Processing of (personal) data by the entity in charge of the online application process
Processing of (personal) data by the entity in charge of the online application process
Privacy Policy
Applicants and Internal Developments Audi Motorsport AG and Sauber Technologies AG (hereinafter collectively referred to as "Sauber Group")
General Information
The protection of your privacy and your personal data is very important to the Sauber Group. For this reason, the collection and processing of personal data by the Sauber Group is carried out in compliance with the statutory provisions (Federal Act on Data Protection (FADP)). This Privacy Policy, which relates solely to the data collected as part of the online application process, outlines how we handle your personal data collected as part of the application process.
Data Controller
Data controller within the meaning of data protection law is:
Audi Motorsport AG
Wildbachstrasse 9, 8340 Hinwil
privacy@ audif1.com
or
Sauber Technologies AG
Wildbachstrasse 9, 8340 Hinwil
privacy@ audif1.com
What personal data do we process?
Personal data is information relating to the personal or material circumstances of an identified or identifiable natural person. This includes information such as your name, address, phone number and date of birth, but also data about your specific career, etc. that can be linked to an identifiable person with a reasonable amount of effort. Information that is not directly associated with your actual identity is not personal data.
If you apply electronically, either by email or through our web form, we will collect and process the personal data you make available to us to manage the application process and perform pre-contractual activities.
In particular, the following data is collected and processed:
Basic Information (e.g. name, title, academic degree, gender, date and place of birth and nationality, private contact details (address, phone number, e-mail address), marital status, residence and work permits, copies of ID cards, photographs, language skills, relatives and their contact details);
Application data (e.g. application and CV, references, security clearance results (if applicable), interview information, certificates for special groups (e.g. vocational training, dual studies), test or assessment centre results);
Health data (e.g. occupational medical examinations, illnesses, medical aids, disabilities), if provided by you as part of your application;
Data protection notices (e.g. declarations of consent to the processing of personal data; notices of withdrawal of consent given by you; notices of objection to the processing of personal data; notices of the exercise of your rights of access, rectification, erasure, restriction and portability of data, including the information you provide to us when exercising your rights);
Tax-relevant information about religious affiliation, which may indicate religious and ideological beliefs, if provided by you as part of your application;
Information about your marital status (marriage or civil partnership), which may indicate your sexual orientation, if provided by you as part of your application.
You can also upload informative documents such as a cover letter, CV and certificates. These may contain additional personal data.
Only authorised HR staff or staff involved in the application process have access to your personal data.
For what purposes do we use your data?
We process your personal data for the assessment of your application and potential negotiation, preparation, conclusion and performance of an employment contract with you. In case no employment contract is concluded, but you provide us with your consent to retain your application for further job vacancies, we may do so based on your consent. In the event of judicial or extrajudicial disputes with unsuccessful applicants, we will process personal data to protect our legitimate interests, which includes asserting, exercising or defending legal claims.
Additionally, we will use your contact details to send you a link to a survey aimed at improving our application process. Survey results will be maintained in complete anonymity.
Sanctions List Checks:
In addition, at the end of the application process, we may use your personal data to conduct an internal check against existing sanctions lists (e.g. financial sanctions and terrorist lists) prior to entering into an employment relationship.
Background Check:
When recruiting and appointing (internally) to the management circle, and when recruiting and appointing (internally) to the senior management circle (hereinafter "employee groups"), we conduct background checks to ensure the highest standards of compliance and integrity in our business activities and transactions. The aim is to ensure that potential appointees to responsible positions within the Sauber Group perform their duties without conflicts of interest and in accordance with high ethical standards, and that they are conscientiously committed to the company's principles in order to minimise legal risks and reputational damage.
The background check and its results are part of the decision to enter into or further develop an existing employment relationship. The Sauber Group only conducts background checks on a limited number of applicants shortly before the decision to offer employment is made.
Your data collected for this purpose will not be stored, processed or shared for further use.
Scope of Background Checks for Recruitment and Internal Appointments to the Management Circle and Internal Appointments to the Senior Management Circle:
The review of your personal data includes your basic information (name, date of birth, address), your qualifications or degrees, your professional experience and, in the case of an existing employment relationship, any breaches of legal and official regulations or any breaches of (Group) requirements, unless previously verified. In addition, we will also check your previous employment if you were employed by a VW group company within the last three years. For this purpose, personal data from the personnel file, the whistleblower system and the audit and security database will be queried. To identify potential conflicts of interest, you may be asked to disclose any relevant shareholdings, mandates or - if relevant to the role – inclusion on PEP lists (politically exposed person).
Scope of Background Checks for Recruitment to the Senior Management Circle:
Previous employers and other references may be contacted. To screen for security-related incidents such as criminal offences (e.g. recruitment fraud, white-collar crime, organised crime), breaches of competition or antitrust laws, breaches of other legal requirements or regulations, insolvencies and existing conflicts of interest, your basic information will be cross-checked against sanctions and other public lists and registers. This includes checking against terror and embargo lists, PEP lists (politically exposed persons), and analysis of national and international press and media. Internet research - including social media (limited to professional networks) - and publicly accessible proprietary databases may also be used in the screening process. The Sauber Group engages an external service provider to conduct these comprehensive checks for these employee groups.
The background check is conducted by the respective HR department, the (Group) Intelligence Office, the (Group) Security and the (Group) Internal Audit, and the service provider commissioned for this purpose.
Your basic information (name, date of birth, address) will therefore first be transmitted to the service provider. In connection with the background check, the service provider will create an information resource about you based on the aforementioned content, without making a final assessment of your person. No automated decisions are made based on this information. The information collected will be forwarded by the service provider to a central office of Sauber Group in Switzerland, whereby Audi Formula Racing GmbH, based in Germany, may also be granted limited access to the information.
For all background checks, only a select group of individuals - those involved in the process - have internal access to your data. This ensures compliance with the deletion period set out below.
How long do we keep your data?
The retention period of your personal data will depend on the outcome of the application process. If an employment relationship is established, we will process and store your personal data for the duration of the employment relationship, including the processing of the employment relationship. In this case, you will be informed separately about the further processing.
If we reject your application, the application documents will be deleted automatically no later than six months after you have been notified of the rejection decision. This is to preserve the burden of proof in any proceedings under the Gender Equality Act (GEA) or other legal disputes. In the event of a dispute, whether in or out of court, we will retain your personal data until a final and legally binding judgement has been reached.
Where we store your personal data on the basis of your consent in order to contact you in the event of new vacancies, we will retain your data for a maximum of 12 months or until you withdraw your consent.
We will then be required to delete or anonymise your data. In this case, the data will only be available to us as metadata without direct personal identifiers, used solely for statistical analysis (e.g., gender distribution in applications, number of applications per period).
Retention Periods for Background Checks:
For external applications, appointments, and contracts, basic background check details (date, type, and results—yes or no) will be recorded as personal records in the HR management system and retained according to the specified retention period for relevant HR documents and data (see above). For external applications that do not result in employment, basic data will be retained for three months. Full background check reports for candidates not hired will be deleted after three months, and after three years for all other cases.
Who has access to your data? Is data disclosed to third parties or abroad?
Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which is based in Germany and provides human resources and applicant management software (https://www.personio.com/legal-notice/). In this context, Personio is our data processor pursuant to Art. 5 lit. k of the FADP. The basis for the processing is a data processing agreement between us as the controller and Personio.
Additionally, your data may be made available to service providers conducting the background checks, our group companies, in particular Audi Formula Racing GmbH, based in Germany, competent authorities (including tax authorities and courts, in Switzerland and abroad, if we are legally obliged or entitled to such disclosure or if it appears necessary to protect our interests), legal and professional advisors (including accountants and auditors) and transaction partners and advisors.
Unless we expressly inform you otherwise, data processing takes place in Switzerland, the EEA/EU area and the UK.
Your rights
You have the right at any time:
Final provisions
We reserve the right to amend this Privacy Policy at any time to ensure that it always complies with current legal requirements or to reflect changes to the application process or similar. If you return to this recruitment site or submit a new application, the new privacy policy will apply.
Processing of (Personal) Data by the Operator of the Recruitment Website
General Information
This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 5 lit. j of the FADP is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 5 lit. k of the FADP. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.
Responsible body
The controller under data protection law is:
Personio SE & Co. KG
Seidlstrasse 3
80335 Munich
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com
Access logs ("server logs")
Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.
Error logs
So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.
Use of cookies
So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.
Rights of data subjects
If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under data protection legislation, depending on the legal basis and the purpose of the processing, in particular the right of access (Art. 25 FADP), the right of rectification (Art. 32 FADP), the right of erasure (Art. 32 FADP), the right of data portability (Art. 28 FADP) and the right to object to the processing (Art. 28 FADP). If the processing of personal data is based on your consent, you have the right to withdraw this consent under data protection law. To exercise your rights as a data subject with regard to the data processed for the operation of this recruitment website, please contact the data protection officer of Personio SE & Co KG (see section B.).
Final provisions
Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.
Privacy Policy
Applicants and Internal Developments Audi Motorsport AG and Sauber Technologies AG (hereinafter collectively referred to as "Sauber Group")
General Information
The protection of your privacy and your personal data is very important to the Sauber Group. For this reason, the collection and processing of personal data by the Sauber Group is carried out in compliance with the statutory provisions (Federal Act on Data Protection (FADP)). This Privacy Policy, which relates solely to the data collected as part of the online application process, outlines how we handle your personal data collected as part of the application process.
Data Controller
Data controller within the meaning of data protection law is:
Audi Motorsport AG
Wildbachstrasse 9, 8340 Hinwil
privacy@ audif1.com
or
Sauber Technologies AG
Wildbachstrasse 9, 8340 Hinwil
privacy@ audif1.com
What personal data do we process?
Personal data is information relating to the personal or material circumstances of an identified or identifiable natural person. This includes information such as your name, address, phone number and date of birth, but also data about your specific career, etc. that can be linked to an identifiable person with a reasonable amount of effort. Information that is not directly associated with your actual identity is not personal data.
If you apply electronically, either by email or through our web form, we will collect and process the personal data you make available to us to manage the application process and perform pre-contractual activities.
In particular, the following data is collected and processed:
Basic Information (e.g. name, title, academic degree, gender, date and place of birth and nationality, private contact details (address, phone number, e-mail address), marital status, residence and work permits, copies of ID cards, photographs, language skills, relatives and their contact details);
Application data (e.g. application and CV, references, security clearance results (if applicable), interview information, certificates for special groups (e.g. vocational training, dual studies), test or assessment centre results);
Health data (e.g. occupational medical examinations, illnesses, medical aids, disabilities), if provided by you as part of your application;
Data protection notices (e.g. declarations of consent to the processing of personal data; notices of withdrawal of consent given by you; notices of objection to the processing of personal data; notices of the exercise of your rights of access, rectification, erasure, restriction and portability of data, including the information you provide to us when exercising your rights);
Tax-relevant information about religious affiliation, which may indicate religious and ideological beliefs, if provided by you as part of your application;
Information about your marital status (marriage or civil partnership), which may indicate your sexual orientation, if provided by you as part of your application.
You can also upload informative documents such as a cover letter, CV and certificates. These may contain additional personal data.
Only authorised HR staff or staff involved in the application process have access to your personal data.
For what purposes do we use your data?
We process your personal data for the assessment of your application and potential negotiation, preparation, conclusion and performance of an employment contract with you. In case no employment contract is concluded, but you provide us with your consent to retain your application for further job vacancies, we may do so based on your consent. In the event of judicial or extrajudicial disputes with unsuccessful applicants, we will process personal data to protect our legitimate interests, which includes asserting, exercising or defending legal claims.
Additionally, we will use your contact details to send you a link to a survey aimed at improving our application process. Survey results will be maintained in complete anonymity.
Sanctions List Checks:
In addition, at the end of the application process, we may use your personal data to conduct an internal check against existing sanctions lists (e.g. financial sanctions and terrorist lists) prior to entering into an employment relationship.
Background Check:
When recruiting and appointing (internally) to the management circle, and when recruiting and appointing (internally) to the senior management circle (hereinafter "employee groups"), we conduct background checks to ensure the highest standards of compliance and integrity in our business activities and transactions. The aim is to ensure that potential appointees to responsible positions within the Sauber Group perform their duties without conflicts of interest and in accordance with high ethical standards, and that they are conscientiously committed to the company's principles in order to minimise legal risks and reputational damage.
The background check and its results are part of the decision to enter into or further develop an existing employment relationship. The Sauber Group only conducts background checks on a limited number of applicants shortly before the decision to offer employment is made.
Your data collected for this purpose will not be stored, processed or shared for further use.
Scope of Background Checks for Recruitment and Internal Appointments to the Management Circle and Internal Appointments to the Senior Management Circle:
The review of your personal data includes your basic information (name, date of birth, address), your qualifications or degrees, your professional experience and, in the case of an existing employment relationship, any breaches of legal and official regulations or any breaches of (Group) requirements, unless previously verified. In addition, we will also check your previous employment if you were employed by a VW group company within the last three years. For this purpose, personal data from the personnel file, the whistleblower system and the audit and security database will be queried. To identify potential conflicts of interest, you may be asked to disclose any relevant shareholdings, mandates or - if relevant to the role – inclusion on PEP lists (politically exposed person).
Scope of Background Checks for Recruitment to the Senior Management Circle:
Previous employers and other references may be contacted. To screen for security-related incidents such as criminal offences (e.g. recruitment fraud, white-collar crime, organised crime), breaches of competition or antitrust laws, breaches of other legal requirements or regulations, insolvencies and existing conflicts of interest, your basic information will be cross-checked against sanctions and other public lists and registers. This includes checking against terror and embargo lists, PEP lists (politically exposed persons), and analysis of national and international press and media. Internet research - including social media (limited to professional networks) - and publicly accessible proprietary databases may also be used in the screening process. The Sauber Group engages an external service provider to conduct these comprehensive checks for these employee groups.
The background check is conducted by the respective HR department, the (Group) Intelligence Office, the (Group) Security and the (Group) Internal Audit, and the service provider commissioned for this purpose.
Your basic information (name, date of birth, address) will therefore first be transmitted to the service provider. In connection with the background check, the service provider will create an information resource about you based on the aforementioned content, without making a final assessment of your person. No automated decisions are made based on this information. The information collected will be forwarded by the service provider to a central office of Sauber Group in Switzerland, whereby Audi Formula Racing GmbH, based in Germany, may also be granted limited access to the information.
For all background checks, only a select group of individuals - those involved in the process - have internal access to your data. This ensures compliance with the deletion period set out below.
How long do we keep your data?
The retention period of your personal data will depend on the outcome of the application process. If an employment relationship is established, we will process and store your personal data for the duration of the employment relationship, including the processing of the employment relationship. In this case, you will be informed separately about the further processing.
If we reject your application, the application documents will be deleted automatically no later than six months after you have been notified of the rejection decision. This is to preserve the burden of proof in any proceedings under the Gender Equality Act (GEA) or other legal disputes. In the event of a dispute, whether in or out of court, we will retain your personal data until a final and legally binding judgement has been reached.
Where we store your personal data on the basis of your consent in order to contact you in the event of new vacancies, we will retain your data for a maximum of 12 months or until you withdraw your consent.
We will then be required to delete or anonymise your data. In this case, the data will only be available to us as metadata without direct personal identifiers, used solely for statistical analysis (e.g., gender distribution in applications, number of applications per period).
Retention Periods for Background Checks:
For external applications, appointments, and contracts, basic background check details (date, type, and results—yes or no) will be recorded as personal records in the HR management system and retained according to the specified retention period for relevant HR documents and data (see above). For external applications that do not result in employment, basic data will be retained for three months. Full background check reports for candidates not hired will be deleted after three months, and after three years for all other cases.
Who has access to your data? Is data disclosed to third parties or abroad?
Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which is based in Germany and provides human resources and applicant management software (https://www.personio.com/legal-notice/). In this context, Personio is our data processor pursuant to Art. 5 lit. k of the FADP. The basis for the processing is a data processing agreement between us as the controller and Personio.
Additionally, your data may be made available to service providers conducting the background checks, our group companies, in particular Audi Formula Racing GmbH, based in Germany, competent authorities (including tax authorities and courts, in Switzerland and abroad, if we are legally obliged or entitled to such disclosure or if it appears necessary to protect our interests), legal and professional advisors (including accountants and auditors) and transaction partners and advisors.
Unless we expressly inform you otherwise, data processing takes place in Switzerland, the EEA/EU area and the UK.
Your rights
You have the right at any time:
- to request information about what data we process about you;
- to have incorrect or incomplete data corrected;
- to demand the deletion of your data, insofar as such deletion does not violate legal retention periods or insofar as we cannot assert any justified self-interest that opposes deletion;
- to withdraw your consent for processing operations based on such consent.
Final provisions
We reserve the right to amend this Privacy Policy at any time to ensure that it always complies with current legal requirements or to reflect changes to the application process or similar. If you return to this recruitment site or submit a new application, the new privacy policy will apply.
Processing of (Personal) Data by the Operator of the Recruitment Website
General Information
This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 5 lit. j of the FADP is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 5 lit. k of the FADP. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.
Responsible body
The controller under data protection law is:
Personio SE & Co. KG
Seidlstrasse 3
80335 Munich
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com
Access logs ("server logs")
Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.
Error logs
So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.
Use of cookies
So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.
Rights of data subjects
If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under data protection legislation, depending on the legal basis and the purpose of the processing, in particular the right of access (Art. 25 FADP), the right of rectification (Art. 32 FADP), the right of erasure (Art. 32 FADP), the right of data portability (Art. 28 FADP) and the right to object to the processing (Art. 28 FADP). If the processing of personal data is based on your consent, you have the right to withdraw this consent under data protection law. To exercise your rights as a data subject with regard to the data processed for the operation of this recruitment website, please contact the data protection officer of Personio SE & Co KG (see section B.).
Final provisions
Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.