Privacy notice for applicants

1. Who is responsible

The controller is CampOne GmbH, the company that operates Grondia:

CampOne GmbH
c/o Christoph Tonini
Habüelstrasse 112
8704 Herrliberg
Switzerland
UID: CHE-134.912.193

For anything about your application data, write to felix@grondia.com or reply to the confirmation email you received after applying.

2. What we collect

From the application form:

• your first and last name, email address and phone number, and optionally your city or region;
• your CV or the link to your LinkedIn profile;
• your answers about your right to work, your language levels and your sales experience;
• optionally your earliest start date, one extra link and how you heard about the role;
• your acknowledgement of this notice and, if you choose, your consent to the talent pool.

During the process: notes from calls and interviews, any task you complete for us, and the outcome.

Technical data: your IP address, which we use to prevent abuse of the form, and, if the link you followed carried them, campaign parameters (utm_source, utm_medium, utm_campaign) and the page you first landed on.

We do not ask for a photo, your date of birth, gender, nationality, marital status, home address or salary history, and you do not need to put any of them in your CV.

3. Why we use it, and on what legal basis

To assess your application for the role you applied for and to take steps towards a possible employment contract (Art. 6(1)(b) GDPR; in Switzerland Art. 328b of the Code of Obligations and the Federal Act on Data Protection).

To defend ourselves against legal claims after a decision, for the limited period in section 6 (our legitimate interest, Art. 6(1)(f) GDPR).

To keep your application in our talent pool and contact you about other roles, only if you ticked that box (your consent, Art. 6(1)(a) GDPR). You can withdraw that consent at any time; it does not affect your application.

We do not use your data for marketing, we do not sell it, and it does not go into our sales systems.

4. Who receives it

The founders of Grondia and the people involved in filling the role.

These service providers, which process the data only on our instructions:

• Infomaniak Network SA, Geneva, Switzerland: hosting of our application database and file storage, in Switzerland.
• Vercel Inc., USA: hosting of this website. Your application passes through Vercel on its way to our database; it is not stored there.
• Resend, USA: delivery of the emails we send you, such as the confirmation of your application.

If we make you an offer and would employ you through an employer of record, we tell you which provider that is before we share anything with them. We contact referees only with your agreement, and only the people you name.

5. Where your data is stored

In Switzerland, at Infomaniak. If you apply from outside Switzerland, including from the EU, the USA, Canada, Australia or New Zealand, your data is transferred to Switzerland. The European Commission recognises Switzerland as providing an adequate level of data protection.

The transit through Vercel and the email delivery through Resend involve the USA. For these we rely on the providers’ data processing agreements with standard contractual clauses.

6. How long we keep it

If we do not hire you, or you withdraw: we delete your application, or reduce it to an anonymous record (role, market, the stage reached and dates), 6 months after we tell you the outcome. For applications for Austria the period is 7 months.

If no decision has been made, we delete it at the latest 12 months after we received it.

Talent pool: if you agreed, we keep your application for 12 months from your consent. Before that ends we may ask whether you want to stay in; if you do not answer, we delete it.

If we hire you, your application becomes part of your employee file.

7. No automated decisions

We do not use automated decision-making or AI to screen, rank, assess or reject applications. A person on our team reads every application.

8. Your rights

You can ask for access to your data, for a copy in a portable format, for corrections, for deletion and for restriction of processing, and you can object to processing. You can withdraw your application, and any consent, at any time. Write to felix@grondia.com or reply to your confirmation email. We answer within 30 days.

You can also complain to a data protection authority, for example:

• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC);
• the EU: the supervisory authority in your country, for example the Austrian Data Protection Authority, the CNIL in France, the Garante per la protezione dei dati personali in Italy or the Croatian Personal Data Protection Agency (AZOP);
• Australia: the Office of the Australian Information Commissioner (OAIC);
• New Zealand: the Office of the Privacy Commissioner;
• Canada: the Office of the Privacy Commissioner of Canada, and in Quebec the Commission d’accès à l’information.

9. What you have to provide

The fields marked as required in the form are needed to assess your application; without them we cannot consider it. A CV or a LinkedIn profile is enough, you do not need both. Optional fields help us but are not needed.

10. Changes to this notice

If we change this notice, the new version applies to applications received after the change. The version you acknowledged is stored with your application.