Privacy Policy for Applicants

 

General

Incore Bank AG (hereinafter referred to as ‘Incore, ‘we’ or “us”) process personal data relating to you or other persons (known as ‘third parties’). We use the term ‘data’ here as synonymous with ‘personal data’ or ‘person-related data’. This data protection policy is based on the Swiss Federal Act on Data Protection (FADP) and the Ordinance on Data Protection (ODP) as well as the EU General Data Protection Regulation (GDPR).

Incore does not actively recruit customers from countries other than Switzerland. However, it may happen that individuals from abroad apply for positions at Incore. In such cases, the GDPR may apply in specific instances. Whether and to what extent the GDPR applies depends on the circumstances. For persons in Switzerland, on the other hand, the Swiss Data Protection Act (‘DSG’) applies.

This privacy policy applies to job seekers who apply for a position with Incore and thereby submit or provide personal data. By visiting an Incore website and/or submitting application documents electronically, the applicant acknowledges and agrees that Incore may collect, store, use, transfer and/or disclose the personal data provided in accordance with this privacy policy.

 

Responsibilities

Incore Bank AG, Wiesenstrasse 17, 8952 Schlieren, is responsible for processing applicant data, unless otherwise specified or communicated in individual cases. 

The contact addresses are as follows:

For matters in Switzerland
Incore Bank AG
Legal
Wiesenstrasse 17
CH-8952 Schlieren/Zurich
legal@incorebank.ch 

For matters in the EU
Cortina Consult GmbH 
Hafenweg 24
DE-48155 Münster
euv.incorebank@cortina-consult.de 


Collection and processing of personal data

The HR department at the application location collects and processes the following personal information:

  • Contact, communication and identification data such as surname, first name, address, email address, telephone number
  • Personal details such as age, gender, nationality, place of birth, residence status, marital status, language, family details
  • Application documents such as CV, letters of recommendation, references, etc. If required by local law, also AHV number, social security certificate, identity card, residence permits, proof of citizenship, police clearance certificate, work permit, extracts from the criminal and/or debt collection register
  • Results of an online assessment, if available
  • Information freely available on the internet (e.g. websites, social media profiles)
  • Data that can be obtained from third parties (e.g. recruiters or referees)
  • Behavioural and preference data (e.g. usage behaviour on websites and apps, video recordings during your visit to our premises)
  • Technical information (e.g. IP addresses and logs recording the use of our systems)
  • Applicant profiles (user accounts) are stored automatically
  • Notes/evaluations from interviews

If Incore is provided with personal data about third parties (e.g. family members, references), Incore assumes that the applicant is authorised to do so and that this information is correct. By submitting personal data about third parties, the applicant confirms this.
 

Purpose of data processing

Incore will process personal data received from applicants during the application process for the purpose of handling the application process and drawing up an employment contract.  By submitting their application, candidates agree that their personal information may also be viewed by the HR departments of other Incore companies for current and potential future recruitment processes in relation to which the applicant may be contacted by recruiters at Incore. For applications to Incore locations within the EU and Switzerland, data will only be transferred within Switzerland and the European Union. Access to applicants' personal data may be granted from another Incore location, depending on the location of the potential manager and the organization of the responsible HR department. Incore has offices in the following countries: Switzerland, Spain, and Germany.

 

Recipients of personal data 

Incore reserves the right to disclose personal data to prescribed government and supervisory authorities to the extent required by applicable laws, regulations, court orders or official requests, directives and similar regulations. Incore may outsource data processing and other services within the group and to external processors in the United Kingdom and abroad. In this case, all external and internal service providers are subject to the applicable data protection regulations. 

 

Storage location and duration

Incore stores personal data in accordance with the applicable data protection regulations. Personal data of applicants is processed and stored as follows:

  • Incore Bank Switzerland: Applicants' personal data is processed and stored on external servers as part of the application process. The data is stored on Microsoft and Ostendis servers within Switzerland. More information on Ostendis' data protection can be found here: https://www.ostendis.com/de/privacy_website/. 

Incore stores personal data on internal servers outside the applicant's place of application for a period of 12 months. After this period has expired, the applicant's personal data will be deleted. In the event of employment, personal data will be processed and stored for the entire duration of the employment relationship in accordance with internal data protection guidelines.

 

Security of personal data

Incore takes appropriate technical and organizational measures to protect your data from unauthorized access and misuse, such as IT and network security solutions, encryption, access restrictions, instructions and employee training. Our security measures are regularly reviewed and adapted to the latest technology. Our order processors are also obliged to implement appropriate security measures. However, it is not possible to completely rule out security risks.


Rights of applicants 
 

You have the following rights under the data protection law applicable to you and to the extent provided for therein:

  • The right to request information from us about whether and which data we process about you;
  • The right to have data corrected if it is incorrect;
  • The right to request the deletion of data;
  • The right to request that we disclose certain personal data in a commonly used electronic format or transfer it to another controller;
  • The right to withdraw consent, insofar as our processing is based on your consent;
  • The right to object to the processing of your data, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing;
  • The right to obtain further information necessary for the exercise of these rights upon request
  • The right to express your point of view in the case of automated individual decisions and to request that a natural person review the decision.

You also have the right to enforce your claims in court or to lodge a complaint with the competent data protection authority. To exercise these rights, please send us an email to the following address: legal@incorebank.ch. 

Please note that certain conditions, exceptions or restrictions may apply to these rights, for example if we need to retain or process data, have a legitimate interest in doing so, or need it to enforce claims. We will inform you of this if necessary.

 

Right of withdrawal

You may revoke your consent to the processing of your personal data at any time. This revocation must be made in writing to the following address:

Incore Bank AG
Legal
Wiesenstrasse 17
CH-8952 Schlieren/Zurich
legal@incorebank.ch 

 

Amendments to this policy

We expressly reserve the right to supplement or amend this privacy policy at any time. The version published on our website applies.