General Information

Protecting your personal data matters to us. This privacy policy explains how we process personal data in connection with our business activities.

This concerns in particular:

• Visitors to our website
• Applicants and candidates
• Clients and business partners

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).

Where the GDPR applies, we process personal data in particular on the following legal bases:

• Art. 6(1)(b) GDPR, insofar as processing is necessary for the preparation or performance of a contract, in particular in connection with application and recruitment processes;
• Art. 6(1)(f) GDPR, insofar as processing is necessary to safeguard our legitimate interests, in particular for the operation and security of our IT systems, the management of our business relationships, and the improvement of our services;
• Art. 6(1)(a) GDPR, insofar as we obtain consent, for example for certain marketing measures or for extended storage in our candidate pool.

Under the FADP, we rely on the statutory principles of data processing as well as on overriding private interests pursuant to Art. 31 FADP.

This privacy policy does not form part of any contract with you, unless expressly agreed otherwise.

Controller

The controller responsible for data processing is:

Dubs & Partner Recruitment AG
Riedstrasse 13
6330 Cham

M: +41 79 757 09 63
lukas@dubs-partner.ch

For data protection concerns or questions regarding the processing of your personal data, you may contact us using the contact details above.

What Data We Process

1. In connection with use of the website
   When visiting our website, the following data may be collected:

   Connection and usage data (IP address, browser type, device data, pages accessed, time of access). This data is required to ensure the stability and security of the website.

   • Data from the use of analytics, map, and chat tools
   • Where used: information entered in the chat widget.

2. Contact via the contact form
   The contact form may collect your name, contact details (e.g. e-mail address, phone number), and the content of your message. The form also offers the option to upload a file (namely your CV). Uploaded documents and submitted data are used exclusively to process the inquiry or application.

3. In connection with application and recruitment procedures

   • Master data: name, address, date of birth, contact details
   • Application documents: CV, references, certificates, photo
   • Information on professional experience, education, qualifications, and salary expectations
   • References and correspondence during the application process

In the course of our recruitment activities, we may also process personal data from references, former employers, or other contact persons named by you, insofar as this is necessary for the application process. We assume that you have informed these persons accordingly about the disclosure of their data.

Processing takes place in order to carry out recruitment mandates and on the basis of our legitimate interest in filling positions (Art. 6(1)(b) and (f) GDPR).

In relation to our clients, we generally act as an independent controller within the meaning of data protection law.

We do not, in principle, process special categories of personal data, unless voluntarily provided by you or legally required.

Purpose of Processing

We process personal data for the following purposes:

• Carrying out and managing application and recruitment procedures
• Identifying and approaching potential candidates (active sourcing)
• Processing inquiries received via the contact form
• Communication with applicants and clients
• Maintaining a candidate pool for future mandates (where permissible or with consent)
• Operation, security, and further development of our website
• Traffic measurement and, where used, advertising-related analysis
• Fulfilling legal obligations, and asserting, exercising, or defending legal claims

Source of the Data

We receive personal data:

• directly from you: information from application documents, the contact form, or the chat widget
• from publicly available sources (e.g. professional networks such as LinkedIn, GitHub, Hugging Face)
• from specialised data providers of professional contact databases (e.g. ContactOut, Apollo)
• from clients in connection with a mandate

Insofar as we do not collect personal data directly from the data subject, we inform the data subject of the source of the data and the purposes of processing, to the extent required under applicable data protection law.

Disclosure of Data

We disclose personal data only to the extent necessary for the stated purposes, where we are legally obliged to do so, or where the data subject has consented. The following categories of recipients are relevant:

• Client companies, in connection with specific recruitment mandates
• Service providers and tools (e.g. hosting providers, Google services, chat widget)

In connection with specific recruitment mandates, we may disclose candidates' personal data to client companies, insofar as this is necessary for carrying out the mandate.

We generally inform you before disclosing your data to a client company, or coordinate the disclosure with you, insofar as this is provided for in the specific recruitment process.

We generally act as an independent controller for the processing of your candidate data. Insofar as several parties jointly determine the purposes and means of processing, the data protection roles may be assessed differently on a case-by-case basis.

International Data Transfers

Personal data may be transferred to countries outside Switzerland or the EEA, in particular to the USA and other countries, in connection with the use of cloud and web services.

Where data is transferred to states without an adequate level of data protection, we ensure that appropriate safeguards are in place, for example through the conclusion of the European Commission's standard contractual clauses.

Insofar as recipients in the USA are certified under the Swiss–U.S. or EU–U.S. Data Privacy Framework, we base the transfer on the corresponding adequacy decision.

We note that, despite these measures, risks may remain in connection with data transfers to the USA, for example with regard to access by authorities.

Further information is available on request.

Storage, Processing, and Retention of Data

Candidate data and documents are managed and stored internally by us. We use standard web-based communication tools to communicate with candidates. We also regularly create data backups.

We store personal data only for as long as necessary for the respective purposes.

In the recruitment context, the following applies:

• Data is reviewed after completion of a mandate
• Longer storage takes place only with your consent
• Earlier deletion takes place if you request it and no legal or legitimate grounds for further storage exist
• Website usage data is retained according to the default settings of the tools used

Data from the candidate pool may (where an appropriate basis exists) be stored for longer, so that we can consider you for future mandates.

Data is also stored insofar as necessary for the assertion or defence of legal claims.

Statutory retention obligations remain reserved.

Obligation to Provide Data

Providing certain personal data is required in order to take part in a recruitment process.

Without this data, we may not be able to consider you.

Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include, for example, access restrictions, sound user management, and regular data backups.

Profiling & Artificial Intelligence (AI)

We may use AI-supported tools to research information on potential candidates, to pre-structure profiles, and to prioritise them according to defined criteria, for example a discernible match with the requirements of the job posting or geographic proximity. This prioritisation serves to make contacting candidates more efficient; it is not a final selection. Every automatically generated prioritisation is reviewed by a member of our team before any contact is made and can be adjusted. Decisions on presenting a candidate to a client company are made exclusively by humans.

Use of Third-Party Providers, Cookies, and Tracking Tools

1. Cookies
   Our website uses cookies and similar technologies to ensure functionality and to analyse usage.

   Technically necessary cookies are required for the operation of the website and are used on the basis of our legitimate interest (Art. 6(1)(f) GDPR / overriding interest under the FADP).

   All other cookies (in particular analytics or marketing cookies) are used only with your consent (Art. 6(1)(a) GDPR). You can adjust your settings at any time via our cookie banner tool.

   Cookies may be stored temporarily or permanently. You can disable or delete cookies in your browser at any time; this may limit the functionality of the website.

   The use of third-party providers may result in the transfer of personal data abroad (in particular to the USA). In such cases, we ensure that appropriate safeguards are in place (e.g. standard contractual clauses).

2. Hosting
   Our website is hosted with an external provider in Switzerland. When the website is accessed, server log files are automatically processed. This data is required to technically deliver the website, ensure system security, and resolve faults. Together with our hosting provider, we make every effort to protect the databases as well as possible against unauthorised access, loss, misuse, or falsification.

3. Chatra (Live Chat)
   If the chat widget is used by the visitor, the information entered in the chat as well as technical connection data is transmitted to and processed by the provider Chatra in order to provide the chat service. This may result in a transfer of data to the USA.

4. Google Services
   We use several services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA:

   • Google Analytics: A web analytics service that we use to evaluate the use of our website in order to design it in line with demand and to continuously improve it. Where the GDPR applies, we generally only use analytics and marketing services after prior consent, insofar as legally required. The data collected is retained according to the settings configured in Google Analytics and subsequently deleted. Collection by Google Analytics can be opted out of using the browser add-on provided by Google.
   • Google Tag Manager: We use this to manage so-called website tags via a central interface. Google Tag Manager itself does not set cookies and does not otherwise collect personal data; it merely triggers other tools described in this policy. However, when the page loads, a technical connection to Google's servers is established, during which the IP address is transmitted.
   • Google Maps: used to display an interactive map, e.g. for directions. In doing so, data, including the IP address, may be transmitted to Google.
   • Google Fonts: The fonts used are embedded locally on our own server and are not loaded from Google's servers. As a result, no connection to Google and no data transfer to Google takes place in this respect.

Further information on data processing by Google can be found in Google's privacy policy (https://policies.google.com/privacy).

Your Rights

Depending on the applicable data protection law, you may have different rights.

Under the Swiss Federal Act on Data Protection (FADP), you may:

• request information about your personal data;
• request the correction of inaccurate personal data;
• request the disclosure of your personal data in a commonly used electronic format, insofar as the statutory requirements are met;
• lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Where the GDPR applies, you may additionally have the following rights:

• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to object pursuant to Art. 21 GDPR;
• Right to withdraw any consent given;
• Right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, you may contact us using the contact details above. On request, we will disclose the specific source of your data. We may require proof of identity in order to process your request.

Currency and Amendments

This privacy policy may be amended at any time, in particular if our data processing activities or legal requirements change.

The version published on our website at the relevant time shall apply.

Last updated: August 2026

General Information

Protecting your personal data matters to us. This privacy policy explains how we process personal data in connection with our business activities.

This concerns in particular:

• Visitors to our website
• Applicants and candidates
• Clients and business partners

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).

Where the GDPR applies, we process personal data in particular on the following legal bases:

• Art. 6(1)(b) GDPR, insofar as processing is necessary for the preparation or performance of a contract, in particular in connection with application processes, placements, and staff leasing assignments;
• Art. 6(1)(f) GDPR, insofar as processing is necessary to safeguard our legitimate interests, in particular for the operation and security of our IT systems, the management of our business relationships, and the improvement of our services;
• Art. 6(1)(a) GDPR, insofar as we obtain consent, for example for certain marketing measures or for extended storage in our candidate pool.

Under the FADP, we rely on the statutory principles of data processing as well as on overriding private interests pursuant to Art. 31 FADP.

This privacy policy does not form part of any contract with you, unless expressly agreed otherwise.

Controller

The controller responsible for data processing is:

Dubs & Partner Contracting AG
Riedstrasse 13
6330 Cham

M: +41 79 757 09 63
lukas@dubs-partner.ch

For data protection concerns or questions regarding the processing of your personal data, you may contact us using the contact details above.

What Data We Process

In connection with use of the website

When visiting our website, the following data may be collected: connection and usage data (IP address, browser type, device data, pages accessed, time of access). This data is required to ensure the stability and security of the website.

Data from the use of analytics, map, and chat tools

Where used: information entered in the chat widget.

Contact via the contact form
The contact form may collect your name, contact details (e.g. e-mail address, phone number), and the content of your message. The form also offers the option to upload a file (namely your CV). Uploaded documents and submitted data are used exclusively to process the inquiry or application.

In connection with application and placement procedures

• Master data: name, address, date of birth, contact details
• Application documents: CV, references, certificates, photo
• Information on professional experience, education, qualifications, and salary expectations
• References and correspondence during the application process

In connection with staff leasing assignments

• Identity, residence, and work permit data
• OASI (AHV) number and other social insurance data
• Bank details as well as payroll and withholding tax data
• Time tracking and assignment reports
• Information provided by the client company about the individual, e.g. in connection with assignment planning
• Health data, insofar as required to assess fitness for the assignment

Such health data is processed only insofar as this is necessary in connection with the specific activity, legal requirements, safety requirements, or the assessment of fitness for the assignment. Processing takes place only to the extent required.

Purpose of Processing

We process personal data for the following purposes:

• Carrying out and managing application and placement procedures
• Concluding and carrying out staff leasing assignments, including payroll, social insurance, and withholding tax accounting, as well as time tracking
• Compliance with labour and licensing law obligations in staff leasing, in particular under the Swiss Federal Act on Employment Services and the Hiring of Services (Arbeitsvermittlungsgesetz, AVG) and its implementing ordinance (AVV)
• Processing inquiries received via the contact form
• Communication with candidates and client companies
• Maintaining a candidate pool and contacting candidates about future suitable opportunities, insofar as an appropriate basis exists
• Operation, security, and further development of our website
• Traffic measurement and, where used, advertising-related analysis
• Fulfilling legal obligations, and asserting, exercising, or defending legal claims

Source of the Data

We receive personal data:

• directly from the data subject: from application documents, the contact form, or the chat widget
• automatically when the website is used
• from third parties, insofar as indicated in the application or placement process: from self-named references
• from client companies, namely feedback on the course of an assignment
• from social insurance institutions and authorities in connection with the licensing procedure
• from publicly available sources, insofar as we actively approach candidates (e.g. professional networks such as LinkedIn, GitHub, Hugging Face)
• from specialised data providers of professional contact databases (e.g. ContactOut, Apollo)

Insofar as we do not collect personal data directly from the data subject, we inform the data subject of the source of the data and the purposes of processing, to the extent required under applicable data protection law.

Disclosure of Data

We disclose personal data only to the extent necessary for the stated purposes, where we are legally obliged to do so, or where the data subject has consented. The following categories of recipients are relevant:

• Service providers and tools (e.g. hosting providers, Google services, chat widget)
• Client companies, to the extent of information necessary for the assignment
• Social insurance institutions, namely the OASI compensation fund, accident insurance, and occupational pension scheme
• Tax authorities in connection with withholding tax, and the competent licensing authorities under the AVG
• Our fiduciary, namely for accounting and payroll processing purposes
• Authorities, insofar as we are legally obliged to do so

Disclosure to a client company generally takes place only in connection with a specific staff leasing assignment and insofar as necessary for carrying out the process. Where provided for, we inform candidates before any corresponding disclosure.

International Data Transfers

Personal data may be transferred to countries outside Switzerland or the EEA, in particular to the USA and other countries, in connection with the use of cloud and web services.

Where data is transferred to states without an adequate level of data protection, we ensure that appropriate safeguards are in place, for example through the conclusion of the European Commission's standard contractual clauses.

Insofar as recipients in the USA are certified under the Swiss–U.S. or EU–U.S. Data Privacy Framework, we base the transfer on the corresponding adequacy decision.

We note that, despite these measures, risks may remain in connection with data transfers to the USA, for example with regard to access by authorities.

Further information is available on request.

Storage, Processing, and Retention of Data
Candidate data and documents are managed and stored internally by us. We use standard web-based communication tools to communicate with candidates. We also regularly create data backups.

We store personal data only for as long as necessary for the respective purposes.

In the staff leasing context, the following applies:

• Data is reviewed after completion of a mandate
• Longer storage takes place only with your consent
• Earlier deletion takes place if you request it and no legal or legitimate grounds for further storage exist
• Website usage data is retained according to the default settings of the tools used

Data from the candidate pool may (where an appropriate basis exists) be stored for longer, so that we can consider you for future mandates.

Data is also stored insofar as necessary for the assertion or defence of legal claims.

Statutory retention obligations remain reserved.

Obligation to Provide Data

Providing certain personal data is required in order to take part in a placement process. This concerns, in particular, information required for carrying out the staff leasing assignment, for example identification data, information on work permits, social insurance data, and data for payroll purposes.

Without this information, we may not be able to carry out an assignment.

Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include, for example, access restrictions, sound user management, and regular data backups.

Profiling & Artificial Intelligence (AI)

We may use AI-supported tools to research information on potential candidates, to pre-structure profiles, and to prioritise them according to defined criteria, for example a discernible match with the requirements of the job posting or geographic proximity. This prioritisation serves to make contacting candidates more efficient; it is not a final selection. Every automatically generated prioritisation is reviewed by a member of our team before any contact is made and can be adjusted. Decisions on presenting a candidate to a client company are made exclusively by humans.

Use of Third-Party Providers, Cookies, and Tracking Tools

1. Cookies

   Our website uses cookies and similar technologies to ensure functionality and to analyse usage.

   Technically necessary cookies are required for the operation of the website and are used on the basis of our legitimate interest (Art. 6(1)(f) GDPR / overriding interest under the FADP).

   All other cookies (in particular analytics or marketing cookies) are used only with your consent (Art. 6(1)(a) GDPR). You can adjust your settings at any time via our cookie banner tool.

   Cookies may be stored temporarily or permanently. You can disable or delete cookies in your browser at any time; this may limit the functionality of the website.

   The use of third-party providers may result in the transfer of personal data abroad (in particular to the USA). In such cases, we ensure that appropriate safeguards are in place (e.g. standard contractual clauses).

2. Hosting

   Our website is hosted with an external provider in Switzerland. When the website is accessed, server log files are automatically processed. This data is required to technically deliver the website, ensure system security, and resolve faults. Together with our hosting provider, we make every effort to protect the databases as well as possible against unauthorised access, loss, misuse, or falsification.

3. Chatra (Live Chat)

   If the chat widget is used by the visitor, the information entered in the chat as well as technical connection data is transmitted to and processed by the provider Chatra in order to provide the chat service. This may result in a transfer of data to the USA.

4. Google Services

   We use several services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA:

   • Google Analytics: A web analytics service that we use to evaluate the use of our website in order to design it in line with demand and to continuously improve it. Where the GDPR applies, we generally only use analytics and marketing services after prior consent, insofar as legally required. The data collected is retained according to the settings configured in Google Analytics and subsequently deleted. Collection by Google Analytics can be opted out of using the browser add-on provided by Google.
   • Google Tag Manager: We use this to manage so-called website tags via a central interface. Google Tag Manager itself does not set cookies and does not otherwise collect personal data; it merely triggers other tools described in this policy. However, when the page loads, a technical connection to Google's servers is established, during which the IP address is transmitted.
   • Google Maps: used to display an interactive map, e.g. for directions. In doing so, data, including the IP address, may be transmitted to Google.
   • Google Fonts: The fonts used are embedded locally on our own server and are not loaded from Google's servers. As a result, no connection to Google and no data transfer to Google takes place in this respect.

   Further information on data processing by Google can be found in Google's privacy policy (https://policies.google.com/privacy).

Your Rights

Depending on the applicable data protection law, you may have different rights.

Under the Swiss Federal Act on Data Protection (FADP), you may:

• request information about your personal data;
• request the correction of inaccurate personal data;
• request the disclosure of your personal data in a commonly used electronic format, insofar as the statutory requirements are met;
• lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Where the GDPR applies, you may additionally have the following rights:

• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to object pursuant to Art. 21 GDPR;
• Right to withdraw any consent given;
• Right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, you may contact us using the contact details above. On request, we will disclose the specific source of your data. We may require proof of identity in order to process your request.

Currency and Amendments

This privacy policy may be amended at any time, in particular if our data processing activities or legal requirements change.

The version published on our website at the relevant time shall apply.

Last updated: August 2026