Introduction
S1 solutions AG, Grosspeteranlage 29, 4052 Basel, Switzerland (hereinafter: „we“ or „Seymour“) is the controller within the meaning of the General Data Protection Regulation („GDPR“). Unless otherwise stated, we are responsible for the processing of personal data collected through the use of our website – www.seymourai.app We respect the privacy of users by processing and protecting the personal data provided to us in accordance with the applicable data protection laws. In this privacy policy, we explain what personal data we collect, use and for what purpose. We recommend that you read it carefully.
Controller according to the GDPR
S1 solutions AG, Grosspeteranlage 28, 4052 Basel, Switzerland E-mail address: info@s1solutions.ch
Purpose of data processing and legal basis
Visiting the website When you visit our website www.seymourai.app the browser you use automatically sends information to the servers of our website. This information is temporarily stored in a so-called log file. The following information is collected and stored until it is automatically deleted – IP address – Date and time of the request – Time zone difference to Greenwich Mean Time (GMT) – Content of the request (specific page) – Access status/HTTP status code – Amount of data transferred in each case – Website from which the request comes – Browser – Operating systems and their interface – Language and version of the browser software We process the aforementioned data to ensure a smooth connection setup and user-friendly use of the website, to ensure network and information security, to evaluate system security and stability and for administrative purposes. We also use cookies and tracking services on the website. You can find more detailed explanations in section 7 of this privacy policy.
Our service – Creating a CV In order to use our service, you must enter personal data on our website in the form of a step-by-step form. Once you have completed the first step and clicked through to the second step, we will save all the data you have entered. In the first step, we ask you for the following personal data: – first name and surname*; – email address*; – telephone number*; – address*; – profile picture; date and place of birth; – whether you have a driving licence; nationality; – gender; – marital status; – URL of your LinkedIn profile; – URL of other websites to be added. The personal data marked with an asterisk is required for the use of our services. You only provide the other information to complete your CV. In the next step of our service, you will be asked to provide the following information: – Education details, such as training, internships, courses, degree programmes and certificates (including period and institution); – Work experience details, such as position and employer; – Interests and extracurricular activities; – Skills and level; – Languages. After filling in the above information, the user can create a CV in step 3 and, if desired, take out a (immediately cancellable) Seymour subscription against (monthly) payment. With the help of this service, the user can view, download and edit the CV he has filled in and designed at any time. The user can use all other functions, such as creating an unlimited number of application letters, sending applications and searching for (suitable) jobs.
Contract fulfilment We process the following personal data to fulfil our contract with you: – first and last name; – address; – telephone and, if applicable, fax number; – telephone number; – information necessary for the assertion and defence of our rights.
Payment details In order to properly process payment for the above subscription, we utilise the services of third party providers, including (but not limited to) Adyen, PayPal, Stripe and Mollie. You provide your payment details directly to these parties and not to Seymour. This third party may share certain information about you (e.g. your bank details) so that we can verify that you have paid. We never receive or store credit card information. The service providers mentioned above are responsible for the data they process for user payments. If users have given Seymour permission to link their personal CV to relevant job offers from third parties via Seymour, we will send users emails with job offers that we have selected based on their personal CV.
Disclosure of personal data
We only pass on your personal data to third parties if: – you have given us your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, – the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, – in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and – this is legally permissible and necessary for the fulfilment of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. Insofar as this is necessary for the processing of business relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, your personal data will be passed on to third parties. This concerns the following processors: – payment providers, as described in section 3.4. ‘Payment details’; – IT service providers; – review platforms; – email service for sending emails; – research facilities and analytics software to improve our services and website, including Google Analytics; – ticket, live chat and customer service help platforms. The processors that we give access to your personal data may only use it to provide you with a service on behalf of Seymour. If you provide additional information to these processors yourself, we are not responsible for it. In cases of suspicion, we are obliged to pass on personal data to the competent authorities if they request such data. If we process personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. If there are no statutory authorisation requirements, we will only have data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met.
Principles for the processing of personal data
We process personal data in order to provide our service – the creation of a professional CV – in the best possible way. We only process personal data if we have a legal basis for doing so. We process personal data on the following grounds: – Conclusion of a contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. The data is processed in order to be able to identify you as a customer, for the contractual relationship, for correspondence with you, for invoicing and for processing or asserting any claims. The personal data collected by us for the fulfilment of the contract will be stored until the expiry of the statutory retention obligation and then deleted, unless we are obliged to store it for a longer period of time in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law retention and documentation obligations or you have consented to storage beyond this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. – Legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR :The legitimate interest follows from the aforementioned purposes for data collection. We do not use the data to draw conclusions about your person. – Consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR: We will ask users for consent if the processing of personal data does not fall under the aforementioned basis. Users can revoke their consent at any time for the future by clicking on the unsubscribe link at the end of each newsletter or by sending an email to support@mountainlift.cz As a result, we will no longer continue the data processing based on this consent in the future and will delete the data unless there is another legal basis or statutory retention obligations exist. – Consent pursuant to Art. 9 para. 2 lit. a GDPR with regard to personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership.
Retention periods
We only store the data entered by users after you have clicked through to step 2 of our service. If you have not subsequently subscribed, Seymour will store the data you have entered for up to one month after Seymour has sent you a second email asking if you would like to complete your CV and subscribe. If you do not respond or decline the request, your data will be deleted after one month. If you have taken out a subscription, we will retain the data you have provided until the purpose or legal basis for the storage no longer applies. In any case, one year after your last activity via our service, we will send you a message asking whether we should keep your data. If we do not receive a response from you, we will delete your data one month after the last email. We are obliged to retain administrative data such as invoices with your invoice, payment and order data in accordance with the statutory retention obligations.
Cookies
Cookies are small, simple text files that your computer or mobile device stores when you use our website. Because we want to guarantee your privacy and improve the user-friendliness of your visit(s) to our website, we believe it is important that you know why we use cookies. By setting cookies, you do not have to enter the same information over and over again and can, for example, finalise your CV at a later date. They also help us to understand how you use the website and how we can make the website more user-friendly. Cookies are also set (by third-party providers) for marketing or analytical purposes, and these third-party providers are the parties responsible for processing the data in question. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, a distinction is made between cookies:
– Technical cookies: These are strictly necessary to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes or remember which web pages you have visited; – Performance cookies: These collect information about how you use our website, which pages you visit and, for example performance cookies: These collect information about how you use our website, which pages you visit and, for example, whether errors occur when using the website; they do not collect any information that could identify you – all information collected is anonymous and is only used to improve our website and to find out what interests our users; – advertising cookies, targeting cookies: These are used to provide the website user with customised advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months; – sharing cookies: These are used to improve the interactivity of our website with other services (e.g. social networks). (e.g. social networks); sharing cookies are stored for a maximum of 13 months.
Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with the express and active consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we only pass on the user’s personal data processed by cookies to third parties if you have given your express consent to this in accordance with Art. 6 Para. 1 S.&1 lit.a GDPR.
Cookie settings and policy For more information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking, please see our Cookie Policy.
Security and protection of personal data
Seymour takes numerous measures to handle and secure your personal data with care. We have therefore implemented appropriate technical and organisational security measures to protect your personal data. We use SSL technology to encrypt the transmission of sensitive information or personal data to us, such as account passwords and other payment-related and other identifiable information. In addition, all sensitive information is stored in encrypted form. In addition, this information can only be viewed by employees whose work requires it.
User rights
Users have the right to – request information from the user about their data processed by us, in particular information about the processing purposes, the category of data, the categories of recipients to whom the user’s data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of the data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details (Art. 15 GDPR). request meaningful information about its details (Art. 15 GDPR). – Users have the right to view the personal data that we have collected from the user and (if there is a reason for this) to change it (Art. 16 GDPR). – Users have the right to object to the processing of their personal data (Art. 21 GDPR) if the processing is based on Art. 6 para. 1 sentence 1 lit. e or lit. f GDPR. This is particularly the case if the processing is not necessary for the fulfilment of a contract with the user. If it is not an objection to direct marketing, we ask you to explain the reasons why we should not process the data as we have done when exercising such an objection. In the event of a justified objection, we will examine the situation and either discontinue or adapt the data processing or demonstrate our compelling legitimate grounds on the basis of which we will continue the processing. – In certain cases, users may also ask us to restrict or adapt the processing of their personal data, to send the data, to transfer the processing to another controller or to stop processing their personal data (Art. 18 GDPR). This can be done by sending a request to support@mountainlift.cz Users will receive an overview of their personal data or a response to the request within one month of the request. However, this can take up to 60 days for complex requests. Personal data can also be deleted by clicking on the „Delete data“ button in the emails we send. – In addition, the user has the right to revoke the consent once given – i.e. the voluntary, informed and unambiguous declaration or other unambiguous confirmatory act that the user agrees to the processing of the personal data in question for one or more specific purposes – at any time, if the user has given such consent. As a result, we will no longer continue the data processing that was based on this consent in the future (Art. 7 para. 3 GDPR). – Right to lodge a complaint (Art. 77 GDPR): Users may lodge a complaint about the processing of personal data. A complaint can be submitted to the Swiss Data Protection Authority (FDPIC) by calling + 4158 462 43 95 or using the online form.