Six Flags Entertainment Corporation Privacy Notice for California Applicants

We respect your privacy at Six Flags Entertainment Corporation (“Six Flags”, “we, “us” or “our”).If you are a resident of California, this Applicant Personal Information Processing Notice (“Applicant Notice”) applies to you and supplements the Six Flags Privacy Policy (“Privacy Policy”) found at https://www.sixflags.com/privacy-policy. This Six Flags Entertainment Corporation Applicant Notice (“Applicant Notice”) is intended to provide certain information to you as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 and its regulations (collectively, the “CCPA”) and tells you what you need to know about our processing of your personal information when you apply for a job at Six Flags Entertainment Corporation.

This Applicant Notice does not form part of any contract of employment or other contract to provide services, nor should this Applicant Notice be considered an offer of employment. We may update this notice at any time, but if we do so, we will provide you with an updated copy of this notice as soon as reasonably practicable.

It is important that you read and retain this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information and what your rights may be.

Collection of Personal Information

We collect the following categories of personal information from you or about you from third party vendors (for example, background check providers):

Sensitive Personal Information

Sale or Sharing of Personal Information. We do not “sell” or “share” (as those terms are defined by the CCPA) any of the categories of personal information described above, to the extent collected from or about job applicants.

We do not use or disclose Sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA.

Retention of Personal Information: For applicants: we will not retain your personal information longer than necessary, but in no event longer than one year. We are guided by this Privacy Notice, internal Six Flag’s record retention schedules, the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, internal operational needs, any need for the information based on any actual or anticipated investigation or litigation, and applicable legal obligations.

How We Collect Your Personal Information

We collect personal information about applicants through the application and recruitment process, directly from candidates, employment agencies, and screening services or other background-check providers. We may collect additional information from third parties including former employers, credit reference agencies, or other sources that supply employment verification services information that you make available in your social media accounts, information about you that is available publicly.

Use of Personal Information

The following are the business purposes for which we may use the personal information described above:

• Human resources administration, including facilitation of applications and background checks, where appropriate, corporate travel and other reimbursable expenses, reporting, career planning, talent management, learning management, promotion of Six Flag’s values, succession planning and other general administrative and HR-related processes;

• Recordkeeping, including accounting, document management and other similar services; reporting financial information and financial background checks;

• IT services, providing our IT infrastructure, including hardware and software, enabling telecoms and electronic communications and organization, including the Internet, mobile applications, remote access, online meetings, collaboration tools and other resources, storage for electronic records, license allocation, allocation of user rights, debugging and troubleshooting, firewall and intrusion prevention, URL and malware filtering and reporting, tracking of files copied to removable media, ticket systems for requests;

• IT security management, monitoring and forensic tasks to protect the safety and security of employees, customers and property, including controlling and facilitating access to and monitoring activity in secured premises and activity using computers; and

• Corporate policy, corporate compliance, regulatory, export compliance and legal subject matter training; fulfillment of legal tasks including investigating and responding to claims against the company and its customers and employees, handling complaints, electronic signatures, internal audits, third party due diligence systems, including anticorruption screening, operation of whistle blowing hotlines, and other such purposes in relation to the above-mentioned services.

We do not sell your personal information to any third party. However, we may disclose aggregated or deidentified information without restriction.

Your Privacy Rights

Right to Know

You have the right to request that we disclose certain information to you about our collection of your personal information. Such information shall cover the 12-month period preceding our receipt of your request, or as permitted by applicable law or regulation. Upon receipt of your verified request, we will provide you with the following:

• The categories of personal information we have collected about you;
• The categories of sources from which we have collected your personal information;
• Our business or commercial purpose(s) for collecting or selling your personal information;
• The third parties with whom we have shared your personal information;
• The specific pieces of personal information we have collected about you; and
• What personal information was sold/shared and to whom.

You have the right to request that we disclose certain information to you about our disclosures and sales of your personal information. Such information shall cover the 12-month period preceding our receipt of your request, or as permitted by applicable law or regulation. Upon receipt of your verified request, we will provide you with the following:

• The categories of personal information we have collected from you;
• The categories of personal information we have sold about you and the categories of third parties to whom we sold such information, by category or categories of personal information for each category of third parties to whom the personal information was sold;
• The categories of personal information that we disclosed about you for a business purpose; and
• What personal information was sold and to whom.

Right to Delete

You have the right at any time to request that we delete the personal information we collected from you. However, in certain cases, we cannot delete all or some of your personal information as required or permitted by applicable laws. If we cannot honor deletion requests for any reason, we will inform you of the reason.

Right to Correct

You have the right at any time to request that we correct any inaccurate personal information about you.

Right to Information Regarding Participation in Data Sharing for Financial Incentives

We may run promotions from time to time whereby we incentivize an employee, worker, or contractor to share certain pieces of information with us. Participation in any of these incentives is voluntary, and you may opt out of the data sharing at any time.

Right to Opt Out of Sale of Personal Information to Third Parties

We do not sell or share your personal information with third parties. Under the CCPA, a business “sells” personal information when it discloses personal information to a company for monetary or other benefit and a company "shares" personal information when it discloses personal information to third parties for the purpose of "cross-context behavioral advertising." A company may be considered a third party either because we disclose personal information to the company for something other than an enumerated business purpose under California law, or because its contract does not restrict it from using personal information for purposes unrelated to the service it provides to us.

Right to Limit the Use and Disclosure of Sensitive Personal Information

We do not use or disclose Sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA.

Right to Non-Discrimination

We will not discriminate against you for exercising your rights under the CCPA. We also will not retaliate against you for exercising your rights under the CCPA.

How to Contact Us to Exercise Your Rights

To submit a request to exercise the rights provided in this notice, please go to our Privacy Rights Request Portal at https://www.sixflags.com/privacy-request or submit your request by phone by calling us toll-free at 1-833-389-0086. We will evaluate the request and take action where required to do so.

We will confirm receipt of your request within 10 business days and will provide information about how we will process your request. We endeavor to respond to your request as soon as we can, within the timeframes permitted under the CCPA. If we are not able to respond to your request within 45 days, we will let you know that we may require additional time (up to 90 total days).

Verification of Requests and Authorized Agents

When you submit a request, we may ask you to provide verifying information, such as your name, e-mail, phone number and mailing address. We will review the information provided and may request additional information via e-mail or other means to ensure we are interacting with the correct individual. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information.

You may also use an authorized agent to exercise your rights on your behalf. If you wish to use an authorized agent to make a request on your behalf, unless you have provided the authorized agent with power of attorney, we may require that: (1) you provide your authorized agent signed permission to do so; (2) you verify your identity; and (3) you confirm that you have provided the authorized agent permission to submit the request. We may deny any request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Your authorized agent may make a request on your behalf by contacting us at Compliance@sixflags.com.

Please note that in most cases, we are not able to respond to more than two “Right to Know” requests from a consumer in any 12-month period.

For a more detailed description of our privacy practices, including our use of cookies, please refer to our Privacy Policy found athttps://www.sixflags.com/privacy-policy.

Contact. Please contact us with any questions regarding the use of your personal information. You may do so by emailing Compliance@sixflags.com.