Personal Data Protection Charter

This Data Protection Charter (hereinafter the "Charter") is established by Lantinor LLC, a limited liability company incorporated in the State of Wyoming (United States), whose contact details are:

• Company name: Lantinor LLC
• Registered office: 30 N Gould St Ste R, Sheridan, WY 82801, United States
• Website: www.lantinor.com
• Contact: contact@lantinor.com

This Charter applies to (i) our website www.lantinor.com (the "Website") and (ii) our Lantinor SaaS Platform, to all relationships with our Recruiter clients, prospects, business partners, and any person whose data we process.

2.1 Recruiter Data (clients)

In the context of the business relationship and use of the Platform, Lantinor collects the following data about Recruiters and their staff:

• First and last name
• Professional email address
• Phone number
• Company name and information (business name, industry, size)
• Login data (credentials, access logs, IP address)
• Billing data (billing address, payment information — processed through a secure provider)
• Platform usage data (statistics, preferences, history)

2.2 Candidate Data

In the context of processing applications, Lantinor collects the following data about Candidates on behalf of Recruiters:

• First name, last name, contact details (email, phone, address)
• Resume (CV) and cover letter
• Professional information (experience, education, skills, qualifications)
• Application reference number
• Application tracking data
• Any information voluntarily submitted through the application form

2.3 Automatically Collected Data

When browsing the Website, Lantinor automatically collects anonymous data through cookies: pages visited, browser type, operating system, traffic data. This data is used for statistical purposes and to improve the Platform.

2.4 Automated Processing and Artificial Intelligence

Lantinor uses artificial intelligence technologies to process certain data, including:

• Resume analysis and extraction: automated extraction of information from resumes (skills, experience, education)
• Application scoring: automated assessment of the match between a candidate profile and a job offer
• Semantic analysis: contextual understanding of resumes for more relevant matching

In accordance with Article 22 of the GDPR, no decision producing legal effects or significantly affecting Candidates is made solely on the basis of automated processing. AI scoring and analysis serve as decision-support tools for Recruiters, who retain full responsibility for recruitment decisions. Any Candidate has the right to obtain human intervention, express their point of view, and contest the decision by contacting the relevant Recruiter or Lantinor at contact@lantinor.com.

Lantinor processes personal data for the following purposes:

For Recruiters:

• Subscription management and contractual relationship
• Provision and improvement of Platform services
• Billing and payment management
• Communications regarding updates, new features, and commercial offers (with consent)
• Compliance with legal and regulatory obligations
• Security and fraud prevention

For Candidates:

Candidate data is processed exclusively on behalf of and under the instructions of Recruiters, within the scope of the data processing agreement between Lantinor and the Recruiters. This processing enables the Recruiter to review, evaluate, and manage applications received as part of their recruitment processes, including through automated AI analysis (resume parsing, scoring, semantic analysis), as well as to facilitate communications between the Recruiter and the Candidate throughout the process. Data is never used for Lantinor's own purposes, nor shared with third parties for commercial purposes.

Processing carried out by Lantinor is based on the following legal grounds:

• Performance of a contract: for the provision of services to Recruiters
• Legitimate interest: for Platform improvement, security, fraud prevention, and automated decision-support processing (AI scoring)
• Consent: for marketing communications and the use of non-essential cookies
• Legal obligation: for compliance with legal and tax requirements

Personal data may be shared with the following categories of recipients:

• Recruiters: regarding Candidate data for candidates they have invited or whose applications they have received
• Technical service providers: hosting, cloud infrastructure, analytics tools, secure payment services, artificial intelligence service providers
• Lantinor's legal and accounting advisors
• Competent authorities: when required by law or to protect Lantinor's rights

In the event of a sale, merger, or acquisition of Lantinor, collected personal data may constitute one of the transferred assets. Users would be informed in advance.

Lantinor retains personal data for the duration necessary to fulfill the purposes for which it was collected:

• Recruiter data (active accounts): for the duration of the subscription, then 3 years after contract termination for accounting and legal purposes
• Candidate data: up to 24 months after the end of the relevant recruitment process, or until expiration of the responsible Recruiter's subscription
• Browsing data and cookies: maximum 13 months after the last visit
• Tax and accounting data: 7 years in accordance with legal obligations

Clarification on termination: Upon termination of a Recruiter subscription, active Platform data (access, job offer content, ongoing applications) is deleted within 30 days. Data subject to legal retention obligations (accounting, tax, contractual data) is retained for the duration required by applicable law, then deleted.

At the end of these periods, data is securely deleted or anonymized.

In accordance with applicable regulations, you have the following rights regarding your personal data:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): request deletion of your data under the conditions provided by law
• Right to restriction of processing: request temporary suspension of processing
• Right to data portability: receive your data in a structured format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
• Right not to be subject to automated decision-making: in accordance with Article 22 of the GDPR, you may request human intervention regarding the automated scoring of your application

To exercise your rights, contact us free of charge at: contact@lantinor.com

You also have the right to lodge a complaint with the competent data protection authority in your country of residence.

We implement all necessary security measures to protect your Personal Data against unauthorized access, disclosure, modification, damage, or destruction. Lantinor and its technical and hosting providers have deployed appropriate measures to ensure the integrity, confidentiality, and security of your Personal Data. Your Personal Data is stored on servers located in the European Union.

No system is infallible, and Lantinor cannot guarantee absolute security. In the event of a data breach posing a risk to your rights and freedoms, Lantinor will notify you within the timeframes required by applicable regulations.

Lantinor LLC is a company incorporated in the United States (Wyoming). Personal data is hosted on servers located in the European Union.

As part of its operations, certain data may be accessed from the United States by Lantinor teams for support, maintenance, and Platform improvement purposes. These transfers are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission, in accordance with Article 46 of the GDPR, to ensure an adequate level of protection for your data.

To obtain a copy of the safeguards in place, you may contact us at contact@lantinor.com.

The Platform uses cookies and similar technologies. On your first visit, an information banner allows you to accept or reject non-essential cookies. You may also configure your browser to block cookies, which may affect certain Platform features.

Types of cookies used:

• Strictly necessary cookies: essential for Platform operation (no consent required)
• Analytics cookies: audience measurement and Platform improvement (consent required)
• Preference cookies: remembering your settings (consent required)

Lantinor reserves the right to update this Charter at any time. In the event of a substantial change, Users will be notified by email and/or through the Platform. The current version is always available on our website.

For any questions regarding this Charter or the processing of your personal data:

• By email: contact@lantinor.com
• By mail: Lantinor LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States
• Website: www.lantinor.com