I.INTRODUCTION

Vermeg Subcontractors Privacy Policy describes the privacy and security practices that Vermeg employs when collecting, using, and handling personal information about Subcontractors. It also explains the choices Subcontractors have in relation to these processing activities.

Vermeg takes the security of Sub-Contractors’ personal information seriously.

Vermeg has internal policies and controls in place to ensure that Sub-Contractors’ personal information is not lost, accidentally destroyed, misused or disclosed and is not accessed except by its employees in the performance of their duties.

Should there be the need for any third parties to process data on behalf of Vermeg, this processing shall be subject to (i) Vermeg written instructions, (ii) third party confidentiality obligation and (iii) third party obligation to implement appropriate technical and measures to ensure the security of data.

This policy may be updated periodically to adhere to legal obligations or align with evolving business demands. The latest version can always be accessed on Vermeg’s website.

II.SCOPE OF Vermeg’S SUB-CONTRACTORS PRIVACY POLICY

This Privacy Policy applies to Vermeg’s processing of personal information of Vermeg’s Sub-Contractors.

This policy governs the handling of Sub-Contractors’ personal information throughout their contractual relationship with Vermeg, ensuring compliance with applicable data protection laws and regulations.

III. CATEGORIES OF PERSONAL INFORMATION Vermeg PROCESS

Vermeg collects and processes a range of information, this includes but is not limited to:

• Name, address and contact details, including email address and telephone number.
• Qualifications should these be required
• Professional qualifications should these be required
• Details of the bank account and national insurance number:
  Personal information will be stored can be stored in different places, Vermeg’s management systems and in other IT systems, including Vermeg’s email system.

IV. USE OF SUB-CONTRACTORS PERSONAL DATA

The information is processed to enable the contractual relationship between Vermeg and the Sub-Contractor to proceed and meet the relevant obligations contained in their agreements.

In some cases, Vermeg needs to process the personal information to ensure legal obligations are complied with.

• Maintain accurate and up to date records and contact details.
• Meet its obligation under health and safety law
• Ensure effective general business administration
• Provide references should these be requested by potential employers or other relevant parties

V. AND PROTECTING Vermeg’S SUB-CONTRACTORS INFORMATION?

Vermeg’s legal entities, which are based in different locations, are responsible for Sub-Contractors’ information as described in this Privacy Policy.

See the list of Vermeg’s locations.

VI. RIGHTS OF SUB-CONTRACTORS

Vermeg’s Sub-Contractors can:

• Access and obtain a copy of their personal information upon request
• Require Vermeg to change incorrect or incomplete personal information
• Request Vermeg to delete or stop processing their personal information if it is no longer necessary for the purposes of processing
• Object to the processing of their personal information

Please contact Vermeg using the information provided in Section VII.

Sub-Contractors have some obligations to provide Vermeg with personal information, such as contact details, payment details to ensure a flowing working relationship.

VII. DATA PROTECTION OFFICER

Vermeg has appointed a Global Data Protection Officer.

For any questions, inquiries, suggestions, comments please contact Vermeg DPO dpo@Vermeg.com.