Consent Form for CVs

Welcome to Indigo Hive

By accepting this CONSENT FORM, the Holder (hereinafter referred to as "CANDIDATE") expresses his/her FREE, INFORMED and UNEQUIVOCAL CONSENT to the processing of his/her personal data by INDIGO HIVE CONSULTORIA EM TECNOLOGIA DA INFORMAÇÃO SA (Indigo Hive ), a private law legal entity, registered with the CNPJ under number 38.217.648/0001-97, with headquarters at Rua Haddock Lobo, 578 – 4th floor, suite 41 – Cerqueira César, São Paulo – SP (hereinafter referred to as "CONTROLLER"), in accordance with Law 13.709 – General Law for the Protection of Personal Data (LGPD), specifically as provided in article 5, item XII. This consent has the specific purpose of registering in a candidate database and participating in recruitment and selection procedures for hiring professionals.

1. Purpose of Data Processing

The CANDIDATE authorizes and agrees that the CONTROLLER makes decisions regarding the processing of his/her personal data and carries out the processing of personal data, including, but not limited to:

• Contact and Communication: Contact the holder to schedule and conduct interviews;

• Classification and Profile Analysis: Classify candidates; study the suitability of the candidate's profile in relation to the vacancy offered; analyze the candidate's skills with a focus on filling the vacancy; evaluate the distance between the candidate's residence and the workplace;

• Data Maintenance: Keep the resume in the database for a specific period of time; offer another job vacancy;

• Data Sharing: Share your data with the client (company holding the vacancy) for analysis and final decision on hiring.

2. Personal Data Processed

The CONTROLLER will process the following personal data of the CANDIDATE, considered relevant for the recruitment and selection process, in accordance with the LGPD:

• Full name

• Date of birth

• Address

• Contact phone number

• E-mail

• Academic background

• Professional experience

• Skills and competencies

3. Legal Basis for Data Processing

The processing of the CANDIDATE's personal data is carried out based on the following legal bases provided for in the LGPD:

• Consent: The processing is carried out with the consent of the data subject, in accordance with Art. 7, I of the LGPD.

• Contract Execution: The processing is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party, in accordance with Art. 7, V of the LGPD.

• Legitimate Interest: The processing is carried out based on the legitimate interest of the CONTROLLER, respecting the fundamental rights and freedoms of the holder, in accordance with Art. 7, IX of the LGPD.

4. Data Storage and Security

The CANDIDATE's resume will be stored in a secure electronic virtual environment, with access restricted to those responsible for the selection process. The registered resumes will be kept by the CONTROLLER for a period of 2 (two) years from the date of signing this Agreement. After this period, if the CANDIDATE is not hired or this Consent Agreement is revoked, the data will be completely deleted, except in the cases provided for in Art. 7 of Law No. 13,709/18. To request the deletion of his/her data, the CANDIDATE must contact the CONTROLLER through the means specified in item 7.

5. Printing and Handling of Physical Documents

Printing of resumes by the CONTROLLER's service providers is prohibited. In exceptional cases, where printing is essential, the documents will be deleted immediately after the end of the selection process. Printed resumes will be stored in folders, placed in secure cabinets, with limited access and locked with a key.

6. Information Security

The CONTROLLER maintains strict security measures on its technology systems and physical environments to prevent breaches and unauthorized access to data, as well as accidental or unlawful destruction, loss, alteration, dissemination and communication of information. In the event of incidents involving information, the CONTROLLER will adopt the measures provided for in the LGPD, including communication to the HOLDER and the National Data Protection Authority (ANPD) if necessary.

7. Data Subject Rights and Communication with the Data Protection Officer (DPO)

According to article 18 of the LGPD, the HOLDER is guaranteed the following rights:

• Confirmation of the Existence of Treatment: Request confirmation of the existence of processing of your personal data;

• Access to Data: Access personal data processed by the CONTROLLER;

• Correction of Incomplete, Inaccurate or Outdated Data: Request the correction of your personal data, if they are incomplete, inaccurate or out of date;

• Anonymization, Blocking or Deletion of Unnecessary, Excessive Data or Data Processed in Non-Compliance with the LGPD: Request the anonymization, blocking or deletion of data that you consider unnecessary or excessive;

• Data Portability: Request the portability of your personal data to another service or product provider, upon express request, observing commercial and industrial secrets;

• Deletion of Data Processed with Consent: Request the deletion of personal data processed with your consent, except in the cases provided for in the LGPD;

• Information on Public and Private Entities with Which the CONTROLLER Shared Data: Request information on the public and private entities with which the CONTROLLER shared your data;

• Information About the Possibility of Not Providing Consent and the Consequences of Refusal: To be informed about the possibility of not providing consent and the consequences of refusing it;

• Revocation of Consent: Revoke consent at any time, by express manifestation, ratifying the treatments carried out under the protection of the consent previously given, as long as there is no request for deletion.

For questions related to the protection of personal data or to exercise their rights, the HOLDER must contact Indigo Hive 's Data Protection Officer (DPO) :

• DPO Name: Lucas Silva de Sena

• Telephone: +55 (11) 9 6419-8127

• Email: dpo@indigohive.com.br

8. Data Deletion Procedure

To request the deletion of your personal data, the HOLDER must send a request to the email of the Data Protection Officer (DPO) specified in item 7. The CONTROLLER will confirm receipt of the request and delete the data within 30 (thirty) business days, informing the HOLDER about the completion of the process.

9. International Data Transfer

At the moment, the CONTROLLER does not carry out international transfers of personal data. If this practice is adopted, the CONTROLLER undertakes to inform the DATA SUBJECT in advance and ensure that all necessary protection measures will be implemented, in accordance with the LGPD.

10. Procedure in Case of Security Incident

In the event of a security incident that may result in significant risk or damage to data subjects, the CONTROLLER will notify the DATA SUBJECT and the National Data Protection Authority (ANPD) within 72 (seventy-two) hours. Immediate measures will be taken to mitigate the effects of the incident and to prevent further occurrences.

11. Acceptance of Consent Form

Acceptance of the terms above is an essential condition for the HOLDER to be able to submit his/her CV.

The CANDIDATE can send his/her resume by email to administrativo@indigohive.com.br , using the following text model in the body of the email:

Hive RESUME CONSENT FORM , as described in the document available on the company's website."

By submitting their CV, the CANDIDATE expressly declares their CONSENT, fully recognizing the rights and obligations arising from this instrument, allowing their data to be processed as described, exclusively for registration in the candidate database and participation in recruitment and selection procedures for hiring professionals.

12. Declaration of Truthfulness

When sending your CV to Indigo Hive , the CANDIDATE declares that he/she is entirely responsible for the content of the data provided when sending the CV, as well as the veracity of the information sent.

13. Changes to this Term

The CONTROLLER may update this Term periodically. It is recommended that the HOLDER review this document regularly to stay informed of any changes. Changes will be published on the company's website, and the date of the last update will be indicated at the end of the document.

Last change and version: Version 0, 03/10/2025