Last updated: December 12, 2022

Hasbro, Inc. ("Hasbro") has issued this privacy notice (this "Notice") for all Applicants ("you", "your"). The term "Applicant" means anyone who applies for a job role, or who otherwise seeks to carry out work with or for us (whether on a permanent or non-permanent basis). This Notice supplements our publicly-posted Privacy Policy, and sets out in greater detail the Applicant-specific personal information that we collect and process about you, the purposes of such processing, and the rights that you may have in connection with your information.

We respect the privacy rights of individuals and are committed to handling personal information responsibly and in accordance with applicable law.

If you are in any doubt regarding the applicable standards, or have any comments or questions about this Policy, please contact us as directed at the end of this Notice.

1. Types of personal information we collect about Applicants

In the course of applying to work for Hasbro, we may collect and process personal information about you, your reference providers, your dependents, beneficiaries and other individuals whose personal information has been provided to us, primarily to evaluate your application for employment.

The types of personal information we collect and process (to the extent permitted by law) may include, but are not limited to:

• Identification data such as name, photograph, gender, date of birth;
• Contact details such as home address, telephone number, email address, and emergency contact information;
• Education and employment history, including professional qualifications, achievements and skills information such as academic/professional experience and qualifications, education, CV/resume information, languages;
• Job interests and specializations;
• National identifiers such as national ID/passport, citizenship or immigration status, driver's license number, and social security number;
• Spouse, dependents and next of kin information such as names, ages, contact details
• Financial information such as bank account details, tax information, salary, expenses, company allowances;
• Benefits information such as employer pensions contributions, life assurance and private medical cover information;
• Pension information such as pension entitlements, early retirement information (if applicable);
• IT related information we may collect during interactions with you, such as computer ID, user ID, IP addresses, log files, software and hardware inventory, and cookies;
• Criminal records and background checks;
• Military status; and
• Any other identifying information that you choose to provide.

You can choose not to provide certain personal information to us, but unless otherwise indicated, the information we request from you is necessary to conduct our recruitment process and ultimately, if that process is successful, make an offer of employment to you. Failure to provide requested information may prevent us from effectively evaluating your application or completing necessary activities to initiate an employment or other contractual relationship with you.

There may be situations where we collect information that reveals your racial or ethnic origin, religious, political or philosophical beliefs, trade union membership, information about your health/sex life, genetic data or biometric data ("Sensitive Data") for the purposes of unique identification. Additionally, we may request, on a voluntary disclosure basis, certain Sensitive Data such as information about your racial/ethnic origin, gender and disabilities which may be required to comply with anti-discrimination laws and government reporting obligations, or which we may otherwise use to help ensure equal employment opportunities. You may also provide us with information about your physical or mental condition so that if your application is successful we can provide work-related accommodations or so that you can manage absences from work.

In some cases, we may also collect information you provide about others, such as in regard to references, dependents or emergency contacts, to be used for the purposes described in this Notice. If you provide us with such information you represent that you have any necessary consents to give us that information for use as described herein.

2. Sources of personal information

Usually, you will have directly provided the information we process about you, but there may be situations where we collect personal information from other sources. The following third parties may be solicited for additional information relevant to recruitment and employment:

• Current and previous employers, education institutions, certification authorities and other references you provide;
• Head-hunters and recruitment agents;
• Public records, and reports from criminal records- and background-checking agencies;
• Information about you publicly shared on the internet, such as on previous employers websites, organizations you are affiliated with, and information you have made public on LinkedIn and other social media platforms.

3. Information We Collect Automatically From You.

When you access or use our websites, careers portal or related online services, we may also automatically collect information about your use of those services. Please see our publicly-posted Privacy Policy for more information about how such information is collected and used.

4. Purposes for processing personal information

We collect and use this personal information primarily for recruitment purposes – in particular, to determine your qualifications for employment, to reach a hiring decision and to initiate the onboarding process, if we extend and you accept an offer for employment. This includes assessing your skills, qualifications and background for a particular role, verifying your information, carrying our reference checks or background checks (where applicable) and to generally manage the hiring process and communicate with you about it.

If you are accepted for a role at Hasbro, the information collected during the recruitment process will form part of your ongoing human resources record and will be processed in accordance with our relevant employee policies and employee privacy disclosures.

5. Data retention

Personal information will be stored only as long as is necessary to carry out the purposes described in this Notice or as otherwise required by contractual agreements with third parties, applicable law or other Hasbro policies. If you are not employed by us, depending on the circumstances, we will still keep your application for up to 2 years to allow us to consider you for other suitable openings within Hasbro in the future unless you request that we delete your application, provided that we may retain any information due to legal obligations or other reasonable purposes permitted by law.

6. Third-party sharing of your information

Hasbro takes care to allow access to personal information only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it.

Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the information is used in a manner consistent with this Notice and that the confidentiality and integrity of the information is maintained.

We will share your personal information with Hasbro and its affiliates in the US and other jurisdictions to carry out the recruitment process, including with respect to interviews, human resources administration, employee compensation and benefits, as well as for other legitimate business purposes (such as IT services/security, legal compliance, tax & accounting purposes, general business management).

We may make certain personal information available to third parties who provide services relating to the recruitment process to us, including recruitment or executive search agencies involved in your recruitment, the disclosure and barring service (or equivalent criminal records checking agency) and any background checking agency we utilize. We do so on a "need to know basis" and in accordance with applicable data privacy law.

We make certain personal information available to third parties who provide other services to us, such as general software/IT troubleshooting.

We may also disclose personal information to other third parties on other lawful grounds, including:

• To comply with our legal obligations, including where necessary to abide by law, regulation or contract, or to respond to a court order, administrative or judicial process, or to meet national security or law enforcement requests, including, but not limited to, a subpoena or search warrant;
• With your consent;
• As necessary to establish, exercise or defend against potential, threatened or actual litigation;
• Where necessary to protect the vital interests of another person; and
• In connection with the sale, assignment or other transfer of all or part of our business.

We may also use and share aggregated information or information that we have collected, where we have taken reasonable measures to de-identify such information.

7. Transfer of your personal information outside of the European Economic Area (EEA)

Hasbro, Inc. is a global company and as such, we may need to transfer personal information to other countries where Hasbro and affiliates operate, including but not limited to the United States. The data we may need to transfer includes information on relevant experience you may have for a particular job or position. When we export your personal information to a different country, we will take steps to ensure that such data exports comply with applicable laws.

Likewise, when we use third party service providers and their services involve transfers of personal information outside of the EEA, we put in place appropriate steps to ensure that the data exports comply with applicable laws.

For information on the service providers we use and how we protect your data outside the EEA, please contact us as directed at the end of this notice.

8. Legal basis for processing personal information

We will normally collect personal information from you only where we are required to do so to comply with employment law, where we have your consent to do so, where you have made the data public, where we need the personal information to perform a contract with you (i.e. to administer an employment or work relationship with us), or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms – specifically where processing is an important part of making and communicating a recruitment decision relating to you, or informing you of vacancies. To the extent we rely on your consent in order to process your personal information, you have the right to withdraw your consent at any time.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided below.

9. Data security

Hasbro has established a security program with administrative, technical and physical safeguards designed to protect your personal information against loss, misuse and unauthorized access, disclosure, alteration and/or destruction. For example, Hasbro strives to provide only those employees performing a legitimate recruiting function (e.g., HR or others involved in the hiring process) with access to a job applicant’s personal information. Hasbro also reviews its security procedures periodically to consider appropriate new technology and updated methods.

10. Data protection rights for California, Colorado, Connecticut, and Virginia residents

These additional disclosures currently apply to personal information concerning individuals who reside in California or Virginia, and starting July 1, 2023, also include individuals who reside in Colorado or Connecticut. We anticipate expanding these disclosures and rights to residents of additional states in the future.

The California Consumer Privacy Act (“CCPA”) and California Privacy Rights Act (“CPRA”), the Virginia Consumer Data Protection Act (“VCDPA”), Colorado Privacy Act (“CPA”), and Connecticut Public Act No. 22-15 (collectively, “State Privacy Laws”) direct businesses (1) provide additional disclosures about privacy practices and (2) offer consumers the right to access, correct or delete their personal information (subject to certain exceptions), as well as the right to opt out of the selling/sharing of personal information, third party targeted advertising, or certain other activities as described further below.

RIGHT TO ACCESS, CORRECT OR DELETE YOUR INFORMATION
You have the right to request access to, and a copy of, the:

• categories of personal information we have collected about you;
• categories of sources from which the personal information was collected;
• categories of personal information about you we disclosed for a business purpose or sold;
• categories of third parties to whom the personal information was sold or disclosed for a business purpose;
• business or commercial purpose for collecting or selling the personal information; and
• specific pieces of personal information we have collected about you.

You also have a right to request that we delete your personal information (subject to certain exceptions), and request that we correct your personal information if it is inaccurate.

To exercise any of these rights, please submit a request to us by calling our toll-free number at (800) 255-5516, or by completing the request form found here. In the request, please specify which right you are seeking to exercise and the scope of the request. We will endeavor confirm receipt of your request within 10 business days. We may require specific information from you to verify your identity before processing your request, and we may send you a confirmation email that you must respond to before we process the request. Due to our privacy-protective practices, in some instances Hasbro may not have sufficient personal information (e.g., name, email) that would enable us to verify an individual’s identity and complete a request to know or delete information. We aim to complete requests within 45 days, and if needed we may extend the response by another 45 days.

11. Data protection rights for EU/EEA, UK or Switzerland residents

This section applies to the personal information of individuals who reside in the EU/EEA, UK or Switzerland. Individuals about whom we process personal information (including you) are entitled to exercise certain rights with respect to their own personal information. Depending on the circumstances and the conditions, you have the following data protection rights:

• To access, correct, update or request deletion of your personal information;
• Object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information;
• If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent; or
• To complain to a data protection authority, such as the Information Commissioner's Office about our collection and use of your personal information.

For more information on these rights and to make a request to us please contact us via email to DPO@hasbro.com. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

12. Updates to this Notice

This Notice may be updated periodically to reflect any necessary changes in our privacy practices. We encourage you to check back on this Notice periodically so that you are aware of the most recent version of it.

13. Questions and comments

You can address any questions or comments relating to this Notice and our privacy practices to:

Hasbro, Inc.
Attention: Data Protection
1027 Newport Avenue, Mailstop A906
Pawtucket, RI 02861 USA
(800)255-5516
DPO@hasbro.com