RACEYOURCODEE-RECRUITMENTPRIVACY POLICY

Think you’ve got what it takes? RaceYourCode

E-RECRUITMENT PRIVACY POLICY

Rolls-Royce plc and its group companies (collectively, “R-R”) respect your concerns about privacy. This R-R Privacy Statement applies to the R-R Avature CRM (Customer Relationship Management) and site and governs the collection and usage of personal data. The online CRM process is administered by Alexander Mann Solutions Ltd (“AMS”) in their capacity as provider of recruitment services to R-R.

This Privacy Statement describes the types of information, including personal data (“Information”) that may be collected, how that data is used, with whom that data may be shared, and any choices you can make about the use of the Information. It also describes how your Information is protected and how you may contact R-R for detail about its privacy practices.

Information that you provide to R-R will be stored and processed by AMS’ nominated supplier, Avature USA, LLC, a Delaware limited liability company with its principal place of business at 48 Wall Street, 11th Floor, New York, NY 10005, USA and its sub-contractors (“Avature”). Avature provides hosting services in The Netherlands.

For the purposes of applicable Data Privacy legislation, the data controller is Rolls-Royce plc of 62 Buckingham Gate, London, SW1E 6AT.

Information R-R Collects

As part of R-R’s recruitment and employment process, R-R collects Information, which may include the following:

> Contact information (e.g. name, postal address and email address)

> Nationality and age range

> Academic and vocational qualifications, skills and competencies

> Resume/CV documents that support your job applications, including reference letters and transcripts

> Employment history

> Job application history

> Remuneration and benefits package

> Your responses to job-specific questions

> Information relating to how you heard about our job opportunities

> Diversity and equal opportunities information

> Any other information you voluntarily provide to R-R

How R-R uses the information

Examples of how R-R uses the Information you provide includes, but is not limited to, the following:

> To evaluate your qualifications for future positions

> To inform you about, and consider you for, future job opportunities that may be of interest to you

> To contact you for further information, where necessary

> To determine preliminary remuneration and benefits package to be discussed with you subject to selection for the position

> To comply with applicable legal requirements and R-R’s policies

> Anonymised data may be used to ensure compliance with legal requirements that concern equal opportunities and employment

Think you’ve got what it takes? RaceYourCode

You understand that the online talent pooling process is administered by AMS in their capacity as provider of outsourced recruitment services to R-R. AMS will process your information solely under R-R’s instructions.

Your personal information will be retained for a period of no longer than 18 months from the date of your inclusion in the database, subject to R-R data retention obligations and policies and any applicable legal or regulatory obligations. Note that R-R may delete personal information about you at any time (including your CV/resume), for any reason and without notice. Therefore, please retain your own copy of the personal information provided to us.

Information R-R Shares

R-R may share Information collected with any agent, contractor or third party service provider (including AMS and Avature) who provides administrative, telecommunications, computer or recruitment services to R-R for the Purpose or for other purposes relating to or incidental to the Purpose and/or store your personal data and your application in other systems and database used by R-R for recruitment purposes.

Otherwise, R-R will not disclose or transfer your Information to third parties without your prior consent, except (i) if R-R is required to do so by law or legal process (such as a court order), (ii) in response to a request by law enforcement authorities, or (iii) where R-R believes disclosure is necessary or

appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.

For further information on how R-R’s service providers process your Information, contact R-R as set out in the “How to Contact Us” section below.

If you are employed by R-R, R-R reserves the right to transfer your Information, if applicable, in connection with the sale or transfer of all or a portion of its business or assets. If your employment is transferred you should contact your new employer with any inquiries concerning the processing of that Information.

Your Rights

You have several rights in relation to the processing of your Information, which may include the right to receive a copy of the Information. To find out more about your rights, or to request a copy of your Information please email data.privacy@rolls-royce.com.

Transfer of your information to other countries

The Information that you provide to R-R may be transferred to, stored at and processed outside of the EEA. Nevertheless, in all circumstances, wherever your personal data is processed, it will be processed in accordance with the Rolls-Royce Global Data Privacy Policy and all applicable laws. By accepting this Privacy Statement, you are

acknowledging that your Information can be used in this way.

How R-R protects your information

R-R maintains appropriate administrative, technical and physical safeguards in an effort to protect against unauthorised access, use, modification or disclosure of your Information in its custody and control. Your Information is stored on servers by Avature in its capacity as R-R’s sub data processor.

R-R has retention processes designed to retain Information for no longer than necessary for the purposes described in this Privacy Statement and to comply with applicable legal requirements.

How to contact us

Questions, comments and requests regarding this Privacy Statement, or requests to access or correct inaccuracies in R-R’s records of your Information, should be addressed to the HR Shared Service Centre at HRSharedServiceCentre@Rolls-Royce.com.

E-RECRUITMENT PRIVACY POLICY