APPLICANT AND CANDIDATE PRIVACY NOTICE – GSC Game World Global Ltd

LAST UPDATED: July 2nd, 2026

WHAT IS THE PURPOSE OF THIS DOCUMENT?

GSC Game World Global LTD., company registered under the laws of Republic of Cyprus, registration number HE 413188, registered address Leontiou A, 159, Maryvonne Building, Floor 4 & 5, office 402, 3022, Limassol, Cyprus (hereinafter – “GSC”) is committed to protecting the privacy and security of your personal information.

This privacy notice describes how and why we collect and use personal information about you during recruitment and hiring processes, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR). Please note that your use of our services unrelated to hiring and recruitment is governed by our Privacy policy.

GSC is a data controller. This means that we are responsible for deciding how we collect, process and use personal information about you in our recruitment and hiring processes. We are required under the GDPR to notify you of the information contained in this privacy notice.

This privacy notice should not be construed as creating any employment contract, services contract, or any other legal relationship between you and GSC.

DATA PROTECTION PRINCIPLES

We will comply with the GDPR, which says that the personal information we hold about you must be:

  1. Used lawfully, fairly and in a transparent way.
  2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  3. Relevant to the purposes we have told you about and limited only to those purposes.
  4. Accurate and kept up to date.
  5. Kept only as long as necessary for the purposes we have told you about.
  6. Kept securely.

The kind of information we hold about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the person's identity has been removed (anonymous data).

We may collect, store and use the following categories of personal information about you:

  • Personal contact details such as name, title, geolocation, telephone numbers, personal email addresses and other contact information.
  • Your resume or CV, cover letter, previous and/or relevant work experience or other experience, education (such as information about certifications and qualifications) or other information you provide to us in support of an application and/or the application and recruitment process;
  • Date of birth;
  • Photo, should you wish to provide one;
  • Information from interviews and phone- or video - screenings you may have, if any;
  • Details of the type of employment or other type of engagement you are or may be looking for, desired salary and other terms relating to compensation and benefits packages, willingness to relocate, or other job preferences;
  • Details of how you heard about the position you are applying for;
  • Your information from publicly available professional sources, including online, that we believe is relevant to your application or a potential future application (such as information from LinkedIn or GitHub profiles or other social media resources, whereby you have published information about you on the Internet excluding purely personal social media networks); and/or
  • Information related to any assessment you may take as part of the interview screening process;
  • Citizenship and work authorization status (e.g., visa or right-to-work records);
  • Any other information you choose to submit to GSC as part of your application.

In the event of your employment or engagement by GSC, your personal data will be processed in accordance with a separate privacy notice provided at that time.

HOW IS YOUR PERSONAL INFORMATION COLLECTED?

We collect personal information about you:

  • Directly from you through the application process on our GSC's website or e-mail applications, whether applying for a specific position or submitting your CV for general consideration without applying to a particular role;
  • Directly from you from applications submitted via third-party platforms or service providers (such as LinkedIn) or any websites where you have opted to pursue employment opportunities;
  • Through a recruitment agency, in case you have provided your consent for them to share your personal information with GSC.

Where you submit your application through a third-party platform or service provider (such as a job board or recruitment portal), please note that the collection and initial processing of your personal data carried out by that provider will be governed by their own privacy policy and terms of use. We encourage you to review the relevant third-party privacy policy before submitting your personal data through their platform.

OUR USE OF YOUR PERSONAL INFORMATION

We will only use your personal information solely to conduct our application and recruitment processes which include:

  1. Evaluating your abilities, credentials, and career goals to see how well they match the opportunities currently available within GSC;
  2. Keeping you informed about the progress of your application and, when relevant, reaching out about other suitable positions at GSC;
  3. To contact you regarding application and possible opportunities;
  4. To make a decision about your engagement or application process;
  5. Compiling and submitting required documentation to meet local legal obligations and government standards;
  6. Supporting you with the process of applying for a visa or work permit, if such assistance is needed and you provided your consent for it;
  7. Using data insights to improve and optimize the overall recruitment and application process at GSC;
  8. Fulfilling our responsibilities in accordance with relevant laws, legal proceedings, or official government requirements.

Legal basis for our use of your personal information:

  • paragraphs 1, 3, 4 (evaluating and contacting you) - Necessary for taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR);
  • paragraph 6 (visa support) - your explicit, freely given Consent (Art. 6(1)(a) GDPR);
  • paragraph 5 and 8 (legal obligations) - compliance with a legal obligation (Art. 6(1)(c) GDPR);
  • paragraph 7 (optimizing recruitment) - our legitimate interest in improving our business operations (Art. 6(1)(f) GDPR).

CHANGE OF PURPOSE

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Automated decision-making and artificial intelligence tools (AI).

GSC may utilize AI during the recruitment process in connection with the collection or processing of your personal data. One example of such use is generating interview transcripts through AI-based transcription tools and translation of relevant transcripts into foreign languages.

Your personal data, along with the results of any related processing, remains strictly within GSC's infrastructure and is not shared with any external AI applications.

No decisions will be taken about you using automated means.

We rely on our legitimate interest to streamline the interview process using these internal AI tools. However, you have the right to request a non-AI-transcribed interview format without any negative impact on your candidacy.

Why might you share my personal information with third parties?

We will share your personal information with third parties where required by law, where it is necessary to administer our relationship with you or where we have another legitimate interest in doing so.

TRANSFERRING INFORMATION OUTSIDE THE EU

If necessary for the purposes stated above and subject to legal basis, the personal data collected may be transmitted or made accessible to GSC affiliates and/or third parties service providers located outside of the European Union (EU), or to competent authorities including those based in other countries, which may include countries outside of the EU and the European Economic Area (EEA). Third parties to whom your personal data is transferred are bound by specific agreements and are required to keep your data securely.

In such cases where personal data is transferred outside of the EU/EEA, the transfer will take place in accordance with the provisions of Chapter V of the GDPR through the adoption of appropriate safeguards that ensure the required level of data protection (such as standard contractual clauses) or based on a statutory exemption (e.g. if you have given your consent to the transfer, if the transfer is directly connected with the conclusion or performance of a contract with you or if the transfer is necessary for the establishment, exercise or enforcement of legal claims before a foreign authority).

DATA PROTECTION

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Additionally, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

DATA RETENTION

If your application is unsuccessful, we will retain your personal data for a period of six (6) months after the recruitment process ends to comply with our legal obligations. However, if you explicitly consent to be included in our talent pool for future opportunities, we will retain your data for twenty-four (24) months from the date of your consent.

You are entitled to withdraw your consent at any time by sending relevant email request to [email protected]. At your request, your personal data will be deleted to the extent such deletion does not conflict with applicable law or our legitimate interest in defense of legal claims related to your application process.

USE OF TEST RESULTS

As part of our recruitment process, GSC may require you to complete personality, logical, or skill-based assessments. We process this data because it is necessary to evaluate your suitability for the role prior to entering into a potential contract with you.

To ensure fairness and efficiency, GSC may use software tools that may automatically evaluate your test results and compare them against the objective requirements of the position. While we use these automated systems to score and shortlist candidates, final recruitment decisions are made by our recruitment professionals and are not based on the automation.

If you have given your consent to us to use your personal data to consider you for future positions within GSC as well, we may use the results of the tests in order to ensure that we will only send you information on positions that may be relevant to you. You are entitled to withdraw your consent at any time by sending relevant email request to [email protected]. As specified in the section above.

RIGHTS OF ACCESS, CORRECTION, ERASURE AND RESTRICTION

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

  • Request access to your personal information(commonly known as a data subject access request). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact [email protected] in writing.

RIGHT TO WITHDRAW CONSENT

You may revoke your consent at any time by sending relevant email requests to [email protected]. We will delete your data upon request, except where retention is required by law or for the defense of legal claims related to your application. Deleting your data will not affect GSC’s previous processing of your personal data.

DATA PROTECTION OFFICER (DPO)

We have appointed a data protection officer to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact [email protected]. If your request was not satisfied, you can file a complaint to the regulatory body, the Office of the Commissioner for Personal Data Protection at P.O.Box 23378, 1682 Nicosia, Cyprus or via email at [email protected]

CHANGES TO THIS PRIVACY NOTICE

This privacy notice is subject to occasional updates. You can find the most recent revision date at the top of the page. All modifications take effect immediately upon being published here.

BY PROCEEDING WITH YOUR APPLICATION, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY NOTICE CONCERNING GSC'S COLLECTION, STORAGE, AND USE OF YOUR PERSONAL DATASHARING YOUR PERSONAL INFORMATION IS VOLUNTARY, PROVIDING INSUFFICIENT INFORMATION MAY LIMIT GSC'S ABILITY TO FULLY ASSESS YOUR CANDIDACY.

GSC Game World Global Ltd.

© 2026 GSC Game World and its logos are Trademarks or Registered Trademarks Of GSC Game World Global Ltd. S.T.A.L.K.E.R. 2 is a registered trademark of GSC Game World Global Ltd. © S.T.A.L.K.E.R. 2: Heart of Chornobyl a game developed GSC Game World.Microsoft, the Xbox Sphere Mark, The Series X Logo, Series S Logo, Series X|S Logo, Xbox Series X, Xbox Series S, Xbox Series X|S Logo, Microsoft Store Logo are trademarks of Microsoft group of companies. © 2026 Valve Corporation. All rights reserved. PlayStation and PS5 are trademarks of Sony Interactive Entertainment Inc. Steam and the Steam logo are trademarks and/or registered trademarks of Valve Corporation in the U.S. and/or other countries. © 2026 , Epic Games, Inc. All rights reserved. Epic, Epic Games, the Epic Games logo, Unreal Engine and Unreal Engine logo are trademarks or registered trademarks of Epic Games, Inc. in the United States of America and elsewhere.© GOG SP. Z O.O. GOG logo is a trademark and/or registered trademark of GOG. All other trademarks, registered trademarks or logos belong to their respective owners. All other trademarks, registered trademarks or logos belong to their respective owners. “PS5” and “DualSense” are registered trademarks or trademarks of Sony Interactive Entertainment Inc.