data controller of the information that you provide to us. This Privacy Notice explains how JOE & THE JUICE A/S & our wholly owned subsidiaries, process your personal data when you interact with us regarding a job opening, sign up for job alerts or submit a job application. This Privacy Notice does not cover your use of JOE & THE JUICE products or services as a customer or any collection of information outside of the job application process & does not cover employees once hired.

DATA CONTROLLER

The entity responsible for the processing of your personal data via CCTV is:

JOE & THE JUICE A/S

Østergade 26A, 1100 Copenhagen K

DENMARK

CVR no: 26589355

www.joejuice.com

For inquiries about our processing of your personal data, contact us at: privacy@joejuice.com

POLICY DATE: September 2025 (Version 2025.1)

1. WHAT INFORMATION DO WE COLLECT & HOW DO WE USE IT?

Generally speaking, we will collect some of your personal data whenever you interact with JOE & THE

JUICE online. We may collect the following categories of personal data about you:

• Standard personal data: name, address (including country of residence), email address, telephone number, gender, educational information & any other information as included in your CV/resume.

• Education information such as certifications/qualifications, degrees, vocational records, training & licenses.

• Other personal data you might include in your application such age/date of birth & picture & veteran status.

• Employment related information such as career history, job roles/locations & disciplinary records.

• Internet & other electronic activity information which is collected by cookies on our website & based on your cookie preferences.

• References from previous employers.

• Right to work documentation (including immigration status where relevant).

• Details regarding the type of employment sought, including desired salary/pay, job preferences & other information related to compensation/benefits.

• Government-issued identification documents & numbers, such as passports, licenses, resident cards, national identification number & CPR.

• Special categories of data including background checks, such as criminal offences (if applicable/required for the role you are applying for).

• Sensitive personal information (if you voluntarily disclose this with us), such as race or ethnic

origin, sexual orientation.

• Sensitive health data if disclosed by a job applicant for the purposes of providing reasonable

accommodation during the hiring process, such as disability status.

We may process & use your personal data for the following purposes:

• Assessing your suitability for potential employment with us

• Communicating with you regarding your application & potential employment relationship, including sending automated updates about the recruitment process

• Managing the recruitment process (e.g. – scheduling interviews)

• Informing you of new positions within your field of interest, should you express such a preference

• Undertaking of personality analysis, cognitive tests & AI assisted interviews

• Evaluating & determining appropriate compensation, payroll, & benefits packages

• To comply with our legal, regulatory, or other corporate governance requirements, such as equal opportunities monitoring & right to work checks

• For the purposes of conducting data analytics to review & better understand & improve the operation of our recruitment processes

We ensure that any personal data collected from you throughout the recruitment process is limited to only that which is necessary to fulfil its identified purpose.

When we collect information from sources other than you, these sources may include:

• Recruitment agencies

• Former employers (to conduct references with your consent)

• Your LinkedIn profile, when you choose to log into our platform through LinkedIn or apply via LinkedIn

• Other online recruitment platforms including but not limited to Indeed, Recruitio, Finn, Jobindex, Glassdoor, Sapia.ai, People Test Systems, Assessio, Greenhouse Software Inc

• Internet service providers & social networks

• Government or regulatory agencies & third-party background check services

2. THE LEGAL BASIS FOR THE COLLECTION & PROCESSING OF THE PERSONAL DATA

Just as it’s crucial that you understand what personal data we collect & when, it’s equally as important

for you to understand why we are processing that personal data. We will only process your data if we

have a justifiable reason to do so in accordance with the applicable personal data protection law.

- Legal Basis Applicable law Management of potential employment relationship & recruitment process, Legitimate interest and Contractual necessity (GDPR Article 6(1)(f) GDPR Article 6(1)(b))

- Communicating with job applicants regarding application, Legitimate interest and Contractual necessity (GDPR Article 6(1)(f), GDPR Article 6(1)(b))

- Collection of references from previous employers, Legitimate interest and Consent (GDPR Article 6(1)(f), GDPR Article 6(1)(a))

- Undertaking of personality analysis, cognitive tests & AI assisted interviews, Legitimate interest, If you reveal special category data voluntarily during this process, we rely on Article 9 exceptions (GDPR Article 6(1)(f), GDPR Article 9(2)(b)), Employment law obligations

- Preparation of information to enter into employment contract, Contractual necessity (GDPR Article 6(1)(b))

- Storing CV for future job opportunities including communication about future job opportunities, Consent (GDPR Article 6(1)(a))

- Conducting data analytics to review & better understand & improve operation of our recruitment processes, Legitimate interest (GDPR Article 6(1)(f))

- Collection of information regarding criminal offences and background checks (necessary for certain roles, such as within our stores located in airports), Legal obligation (GDPR Article 6(1)(c), GDPR Article 9(2)(g) – in

relation to jobs located within airports)

- Collection of sensitive personal information for equality & non discrimination duties, Employment law obligations (GDPR Article 9(2)(b))

- To comply with our legal, regulatory or other corporate governance requirements, Legal obligation (GDPR Article 6(1)(c))

3. INFORMATION REGARDING HOW WE USE TECHNOLOGY (INCLUDING AI) TO

PROCESS YOUR PERSONAL DATA

When applying for a juicer role, in order better improve your overall candidate experience, we use a third-party technology platform, Sapia.ai, that leverages artificial intelligence to interview every candidate, evaluate real skills & deliver structured insights for hiring managers/recruiters at JOE & THE JUICE. Sapia.ai utilises natural language processing, machine learning & artificial intelligence to analyse candidates’ responses in order to evaluate personality traits & behavioural competencies in order to assess job fit. Sapia.ai then generates a score for each candidate & ranks them. All candidates’ applications are then reviewed by a recruiter at JOE & THE JUICE, who also takes into account candidates’ Sapia.ai score, to decide whether they will proceed to an in-person interview. These rankings are not used exclusively to make a decision about which candidates will proceed to the interview stage. Your personal data will never be used to train this automated system nor used for any other purpose other than to help support our review of your application. Further details about how your information will be used during this process can be found at https://sapia.ai/privacy-policy/

4. USE OF PERSONALITY ANALYSES & COGNITIVE TESTS IN THE RECRUITMENT

PROCESS

In connection with our recruitment, we sometimes utilise a personality analysis or cognitive test via a third-party system, Assessio. This is utilised when hiring for a role within our HQ offices, typically for specialist-level roles & above, or when specifically required to ensure the best data-driven recruitment decision is made. These personality tests help our talent acquisition team identify behavioural traits & cultural fit whereas the logic tests identify how the candidate likes to work & assists us in setting successful candidates up for success within their work tasks. After test completion, candidates are provided feedback by a member of the People & Development team by facilitating an open dialogue to add nuance to the generated results. We keep the results of these tests for up to 6 months unless the candidate is hired, in which we keep the information for the employee’s duration of employment & utilise the results for development purposes.

5. DISCLOSURE OF YOUR PERSONAL DATA

We also disclose personal data to service providers, also known as data processors, which are companies we use to support our business & who are bound by law & contractual obligations to keep your personal information confidential. These third parties are only permitted to use the personal data we collect for the purposes we have identified & not for their own purposes & are not permitted to share your personal data without our express permission.

Examples of third parties we share your personal data with to process include:

• Recruitment agencies & suppliers that provide our company with services or platforms, including but not limited to Sapai.ai, Greenhouse Software Inc, Microsoft 365 (Office) & Outlook, Trello, Docusign

• Departments within the JOE & THE JUICE group (e.g. – internal P&D teams & hiring managers)

• JOE & THE JUICE entities & our parent company

• To other entities in connection with a corporate transaction, such as an acquisition

• Our franchisees (if the job role relates to a role operated by one of our franchisees)

• Service providers that work on our behalf, such as IT service providers & software system providers, including but not limited to

• Law enforcement, government agencies & other recipients for legal, security or safety purposes – in situations where the disclosure is required by law

6. INTERNATIONAL TRANSFERS OF PERSONAL DATA

We may share personal data collected during the recruitment process between our business entities & parent company for legitimate business purposes, which span international borders. Personal data may also be shared internationally, as outlined above in section 5, with our data processors. If we transfer personal data to recipients in countries outside the EU/EEA, we will, if required, put a contract or other means in place to ensure that your data is adequately protected, for instance, by using the European Commission’s standard contractual clauses for transfers of personal data to non EU/EEA countries or relying on our processors’ self-certification to the EU-US Data Privacy Framework. Wherever your personal information is transferred, stored or processed by us, we will take commercially reasonable steps to safeguard the privacy of your personal information.

7. STORAGE & RETENTION

Personal data collected will only be stored for as long as is reasonably necessary & proportionate to accomplish the purposes for which we required it. Whilst stored, this information will only be accessible on a restricted basis by certain employees on a need-to-know basis.

Generally, the following retention periods will be adhered to:

- CV & information provided during application process (including via Greenhouse Software Inc) - 6 months (excluding US) (if not hired, unless candidate consents to us keeping information for future job opportunities),

2 years (US) (if not hired, unless candidate consents to us keeping information for future job opportunities), 10 years post-termination of employment (if hired)

- Results of personality & cognitive assessments from Assessio - 6 months (if not hired), Length of employment (if hired)

- Results of Sapia.ai interview 6 months (excluding US) (if not hired), 2 years (US) (if not hired)

- Employee details for hired candidates 10 years post-termination of employment

If you are offered & accept employment with us, then the personal data we collected about you during

the recruitment process will become part of your employment record & subject to different retention periods (identified in our Employee Privacy Policy).

Whilst stored, your personal data is subject to a number of technical & organisational security

measures employed to protect your information & prevent unauthorised access. Examples of these

include access restrictions, password protection, multi-factor authentication, information security

policies & other safeguarding measures employed by our data processors.

8. DATA SUBJECT RIGHTS

Under GDPR, data subjects hold the following rights in relation to their personal data:

1. Right to be Informed: you have the right to be told how your personal data is collected, why it is

being processed, who it is shared with & how long it will be kept.

2. Right of Access: you can request a copy of your personal data held by us, along with details of how

it is being used.

3. Right to Rectification: if your data is inaccurate or incomplete, you can ask us to correct or update

the information we hold.

4. Right to Erasure: you can request that we delete your personal data when it is no longer needed or

if you withdraw consent (please note that certain exceptions apply in accordance with legal

obligations).

5. Right to Restrict Processing: you can limit how your personal data is used in certain situations.

6. Right to Data Portability: you can request that your personal data be provided to transfer to another

organisation.

7. Right to Object: you can object to how we process your personal data for direct marketing or under

legitimate interest grounds.

8. Rights related to Automated Decision-Making & Profiling:

You have the right not to be subject to a decision based solely on automated processing if it has legal or significant effects on your & can request human review in such cases (we note that we do not engage in solely AI based decision making throughout the recruitment processes).

Californian residents can find their rights & a disclosure in accordance with the California Consumer

Privacy Act as amended by the California Privacy Rights Act at Appendix A.

All data subject access requests for personal data should be made in writing to privacy@joejuice.com.

There may be conditions or limitations on these rights. This depends on the specific circumstances of

the processing activity. We will assess each request & respond within the required timeframes.

You may always lodge a complaint about how your personal data is being processed with your relevant

data protection supervisory authority. Appendix B contains a list of the relevant data protection

supervisory authorities in relation to each country in which we operate our wholly owned JOE & THE

JUICE subsidiaries.

9. AMENDMENTS TO THE RECRUITMENT PRIVACY NOTICE

We may amend this notice from time to time. If we do so, an updated version will be available within

the JOE & THE JUICE website (www.joejuice.com). You are responsible for regularly reviewing this

Notice so that you are aware of any changes to it.

10. CONTACT

Please contact us via privacy@joejuice.com if you have any questions regarding the protection of your

personal data or if you wish to exercise your legal rights.

This Notice is available in alternative formats upon request for individuals with disabilities.