1. General Information

1.1. The group of companies operating under the Colibrix One brand is developing advanced, AI-powered payment technologies tailored to the needs of Payment Service Providers (PSPs), Electronic Money Institutions (EMIs), and neobanks across the EU and the UK (hereinafter referred to as “us”, “our” or “we”).

1.2. Within our group, we operate licensed EMIs, including Colibrix Limited (Financial Conduct Authority (FCA), UK, reference number 927920) and Mellifera Kartiera Limited (Malta Financial Services Authority (MFSA), Malta, ID: MKL-24227), both of which are Principal Members of Mastercard and Visa. Through the Colibrix One brand, we deliver a comprehensive suite of financial solutions, including:

• Global card processing
• Digital wallet infrastructure
• Cross-border merchant accounts
• Alternative payment methods (APMs)
• Corporate accounts for legal entities

We are a fast-growing team with a passion for innovation, security, and scalability. Our culture values curiosity, collaboration, and meaningful impact – and we are looking for talented professionals who want to help shape the future of fintech.

Employment will be offered by one of the companies operating under the Colibrix One brand, depending on the position offered.

1.3. During the recruitment process, we collect personal data about you, including your name, surname, contact details, education and work history, and information obtained during the selection process (for example, during interviews). All such information is referred to as “Personal Data.”

1.4. We may combine the information collected from you with information obtained from other sources, such as public databases.

1.5. The provision of Personal Data is voluntary. However, if you choose not to provide certain Personal Data, we may not be able to achieve some of the purposes outlined in this notice.

1.6. Our companies are data controllers and are responsible for the processing of your Personal Data. Where we engage recruitment agencies, those agencies may act as independent data controllers when processing your Personal Data for their own purposes. In such cases, they are solely responsible for that processing.

2. Purposes for Which We Use Personal Data

2.1. We may use your Personal Data for the following purposes:

• To identify you among other candidates and confirm your eligibility for the recruitment process.
• To review your qualifications, skills, and experience, and to evaluate your appropriateness for a specific vacant position.
• To contact you regarding the progress of the recruitment process, request additional information or documentation, arrange interviews, and inform you about the outcome of your application.
• To protect our legal rights and interests, ensure compliance with applicable employment and data protection laws, and prevent unlawful activities (such as fraud or misrepresentation during the recruitment process).
• To handle and resolve any disputes, complaints, or claims that may arise in connection with the recruitment process.

3. Legal Basis for the Processing of Personal Data

3.1. Your Personal Data is processed on the following legal bases:

• Legitimate Interests

Processing is necessary for our legitimate interests in managing and administering the recruitment process, provided that such interests are not overridden by your rights and freedoms.
Examples:

• Reviewing your CV, cover letter, and qualifications to assess your suitability for a role;
• Contacting you to schedule interviews or request additional information;
• Retaining interview notes and recruitment records for internal decision-making;
• Protecting our legal interests, including preventing fraud or misrepresentation during the recruitment process.

• Consent

Processing is based on your consent in situations where we wish to retain your Personal Data for purposes beyond the immediate recruitment process. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Examples:

• Retaining your CV in our candidate database for consideration in future vacancies;
• Contacting you regarding other potential job opportunities within our group;
• Processing optional information you voluntarily provide, such as preferences regarding job location or willingness to relocate.

4. Recipients of Personal Data

4.1. Your Personal Data may be shared with third-party service providers who assist us with recruitment and selection processes. This includes, for example:

• Agencies that help us with candidate sourcing, screening, or assessment;
• Background check and reference verification providers;
• IT or cloud service providers who store or process candidate data on our behalf.

These service providers will only use your Personal Data to provide the relevant recruitment services and are required to protect it in line with applicable data protection laws.

4.2. Your Personal Data may also be shared with individuals or organizations you authorize us to contact, such as

• Current or former employers, to verify your work history or obtain references;
• Educational institutions, to confirm qualifications;
• Professional associations or licensing bodies, where relevant.

We will only share the data necessary to complete the specific request you have authorized.

4.3. In certain circumstances, we may be required to disclose your Personal Data to comply with legal or regulatory obligations, for example, to government authorities or law enforcement agencies.

5. Personal Data retention

5.1. Your Personal Data will be stored only for as long as necessary to carry out the recruitment process and assess your suitability for the role you applied for. In general, your data will be securely deleted as soon as the recruitment process concludes (e.g., when another candidate has been selected for the role).

If any legal claim, dispute, or regulatory investigation arises in connection with the recruitment process, your Personal Data may be retained until the completion of such proceedings, including any applicable appeal periods. After this, your Personal Data will be permanently and securely deleted.

5.2. We may ask for your explicit consent to retain your Personal Data for a longer period. This allows us to contact you about future job opportunities or vacancies for which you may be considered suitable. You may withdraw your consent at any time, and we will then delete your Personal Data in accordance with your request.

5.3. If you are offered a position and commence employment with us, the Personal Data collected during the recruitment process may be retained and integrated into your employee file. In that case, your Personal Data will be processed and stored in accordance with our internal policies and practices for employee Personal Data, and you will be informed of these retention rules and periods at the start of your employment.

5.4. In all cases, we implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, or disclosure. Once the retention period ends, your Personal Data will be securely deleted in accordance with applicable data protection laws.

6. Requests, Questions and Complaints

6.1. When your Personal Data is processed on the basis of your consent, you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out prior to the withdrawal. After withdrawal, we will stop processing your Personal Data for the purposes that were based solely on your consent, unless there is another lawful basis for processing.

6.2. Under the EU GDPR and UK GDPR, you have the following rights:

• the right of access to your Personal Data;
• the right to rectification (correction) of inaccurate or incomplete data;
• the right to erasure (“right to be forgotten”);
• the right to restriction of processing;
• the right to object to the processing of your Personal Data;
• the right to data portability.

To exercise any of the rights above, or to ask questions about the handling of your Personal Data, you may contact us at: v.dimova@colibrix.one.

6.3. If you believe that the processing of your Personal Data infringes applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.

We encourage you to contact us first to resolve any concerns; however, you may exercise your right to lodge a complaint directly with the supervisory authority at any time.