This is a translation provided for convenience. In case of any discrepancy, the Russian version shall prevail.

1. The User who has confirmed their consent on the website https://rbegroup.ru/ (the “Subject”) gives consent to RBE Limited Liability Company (OGRN 5147746269039, INN 7717798160), registered at 1st Avtozavodsky proezd 4, bldg. 1, premises II, Moscow, 115280, Russia (the “Operator”), to process their personal data, namely: surname, first name, patronymic, phone number, e-mail address, city of residence, company name, CV file and other personal data voluntarily provided by the Subject in the enquiry or application, in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”.

2. The Operator processes the Subject’s personal data for the purposes of:

2.1. searching for and selecting candidates for vacancies;

2.2. contacting the User, consulting on the Operator’s services and replying to enquiries;

2.3. contacting suppliers, reviewing incoming enquiries and cooperation proposals, consulting on cooperation with the Operator.

3. The Operator may perform the following actions with this personal data: collection, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion and destruction, with or without automation. The Operator may entrust the processing of personal data to third parties under a contract (Part 3 of Article 6 of Federal Law No. 152-FZ), including the website hosting provider; such parties are obliged to keep personal data confidential and ensure its security.

4. This consent takes effect when given and is valid until the Operator achieves the purposes of processing or until the Subject withdraws it. Processing is also terminated upon liquidation, reorganisation or termination of the Operator’s activities.

5. To withdraw this consent, the Subject sends the Operator a withdrawal notice in free form to IT_Security@rbest.ru marked “Withdrawal of consent to the processing of personal data”.

6. If the Subject withdraws consent, the Operator shall stop processing the personal data or ensure that processing is stopped (if it is carried out by another person on the Operator’s behalf) and, if the personal data is no longer required for the purposes of processing, destroy it or ensure its destruction within 30 days of receipt of the withdrawal.

7. In all other respects not covered by this Consent, the Operator and the Subject are guided by the Policy on the processing of personal data available at https://rbegroup.ru/privacy-policy/ and the applicable legislation of the Russian Federation.

Version of 2 October 2026.