Personal Information Collection Statement

At EcoCeres, we're committed to respecting your privacy. This Privacy Notice is designed to describe to you the basis for the personal data we collect from you, or that is provided by you as part of our recruitment process.

First of all, we use Breezy HR, a web-based hiring platform, to assist in our recruiting process. As part of that process Breezy HR will be processing the personal information you've shared in accordance with EcoCeres instructions.

When you apply for a job posted by us, the information we collect / you provide is used to determine whether or not you're a good fit for current and future roles at our company.

Lastly, if at any point you'd like us to remove the information we've collected or share it with you, just let us know.

__

EcoCeres Personal Information Collection Statement

The EcoCeres Group (“the Group”) is committed to protecting your privacy. Candidates are required to provide personal information as part of their job applications. Failure to provide such information will prevent the Group from processing job applications. Following the successful application for employment, additional personal information on employees may be gathered during their employment with the Group. The information below explains the Group’s practices regarding how your personal information is collected and used.

1. Types of personal information The Group collects the following personal information from you: i. your name, National Registration Identity Card number and/or passport number, nationality and photograph; ii. your contact details; iii. your resume / curriculum vitae / academic experience / employment status / work experience; iv. your professional and employment related identification documents, academic certificates, professional qualifications, licenses, permits, certificates, or memberships copies and related details; and v. any other information which may directly or indirectly identify you, which is necessary for the purposes of your job application with us.

The Group may also collect your sensitive personal information as permitted / required by applicable local laws. Your sensitive personal information includes, among other things: i. any necessary information on your health condition for the purpose of carrying out your work in the relevant job position.

2. Sources of personal information We collect your personal information automatically through your direct dealings with us and your interactions with us, such as: i. the information you provide for your job application with us via, amongst other things, the job application form or third party recruitment agencies; ii. from government agencies, law enforcement agencies or regulatory bodies; iii. any other source of information in relation to your job application with us; or iv. information based on pre-employment background checks to which you have consented.

3. Purpose of Collection The Group may use your provided personal information as follows: i. processing employment applications; ii. determining and reviewing salaries, bonuses and other benefits; and iii. complying with the obligations, requirements or arrangements for disclosing and using data that apply to the Group or that it is expected to comply according to (a) any law binding or applying to it within or outside the applicable jurisdiction; or (b) any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations within or outside the applicable jurisdiction;

4. Transfer of Personal Information The Group may, if necessary, provide your personal information to third parties under applicable laws and regulations, both within and outside your country of residence, in connection with any of the purposes set out in Paragraph 3. Such third parties include: i. any agent, contractor, or third party service provider who provides administrative, pre-employment screening, background checks or other services to the Group in connection with the operation of its business; ii. any other person under a duty of confidentiality to the Group which has undertaken to keep such information confidential; and iii. any person to whom the Group is under an obligation or otherwise required to make disclosure under the requirements of any law binding on or applying to the Group, or any disclosure under and for the purposes of any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations with which the Group is expected to comply, all of which may be existing currently and in the future;

Due to the global presence of our business operations, the Group may transfer the personal information you provide to us according to the “Applicable Laws and Regulations” to countries other than your country of residence (whether such transfers are within members of the Group or to third parties, as set forth above). The laws of these countries may not provide the same level of protection to your personal information. The Group or third parties we contract with will seek to ensure that adequate safeguards are in place and that all applicable laws and regulations are complied with in connection with such transfer. The Group will implement stronger security protocols and technical measures such as encryption and anonymization, for storing sensitive personal information

5. Rights to your Personal Information You can request access to the Group's data policies and practices, as well as access, correct, erase, restrict process, transmit or withdraw consent to your personal information by contacting the Data Protection Officer at the EcoCeres Group, 23/F, Tower 2, The Quayside, 77 Hoi Bun Road, Kwun Tong, Hong Kong or by email to hr@ecoceres.com.

6. Security The Group will take reasonable steps to ensure that your personal information is properly secured using appropriate technical, physical, and organizational measures, so that they are protected against unauthorised or unlawful use, alteration, unauthorised access or disclosure, accidental or wrongful destruction, and loss. Encryption is applied to ensure confidentiality where deemed required; the Group deploy access control mechanisms to ensure only authorized personnel can access personal information; and the Group raises awareness among employees about the importance of protecting personal information through information security and privacy protection trainings. Access to personal information is granted using principle of ‘least privilege’ to limit access to the minimum required, and therefore reduce risk of unauthorized disclosure and use. Furthermore, the Group contractually ensure that any third party processing your personal information on behalf of the Group to abide by applicable laws and regulations.

7. Data Retention The Group retains your personal information for as long as required to satisfy the purpose for which they were collected and used, unless a longer period is necessary for our legal obligations or to defend a legal claim. The Group applies data retention terms pursuant to the applicable laws of the country or countries where your data is being processed and in accordance with this Personal Information Collection Statement. Where this Personal Information Collection Statement or the applicable laws do not provide otherwise, data retention term is one (1) year.

8. Change to Personal Information Collection Statement The Group reserves the right to update or amend the Personal Information Collection Statement as required or desirable under applicable laws, regulations or industry standards or changes in organizational and technical measures. If a fundamental change to the nature of the use of your personal information is involved or if the change is in any other manner relevant to you, the Group will ensure that information is provided to you well in advance of the change actually taking effect.

9. Conflict In the event of any inconsistencies between the English version and the version of this Personal Information Collection Statement in a different language, the English version of the Personal Information Collection Statement will prevail.

10. Acknowledgement and Consent I hereby acknowledge that I have read and understand the content of the Personal Information Collection Statement. I hereby give my consent and authorize the EcoCeres Group to use my personal information for the purposes as set out in this Personal Information Collection Statement. I warrant I am duly authorized by my family member(s) and obtained their consent to disclose, release or transfer their personal information to EcoCeres Group for the purposes as set out in this Personal Information Collection Statement.