Supplemental Notice For California Candidates

This Supplemental Notice for California Candidates (“CA Notice") applies to Candidates that are residents of California or California consumers, as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code §§ 1798.100 et seq.), and its implementing regulations (“CCPA”). This CA Notice describes how Sigma processes and discloses your “Personal Information” (as defined by the CCPA, and as referred to hereinafter as “Personal Data”). This CA Notice supplements the information contained in the Candidate Privacy Notice.

1. Notice at Collection of Personal Data.

Please see the following Sections of the Candidate Privacy Notice for an overview of what Personal Data we collect, and why: Section 2 (Personal Data We Collect and Process), Section 3 (Sources of Personal Data), Section 4 (Our Uses of Personal Data), Section 5 (Our Uses of Sensitive Personal Data), and Section 6 (Disclosure of Personal Data and Sensitive Personal Data).

2. Your Rights.

In addition to the rights stated in Section 8.1 of the Candidate Privacy Notice, you have the following rights under the CCPA:

Right to know what Personal Data we have collected about you, including the categories of Personal Data, the categories of sources from which the Personal Data is collected, the business purpose for collecting, selling, or sharing Personal Data, the categories of third parties to whom we disclose, sell, or with whom we share Personal Data, and the specific pieces of Personal Data we have collected about you.
Right to opt-out of “sharing” or “sale” of your Personal Data or processing of your Personal Data for targeted advertising, profiling or cross-context behavioral advertising
Right to limit the use and disclosure of your Sensitive Personal Data.
Right to appeal any decision with regard to your privacy request
Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.

3. Categories of Personal Data Collected and Disclosed.

Our collection, processing and disclosure of Personal Data are described in Section 2, Section 4, Section 5, and Section 6 of the Candidate Privacy Notice.

In the last 12 months, Sigma, Sigma has collected the Personal Data stated in Section 2.
Sigma doesn’t use or disclose your Sensitive Personal Data for purposes other than those described in CCPA.
The table below describes the categories of Personal Data that Sigma has disclosed to third-parties in the last 12 months, including the categories of third-parties it was disclosed to (Recipients), and the business purposes it was disclosed for.

Category	Business Purpose(s) for which the Personal Data was disclosed or processed	Recipient Categories
Identifiers and Personal Details	To consider you for, and assess your suitability for employment opportunities with Sigma; To communicate with you regarding your job application; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; To manage, maintain, develop, and improve our recruitment and hiring process; To otherwise communicate and engage with you; To comply with applicable laws, and exercise or defend our legal rights; To verify your eligibility to work in a specific location; To conduct background verifications and screenings, where permitted by applicable laws; and To provide you with requested accommodations and adjustments.	Service Providers Designated Recipients Affiliates Law Agencies
Personal Data categories listed in California Customer Records Statute (e.g., name, electronic signature, social security number, financial information, employment history, etc.)	To consider you for, and assess your suitability for employment opportunities with Sigma; To communicate with you regarding your job application; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; To manage, maintain, develop, and improve our recruitment and hiring process; To otherwise communicate and engage with you; To comply with applicable laws, and exercise or defend our legal rights; To verify your eligibility to work in a specific location; To conduct background verifications and screenings, where permitted by applicable laws; and To provide you with requested accommodations and adjustments.	Service Providers Designated Recipients Affiliates Law Agencies
Application and Background Information	To consider you for, and assess your suitability for employment opportunities with Sigma; To communicate with you regarding your job application; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; To manage, maintain, develop, and improve our recruitment and hiring process; To otherwise communicate and engage with you; To comply with applicable laws, and exercise or defend our legal rights; To verify your eligibility to work in a specific location; To conduct background verifications and screenings, where permitted by applicable laws; and To provide you with requested accommodations and adjustments.	Service Providers Designated Recipients Affiliates
Inferences from other Personal Data	To consider you for, and assess your suitability for employment opportunities with Sigma; To communicate with you regarding your job application; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; To manage, maintain, develop, and improve our recruitment and hiring process; To otherwise communicate and engage with you; To comply with applicable laws, and exercise or defend our legal rights; To verify your eligibility to work in a specific location; To conduct background verifications and screenings, where permitted by applicable laws; and To provide you with requested accommodations and adjustments.	Service Providers Designated Recipients Affiliates
Employment, education, and professional information	To consider you for, and assess your suitability for employment opportunities with Sigma; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; To manage, maintain, develop, and improve our recruitment and hiring process; and To conduct background verifications and screenings, where permitted by applicable laws.	Service Providers Designated Recipients Affiliates
Information you make publicly available	To consider you for, and assess your suitability for employment opportunities with Sigma; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; To manage, maintain, develop, and improve our recruitment and hiring process; and To conduct background verifications and screenings, where permitted by applicable laws.	Service Providers Affiliates
Assessment Information	To consider you for, and assess your suitability for employment opportunities with Sigma; For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; and To manage, maintain, develop, and improve our recruitment and hiring process.	Service Providers Designated Recipients Affiliates
Communication Information	To consider you for, and assess your suitability for employment opportunities with Sigma; To communicate with you regarding your job application; To manage, maintain, develop, and improve our recruitment and hiring process; To otherwise communicate and engage with you; and To comply with applicable laws, and exercise or defend our legal rights.	Service Providers Designated Recipients Affiliates
Geolocation data and premises related records (including audio and visual information such as CCTV)	For compliance, fairness, and fraud prevention purposes; For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; and To comply with applicable laws, and exercise or defend our legal rights.	Service Providers
Information collected via technology	For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring; and To manage, maintain, develop, and improve our recruitment and hiring process.	Service Providers Affiliates
Protected classification characteristics under California or federal law (e.g., race, religion, gender, sexual orientation, age, health/medical conditions, disabilities, citizenship, veteran status)	To determine immigration and work-authorization status and verify your eligibility to work in a specific location; To conduct background verifications and screenings, where permitted by applicable laws; In an aggregated manner to produce diversity statistics to support internal diversity initiatives and equal opportunity; To provide you with requested accommodations and adjustments; For compliance, fairness, and fraud prevention purposes; and For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring, including diversity and equal opportunity programs.	Service Providers Designated Recipients Affiliates
Sensitive Personal Data	To determine immigration and work-authorization status and verify your eligibility to work in a specific location; To conduct background verifications and screenings, where permitted by applicable laws; In an aggregated manner to produce diversity statistics to support internal diversity initiatives and equal opportunity; To provide you with requested accommodations and adjustments; For compliance, fairness, and fraud prevention purposes; and For Sigma’s security, business, operational, and administration purposes related to recruiting and hiring, including diversity and equal opportunity programs.	Service Providers Designated Recipients Affiliates

4. Sale/Sharing of Personal Data.

Sigma does not “sell” or “share” (as defined in the CCPA/CPRA), and have not sold or shared in the past 12 months, a Candidate’s Personal Data or Sensitive Personal Data for monetary or other valuable consideration, or for targeted advertising purposes.

Last Updated: December 18, 2025