Candidate Privacy Notice

Updated Date:

Jul 29, 2026

Last updated: July 29, 2026

This Candidates Privacy Notice (“Notice”) describes how Wonderful Systems Ltd. and its affiliates and subsidiaries (collectively, “Wonderful”, “we”, or “us”) collect and process Personal Data (as defined below) when you apply for a position with Wonderful (whether as an employee, worker, consultant, or independent contractor, and collectively, “Candidates”, “you”, or “your”), upon submission of your application, during the recruitment process, and, where applicable, thereafter.

This Notice applies to Candidates in the territories in which we offer job opportunities, including Israel, the European Economic Area, South Africa, and countries in Latin America, and is subject to all applicable data protection and privacy laws and regulations that govern, apply to, or may otherwise be relevant to our processing of Personal Data in the relevant jurisdiction(s) (collectively, “Data Protection Laws”), including, without limitation, the Israeli Protection of Privacy Law, 5741-1981 (“IPPL”) and, where applicable, the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR (together, the “GDPR”).

This Notice provides Candidates with information about the types of Personal Data we collect, how and why we use it, how long we retain it, with whom we share it, and your rights in relation to the Personal Data we process. This Notice also includes additional disclosures required under applicable Data Protection Laws, including (where the GDPR applies) our lawful bases for processing and other information we are required to provide to you under the GDPR.

This Notice supplements our Privacy Policy governing use of our website (if you submit your application through the website). If, following the recruitment process, you are engaged by Wonderful, your Personal Data collected during recruitment will be processed in accordance with our internal policies applicable to employees and other staff members, as updated from time to time.

YOU ACKNOWLEDGE THAT YOU ARE NOT UNDER ANY STATUTORY OBLIGATION TO PROVIDE WONDERFUL WITH PERSONAL DATA AND THAT ANY PERSONAL DATA YOU PROVIDE WHEN YOU SUBMIT YOUR APPLICATION AND THROUGHOUT THE RECRUITMENT PROCESS IS PROVIDED AT YOUR FREE WILL AND CONSENT (WHERE REQUIRED UNDER APPLICABLE DATA PROTECTION LAWS). HOWEVER, WE MUST COLLECT OR RECEIVE CERTAIN PERSONAL DATA TO EVALUATE YOUR APPLICATION (INCLUDING AT LATER STAGES). IF YOU DO NOT PROVIDE SUCH PERSONAL DATA, WE MAY NOT BE ABLE TO ASSESS YOUR APPLICATION OR COMPLY WITH LEGAL REQUIREMENTS (FOR EXAMPLE, TO DECIDE WHETHER YOU QUALIFY FOR A CERTAIN POSITION) AS FURTHER DESCRIBED UNDER SECTION 2 - “PERSONAL DATA PROCESSED BY WONDERFUL, PURPOSES OF USE AND LAWFUL BASIS” WHICH DETAILS THE PURPOSES FOR WHICH WE NEED AND USE EACH TYPE OF PERSONAL DATA COLLECTED.

It is important that you read this Notice, together with any other notices that might be provided on specific occasions when we are collecting Personal Data about you, so that you are aware of how and why we are collecting and using such Personal Data.

1. CONTACT INFORMATION AND DATA CONTROLLER INFORMATION

Wonderful Systems Ltd. is the “data controller” or “database controller”, regardless of which Wonderful affiliate or subsidiary is (or was) conducting the recruitment process. Wonderful Systems Ltd. determines the purposes and means of processing your Personal Data (as described in this Notice) and is responsible for facilitating the exercise of your rights.

For any question, inquiry, or concern related to this Notice or the processing of your Personal Data, you may contact us as follows:

By Mail: 146 Begin Menachem Rd, Tel Aviv-Yafo 6492103, Israel
Data Protection Officer: dpo@wonderful.ai
Data Protection Representative for data subjects in the EU: Wonderful has designated its Prighter Group as its representative in the European Union for data protection matters relating to the processing of Personal Data of EU residents, pursuant to Article 27 of the GDPR. If you have any comments or questions regarding this Notice, concerns regarding your privacy, or wish to make a complaint about how Wonderful processes your Personal Data, please contact us at https://app.prighter.com/portal/15048825761.

2. PERSONAL DATA PROCESSED BY WONDERFUL, PURPOSES OF USE AND LAWFUL BASIS

For the purpose of this Notice, “Personal Data” means information that identifies an individual or that can reasonably be used to identify an individual, either directly or indirectly, as further defined under the Data Protection Laws (for example, “personal information” or “personally identifiable information”).

Personal Data may also include types of information that are defined under applicable Data Protection Laws as “Sensitive Data” (and may be further defined under applicable Data Protection Laws as “highly sensitive information”, “special categories of personal data”, “sensitive personal information”, etc.), such as a governmental identification number or certificate, professional qualifications, financial information, personality assessments, and health-related information.

Wonderful collects, stores, and uses various types and categories of Personal Data about Candidates, which may include Sensitive Data. The table below details the categories of Personal Data we process, the purposes for which we use each category, and (where the GDPR applies) our lawful bases for processing.

Please note that the specific categories or types of Personal Data collected may vary depending on the position you apply to and the legal requirements under applicable Data Protection Laws.

Wonderful does not use your Personal Data to make decisions based solely on automated processing (including profiling) that produce legal effects concerning you or similarly significantly affect you.

Categories and Types of Personal Data	Purpose of Collection and Use	Lawful Basis (under the GDPR, where applicable)
Identification information Your full name and other identifying information such as your photo, government-issued identification number, copies of identification documents (for example ID, passport) and date of birth. Contact information Your email address, phone number, and residential address. Employment history, education, and qualifications Your previous employers, roles, dates of employment, responsibilities and achievements, educational institutions attended, certifications and degrees, fields of study, etc. Skills and abilities Information related to your competencies, skills, language proficiency, and other expertise relevant to the position. Assessment results Information we obtain from interviews, tests, or assessments conducted by us (or on our behalf) during the recruitment process to evaluate your suitability for the position. Eligibility to work Information regarding your legal right to work in the relevant country, such as citizenship or visa status. Communications and recruitment records Correspondence with you and records (including, where permitted by law, recordings of phone calls, interviews or other interactions between you and us during the recruitment process). As part of our recruitment process, we may utilize Artificial Intelligence (AI) for evaluation, as further detailed in Section 3 below. Any additional information you provide voluntarily Information included in your application, CV, or supporting documents you submit.	Processing and evaluating your application To assess your qualifications, experience, skills, and suitability for the position you applied for, and subject to applicable law, to consider you for other open roles. Communicating with you To correspond with you during the recruitment process (including scheduling interviews, providing updates, and responding to inquiries). Verification and checks To verify information you provide (for example, employment history, education, and professional references). Compliance with legal requirements To comply with applicable labor laws, regulations, and other industry standards. Eligibility to work To confirm your legal right to work in the relevant country or territory where the position is offered, and ensure we comply with immigration requirements, if applicable. Decision-making To make hiring decisions and select the most suitable Candidate for the position. Record-keeping and documentation To maintain records of the recruitment process (including evaluations and decisions) for internal purposes and to address or defend against potential disputes or legal claims. Administration and performance of human resources related duties, obligations, and procedures. Improving our recruitment process To track and manage recruitment steps and to analyze and improve our recruitment practices.	Our lawful basis for processing Personal Data depends on the purpose for which we collect and use it, and may include: Legitimate interest Personal Data is mainly processed under our legitimate interest, as needed for our assessment, selection process and decisions making. Meaning we mainly process all types of Personal Data listed herein to determine if you are suitable to a certain job position and decide which Candidate we find the most suitable to our requirements, needs and criteria. We may further retain certain types of Personal Data, even after we have decided not to engage with you, for the purpose of record keeping, compliance with applicable laws, evaluating our recruiting processes, and to address and defend against potential legal claims and disputes. Consent Where required under applicable Data Protection Laws, we will obtain your consent to process Personal Data – for example for certain background checks, or to further retain and use Personal Data for future job opportunities offered at Wonderful. You have the right to withdraw consent at any time.
Sensitive Data We collect certain information that, depending on the applicable Data Protection Laws, might be considered as Sensitive Data. Such data will be collected by us solely where required under applicable law or where we have a specific legal requirement or need to obtain it for the recruitment process, and only if you provide such information voluntarily or otherwise where we obtain your consent. This data may include Personal Data about the privacy of your family life or personality, a personality assessment (conducted by a professional entity we engage with to evaluate significant personality characteristics), race, ethnicity, national origin, disability and medical or health condition, veteran or military status, or other protected characteristics, and certain data that might be gathered as part of background checks (such as criminal records).	Equal opportunity monitoring Wonderful is committed to applying an equal opportunity in our workplace. We may ask for information on the ethnic origin, gender, religion, and disability of a Candidate for the purpose of monitoring equal opportunity and ensuring Wonderful diversity and inclusion as required and permitted under applicable laws. Compliance with legal obligations or security standards T o the extent required or permitted under applicable law, we may conduct background checks that may involve criminal record information. Record-keeping and documentation To maintain records of the recruitment process, which may be used for internal and external reporting responsibilities (e.g., legal and regulatory requirements), future reference or to address potential disputes or legal claims. Administration and performance of human resources related duties, obligations, and procedures.	Our lawful basis to process Sensitive Data depends on the purpose for which we collect, use, and retain it, as set forth below: Legitimate interest We may further retain certain types of Sensitive Data, under our legitimate interest, for record keeping, compliance with applicable laws, evaluating our recruiting processes (for example, for diversity and to ensure our process is not discriminating or bias), and where applicable, to address and defend against potential legal claims and disputes. Consent Sensitive Data will be initially collected subject to obtaining your consent. You have the right to withdraw consent at any time.

Categories and Types of Personal Data

Purpose of Collection and Use

Lawful Basis

(under the GDPR, where applicable)

Identification information

Your full name and other identifying information such as your photo, government-issued identification number, copies of identification documents (for example ID, passport) and date of birth.

Contact information

Your email address, phone number, and residential address.

Employment history, education, and qualifications

Your previous employers, roles, dates of employment, responsibilities and achievements, educational institutions attended, certifications and degrees, fields of study, etc.

Skills and abilities

Information related to your competencies, skills, language proficiency, and other expertise relevant to the position.

Assessment results

Information we obtain from interviews, tests, or assessments conducted by us (or on our behalf) during the recruitment process to evaluate your suitability for the position.

Eligibility to work

Information regarding your legal right to work in the relevant country, such as citizenship or visa status.

Communications and recruitment records

Correspondence with you and records (including, where permitted by law, recordings of phone calls, interviews or other interactions between you and us during the recruitment process). As part of our recruitment process, we may utilize Artificial Intelligence (AI) for evaluation, as further detailed in Section 3 below.

Any additional information you provide voluntarily

Information included in your application, CV, or supporting documents you submit.

Processing and evaluating your application

To assess your qualifications, experience, skills, and suitability for the position you applied for, and subject to applicable law, to consider you for other open roles.

Communicating with you

To correspond with you during the recruitment process (including scheduling interviews, providing updates, and responding to inquiries).

Verification and checks

To verify information you provide (for example, employment history, education, and professional references).

Compliance with legal requirements

To comply with applicable labor laws, regulations, and other industry standards.

Eligibility to work

To confirm your legal right to work in the relevant country or territory where the position is offered, and ensure we comply with immigration requirements, if applicable.

Decision-making

To make hiring decisions and select the most suitable Candidate for the position.

Record-keeping and documentation

To maintain records of the recruitment process (including evaluations and decisions) for internal purposes and to address or defend against potential disputes or legal claims.

Administration and performance of human resources related duties, obligations, and procedures.

Improving our recruitment process

To track and manage recruitment steps and to analyze and improve our recruitment practices.

Our lawful basis for processing Personal Data depends on the purpose for which we collect and use it, and may include:

Legitimate interest

Personal Data is mainly processed under our legitimate interest, as needed for our assessment, selection process and decisions making.

Meaning we mainly process all types of Personal Data listed herein to determine if you are suitable to a certain job position and decide which Candidate we find the most suitable to our requirements, needs and criteria.

We may further retain certain types of Personal Data, even after we have decided not to engage with you, for the purpose of record keeping, compliance with applicable laws, evaluating our recruiting processes, and to address and defend against potential legal claims and disputes.

Consent

Where required under applicable Data Protection Laws, we will obtain your consent to process Personal Data – for example for certain background checks, or to further retain and use Personal Data for future job opportunities offered at Wonderful.

You have the right to withdraw consent at any time.

Sensitive Data

We collect certain information that, depending on the applicable Data Protection Laws, might be considered as Sensitive Data.

Such data will be collected by us solely where required under applicable law or where we have a specific legal requirement or need to obtain it for the recruitment process, and only if you provide such information voluntarily or otherwise where we obtain your consent.

This data may include Personal Data about the privacy of your family life or personality, a personality assessment (conducted by a professional entity we engage with to evaluate significant personality characteristics), race, ethnicity, national origin, disability and medical or health condition, veteran or military status, or other protected characteristics, and certain data that might be gathered as part of background checks (such as criminal records).

Equal opportunity monitoring

Wonderful is committed to applying an equal opportunity in our workplace.

We may ask for information on the ethnic origin, gender, religion, and disability of a Candidate for the purpose of monitoring equal opportunity and ensuring Wonderful diversity and inclusion as required and permitted under applicable laws.

Compliance with legal obligations or security standards

T o the extent required or permitted under applicable law, we may conduct background checks that may involve criminal record information.

Record-keeping and documentation

To maintain records of the recruitment process, which may be used for internal and external reporting responsibilities (e.g., legal and regulatory requirements), future reference or to address potential disputes or legal claims.

Administration and performance of human resources related duties, obligations, and procedures.

Our lawful basis to process Sensitive Data depends on the purpose for which we collect, use, and retain it, as set forth below:

Legitimate interest

We may further retain certain types of Sensitive Data, under our legitimate interest, for record keeping, compliance with applicable laws, evaluating our recruiting processes (for example, for diversity and to ensure our process is not discriminating or bias), and where applicable, to address and defend against potential legal claims and disputes.

Consent

Sensitive Data will be initially collected subject to obtaining your consent.

You have the right to withdraw consent at any time.

3. ARTIFICIAL INTELLIGENCE (AI) AND OTHER TOOLS

As part of our commitment to an efficient and fair recruitment process, we utilize artificial intelligence (AI) capabilities and automated tools to enhance our ability to evaluate candidates and conduct pre-employment verification. These technologies assist in managing the recruitment and hiring process, including candidate screening, assessment, and reviewing resumes, thus will process the Personal Data provided during the recruitment, however, and will not be used to substantially assist or replace discretionary employment decisions.

If you choose to have your first interview with Wonderful’s own developed AI agent first call asking about your professional experience, education, and skill sets will be conducted by the Agent and your Personal Data processed by it.

Please note that we do not make any automated decisions concerning your application without human involvement. Our AI tools are designed solely to support our talent acquisition team and do not make automated hiring decisions; all final decisions are made by our human interviewers and evaluators, based on a comprehensive consideration of various factors. Ensuring your data privacy and fair assessment are core priorities throughout this process, and we are dedicated to providing a balanced evaluation for every candidate.

4. HOW WE COLLECT PERSONAL DATA

We typically collect Personal Data about Candidates, as follows:

Personal Data you provide directly - including information you voluntarily provide as part of your application, CV/resume, supporting documents, and communications with us; and
Personal Data provided by third parties or collected from publicly available sources - including information we receive from recruitment or staffing agencies, professional networking platforms (where applicable), references or former employers (where applicable), and other publicly available sources. This may include information collected through automated means, including scraping, from publicly available professional profiles and other public sources relevant to recruitment.

5. DISCLOSURE OF PERSONAL DATA

We disclose your Personal Data internally to personnel involved in the recruitment and hiring process (for example, human resources, hiring managers, and relevant personnel within our affiliates), and externally to third party contractors, consultants, and service providers that assist us with recruitment operations and related human resources administration, as well as where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

We implement measures to ensure your Personal Data will be accessed only by those who really need to in order to perform their tasks and duties, and to third parties who need such access in order to provide their services as required by Wonderful and in accordance with our instructions.

The table below outlines categories of third parties with whom we may share Personal Data and the purpose of sharing.

Category Of Recipient	Purpose of Sharing
Wonderful company group	We may share Personal Data within our affiliates and corporate group to manage recruitment at an organizational level and for human resources management and administration. We may also share information as part of a corporate transaction (such as a merger, acquisition, reorganization, or sale of all or part of our business or assets). The categories of Personal Data shared may include any of the types described in this Notice, as necessary for these purposes.
Our contractors and service providers	We may disclose Personal Data to trusted vendors and service providers who perform services on our behalf, such as recruitment and talent acquisition providers, technology providers (for example, SaaS recruitment management tools and cloud hosting), and professional advisers (including legal counsel). We require these parties to use Personal Data only as needed to provide services to us and in accordance with our instructions. The categories of Personal Data shared may include any of the types described in this Notice, as necessary for these purposes.
Third parties you have requested us to share your Personal Data with	We will share your Personal Data if you direct or request us to share it. In such event, the provision of your Personal Data will be subject to such third parties’ policies and practices. The categories of Personal Data that will be shared will be as requested by you.
Governmental agencies, authorized third parties, o r disclosure due to legal process	In the event of a legal or law enforcement inquiry or requirement, we may disclose certain Personal Data, such as in response to an order or a verified request relating to criminal investigations or alleged illegal activity. We may further disclose Personal Data in the event of any activity that may expose us, you, or any other third party to legal liability, as well as to defend against potential, threatened, or actual claims, demands, or litigation. The categories of Personal Data that will be shared can include any of the types of Personal Data detailed under this Notice, as needed to fulfill these purposes, but only to the extent necessary to do so.

6. SECURITY

At Wonderful, we take security seriously. We maintain physical, technical, and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, and destruction, in accordance with applicable laws and industry standards. Additional information may be available in our trust center.

While we maintain safeguards designed to protect Personal Data, no security measure is perfect. Accordingly, we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur.

Please contact us if you believe your privacy has not been handled properly in breach of this Notice or if you become aware of any suspected unauthorized access to your Personal Data.

7. DATA RETENTION

We retain your Personal Data in accordance with applicable laws and for as long as reasonably necessary to carry out the purposes described in this Notice, including to satisfy legal, regulatory, administrative, record keeping, and reporting requirements.

The criteria according to which we determine the retention periods are as follows:

Type of Personal Data and purpose of collection - We consider how long we need to retain the Personal Data to achieve the purposes for which it was collected, taking into account the scope, nature, and sensitivity of the Personal Data and the potential risk of harm from unauthorized use or disclosure.
Stage of the recruitment process - We consider the stage of your application (for example, whether you were not selected or withdrew), as this may affect retention needs, including potential disputes or legal claims.
Legal obligations - Retention periods may depend on the laws of the applicable territory, including any minimum retention periods that apply. We may also retain Personal Data where required by a binding legal request, court order, or other valid legal process.
Disputes, claims, and legal proceedings - We may retain certain Personal Data where reasonably necessary to establish, exercise, or defend legal claims. Retention periods are typically determined by reference to applicable statutory limitation periods. If you exercise your rights in relation to your Personal Data, we may retain related records as necessary to demonstrate compliance, typically in accordance with such limitation periods.
Your reasonable expectations or consent - Depending on applicable law, we may retain Personal Data to consider you for future opportunities where this aligns with your reasonable expectations and/or where required, based on your consent. If you would like to opt out of retention for future opportunities, or withdraw consent where applicable, please contact us.

In addition to the above, we may retain limited Personal Data as a reference for any future applications submitted. If you are hired, we will store your Personal Data collected through the recruitment process for the term of your employment and thereafter, in accordance with our practices and policies related to our employees’ and staff members’ Personal Data.

Except as required by applicable law, we are not obligated to retain Personal Data for any specific period and may delete it in accordance with our retention practices. Where feasible, we will take reasonable steps to implement deletion in a timely manner.

8. DATA TRANSFER

Due to our global operations, your Personal Data may need to be processed or accessed in countries or territories other than your jurisdiction, including, for example, when shared with or accessed by our service providers or other affiliates. This may include transfer of Personal Data to, or from, the State of Israel, the US, and the EEA.

Wonderful transfers Personal Data to other countries (including within its corporate group) only in accordance with applicable Data Protection Laws. Where required, we implement appropriate safeguards to protect Personal Data, such as entering into approved contractual clauses or using other valid transfer mechanisms recognized under applicable law.

Where consent is required under applicable Data Protection Laws for a specific cross-border transfer, we will request your consent in connection with that transfer.

9. PRIVACY RIGHTS

We acknowledge that different people have different privacy concerns and preferences. Our goal is to be clear about what Personal Data we collect so that you can make meaningful choices about how it is used. We allow you to exercise certain choices, rights, and controls in connection with your Personal Data.

Depending on your relationship with us, your jurisdiction and the applicable Data Protection Laws, these rights may include one or more of the following principal rights:

The right to know what Personal Data we collect about you, the purpose of collection, with whom we share your Personal Data, and additional information such as the categories of sources from which the Personal Data is collected – as provided under this Notice;
The right to access your Personal Data. This right entitles you to request access to, and receive a copy of, certain Personal Data we hold about you (subject to applicable law).
The right to correct your Personal Data. This right entitles you to request that incomplete, inaccurate, or outdated Personal Data we hold about you be corrected (and, where applicable, updated).
The right to request deletion of your Personal Data. This right entitles you to request us to delete Personal Data (subject to applicable Data Protection Laws, which permits or requires the retention of certain Personal Data);
The right to restrict processing of your Personal Data.This right entitles you to request that we limit the purposes for which your Personal Data is processed (subject to conditions under applicable Data Protection Laws).
The right to object to processing of your Personal Data.This right entitles you to object to certain processing, including where we process your Personal Data on the basis of legitimate interests (subject to conditions under applicable Data Protection Laws).
Data Portability - this right entitles you to receive the Personal Data you have provided, in a structured, commonly used and machine-readable format and transmit it to another controller;
The right to withdraw consent where we process your Personal Data based on your consent.
The right to appeal or lodge a complaint. In the event that we do not fulfill your request, we will inform you without undue delay as required under applicable Data Protection Laws and you may have the right to appeal such decision. For EU/UK Candidates, you have the right to lodge a complaint with the applicable Data Protection Authority in the EU or the Information Commissioner in the UK.

For more information about your rights and how to exercise them, please refer to our Data Subject Request (“DSR”) form available on the Wonderful website and submit it to our Data Protection Officer at: dpo@wonderful.ai.

You may have additional rights as described in this Notice or applicable laws. We sometimes need to request specific information from you to help us confirm your identity and ensure the requested rights apply to you. This is another appropriate security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. Information provided in connection with such request will be processed only for the purpose of processing and responding to your request, and it may be shared with our legal and administrative teams.

10. NOTICE AMENDMENTS

We reserve the right to periodically revise this Notice, which will have immediate effect upon posting of the revised Notice on our website. The last revision date will be reflected in the “Last Updated” heading at the top of the Notice. We will make a reasonable effort to provide a notice if we implement any changes that substantially change our privacy practices or your rights, and where required under applicable Data Protection Laws, obtain your consent. We recommend you review this Notice periodically to ensure that you understand our privacy practices and to check for any amendments.

[1] If you are located in the EU or UK, under the GDPR we must have a lawful basis to process your Personal Data and provide you with information as for the lawful basis we rely on to process your Personal Data per the applicable purposes of use.