1. Introduction
Büsser & Zeidler AG, hereinafter referred to as "the Company," is committed to processing personal data with the utmost care and in strict compliance with all applicable data protection laws. The protection of personal data is of paramount importance to our organization, and we ensure that all data processing operations strictly adhere to the Federal Act on Data Protection (FADP), available at https://www.fedlex.admin.ch/eli/cc/2022/491/en, and, where applicable, the General Data Protection Regulation (GDPR) of the European Union, accessible at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.
This Privacy Policy provides a comprehensive and detailed overview of the categories of personal data collected by our Company, the specific purposes for which these data are processed, the legal bases for such processing, and the technical and organizational measures implemented to ensure data security and compliance with applicable data protection regulations. This document is intended for job applicants, business partners, clients, users of our online services, and all other individuals whose data are processed by the Company.
2. Data Controller and Contact Information
The data controller responsible for all data processing activities within the Company's operations is Büsser & Zeidler AG, located at Färberstrasse 3, 8008 Zürich. Inquiries regarding data protection, the exercise of data subject rights, or any other privacy-related matters can be directed to our designated contact via email at info@buesserzeidler.ch or by phone at +41 44 500 20 88.
3. Collection and Processing of Personal Data
The Company collects and processes personal data strictly within the limits of applicable laws and only to the extent necessary for the intended business purpose. These include, but are not limited to, identification and contact details, professional qualification data, technical usage information, and special categories of data where processing is legally justified or the explicit consent of the data subject has been obtained. Data collection occurs either directly from the data subject or via third-party sources, such as publicly available registries, professional networks, and client feedback.
4. Purposes of Data Processing
The processing of personal data by the Company is primarily conducted to facilitate recruitment and personnel placement services, including the targeted analysis and matching of candidates with suitable job opportunities. Additionally, data processing is carried out to fulfill legal, tax, labor, and social security obligations, implement security measures to protect IT infrastructure, ensure regulatory compliance, and execute marketing initiatives such as targeted advertising and remarketing campaigns. Furthermore, data is processed for statistical and analytical purposes to enhance and optimize our services.
5. Data Retention
Personal data are retained only for as long as necessary to fulfill the respective processing purposes or as mandated by legal obligations. Applicant data are generally stored for up to 24 months unless explicit consent has been provided for extended retention. Contractual data are subject to statutory retention periods and archived accordingly. Technical usage data are typically stored only for a short duration before being deleted or anonymized.
6. Disclosure of Personal Data
Personal data are only disclosed to third parties where legally required or contractually necessary. This includes, but is not limited to, the disclosure of data to companies seeking to fill job vacancies, IT service providers and hosting partners for digital platform operations, authorities, courts, and public bodies where disclosure is legally mandated, as well as payment service providers for financial transactions. Additionally, personal data may be shared with marketing partners such as Google, Facebook, or LinkedIn for targeted advertising purposes.
7. International Data Transfers
In cases where personal data are transferred to countries outside Switzerland or the European Economic Area (EEA), such transfers are conducted only when an adequate level of data protection is ensured. This may be established through an adequacy decision by the European Commission, the conclusion of Standard Contractual Clauses in accordance with EU regulations, or additional technical and organizational protective measures. A detailed overview of applicable Standard Contractual Clauses can be accessed at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0914.
8. Data Subject Rights
Data subjects have the right to request access to their stored personal data and information on its processing at any time. Furthermore, they have the right to rectify inaccurate or incomplete data, request the deletion of personal data under the conditions set out in legal provisions, and demand the restriction of data processing where legally applicable. Additionally, data subjects may object to the processing of their personal data, particularly concerning direct marketing activities. The right to data portability also allows individuals to receive their personal data in a structured, commonly used, and machine-readable format. Requests to exercise these rights can be directed to the data controller at any time. Moreover, complaints may be lodged with the competent data protection authority, which can be accessed at https://www.edoeb.admin.ch/edoeb/en/home.html.
9. Security Measures
To ensure the protection of personal data, the Company has implemented extensive technical and organizational security measures. These include advanced encryption technologies to secure data transmissions, strict access control mechanisms to prevent unauthorized access, and regular audits and assessments of IT infrastructures to identify and mitigate potential security risks.
10. Amendments to the Privacy Policy
This Privacy Policy is subject to regular review and updates where necessary. The latest version is always available for consultation. Significant changes will be communicated appropriately.
Effective Date: February 2025