EU Job Applicant Privacy Notice

Updated: August 2025

This privacy notice applies to the personal data collected by the Abercrombie & Fitch entity for which you apply or are recruited for a job (which is the Abercrombie & Fitch entity that signed your employment contract) (“Abercrombie & Fitch,” “we,” “our,” and “us”).  A full list of Abercrombie & Fitch entities can be found at the end of this notice along with contact information in case you have questions or concerns. Any reference to “applicant,” “you,” or “your” means you, the job applicant or candidate. 

We provide this summary of what personal data Abercrombie & Fitch, as a data controller, collects from you, for what purposes we use that personal data, who we will share this personal data with, and your rights in relation to the personal data we collect from you.

Contents

• Types of Information Collected and Processed
• Purposes of the Processing
• Justification for Processing
• Information Shared with or Collected Directly by Third Parties
• Storage of Data
• Your Rights
• Updates to this Notice
• Questions About Privacy
• List of Local A&F Entities

To the extent A&F obtains sensitive personal information about you, we will obtain your consent to the extent required under applicable law and will comply with other relevant legal requirements regarding such information.

Please note that if you do not provide us with certain required personal information, A&F may not be able to consider your application.

Information Shared with or Collected Directly by Third Parties

A&F takes precautions to allow access to your personal data only to those associates who require such access to perform their job duties and to third parties who have a legitimate purpose for access to such personal data.

1. Group Entities
   Your personal data may be shared with A&F’s group entities for purposes consistent with this Notice.
2. Service Providers
   A&F may appoint third parties to provide services to us or on our behalf, such as background checks, travel agencies, recruiting agencies, record retention vendors, or other service providers who help us carry out the purposes listed above. Such third parties may have access to your personal data to provide services to A&F.
   
   Any service providers engaged by A&F will have access to your personal data solely to the extent necessary to enable them to perform those services on A&F’s behalf and A&F will ensure that they are contractually prohibited from using such data for any other purpose.
   
   All service providers must enter into a services agreement or Confidentiality and non-Disclosure Agreement with A&F whereby they are required to appropriately safeguard the privacy and security of the personal data they process on behalf of A&F.
3. Other third parties
   A&F may also disclose your personal data with third parties where it is: (i) necessary to comply with the law or to protect the safety of A&F Associates; (ii) to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims; (iii) to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person; (iv) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation,  or (v) as otherwise required by law.
4. Transferring Data Outside the EEA
   In case of 1, 2, or 3 above, a transfer of your personal data may take place to countries outside the European Economic Area, such as the United States, whose laws may not provide for the same level of protection to your personal data. We will therefore ensure – where necessary – that all adequate safeguards are in place and that all applicable laws and regulations are complied with in connection with such transfer, by implementing standard contractual clauses pursuant to Article 46 (1) (c) GDPR. You may request a copy of the safeguards that we have put in place in respect of transfers of personal data by contacting us as described in the Questions About Privacy section below.

Storage of Data

The time period for which we keep personal data depends on the purpose for which we collected it. In all cases we keep it for as long as necessary to fulfil the purposes for which we collected it and in line with our Records Retention Policy, which is available on the Abercrombie & Fitch SharePoint website (Tools and Resources 🡪 Policies). The Records Retention Policy considers all relevant legal obligations and lawful data retention practices to determine the applicable retention period for each category of data, including personal data. Once personal data has reached the end of its retention period, we will then delete the personal data, unless we are legally required to retain it or if we need to retain it in order to comply with our legal obligations.

Your Rights

Under the conditions set out under applicable law, you have the following rights:

1. Right of access: You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. The access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed.
   
   You have the right to obtain a copy of the personal data undergoing processing. For additional copies requested by you, we may charge a reasonable fee based on administrative costs.
2. Right to rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Right to erasure (right to be forgotten): You have the right to ask us to erase your personal data.
4. Right to restriction of processing: You have the right to request the restriction of processing of your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
5. Right to data portability: You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those personal data to another entity without hindrance from us.
6. Right to object:
   
   You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data. If you have a right to object and you exercise this right, your personal data will no longer be processed for such purposes by us. Exercising this right will not incur any costs.
   
   Such a right to object may not exist, in particular, if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that the aforementioned rights might be limited under the applicable national data protection law. A&F as your contractual employer remains the universal point of contact for your execution of these rights.

Please refer any of your questions to us per the contact details provided in the below section “Questions about Privacy”.

You also have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence for alleged infringement of the GDPR.

Updates to Privacy Notice

This Notice may be updated periodically to reflect any necessary changes in A&F’s privacy practices. In such case, A&F will inform Associates via email or on its Intranet of any significant changes to its Policy and indicate at the top of the Policy when it was most recently updated.

Questions about Privacy

If you have any questions, comments or concerns regarding our privacy practices or our legal compliance, please email us at privacy@anfcorp.com or write to us at the address set out below:

Attn: Legal-Privacy Team
Abercrombie & Fitch
6301 Fitch Path
New Albany, Ohio 43054 US

You may contact Abercrombie & Fitch’s Data Protection Officer (“DPO”) using the contact information above. We also have a Germany-specific DPO, whose contact information is below:

Attn: Dr. Felix Wittern
Amerigo-Vespucci-Platz 1, 20457 Hamburg
Felix.Wittern@fieldfisher.com

Local A&F Entities

Austria:

A&F Hco Stores AT GmbH
24 Schottenring 25
1010 Wien, Austria

Belgium:

AFH Belgium SPRL
Square de Meeus
37 – 4th Floor
1000 Brussels, Belgium

France:

Abercrombie & Fitch (France) SAS
64-66 Rue des Archives 
75003, Paris, France

Germany:

AFH Germany GmbH
Spaces Kennedydamm 
Floor 3, Kaiserswerther Strasse 135 
Dusseldorf 40474 Germany

Ireland:

A&F Hollister Ireland Limited
c/o A&L Goodbody 
3 Dublin Landings 
North Wall Quay
Dublin 1, Ireland

Italy:

Abercrombie & Fitch Italia S.R.L.
Via Fabio Filzi, 25/A 
20124 Milano, Italy

Netherlands:

Store Associates:

AFHCo Stores NL BV
Laarderhoogtweg 25
1101 EB Amsterdam
The Netherlands

Non-Store Associates:

Abfico Netherlands Distribution B.V.
Laarderhoogtweg 25
1101 EB Amsterdam
The Netherlands

Spain:

Abercrombie & Fitch Spain S.L.
Calle Pepe Isbert 11B, Piso 2D 
Madrid, 28017 Spain

Switzerland:

Abercrombie & Fitch Europe Sagl
Palazzo San Martino
Via Moree
6850 Mendrisio, Switzerland

United Kingdom:

AFH Stores UK Limited
2nd Floor, Berkeley Square House, 
Berkeley Street, London W1J 6BD 
United Kingdom