Here at World Engineering Corp. (WEC) we take your privacy seriously. We greatly value your contribution to our success, and we will do everything we can to protect your individual rights and personal liberties.

As part of our ongoing relationship, we will need to collect, store and process certain

information about you. This information is required to carry out certain processes, and we will clearly explain what those processes are and how your data will be used. You have the right to object to the processing of your data at any time.

This privacy policy may be occasionally updated in-line with company policy and regulatory updates. Any updates to this policy will be communicated to all employees as soon as possible.

How will your information be used?

As an employee of WEC, we must store and process information about you for management and administrative use only. The information you give us will be stored and processed only to allow us to maintain an effective relationship with you as an employee.

These management processes apply during the recruitment process, whilst you are an

employee for WEC and when your relationship with our company has ended.

The management and administrative processes carried out using your data will allow us to adhere to the employee contract you have signed with us, as well as to comply with legal requirements we are duty-bound to follow. Your data may also be used to pursue the

legitimate interests of WEC and to maintain any established position in the event of legal proceedings.

Most of the information our company holds relating to you has been provided to WEC by you. In some cases, we may also collect information about you from other internal sources such as a line manager. On other occasions we may collect and store information about you from external sources, such as a reference as part of the recruitment process.

If you don’t want to provide us with the information requested, WEC might not be able to meet all of the obligations to you that we outlined in your employee contract. We will inform you in the event we are unable to comply with the conditions of your contract due to missing or withheld data.

We may anonymize your personal data in some cases so that it cannot be used to identify you. This may be done without notifying you.

After your relationship with our company has ended and you are no longer an employee at WEC, we will store and/or securely destroy the data we hold relating to you in- line with applicable regulations.

There may be limited circumstances in which your data must be transferred outside of the Colombia. This will only ever be done to comply with our legal obligations, or our company’s contractual obligations to you as our employee. To protect your personal data, WEC has

implemented the following safeguards for data transfers:

• Data Transfer Agreements
• Data Anonymization
• Encryption
• Data Minimization
• Consent
• Audits and Compliance Checks

Your personal data will be stored for a period of 24 months, unless otherwise noted. Criteria used for determining data retention for other situations are as follows:

• Legal Compliance
• Payroll Administration
• Dispute Resolution
• Regulatory Audits
• Historical Reference

Our legitimate interests

WEC may occasionally need to process your data to pursue legitimate interests relating to our company and its business interests. Examples of situations in which we may process your personal data in the legitimate interests of the company include (but are not

limited to):

• Fraud prevention
• Administrative purposes
• Crime reporting and detection

Our legitimate interests are Ensuring the safety and well-being of employees in nature, and WEC will never use your information or wilfully process your data in any situation in which your own interests outweigh the legitimate interests of our company. We process your

personal data only within our rights as enshrined in law, and we do so in a way that is transparent and fair.

We may occasionally need to process your data to ensure it is accurate and up-to-date or to ensure it is safe and secure.

What information do we collect?

WEC collects, stores and processes the following types of information about you as an employee:

• Your name
• Your title
• Your date of birth
• Your gender
• Your address
• Your telephone number(s)
• Your personal email address(es)
• Your marital status
• Information about dependents
• Your emergency contact information
• Your next of kin
• Your bank account details
• Your tax status information
• Your payroll records
• Your salary
• Information about your annual leave
• Your benefits information
• Your Cedula
• Your photograph
• A copy of your driving license
• A copy of your passport
• Your right to work documentation (if applicable)
• Your references
• Your CV
• Your performance history
• Your disciplinary history
• Your grievance history
• CCTV footage (if applicable)
• Electronic key card or biometric records (if applicable)
• Information about your use of information systems

Why do we process your information?

WEC may process your data for the following reasons:

• To make a decision about your appointment
• To carry out payroll processes
• To provide you with benefits
• To liaise with your pension provider
• To administer other elements of your contract
• To manage performance
• To carry out accounting and auditing functions
• To assess your qualifications for a particular project, task or promotion
• To make a decision about salary reviews
• To make a decision about your continued employment
• To gather evidence about grievance or disciplinary hearings
• To address legal disputes
• To make a decision about terminating our relationship
• To assess your education or training requirements
• To manage your absences
• To ascertain your fitness to work
• To comply with health and safety obligations
• To carry out equal opportunities monitoring
• To prevent fraud
• To ensure network and information security
• To conduct data analytics

It is inevitable that in your capacity as an employee you will be referred to in company records. Please also note that wherever necessary, WEC may need to keep information relating to your health, such as reasons for absence and evidence of GP notes. This information will only ever be used to comply with our health and safety obligations and to administer benefits such as statutory sick pay or professional education among others.

We will only ever disclose information about you to external parties if WEC is legally obligated to do so, or in situations in which we must disclose your information tocomply with our company’s contractual obligations to you.

Examples may include passing your

contact details onto your pension provider. We may also transfer information about you to other companies within our wider family of companies, for purposes related to your

employment or purposes related to company management and administration.

We also monitor computer and telephone usage, to ensure that employment activities are carried out in-line with our Data Protection Policy.