Privacy policy

EYRA Group SA respectsand is committed to protecting the personal information of individuals. We follow privacy policies and data protection practices to comply with the law and to earn the trust of EYRA Group SA's customers and prospective customers.  Our privacy policies and dataprotection practices extend by contract to our relationships with our suppliersand partners. The members of the Board of Directors of EYRA Group SA, employees and persons working on behalf of EYRA Group SA are informed of these policies and practices and undertake to comply with them.

This privacy statement informs you of our privacy practices and of the choices you can make about theway we collect and use information about you, including information that may becollected from your online activity, and information provided to EYRAgroup SA for recruitment or employment consideration.

This statement, set forth below, constitutes the EYRA Group SA Privacy Statement. It describes the practices we follow to respect the privacy of all visitors to our website.

i

Principles

1.1

Lawfulness and fairness
We process personaldata in accordance with the Swiss Federal Act on Data Protection and theGeneral Data Protection Regulation of the European Union (GDPR) and withtransparency and fairness to you.

Our data processing activities are conducted: 1) with your consent; 2) in order to fulfil our obligations to you; 3) for the legitimate purposes of operating our business,or 4) otherwise in accordance with law. 

1.2

Transparency and consent
We are transparent and provide clear notice and choice to you about the types of personal data collected and the purposes for which it is collected and processed. We will notuse personal data for purposes that are incompatible with these Principles or our Privacy Statement. 

1.3

Data acces
We provide you with reasonable access along with the ability to review, correct, amend or delete the personal data you have shared with us. 

1.4

Accuracy and integrity
We take reasonable steps to ensure that personal data is accurate, complete and current. 

1.5

Purpose limitation
We use the personal data collected in accordance with the law and this privacy statement.

1.6

Data security
We implement information security controls in our own operations to protect personal datafrom unauthorized use or disclosure.

1.7

DATA TRANSFER
We do not communicate the data either free of charge or against payment to any other legal or natural person except in the event of a legal obligation.

1.8

Specialcategories of personal data
EYRA Group SA does not collect or retain special categories of personal data (sensitive personal information). Sensitive personal information includes: information revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; processing of genetic or biometric data for the purpose of uniquely identifying a natural person; information concerning health; information concerning the sex life or sexual orientation of a natural person. 

ii

What does data-processing mean and who is responsible ?

"Processingof personal data" means any operation or set of operations, whether or not carried out by means of an automated process and applied to personal data or toa set of personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
EYRA GroupSA, with registered office at Rue des terraux, 7 2000 NEUCHATEL, company numberCHE-369.356.690, is responsible for processing your data. You have the legal right to request details of the personal information we hold about you.

iii

How do we collect, use, protect and disclose your data ?

3.1

use of our website
Registrationis not required for you to use our Website. If you are merely a visitor, we donot collect any personal information about you except to a limited extent through the use of cookies, which are described in the Cookie Statement. However, there may be circumstances in which you choose to register and receive updates or information from EYRAgroup SA. Inthese cases, EYRA Group SA may contact registrants to invite them to special events, provide them with information about our services, publications and products, or for other marketing purposes. 
3.1.1
Contact forms
EYRA GroupSA offers various contact forms (e.g. registration for an event, contact for information, application, etc.). Personal information may be collected viathese forms. The type of information collected is contact information, including first name, last name, postal address, telephone number, e-mail address and other similar information. Third partyapplications that comply with data protection laws are used to capture and mailthe data entered in the forms. Your data is stored in the databases of thethird party applications. When you register on our website, your personal information is stored in our customer relationship management (CRM) system. Data from registrants who have not beenactively used for 24 months will be deleted from our CRM system. 
We use the Tally tool, a form creation and management tool. The generated data is stored on servers located in Belgium, within the European Union.

3.2

MAILING
EYRA Group SA uses lemlist for targeted mailing campaigns (examples: newsletter, announcements, etc.). The host servers on which lemlist processes and stores its databases are located exclusively within the European Union.

3.3

Processingof the personal data candidates
This is the privacy policy of EYRA Group SA for the processing of personal data of candidates or applicants. It applies to the processing by EYRA Group SA of all personal data of potential candidates or applicants (hereinafter: candidates)obtained in the course of our recruitment activities.

The purposeis to inform our candidates about how we use their personal data in the contextof their application.

Please note that as a candidate, agreeing to the use of your personal data in our recruitment process means that you understand and accept the terms of thisprivacy statement. 
3.3.1
Purpose of collecting your personal data
Our goal is to find suitable candidates for our current and future vacancies. We collect your personal data for our application management tool from:

- your information received if you have responded to a recruitment initiative;
- any correspondence between you and our recruiter(s);
- your public profiles on LinkedIn or other social networks and other publicly available websites (such as JobUp). 
3.3.2
On what legal basis do we process personal data for this purpose?
For this purpose, we process your personal data on the basis of our legitimate business interest. We process your personal data to find suitable candidates for vacancies. 
3.3.3
What personal data do we process for this purpose ?
We process collected data such as your name, personal contact information, address (optional), country of residence, citizenship status, the job you are applyingfor and any recruitment information you provide to us, such as a link to yourpublic social media account (e.g. LinkedIn) (optional), your resume information.

References to former colleagues may also be included, with your explicit permission. You provide us with the names of the people with whom we can conduct a reference check. 
3.3.4
How long do we keep your personal data for this purpose?
Yourpersonal data will be retained for as long as the purpose for which we collectit, with a maximum of 24 months (unless a longer retention period is necessaryto comply with legal requirements or to protect our interests and only then with your specific consent).

If you have applied for a job and have been unsuccessful, EYRA Group SA may retain yourpersonal data for a period of 24 months from our last contact in case of future employment opportunities. After this period, or at your request, your personal data will be deleted from our systems.

You may also request that we stop contacting you for career opportunities and delete your personal data. You can do this by sending an e-mail to jobs@EYRA-Group.ch with the subject line: Remove contact data. Upon receipt of this email, we will delete your data, notify you and not contact you again. 
3.3.5
Who has access to your personal data within EYRA group SA and where are they stored ?
Your personal data can be viewed only by relevant EYRA Group SA collaboratorsimplicated in our recruitment process such as recruiters, hiring managers, EYRA Group SA staff who are directly involved in your application process, and other HRfunctions involved.

Your personal data are store on our Recruitment database System (based on ourZoho tool). 
3.3.6
Commentvos données personnelles sont-elles sécurisées ?
EYRA Group SA has implemented technical, physical and organizational protection measures within the framework of the Information Security Management System (ISMS) toguarantee the confidentiality and security of your personal data. Your data is therefore protected as such and only the authorized persons mentioned above will have access to it. 
3.3.7
your rights
Based on applicable data protection and privacy laws, you may have the following rights:

- The right to access your personal data;
- the right to correct and delete your personal data; and
- the right to request restriction of processing;
- the right to object to the processing of your personal data;
- the right to withdraw your consent to the processing of your personal data;
- the right to data portability.

3.4

SeCURITy
We implement information security controls in our own operations to protect personal data from unauthorised use or disclosure.

3.5

Disclosure
We do not communicate the data either free of charge or against payment to any other legal or natural person except in the event of a legal obligation.
3.5.1
Services providers
We use service providers to manage or support certain aspects of our operations on our behalf. These service providers may provide services such as IT services, courier services, data hosting or customer relationship management. Our serviceproviders are contractually bound to protect the personal data they receive from us and are prohibited from using this personal data for any purpose other than to perform the services requested by EYRA Group SA.  We also take steps to ensure adequate protection for any transfer of your personal data in accordance with applicable law. 

3.6

ENQUÊTES DE SATISFACTION DES CLIENTS
Receiving feedbackfrom our customers is very important to improve the quality of our services.This is the reason why our quality team may send a survey to our customers on aregular basis by email at the end of the provision of our services.

Please see 3.2 formore information regarding the way EYRAgroup SA processes personal data in thecontext of mailings.

Given that eachsatisfaction survey is being linked to a specific service, we ask respondents to fill in their email in the form. In the context of the survey, respondents will also be asked to provide EYRAgroup SA with feedback.

Such individual feedback is used for the following purposes:
- link the feedback to a specific project;
- give the account manager assigned to the respondent's organisation the opportunity to contact the respondent (if and only if the respondent gives his express consent to it); and
- aggregate the individual feedback into an aggregated feedback report.

The individual feedback will only be kept for a period of 6 months after the survey and is accessible only to the quality team and the account manager assigned to therespondent's organisation.

After these 6 months, only aggregated reports containing non-personal data will be kept and used forthe following reasons: draw up evolving statistics, share customer experience feedback on our projects for possible audits, prioritise and carry out thenecessary actions internally within the framework of the improvement of ourservices.

The processing or personal data as described under 3.6 is based on the legitimate interests of EYRAgroup SA (it being understood that, as explainedabove, respondents will only be contacted in respect of the feedback they have provided if they have explicitly consented to it).

The respondent has the right to object at any time to the processing of his/her personal data for thepurpose of performing customer satisfaction surveys and/or to exercise his/herother rights in accordance with section 4 below.

iV

Howto control your personal information and execrise your right ?

EYRA Group SA provides you with the ability to keep your personal information accurate andup-to-date. If at any time you would like EYRA Group SA to rectify, erase or restrict the processing of your personal information, or you would like too btain confirmation whether or not your personal information is processed byEYRA, access your personal information, ask to whom the data is disclosed, exercise your right to data portability or with draw your consent to processing, please contact us at privacy@eyra-group.ch.

V

Third-partylinks

Please beaware that EYRA Group SA sometimes contains links to other sites that are notgoverned by this privacy statement. Visitors to Website may be directed tothird-party sites for more information. 

EYRA GroupSA makes no representations or warranties regarding how your information is stored or used on third-party servers. We recommend that you review the privacy statement of each third-party site linked from the Website to determine the way they use your personal information. 

Vi

CONTACT

Questions, comments andrequests regarding this privacy statement are welcomed and should be addressedto privacy@eyra-group.ch.

Vii

MODIFICATIONS

If you have any questionsrelating to our Privacy Policy and how EYRAgroup SA uses and protects yourpersonal data, please contact us to privacy@eyra-group.ch.

We may update this policyfrom time to time. If we make significant changes we will let you know butplease regularly check this policy to ensure you are aware of the most updatedversion.

This policy was last reviewed on 28th August 2023.