Privacy policy for applications

We are delighted that you would like to send us an application. This privacy policy is intended to explain how we process your personal data in the context of an application and also provide other relevant information. 

The policy represents the minimum standard for the processing of your personal data and is based on the EU General Data Protection Regulation (GDPR). If the data protection laws applicable to you are stricter or more comprehensive, we will process your personal data in accordance with those laws. 

Please note that an account is required to submit an application.  
 
1. Who is responsible for processing your personal data? 
The Geberit company named under ‘Contact’ in the job advertisement is responsible for your application.  

If you choose to submit a speculative application, all Geberit Group companies will have access to the information you provide. In this case, the Geberit company that handles your application is responsible for processing it and will keep you informed accordingly.  

The application platform for all Geberit companies is managed by Geberit International AG, Schachenstrasse 77, 8645 Jona, Switzerland.  

2. Data protection officer 
The Geberit Group has appointed a joint data protection officer for affiliated companies based in the European Economic Area, Switzerland or the United Kingdom. No data protection officer has been appointed for the other affiliated companies. 

You can contact the Geberit Group data protection team and the data protection officer at our general email address: dataprotection@geberit.com   
 
3. For what purposes and on what legal basis do we process your data? 
We process your personal data to make decisions about forming an employment relationship with you, and we do so only to the extent necessary for this purpose. This is based on our legal entitlement to carry out necessary measures before entering into a contract. 

If we ask you to participate in any programmes or tests as part of the application process, this is for the purpose of identifying suitable applicants. The legal basis for this is our legitimate interest in ensuring a successful and worthwhile application process for both parties.  

If we process publicly available, job-related information as part of the application process, such as your profile on professional social media networks (e.g. Xing or LinkedIn), this is based on our legitimate interest in taking into account any job-related information that you have proactively made available to the general public.  

We may also analyse application processes and documents for statistical purposes; however, this is always anonymised and aggregated and does not allow any conclusions to be drawn about individual applicants. The collection of statistics is based on our legitimate interest in optimising our processes.  

Our legitimate interest is determined by a careful consideration of all relevant factors in each case. If you would like more information in this regard, please contact the company responsible for your application.  

We will always request your consent in advance if we would like to ask third parties, such as your current or former employer, for information about you. You can revoke this consent at any time, without explanation, and with future effect by reaching out to the company responsible for processing your application. Your application will not be adversely affected if you choose not to provide your consent. 
 
4. Which categories of personal data do we process? 
We only process personal data that is connected to your application. In addition to the data you provide to create an account, this primarily includes the data from your application documents, such as general personal data (such as your name, address and contact details) and information about your professional qualifications, education and further training.  

We may also process other information that you provide to us in connection with your application, as well as job-related information that you have made publicly available. 

We do not collect special categories of personal data, such as your religious or ideological beliefs or trade union membership, your biometric data, health data, or details about your sex life or sexual orientation, unless this is legally required (e.g. for church tax contributions in applicable countries or sick pay).  
 
5. Where else do we take your data from if we do not collect it from you? 
As a rule, we collect personal data from you. In connection with an application, however, we may also collect personal data about you from professional social networks (e.g. LinkedIn or Xing) to the extent that this is necessary for us to make a decision about forming an employment relationship with you. With your permission, we may also collect relevant data from other third parties. 
 
6. Who may have access to your data? 
6.1 Affiliated companies 
Only the employees of the company responsible for your application and the relevant HR department, which may belong to another affiliated company due to centralised structures within the Geberit Group, have access to your personal data.  

If you choose to submit a speculative application, all affiliated companies of the Geberit Group will have the opportunity to access your profile via an internal search.  

6.2 Contract data processors 
We also use contract data processors, i.e. companies that process personal data on our behalf and in accordance with our instructions, within the scope of contracts concluded with us. These contract data processors are: 

6.2.1 SAP (Schweiz) AG, Leugenestrasse 6, 2503 Biel, Switzerland, which provides the applicant management system as contractor of Geberit International AG; 

6.2.2 Various personnel recruiters who support us with applicant management; 

6.2.3 Various affiliated companies of the Geberit Group that manage human resources or provide IT services.  
 
7. Which third countries will your data be sent to? 
The Geberit Group is an international corporation with a shared applicant platform and combined IT and HR structures. This means your personal data may be sent to affiliated companies outside the country from which you are applying or stored on our servers there for the purpose of proceeding with your application. If we use hosting services from external processors, your personal data will be stored on servers within the EU.  

For each type of data transfer, a level of data protection appropriate to the country of origin is also ensured in the destination country by means of suitable guarantees. This can be facilitated by an adequacy decision by the countries involved or through additional contractual measures, such as standard contractual clauses. It may be necessary to transfer data to the respective third country to implement any pre-contractual measures associated with your application, without the need for additional security measures.   

8. How long will your data be stored? 
8.1 If an employment relationship has been established between you and us, we will store your application documents in your personnel file. If no employment relationship is established or you withdraw your application, your application documents will be anonymised (i.e. your name and any other identifying characteristics will be removed) once the rejection notice has been duly received and the relevant retention period has expired. The retention period can be found in the table in section 8.3. 

8.2 Your account data will be deleted if a certain amount of time has passed since you last logged in. This period can be found in the table in section 8.3. Before your account is deleted, you will receive an email reminder in good time with instructions on how to stop the process by logging in again. You will then receive another email reminder before the time window expires from your last login with the corresponding options. If you do not respond to our email reminder, we will delete your account along with all associated information and documents once the deadline has lapsed. This does not apply to applications that are still active. In this case, your account data will only be deleted once a final decision on the application has been made and the corresponding retention period has expired.  

8.3 The following deadlines apply to the anonymisation or deletion of your data in accordance with 8.1 and 8.2:

8.4 You can delete your own account at any time by selecting ‘Delete account’ in your profile or by contacting us for assistance. In this case, your account along with all associated information and documents will be deactivated within 24 hours and access will be restricted so that only selected IT employees can access your data. This restriction is in line with our legitimate interests in the event that we need to assert, exercise or defend legal claims. Your application will also be anonymised within 24 hours.   

8.5 If your account is deleted, all information relating to you will be irretrievably deleted with the exception of anonymised application documents and logs, which we store and analyse for reporting and statistical purposes.   

8.6 We may store your personal data beyond the stated deletion policies if this is necessary for us to assert, exercise or defend legal claims.  

8.7 You can also check and correct your personal data in your account at any time if it has changed.  

9. What are your rights? 
You are entitled to the following data protection rights, which you can exercise by contacting us at any time. 

9.1 Right of access 
You have the right to request confirmation from us regarding whether personal data concerning you is being processed. If this is the case, you have a right to receive information about this personal data free of charge, including the right to receive a copy of this data along with any other information specified by law. 

9.2 Right to rectification 
You have the right to ask us to rectify any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – including by means of a supplementary statement. 

9.3 Right to object 
If the processing of your personal data is based on our legitimate interest, you have the right to object to this processing at any time for reasons relating to your particular situation. In such cases, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless the circumstances involve asserting, exercising or defending legal claims. 

9.4 Right of revocation 
If processing is based on your consent, you have the right to revoke that consent at any time without affecting the legality of the processing that occurred prior to its revocation. You can contact us or our data protection officer in this regard at any time using the contact details provided above. 

9.5 Right to erasure 
You have the right to request the immediate erasure of your personal data, and we are required to comply with this request promptly if prescribed by law.  
 
9.6 Right to restriction of processing 
You have the right to request that we restrict processing in certain circumstances as defined by law. If processing has been restricted according to this section, your personal data may only be processed, with the exception of storage, with your consent, to assert, exercise or defend legal claims, to protect the rights of another individual or entity, or for reasons of significant public interest. 

If you have obtained a restriction on processing, we will inform you before the restriction is lifted. 

9.7 Right of appeal 
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state where you reside, work, or where the alleged infringement took place if you believe that the processing of personal data relating to you infringes data protection laws. 

10. Requirement to provide personal data 
The provision of personal data is neither required by law nor by contract, and you are not obliged to disclose information of this nature; however, the provision of personal data is required for a contract of employment with us. This means that we will not enter into an employment relationship with you if you do not provide us with the data we have marked as required for an application. 

11. Automated decision-making in individual cases or profiling measures 
We do not use automated processing to make decisions or for profiling purposes. 

Last updated: July 2024