Recruitment Privacy Policy for Job Applications
1. Data Controller
Online Classifieds AG, Baarerstrasse 8, 6300 Zug, Switzerland.
2. Data Protection Officer (DPO)
If you would like to obtain more information about the processing of your personal data in connection with your application, or if you wish to exercise your privacy rights, you may contact our DPO at [email protected].
Alternatively, you may write to:
Online Classifieds AG
Baarerstrasse 8
6300 Zug
Switzerland
3. Scope of this notice
This Information on the processing of applicants’ Personal Data explains how Online Classifieds AG processes your personal data in connection with job applications and the recruitment process. It does not apply to general visitors to our website, whose personal data is covered by our main Privacy Policy.
4. Ashby recruitment platform
All job applications are processed through the Ashby recruitment platform (“Ashby”).
In relation to personal data contained in your application and recruitment file, Online Classifieds AG acts as controller and Ashby, Inc. acts as processor on our behalf. Ashby does not separately act as controller over your application data. Ashby’s own privacy policy, describing how Ashby as a company processes limited technical and security-related information in operating the platform, is available here.
Roles may also be advertised through third-party professional platforms such as LinkedIn. In such cases, candidates are redirected to our Ashby-hosted careers page to apply. We may also proactively source candidates from publicly available professional sources such as LinkedIn and add them to our Ashby recruitment workflow in the course of the recruitment process.
5. Categories of personal data
Depending on the stage of the recruitment process, we may process the following categories of personal data:
Please do not include special category personal data in your application materials. This includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for uniquely identifying a person, health data, or data concerning a person’s sex life or sexual orientation. Article 9 GDPR treats these as special categories of personal data. We do not request or use this type of data as part of our recruitment process, and if it is inadvertently included in your application, we will disregard it for the purposes of assessing your candidacy.
6. Sources of personal data
We collect personal data directly from you when you submit an application through the Ashby hiring platform or otherwise communicate with us in connection with a role.
We may also collect personal data from publicly available professional sources, such as LinkedIn or portfolio websites, where relevant to the role and permitted by applicable law, through employee referrals, and in the course of proactive sourcing activities carried out by our recruitment team.
7. Purposes and legal bases of processing
We process your personal data for the purpose of administering and managing your application and the recruitment process, including receiving and reviewing your application, communicating with you, arranging interviews, assessing your suitability for the role, and managing the recruitment workflow. We also process your personal data to maintain appropriate records of the recruitment process, support internal decision-making, establish, exercise or defend legal claims where necessary, and consider you for other suitable roles. This processing is based, as applicable, on taking steps at your request prior to entering into a contract, and our legitimate interests in operating an efficient and fair recruitment process, documenting recruitment decisions, defending against legal claims, and maintaining a pool of candidates for other suitable roles. You have the right to object to this processing at any time, free of charge and without needing to give a reason, in particular to being considered for other roles, by contacting us using the details in the "Contact" section below.
8. Recipients of personal data
Applicant data may be accessed on a need-to-know basis by the HR / People team, the hiring manager, the interview panel, the CEO, the CPO, where necessary for the recruitment process, and authorised employees and contractors of affiliated entities involved in the recruitment process. Applicant data may also be processed by Ashby, Inc., as our processor for the recruitment platform.
9. International transfers
Because we operate internationally and use affiliated entities and service providers in different jurisdictions, your personal data may be transferred to, accessed from, or processed outside your country of residence by authorised personnel involved in the recruitment process and by providers supporting the recruitment process, such as Ashby. Where we use Ashby as our recruitment platform provider, your personal data is processed in the United States. This transfer is carried out on the basis of Standard Contractual Clauses or other legally recognised transfer mechanisms, together with appropriate safeguards, as required under applicable data protection law. Your personal data will not be transferred to third countries or international organisations that do not ensure an adequate level of protection of personal data or appropriate safeguards in accordance with applicable data protection legislation.
10. Retention period
We retain your application data for 12 months from the date of your application. This single retention period applies regardless of the outcome of your application, including in each of the following cases:
During this 12-month period, we may use your data to maintain appropriate recruitment records, to establish, exercise or defend legal claims arising from the recruitment process, and to consider you for other suitable roles. You may object to this processing, or request deletion of your data, at any time, free of charge, by contacting us using the details in the "Contact" section below.
Applicant data is managed through the Ashby recruitment platform. If your application is successful, relevant recruitment data may be transferred into your employee record and thereafter retained in accordance with the applicable document on Information on the processing of employees' personal data, legal requirements, and the retention settings applied in the relevant HR systems.
11. Data Subject Rights
Applicants have the right to request access to their personal data, rectification or erasure, restriction of processing, objection to processing and data portability. Where processing is based on consent, consent may be withdrawn at any time.
Applicants also have the right to lodge a complaint with a competent supervisory authority regarding the processing of their personal data. If you are in the European Union or EEA, you may lodge a complaint in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
12. Contact
If you would like to exercise any of your rights or if you have feedback, comments, or questions about data protection or this Privacy Policy please contact us by email at [email protected] or by mail at alternatively provided postal address.
We have a designated Data Protection Officer (DPO) whom you may contact at [email protected] for any questions or concerns related to the handling of your personal data or this privacy policy.
Alternatively, you can write to:
Online Classifieds AG
Baarerstrasse 8
6300 Zug
Switzerland
Effective date: September 10, 2026