Privacy Policy

WHO IS THE HOLDER OF THE TREATMENT?

GI GROUP HUMAN RESOURCES SA, based in Manno, Via Cantonale 2B - Switzerland ("Gi Group")

---

WHY ARE YOUR DATA PROCESSED?

1. Registration on the Grafton Switzerland Portal

What legitimizes the treatment?

- Running a service

What happens if you do not provide the data or do not give consent?

- If you refuse to provide the data marked with an asterisk, you cannot register on the Grafton portal

How long do we keep your data?

- Voluntary application: the data are kept for 30 months from entry into the database, or from your last interaction with the Site or with agencies, unless your consent to a further retention period

- Application in response to a specific announcement: if you object to the storage of your data for future selections, the data are kept for the entire duration of the selection and, in the event of a negative result, until the closing of the same.

2. Search and selection of candidates for the insertion in administration or direct and for the realization of paths or measures of active labor policies or in the context of collaborations and / or partnerships with market operators

What legitimizes the treatment?

- Execution of pre-contractual measures

What happens if you do not provide the data or do not give consent?

- If you refuse to provide the data marked with an asterisk, it will not be possible for Gi Group to proceed with the research and selection activities and evaluate your application

How long do we keep your data?

- Voluntary application: the data are kept for 30 months from entry into the database, or from your last interaction with the Site or with agencies, unless your consent to a further retention period

- Application in response to a specific announcement: if you object to the storage of your data for future selections, the data are kept for the entire duration of the selection and, in the event of a negative result, until the closing of the same.

3. Sending information and promotional communications relating to the services offered by Gi Group / Grafton / Completion of studies and statistical and / or market research relating to services at work

What legitimizes the treatment?

- Consent of the interested party to the processing of personal data

What happens if you do not provide the data or do not give consent?

- If you refuse to give your consent, you can still register on the Grafton portal and propose your application

How long do we keep your data?

- The data is processed for the aforementioned purpose until you withdraw your consent.

4. Sending information and promotional communications relating to the services offered by the other companies of the Group (training initiatives, career development, coaching, support for relocation, research and selection of personnel and executive search) / Completion of studies and statistical research and / or market related to services at work)

What legitimizes the treatment?

- Consent of the interested party to the processing of personal data

What happens if you do not provide the data or do not give consent?

- If you refuse to give your consent, you can still register on the Grafton portal and propose your application

How long do we keep your data?

- The data is processed for the aforementioned purpose until you withdraw your consent.

---

WHO WILL PROCESS MY DATA?

The data will be processed by employees and collaborators expressly authorized for processing.

The data will be disclosed to third parties, including, in particular, client companies or entities; other market operators in the case of partnerships; Group companies in Switzerland or abroad.

The data will be processed by subjects who carry out processing on our behalf, including, in particular, companies that perform website management services, management and maintenance services of the candidate database; companies that carry out mailing of communications; companies that carry out market research.

The data may be transferred to companies that are not based in Switzerland or in a state belonging to the European Economic Area (EEA), i.e. in countries that therefore do not enjoy the same standardized level of protection within the EEA. For this reason, Gi Group has foreseen suitable measures to ensure that companies that are not based in Switzerland or the EEA and which process your personal data provide adequate protection for this processing.

---

CAN I REVOKE THE CONSENT?

You can revoke your consent to the processing of data provided by you at any time by accessing your personal account or by sending an email to: ch.privacy@gigroup.com.

---

WHAT ARE MY RIGHTS?

You can request access to data concerning you, their rectification or cancellation, as well as the limitation of processing, opposition to processing and data portability by contacting the Data Controller by ordinary mail or by sending an e-mail to: ch.privacy@gigroup.com.

You can lodge a complaint with the competent supervisory authority, as well as exercise the other rights recognized by the applicable regulations