Privacy policy

Privacy policy

As a personnel consultancy headquartered in Switzerland, we, Onyx Circle AG in Switzerland and Onyx Circle GmbH in Germany (hereinafter also referred to as "we", "us"), specialize in the placement of specialists and executives in Switzerland and abroad.

In this privacy policy, we explain how we collect and process personal data. This is not an exhaustive description; other data protection information may regulate specific matters.

If you transmit or disclose data about other persons to us, we assume that you are authorized to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this privacy policy.

Responsible person / data protection officer / representative

For the data processing of Onyx Circle AG, Zurich (CH), and Onyx Circle GmbH, Hamburg (D), described in this privacy policy, the data protection authority is

Onyx Circle AG, Thurgauerstrasse 54, 8050 Zurich is responsible, unless otherwise communicated in individual cases, e.g. in other data protection declarations, on forms or in contracts. However, unless otherwise communicated, this privacy policy also applies in cases where Onyx Circle AG, Switzerland, is not the controller, but Onyx Circle GmbH, Germany. This is particularly the case where your data is processed by Onyx Circle GmbH, Hamburg, in connection with its own legal obligations or contracts or where you share data with Onyx Circle GmbH, Hamburg. In these cases, Onyx Circle GmbH is the controller.

You can contact us as follows for your data protection concerns and to exercise your rights:

Onyx Circle AG
Thurgauerstrasse 54
CH - 8050 Zurich
E-Mail: info@onyx-circle.com
Website:https://www.onyx-circle.com/

Onyx Circle GmbH
Ottenser Hauptstrasse 2-6
D - 22765 Hamburg
E-Mail: info@onyx-circle.com
Website:https://www.onyx-circle.com/

Data protection representative of Onyx Circle AG in the EU pursuant to Art. 27 GDPR:

Onyx Circle GmbH
Ottenser Hauptstrasse 2-6
D - 22765 Hamburg
E-Mail: info@onyx-circle.com
Website:https://www.onyx-circle.com/

Data protection officer pursuant to the DPA and data protection officer pursuant to the GDPR:

datenschutzbeauftragter@onyx-circle.com

General purposes of processing

We use personal data for the purpose of providing functional websites and for the provision of our content and services. We treat personal data confidentially, carefully and for the intended purpose. In doing so, we comply with the relevant provisions of the applicable data protection law.

Processing of your personal data when you visit our website

This website can generally be visited without registration. Data such as pages called up or the name of the file called up, date and time are stored on the server for statistical purposes without this data being directly related to your person.

Use of cookies

This website uses cookies. These are small text files that make it possible to store specific user-related information on the user's device while they are using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze the behavior of page use, but also to make our offer more customer-friendly.

We use cookies that are necessary for the operation of the website on the basis of our legitimate interest.

We only use cookies for statistics and analyses, marketing and for external media if you have given your consent in the cookie banner. You can give or withdraw your consent by clicking on the following link and changing your settings there: To the cookie settings

There you will also find detailed information on the individual cookies, their purpose and storage period.

You can use your browser settings to restrict or completely prevent the storage of cookies across all websites and to delete cookies that have already been stored. For more detailed information, please refer to the instructions or help function of your browser.

In principle, our website can still be visited and used even after cookies have been restricted/deactivated in the browser settings. Please note, however, that the complete deactivation of cookies in particular can lead to limited functionality of our website.

Google Maps

We use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website. Google Maps is a web service for the visual display of geographical information. Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there as soon as you access the subpages in which the Google Maps map is integrated. This information may also be transmitted to the servers of Google LLC. in the USA. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The collection, storage and evaluation are based on Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree with the transmission of your data to Google in the context of the use of Google Maps, it is also possible to completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use athttps://www.google.de/intl/de/policies/terms/regional.htmland the additional terms of use for Google Maps can be found athttps://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("GooglePrivacyPolicy"):https://www.google.de/intl/de/policies/privacy/

Google Ads

This website uses Google Conversion Tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

In connection with the use of Google Ads, your personal data will be transferred to the USA. This data transfer takes place on the basis of EU standard contractual clauses.

The legal basis for the use of Google Ads is your consent. You can deactivate Google Ads via the cookie settings:To the cookie settings

Alternatively, you can reject the setting of a cookie required for this via your browser settings or set your browser to block cookies from the domain "googleleadservices.com".

Google Remarketing

This website uses the remarketing function within the Google Ads service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the website visitor's browser, which makes it possible to recognize the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function. According to Google, it does not collect any personal data during this process.

The legal basis for the use of Google Ads Remarketing is your consent. You can deactivate Google Ads via the cookie settings:To the cookie settings

Alternatively, you can deactivate the remarketing function by changing the corresponding settings athttp://www.google.com/settings/ads.

Google reCAPTCHA

This website uses the reCAPTCHA service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The use of Google reCAPTCHA is based on our legitimate interest in protecting our technical systems from abusive automated entries.

Insofar as personal data is transferred to Google in the USA, this is done on the basis of EU standard contractual clauses. Further information on Google reCAPTCHA and the associated privacy policy can be found at:

https://developers.google.com/recaptcha/,
https://www.google.com/recaptcha/admin/create,
https://policies.google.com/privacy

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies. These are small text files that make it possible to store specific user-related information on the user's device. These enable Google to analyze the use of our website. The information collected by the cookie about the use of our pages (including your IP address) is usually transmitted to a Google server and stored there. We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure an anonymized collection of IP addresses (so-called IP masking). If anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. This data transfer takes place on the basis of EU standard contractual clauses.

Google uses the information collected to evaluate the use of our websites, to compile reports for us in this regard and to provide other related services.servicesservices to us.

You can find out more at
https://support.google.com/analytics/answer/6004245?hl=de

To deactivate Google Analytics, Google provides the following link https://tools.google.com/dlpage/gaoptout?hl=de a browser plug-in is available.

Google AdSense

This website uses Google AdSense, a service for integrating advertisements from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on these pages. The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This data transfer takes place on the basis of EU standard contractual clauses. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

The legal basis for the use of Google Ads is your consent. You can deactivate Google Ads via the cookie settings:To the cookie settings

Google Tag Manager

Google Tag Manager is a solution from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), with which we can manage so-called website tags via an interface and thus, for example, integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal user data.

The use of Google Tag Manager is based on our legitimate interest.

With regard to the processing of users' personal data, please refer to the following information on Google services. Terms of use:
https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

Social Media

Onyx Circle AG uses social media platforms to provide information about our company and our services. From a data protection point of view, processing that takes place in the area of responsibility of Onyx Circle AG must be distinguished from processing that takes place exclusively in the area of responsibility of the platform operators. In addition, when visiting the various company websites, processing may be carried out under the joint responsibility of the respective platform operator.

Onyx Circle AG processes all messages, likes and content that are transmitted, shared or otherwise added by you on the various social media sites. Insofar as the processing of personal data takes place in the context of communication between Onyx Circle AG and you, this serves to process feedback on our services and to improve our offers and is based on your consent, the execution or initiation of a contract or on our legitimate interest in continuously improving our offer. Your data will only be stored in personal form for as long as is necessary for the purposes for which it is processed. We provide information on your rights as a data subject in the "Rights of the data subject" section.

We also process the data provided by the operators of the social media platforms for the purpose of presenting statistically processed data on the basis of our legitimate interest. We receive aggregated data without personal reference, which provides information about the success of various measures and is used to optimize our posts. We have no influence on the creation and provision of this data. The associated personal data processing takes place exclusively in the area of responsibility of the platform operators. The nature and scope of the information you provide to the operator of the social media platforms, the associated purposes of data processing, its lawfulness and information on exercising your rights can be found in the data protection guidelines and further information provided by the platform operators:

XING: https://privacy.xing.com/de/datenschutzerklaerung

Youtube: https://policies.google.com/privacy

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

Instagram: https://www.instagram.com/legal/privacy/

In the case of Facebook, we use the Facebook platform and are jointly responsible with Facebook for the operation of the page. We use the page primarily as an advertising and communication platform with customers, candidates and interested parties. In addition, we usually receive generic information from Facebook on how successful the amounts are (e.g. number of page views and number of "likes"). The way in which this data is collected and processed is the responsibility of Facebook. This naturally also applies to the processing of the data, which is carried out exclusively for the purposes of Facebook.

The obligations of the responsible parties resulting from joint responsibility can be found in the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

  1. Primary controller: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
  2. Responsible: Onyx Circle AG, Thurgauerstrasse 54, 8050 Zurich

Data processing by Facebook:

The generation and provision of "Insights data"(https://www.facebook.com/business/pages/manage#page_insights) is the responsibility of Facebook. Onyx Circle AG has no influence on the generation and provision of this data. The associated personal data processing takes place exclusively on Facebook.

The nature and scope of the information you provide to Facebook, the associated purposes of data processing, its lawfulness and information on exercising your rights can be found in the data policy and other information provided by Facebook on the processing of "Insights data": https://de-de.facebook.com/policy.php

Information on page statistics can be found at: https://www.facebook.com/business/pages/manage#page_insights

You can exercise your rights in connection with the "Insights data" generated and provided by Facebook vis-à-vis Facebook.

As a registered and logged-in Facebook user, you can obtain information on exercising your rights via your user account or by contacting Facebook at www.facebook.com

YouTube

This website uses plugins from the YouTube site operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in YouTube's privacy policy athttps://www.google.de/intl/de/policies/privacy

The legal basis is your consent. You can revoke your consent in the cookie settings:To the cookie settings

Processing of personal data of candidates

So that we can provide you with our agreedservicesin particular for the conclusion and processing of the contracts required for recruitment and personnel placement, we process your personal data (name, contact details, CV, references, etc.) that you have sent to us directly or made available to us via third parties or a third-party platform.

To process your application data, we use the CRM system "Recruit CRM" from the provider Workforce Cloud Tech, Inc, 28 Mohawk Avenue, Norwood, NJ 07648, USA. The data protection guidelines applicable to the CRM system can be viewed at the following linkhttps://recruitcrm.io/legal/gdpr.The corresponding GDPR commitment can be found at the following link:https://recruitcrm.io/legal/gdpr. Your data uploaded to "Recruit CRM" is stored in the AWS Cloud (provider: Amazon WebServicesInc., USA) in and outside the EU, i.e. possibly also in third countries without an adequate level of data protection compared to the EU. "Recruit CRM" has been contractually obligated by Onyx Circle AG to comply with the applicable data protection laws (Switzerland and EU).

After the end of your business relationship with us, we will continue to store your personal data with your consent in order to provide you with offers for services. Without your consent, your application data will be deleted after expiry of the statutory retention obligations - usually 6 months after the end of your business relationship with us.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

If the data processing is carried out to implement pre-contractual measures that are taken at your request or, if you are already our customer, to implement the contract, the legal basis for this data processing is the fulfillment of the contract. We only process other personal data if you consent to this or if we have a legitimate interest in processing your data. A legitimate interest lies, for example, in responding to your e-mail or other request.

Newsletter

If you would like to receive the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. Your data will be processed and the newsletter sent on the basis of your consent.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Favorites list

You can add job offers on our website to your personal favorites list and also remove them from this list. If you assign a favorite to the favorites list, a cookie is set on your end device, which remains stored there until you empty the favorites list or delete the cookie via your browser settings. We use this cookie, which is required to provide this functionality, on the basis of our legitimate interest.

We can send you the favorites list by e-mail if you provide us with your e-mail address for this purpose. Your e-mail address will then be stored on our servers together with your favorites list. We use this data exclusively for sending and for any follow-up with you in connection with this favorites list. This data will not be passed on to third parties. Processing takes place on the basis of your consent.

Transfer of personal data to third parties and third countries

We transfer personal data to the recipients listed in the sections above. These include European subsidiaries of US companies (Google, Adobe, Meta, LinkedIn) and companies based in the USA (RecruitCRM). Personal data is transferred to the USA, a third country without an adequate level of data protection, and possibly other third countries without an adequate level of data protection. We ensure an adequate level of protection with appropriate contracts (in particular based on the standard contractual clauses of the European Commission) and suitable technical and organizational measures.

We exchange personal data for processing within Onyx Circle AG (Switzerland) and Onyx Circle GmbH (Germany).

If and insofar as we outsource certain parts of our data processing (e.g. hosting, IT support), we contractually oblige the contractor(s) to use personal data only in accordance with the requirements of the applicable data protection law and to guarantee the protection of the rights of the data subject.

In addition, we only transfer your personal data if and insofar as we are legally obliged to do so.

Storage and deletion of your personal data

We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes require it or storage is technically necessary. Further information on the respective storage and processing periods can be found in the sections listed above and for cookies in theto the cookie settings. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the storage or processing period has expired as part of our normal processes.

Data security

To secure your data, we maintain technical and organizational security measures that we continually adapt to the state of the art. We contractually oblige our contractors to implement technical and organizational measures to maintain the specified level of security.

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Rights of the data subject

You have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing, as well as to the disclosure of certain personal data for the purpose of transfer to another body (so-called data portability) within the framework of the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR).

Consent that has been given can be revoked at any time, but this has no effect on data processing that has already taken place.

The exercise of such rights generally requires that you clearly prove your identity (e.g. by means of a copy of your identity card, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in section 1.

Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority.The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Changes

We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply. If the privacy policy is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

Last update: 30.01.2024