Privacy policy

CH Privacy Notice

Last revised: October 2023

Please review this document carefully regarding the collection and use of personal information submitted through the Deloitte Recruitment Management and Customer Relationship Management (CRM) Systems and your usage of the Deloitte Recruitment Management System and CRM (referred to herein as the “Recruitment System”).

In this document Deloitte refers to Deloitte AG and Deloitte Consulting AG in Switzerland, you may see more about Deloitte here: https://www2.deloitte.com/ch/en/pages/about-deloitte/articles/about-deloitte.html

These firms are members of Deloitte Touche Tohmatsu Limited, a private company limited by guarantee incorporated in England and Wales (“DTTL”). Each DTTL member firm and/or its related entities provide services in particular geographic areas (also outside Switzerland) and is subject to the laws and professional regulations of the particular country or countries in which it operates. As used in this Privacy Notice, “Deloitte Network” refers to “DTTL”, its network of member firms and their related entities.

Deloitte cooperates with:

HireVue and Deloitte cooperate for providing a platform where candidates can answer a series of questions via video to display their knowledge and understanding relating to the position and the Deloitte values.

Cappfinity Ltd and Deloitte AG cooperate for providing a platform where candidates complete a series of questions to display their knowledge and understanding relating to the position and Deloitte values.

Introduction

Thank you for your interest in exploring career opportunities with Deloitte. Before continuing, please take a few minutes to read and understand our Privacy Notice. This Privacy Notice explains what personal information we may gather about you as part of our recruitment activities and how this information may be used and shared. This Privacy Notice also sets out your rights in relation to your personal information and who you can contact for additional questions or queries.

In this Privacy Notice, we will refer to your information as “personal information.” Please note that we may sometimes collectively refer to collecting, handling, storing and protecting your personal information as “processing” such information.

Please click on the links below to navigate to various sections of this statement and read additional details:

Who does this Privacy Notice apply to and what does it cover?

This Privacy Notice applies to the Deloitte entity that has posted the position you are applying for. Unless otherwise stated at the time of collection, your personal information will be processed by Deloitte as data controller in accordance with this Privacy Notice and with the laws of the country where that Deloitte entity is located (these Deloitte entities are referred to as “we”, “us”, and “our” in this document).

This Privacy Notice also contains information about when we may share your personal information with other members of the Deloitte Network and other third parties (for example, our service providers). 

What information do we collect?

The personal information that we may collect or obtain includes your name, contact information (for example, your home address, phone number and email address), and employment and education history (for example, information about your current and former employer(s), the school(s) you have attended and the degree(s) you have attained), certificate and/or license information, geolocation, internet protocol address, and information about your household.

We may collect or obtain such information because you give it to us in connection with your application for a position, or the information may be submitted on your behalf in support of a Deloitte position you have applied for or expressed interest in. For instance, to the extent appropriate and in accordance with applicable law, the Deloitte entity seeking to fill the position may seek additional data and/or verify your personal information by contacting your references, referrer, and other third parties.

If you are providing personal information about an individual other than yourself (such as a referred candidate), you must obtain the consent of the individual before submitting any of their personal information.

It is generally not our intention to seek sensitive (special categories of) information (for example, data relating to race or ethnic origin, religious or other similar beliefs, political opinions, criminal record, physical or mental health or sexual life/orientation) as part of our recruitment process or recruitment related activities. However, we might gather sensitive information about you because you voluntarily provide the information to us or we are required to collect the information as a result of legal requirements imposed on us. If we do receive any sensitive information about you, we will, where necessary, obtain your explicit consent to collect and use such information in accordance with applicable laws.

You are strictly prohibited from uploading content to the Recruitment System that is unlawful or that is considered regulated data (including, without limitation, data covered by the laws, statutes, and regulations specified above) that would require additional specific security measures to be implemented.

Social Media Tools

Our application process allows you to pull relevant information from social media tools (such as LinkedIn, Indeed, Dropbox or Google Drive) into your online application form. To the extent you choose to feed any personal or other information from such social media tools, this information will be used in accordance with those tools privacy notices, applicable law and this Privacy Notice.

We use communication data to process your inquiry and any possible further questions you might have in relation to the performance of our services (Art. 6 para. 1 lit. b GDPR) and any other related questions and matters based on the content of your communication with us (Art. 6 para. 1 lit. a GDPR). We may keep this data to document our communication with you, for training purposes, for quality assurance, for follow-up inquiries (Art. 6 para. 1 lit. f GDPR) and for regulatory purposes (Art. 6 para. 1 lit. c GDPR).

Log information, cookies and web beacons

Our Website may collect standard internet log information, including your IP address, browser type and language, access times and referring website addresses. Additionally, to improve your experience when you use our Website and ensure that it is functioning effectively, we (or our service providers) may use cookies (small text files stored in a user’s browser) and web beacons (electronic images that allow our Website to count visitors who have accessed a particular page and to access certain cookies), which may collect personal information. Additional information on how we use cookies and other tracking technologies and how you can control these can be found in our cookie notice.

The processing regarding website use is based on our legitimate interest to operate and secure our website and our services, in particular for security reasons to ensure the stability and integrity of our systems (Art. 6 para. 1 lit. f GDPR). In addition, we may perform basic web analysis based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) to optimize the website regarding usability and to gain insights about the use of our website and services. Enhanced web analysis using cookies is, within the scope of applicability of the GDPR, based on your consent (Art. 6 para. 1 lit. a GDPR).

Children

We understand the importance of protecting children’s privacy, especially in the interactive online world. Our recruitment activities are not designed for or intentionally targeted at children. It is not our policy to intentionally collect or store information about anyone under the age of 16.

How do we use information about you?

Use of personal information for the recruitment process and recruitment related activities.

We will use the personal information that we collect or obtain about you in order to:

  • manage your application for employment, including arranging any potential interviews and to make any necessary reasonable adjustments;
  • contact you during your candidacy, send you announcements, or request additional information as required;
  • assess your suitability for other current and future roles at Deloitte;
  • build a relationship with you and learn more about your career interests;
  • create a candidate profile for you in our Recruitment System;
  • further manage your hiring process, team assignment and potential workstreams assignment;
  • potentially informing your managers and teams about your arrival.

To the extent permitted by applicable local data protection and privacy laws and subject to strict application of this Privacy Notice, we may also use your personal information for career-related marketing purposes or to send you promotional materials or communications regarding events and career opportunities within the Deloitte Network that we feel may be of interest to you. We may also contact you to seek feedback on recruitment services provided by entities within the Deloitte Network.

Your assessment

As a part of the assessment, we will be using the Capptivate assessment results (where applicable) integrated with our Deloitte Recruitment Management and Customer Relationship Management (CRM) Systems.

We will be using the following data from your results: your high-level strengths and capabilities profile and score, established against a benchmark (pass, consider, fail) of successful candidates.  

Please note that your assessment of strengths and capabilities and the related score will be used for determining the best candidate fit for our organisation.

If the result of the assessment falls below a pre-defined threshold, you will be auto rejected by the system.

To ensure a fair and transparent process, we have put in place measures that allow our recruiters to review the automated decision for 48 hours following the transmission of your results to our CRM. Once you receive the rejection notice, you will be able to query the reason for this decision and one of our staff will be able to review and override the automated rejection decision if needed

You always can request more details or ask our Team for a review of this decision by contacting talent@deloitte.ch

Use of personal information upon hiring

Should you be hired by a Deloitte, your personal information may be used in connection with the employer-employee relationship as permitted by applicable laws.

Use of personal information for Website Administration and Improvement

In order to make sure our Website operates efficiently and as intended; we may also use your personal information collected via our Website to:

  • manage and improve our Website;
  • tailor the content on our Website to provide you with a more personalized experience and draw your attention to information that may be of interest to you;
  • perform general statistical research, analysis and reporting activities, including visitor activity and demographic reports;
  • manage and respond to any request that you submit through our Website.
Use of personal information for other activities that form part of the operation of our business

We may also use your personal information for the purposes of or in connection with:

  • applicable legal or regulatory requirements
  • requests and communications from competent authorities
  • protecting our rights and/or property.

On what basis do we collect and process information about you?

We may use your personal information for the purposes outlined above because: (a) we have a legitimate interest in evaluating your application for employment and managing our relationship with you; (b) the information is required in order to provide you with the information that you have indicated you are interested in receiving or (c) we are subject to legal or regulatory obligations, such as providing information to a public body or law enforcement agency.

To the extent that we process any sensitive personal information relating to you for any of the purposes outlined above, we will do so because either: (a) you have given us your explicit consent to process the information; (b) the processing is necessary to carry out our obligations under employment, social security or other applicable law; or (c) the processing is necessary for the establishment, exercise or defence of legal claims.

Who will we disclose your information to?

In connection with one or more of the purposes outlined in the “How do we use information about you?” section above, we may disclose details about you to:

  • other members of the Deloitte Network, also outside Switzerland;
  • third parties that provide services to us and/or the Deloitte Network, such as website and system hosting, companies providing employment verification services, etc. and entities providing relevant management and support;
  • competent authorities, including courts and authorities regulating us or another member of the Deloitte Network, in each case to comply with legal or regulatory obligations or requests;
  • as part of a corporate transaction, such as a sale, divestiture, reorganization, merger or acquisition;
  • your future managers teams and clients, if applicable.

In connection with our cooperation with Deloitte Network and third parties, we may transfer your information outside Switzerland, to the following countries that offer adequate protection pursuant to the Swiss Federal Act on Data Protection (“FADP”) and the General Data Protection Regulation (“GDPR"): EEA member states, UK and countries recognised by the Swiss authorities as offering adequate protection (listed in Annex 1 DPO – Ordinance
on Data Protection).

Under certain circumstances, we may also transfer information to the countries, which do not offer adequate protection pursuant to the FADP and/or GDPR, e.g.: US, India (e.g. for certain communication services) and potentially other countries (if necessary for the respective processing purpose, e.g. for IT services or in connection with international cooperation). To the extent such countries do not offer adequate protection, the transfer is secured by appropriate safeguards (such as the EU Standard Contractual Clauses) or based on a statutory exemption (e.g. if you have given your consent to the transfer, if the transfer is directly connected with the conclusion or performance of a contract with you).

How do we keep your information secure?

We have in place reasonable commercial standards of technology and operational security to protect all personal information provided by individuals from loss, misuse and unauthorized access, disclosure, alteration or destruction. Only authorized personnel, who have been made appropriately aware of our privacy obligations, are provided access to personal information.

How long will we keep your information?

We retain personal information as long as is necessary for the fulfilment of the purposes identified above in the “How do we use information about you?” section or as otherwise necessary to comply with applicable laws. Please note that on that basis, we will also keep the data of refused candidates after Deloitte giving notice of refusal of employment to the candidate. Where personal information is no longer necessary or relevant for our identified purposes or where you have indicated that you no longer are interested in staying in contact with us, we will securely dispose of your personal information.

How may you access, review or request removal of your information?

You can access your profile on the Recruitment System at any time to review or update any personal information submitted. Where required by applicable law, you may also contact us with various requests in relation to your personal information. You have various rights in relation to your personal information. In particular, you have a right to:

  • obtain confirmation that we are processing your personal information and request a copy of the personal information we hold about you;
  • ask that we update the personal information we hold about you, or correct such information that you think is inaccurate or incomplete;
  • ask that we delete personal information that we hold about you, or restrict the way in which we use such information;
  • object to our processing of your personal information.

To exercise any of your rights or raise any questions that you have about our use of your personal information, please contact: chdataprivacy@deloitte.ch

Contact us

If you have any questions or concerns regarding this Privacy Notice or processing your personal information, please direct them to chdataprivacy@deloitte.ch

For more information on how Deloitte processes your data, please refer to our general Privacy Statement on our website.

If you wish to exercise any of the rights relating to your information set out above, or if you have any questions or comments about privacy issues, or you wish to raise a complaint about how we are using your information, you can contact us in the following ways:

  • write to the Data Protection Officer - Deloitte AG Data Privacy Team, Deloitte AG, Pfingstweidstrasse 11, 8005 Zurich, Switzerland
  • send an email to chdataprivacy@deloitte.ch

If you believe, after consulting with us, that our processing of your data contradicts the applicable data protection laws, you have the possibility to lodge a complaint with the appropriate data protection authority. The data protection authority in Switzerland is the Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Berne, Switzerland https://www.edoeb.admin.ch

Based on your residence, you may have the possibility to lodge a complaint with the other appropriate data protection authority in your jurisdiction. Our Representative in the EU according to the GDPR is Deloitte UK Privacy (EU Rep) Limited, 29 Earlsfort Terrace, Dublin 2, Ireland. Send an email to chdataprivacy@deloitte.ch.
 

Changes to this privacy notice

This privacy notice does not form part of any contract with you and we may amend it at any time. The version published on our website is the version that currently applies. We encourage you to review this privacy notice periodically to remain informed about how we are protecting your information.