Privacy Policy for the Application Process

We appreciate your visit to our application portal and your interest in SCHOTT. We take the protection of your personal data seriously and want you to feel secure when using the portal. In our privacy policy, we would therefore like to inform you about what information we collect during your registration on our applicant portal and how it is used.

Information regarding the processing of your personal data on the websites of the SCHOTT website can be found in our general Privacy Policy, and details regarding the use of cookies can be found in our Cookie Policy.

I. Name and Address of the Data Controller

SCHOTT AG, Hattenbergstraße 10, 55122 Mainz, Germany, is responsible for this website and the careful handling of your personal data.

Board of Management of SCHOTT AG:

Dr. Torsten Derr (CEO)

Dr. Andrea Frenzel

Dr. Heinz Kaiser

Marcus Knöbel

II. Name and address of the Data Protection Officer

Our Data Protection Officer is available to answer any questions you may have regarding your personal data:

Christoph Dahl

Hattenbergstraße 10

55122 Mainz

info.datenschutz@SCHOTT.com

III. Scope of Personal Data Processing

The personal data you enter via our application portal is collected, processed, and used by SCHOTT exclusively for the purposes of application processing and the recruitment process. SCHOTT stores and processes your data confidentially in accordance with applicable data protection regulations.

Furthermore, we generally collect and use your personal data only to the extent necessary to provide a functional website as well as our content and services. The collection and use of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.

IV. Registration for the Application Portal

1. Scope of personal data processing

To apply for a position at SCHOTT, please register on the application portal and create an account. To do so, you will need to provide your name, email address, and country of residence. Through this account, we can track which positions you have applied for at SCHOTT.

To create your profile in the portal, you can use your personal data stored with third parties (e.g., Xing, LinkedIn). Information regarding the processing of your personal data by these third parties can be found in their respective privacy policies.

Once you have registered on the portal, you can enter and/or upload additional information to your profile, such as your resume, a cover letter, attachments (both general and application-specific), and additional profile information (how you learned about this position, details about the source, whether our HR representatives may contact you regarding job openings that may be of interest to you), information about your education and work experience, as well as professional certifications and language skills.

2. Legal basis for data processing

Registration takes place as part of the application process and thus serves the purpose of carrying out pre-contractual measures. The legal basis for the processing of the data is therefore Article 6(1)(b) of the EU General Data Protection Regulation (GDPR).

3. Purpose of data processing

Your registration is required so that we can process your application and contact you regarding it.

4. Duration of storage

Your account will generally remain active even after the application process has been completed. However, you may delete your account and all data stored therein at any time.

If you withdraw your consent to our Privacy Policy, or delete your entire account via the profile function, or have it deleted by a recruiter, your personal data will be retained in our system for a total of 3 months and then automatically deleted.

The personal data of applicants from the United States of America is retained in our system for 3 years in accordance with the legal requirements applicable there and is subsequently automatically deleted.

This retention is based on statutory limitation periods.

5. Right to Object and Request Deletion

You may modify or have the data stored about you deleted at any time. Please refer to the contact information provided in Section II.

As a user, you also have the following options in the profile area at any time:

• You can delete your entire account/registration at any time.
• You can delete all or selected information in your profile.
• You can withdraw both your consent to the processing of your data and your application.

However, if you delete your account before the application process is complete, we will unfortunately no longer be able to consider your application.

V. Use of Tracking Technologies

Tracking pixels for job listings on external platforms:

To support the effectiveness of our recruitment marketing, we use a lightweight tracking pixel that measures application activity related to our job advertisements. This technology does not store cookies on a your browser and does not collect or process any personally identifiable information. It functions solely to record anonymous conversion events (for example, when you complete an application after clicking on a job advert) to help us assess the performance of different job boards and recruitment channels. The pixel is deactivated by default. It is only activated when you click on the "Apply" button. By doing so, you consent to the activation of the pixel.

VI. Processing of Your Personal Data During the Application Process

1. Scope of the processing of personal data

a) Application for an advertised position

By applying for a job posting, you provide us with additional personal data. In accordance with your privacy settings, this data is made available only to SCHOTT recruiters or SCHOTT employees tasked with recruitment activities. This means that only employees of the Human Resources department, the Works Council, and the managers of the relevant department to which the position relates will have access to your documents. You have the option to restrict the visibility of your profile and application to the following options:

• All recruiters worldwide
• All recruiters in my country

Depending on your selection, your personal data will only be visible to employees entrusted with recruitment activities at SCHOTT.

We will review your application to determine the best possible fit. If we identify a different or better-suited position, we will also consider your application for that role and forward it to the relevant department. Your data will only be shared in accordance with applicable data protection regulations.

If you expressly do not wish for your application to be reviewed by other internal departments, please notify us at the following email address: SF.mailadmin@schott.com.

b) Unsolicited Application

Unlike an application for an advertised position (see Section 3.2), when you submit a unsolicitated application, you are providing us with your personal data for consideration for various positions. Therefore, in addition to being processed by the Human Resources department, your documents may be forwarded to several departments.

c) Inclusion in a talent pool

By registering on our portal, you may be assigned to one or more talent pools by our recruiters to facilitate a better assessment of various positions that are suitable for you. Members of these pools may receive emails containing information about positions of interest to them, as well as updates regarding SCHOTT as an employer. You may optionally consent to receiving these emails during registration. You may revoke this consent at any time.

d) Quick application via social media

In some cases, SCHOTT also offers the option to get in touch via social media (e.g., Facebook or Instagram) by entering data such as your name, email address, and professional experience. The relevant data can be entered in response to a job posting on the respective platform and is provided to us by the respective provider in accordance with its privacy policy.

e) Disclosure of Your Personal Data

Job placements within the SCHOTT Group are handled in collaboration between the Human Resources department, the Works Council, and the relevant business unit. The employees responsible in the business unit and the supporting employees in the Human Resources department may belong to different companies within the SCHOTT Group. Therefore, your data may be shared within the Group.

SCHOTT takes security measures to protect the data we manage against manipulation, loss, destruction, or unauthorized access or disclosure. Our security measures are continuously improved in line with technological developments.

2. Legal basis for the processing of personal data

The processing of your data takes place as part of the application process and thus serves the purpose of implementing pre-contractual measures. The legal basis for the processing of the data is therefore Article 6(1)(b) of the GDPR.

In the context of a speculative application, in relation to inclusion in our applicant pool, or a brief application via social media, we process your personal data based on your corresponding consent (Article 6(1)(a) of the GDPR)

3. Purpose of data processing

Your personal data is processed for the purpose of conducting the application process.

4. Duration of storage

If, upon completion of the application process, we have not found a suitable position for you and you have not given us your consent to be included in the applicant pool, your application will be retained in our system as follows and subsequently automatically deleted:

• 2 years: Applications for positions in Argentina, Brazil, Colombia, or Canada
• 14 months: Applications for positions in Malaysia or Indonesia
• 6 months: Applications for positions in other countries, particularly within the European Union

The same applies if you have not logged into your account for the corresponding period.

If you withdraw your application, your personal data will be retained in our system for a total of 3 months and then automatically deleted.

By way of exception, applications and account data from applicants for positions in the United States of America are retained in our system for 3 years in accordance with the legal requirements applicable there and are subsequently automatically deleted.

Data is retained in accordance with statutory limitation periods

VII. Pre-Employment Screening – Review of Publicly Available Data

As part of the application process, we may conduct a pre-employment screening. This screening serves to ensure that the information you provided during the application process is complete and accurate and that there are no circumstances that could preclude a potential hire.

1. Scope of personal data processing

The screening exclusively involves the evaluation of publicly available information that is freely accessible on the internet. This includes:

• publicly accessible professional profiles (e.g., business networks)
• publicly viewable publications or posts
• Information from official registers or public databases
• Press and media reports, to the extent they are freely available

No research is conducted in restricted areas, social networks with privacy settings, or other sources that are not freely accessible.

Likewise, no assessments are made regarding private lifestyle, political opinions, religious beliefs, or other particularly sensitive personal data.

2. Legal basis for the processing of personal data

The processing is based on Art. 6(1)(b) GDPR (implementation of pre-contractual measures) and—where necessary—Art. 6(1)(f) GDPR (legitimate interest in a proper applicant screening).

The assessment is always conducted in accordance with the relevant data protection regulations and in compliance with the principle of data minimization.

3. Purpose of data processing

The evaluation of publicly available data is carried out for the purpose of:

• Verify professional qualifications and career details
• Minimizing potential risks to our company
• Ensuring a transparent and trustworthy hiring process

4. Duration of storage

The data is generally stored for as long as necessary to process the application for a maximum of five years.

VIII. Your rights regarding the protection of your personal data

1. Right of access

Generally, you always have control over which of your personal data you provide to us during the application process.

Of course, you may also exercise your right under Article 15 of the GDPR and, by submitting a written request along with proof of your identity, request confirmation from SCHOTT as to whether and which personal data concerning you is being processed by us.

Please contact the respective contact person listed in the job posting directly for this purpose.

2. Right to erasure

Of course, you may withdraw your application at any time and/or have your registration with us deleted. In this case, your data will be automatically deleted from the system after the retention periods specified above in Section IV. 4. have expired.

If you remain inactive, your data will be automatically deleted from the system after the retention periods specified above in Section V. 4. have expired.

You also have the option to have your data deleted immediately. Please contact info.datenschutz@schott.com for this purpose.

3. Right to withdraw consent under data protection law

You may also withdraw your consent to the use of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.

4. Right to restriction of processing

Likewise, under the conditions set forth in Article 18 of the GDPR, you have the right to request a restriction on the processing of your personal data.

5. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.