1. Introduction

Amana (“Company”, “we”, “our”, “us”) is committed to protecting the privacy and personal data of job applicants.
This Applicant Privacy Notice explains how we collect, use, disclose, store, and protect personal data relating to candidates who apply for employment or engagement opportunities with the Company.
This Notice is prepared in accordance with applicable data protection laws, including where applicable:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”);
• DIFC Data Protection Law No. 5 of 2020;
• ADGM Data Protection Regulations 2021;
• other applicable privacy and employment laws.

2. Scope

This Privacy Notice applies to:

• job applicants;
• candidates submitted by recruitment agencies;
• interns and trainees;
• prospective consultants or contractors;
• individuals participating in recruitment or assessment processes.

3. Categories of Personal Data We Collect

We may collect and process the following categories of personal data during the recruitment process:

3.1 Identification Data

• full name;
• nationality;
• date of birth;
• passport details;
• visa or residency status;
• photograph where voluntarily provided.

3.2 Contact Information

• email address;
• phone number;
• residential address;
• LinkedIn or professional profile information.

3.3 Recruitment Information

• CV/resume;
• education history;
• qualifications and certifications;
• employment history;
• interview notes;
• assessment results;
• salary expectations;
• references and recommendation letters.

3.4 Background Verification Data
Where permitted by applicable law, we may conduct:

• reference checks;
• employment verification;
• qualification verification;
• background screening.

3.5 Technical Information
If applications are submitted online, we may collect:

• IP address;
• browser information;
• application portal activity logs.

4. Sources of Personal Data
We may obtain personal data from:

• the applicant directly;
• recruitment agencies;
• publicly available professional platforms;
• referees or former employers;
• background screening providers where permitted by law.

5. Purposes of Processing
We process applicant personal data for purposes including:

• evaluating applications;
• assessing qualifications and suitability;
• arranging interviews;
• communicating with candidates;
• conducting recruitment and hiring processes;
• performing background checks where appropriate;
• maintaining recruitment records;
• complying with legal and regulatory obligations;
• protecting the Company against legal claims.

6. Legal Basis for Processing
Depending on the circumstances and applicable law, processing may be based on:

• steps necessary prior to entering into an employment contract;
• legitimate interests of the Company;
• compliance with legal obligations;
• consent where required;
• establishment, exercise, or defense of legal claims.

7. Sharing of Personal Data
We may share applicant personal data with:

• recruitment agencies;
• affiliated group companies;
• interviewers and hiring managers;
• background screening providers;
• IT and cloud service providers;
• legal and professional advisors;
• regulators or authorities where legally required.

We require third parties to process personal data securely and only for authorized purposes.

8. International Transfers
Applicant personal data may be transferred outside the UAE where necessary for recruitment administration, group company coordination, cloud hosting, or operational support.
Where required by law, appropriate safeguards will be implemented for international data transfers.

9. Retention of Applicant Data
We retain applicant personal data only for as long as necessary for recruitment, legal, regulatory, and operational purposes.
Unsuccessful candidate records may be retained for up to 12 months following completion of the recruitment process unless a longer retention period is required by law or justified by a legitimate business need. Retention periods may vary depending on applicable laws and business requirements.

10. Data Security
The Company implements appropriate technical and organizational measures to protect applicant personal data against unauthorized access, disclosure, loss, misuse, or alteration. Such measures may include:

• restricted access controls;
• secure storage systems;
• confidentiality obligations;
• cybersecurity protections.

11. Applicant Rights
Subject to applicable law, applicants may have rights to:

• access personal data;
• request correction of inaccurate data;
• request deletion of personal data;
• object to certain processing activities;
• request restriction of processing;
• withdraw consent where applicable.

Requests may be submitted using the contact details below.

12. Contact Details
For questions regarding this Privacy Notice or the processing of personal data, please contact:
[Company / DPO Name]
Email: [EMAIL]
Address: [ADDRESS]

13. Changes to This Notice
The Company may update this Applicant Privacy Notice from time to time to reflect legal, operational, or regulatory changes.
The latest version will be made available through appropriate communication channels or recruitment platforms.