Last updated: 21.11.2023
This Privacy Notice describes how your personal data, including sensitive data, are collected and processed, related to the recruitment process.
The processing of your personal data complies, according to your country, with local data protection requirements, including the Swiss Federal Data Protection Act (“FDPA”), the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR"), and / or, as may be applicable, the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") for your personal data qualified as Protected Health Information.
1. Who we are
Sonova AG is incorporated under the laws of Switzerland with its registered address at Laubisrütistrasse 28, 8712 Stäfa, Switzerland. Sonova AG, acting as a data controller, is operating its business through its globally located affiliates (collectively referred to as the “Company” or “we” or “our”), acting as independent or joint data controllers regarding their employees.
2. Personal data we collect from you and why
We process the following personal for the following purposes:
- Account creation for authentication in the Sonova Recruiting Platform: credentials and passwords.
This activity is conducted to manage the creation of your account, which is essential for authenticating you on our Sonova Recruiting Platform. This activity is based on our legitimate interest to ensure the security and integrity of user accounts and the protection of personal data.
- Processing of your job application: the personal information entered by you into the registration and/or application forms or submitted though the attachments you upload, including your contact details, your professional experience, your education, and your professional skills.
This activity is based on the performance of contract for pre-contractual measures taken at your request for the reception and management of your application.
- Professional and psychometric assessment: reports regarding your assessment results.
This activity is aimed at measuring the possession of the necessary professional and psychological attributes to assume a leading role.
This activity is based on our legitimate interest in making informed hiring decisions in the recruitment of highly qualified and competent individuals.
- Future job opportunities contacts: personal data you have provided to us during the application and interview process. This activity is based on your free and voluntary consent. You can revoke your consent at any time by contacting us at privacy@sonova.com.
- Aggregated data analysis for improvement: aggregated data resulting from our recruitment processes and candidates’ satisfaction surveys.
This activity is based on our legitimate interest in continuously improving the overall candidate experience, our internal processes and efficient recruitment experience.
3. How we share your personal data
Your personal data will be processed according to the instructions we provide for our employees who have received the necessary training in data protection and are subject to an obligation of confidentiality.
Your personal data may also be disclosed to:
- Other companies in our group of companies, such as our subsidiaries, all of which are required to protect personal data in accordance with applicable privacy and data protection laws;
- Our business partners, contractors and third-party service providers. These third parties only process personal data that is strictly necessary for the services they provide to us, according to our instructions and in compliance with our privacy and security requirements.
- Other organizations and public bodies, supervisory and control authorities, including law enforcement agencies, as may be required by law.
By using the Sonova Recruiting Platform, only personal data that are strictly necessary for the following purposes are shared:
- SAP Success Factor (with registered offices in Switzerland and storage of personal data in Germany): Sonova's system for Talent Management, Recruiting, HR Analytics and Personal Master Data Management.
Before we disclose any personal data to other third parties than those listed above, we will explicitly ask you for your consent. However, if we are obliged to disclose personal data without your consent, we will only disclose personal data that is strictly necessary for that purpose to fulfil our legal obligations.
4. International personal data transfers
Please note that some of the above-mentioned third parties can be located outside your country. Therefore, your personal data may be transferred to countries that do not provide the same level of protection of personal data as your own country. In such cases, we undertake to:
- implement adequate procedures to comply with applicable law;
- adopt appropriate organizational, technical and legal safeguards in order to ensure an adequate level of protection of the personal data transferred;
- implement, if necessary, and according to applicable law, standard contractual clauses as adopted by the European Commission;
- depending on the country of the importing third party, take additional measures such as a transfer impact assessment.
5. How long we keep your personal data
Sonova will retain your personal data for a minimal period proportional to the time required to fulfil the purposes outlined in Section 2.
Your personal data is processed for a maximum period of 12 months. This retention period starts
- for data submitted in application processes: as soon as the application process for a specific position has been completed, and
- for data submitted for the candidate profile: with every log-in into your account.
After expiration of the retention period, we will delete your personal data unless you have provided us with your consent to be contacted for future opportunities.
For processing based on the consent you may have given, your personal data is processed until you revoke the consent you freely decided to give us and in any case for a maximum period of 24 months.
We will keep your aggregated and anonymized logs for reporting/statistical purposes.
In the event applicable law or other regulations require a longer retention period, we will apply the longer retention period in order to fulfill our legal obligations.
6. Your legal rights
Within the framework of the collection and processing of your personal data, and as per applicable law, you may have the right to request access, rectification, erasure of your personal data, or restriction of processing. In addition, you may object to the processing, request data portability and withdraw your consent at any time. According to your country, you may have other rights such as providing instructions for how your personal data should be processed posthumously. Under HIPAA you may also have the right to request an accounting of disclosures of your personal data, and the right to receive a paper copy of this notice upon written request.
Please note that the exercise of such rights is subject to the limitations provided by applicable law.
You may exercise your rights by contacting us at privacy@sonova.com.
If you consider that the processing of your personal data infringes applicable law, then you may also lodge a complaint with the local supervisory authority or the competent regulator.
7. How to contact us
In the event of questions about this Privacy Notice, or the processing of your Personal Data, please contact our Data Privacy Team at privacy@sonova.com.
8. Exclusion of Liability
Sonova does not accept any liability for the availability of the Sonova websites, the accuracy and correctness of information contained herein or for data loss and the illegal intrusion of third parties. Except where mandatory liability applies for intent, gross negligence, loss of life, bodily harm or injury to health, Sonova’s liability shall be excluded.