Privacy Policy

This privacy policy explains how we process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR) of the European Union. Personal data refers to information that allows the identification of your person.

1. Data Controller

Responsible for Data Processing:
Airline Assistance Switzerland AG
Flughafen Kloten
CH-8058 Zurich-Airport
Email: zrh@aas.aero

Data Protection Officer:
Email: data-protection@aas.aero

2. Legal Basis

Switzerland (FADP):

Processing is based on the principles of legality, proportionality, and purpose limitation in accordance with Articles 6 to 8 FADP.

EU (GDPR):

Article 6(1)(a): Consent
Article 6(1)(b): Performance of a contract
Article 6(1)(c): Compliance with a legal obligation
Article 6(1)(f): Legitimate interest

3. Rights of the Data Subject

Your Rights under FADP (Switzerland):

Article 25 FADP: Right to information
Article 26 FADP: Right to access
Article 32 FADP: Right to rectification and deletion
Article 28 FADP: Right to data portability

Your Rights under GDPR (EU):

Article 15 GDPR: Right of access
Article 16 GDPR: Right to rectification
Article 17 GDPR: Right to erasure ("right to be forgotten")
Article 18 GDPR: Right to restriction of processing
Article 20 GDPR: Right to data portability
Article 21 GDPR: Right to object
Article 22 GDPR: Right not to be subject to automated decision-making

Right to Lodge a Complaint:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch.
EU: Supervisory authority in your respective EU member state.

4. Data Collection in the Application Process

Purpose of Data Processing

We process personal data in the context of your application to assess your suitability for a position, conduct the recruitment process, and potentially establish an employment relationship.

Processed Data

  • Contact information (name, address, phone number, email)

  • Application documents (cover letter, CV, references)

  • Notes from interviews

  • Correspondence with you

  • Publicly available information from professional networks (e.g., LinkedIn)

Legal Basis

  • GDPR:

Article 6(1)(b): Performance of a contract or pre-contractual measures
Article 6(1)(f): Legitimate interest in managing applications
Article 9(2)(b): Processing of special categories of data (e.g., health data), if required for employment law purposes

  • FADP: Processing is carried out based on purpose limitation and proportionality principles (Articles 6-8 FADP).

Recipients of Data

Your data will only be shared with those individuals directly involved in the recruitment process.

Data Retention

Unsuccessful Applications: Data will be stored for up to 6 months after the end of the application process to safeguard legal claims (Article 6(1)(f) GDPR).
Successful Applications: Data will be transferred to our personnel management system.

Inclusion in Talent Pool

With your explicit consent (Article 6(1)(a) GDPR), we may retain your application documents for up to two years for consideration for future positions. You may withdraw your consent at any time.

5. External Services and Third Parties

JOIN (HR Tool)

Provider: JOIN Solutions AG, Munich, Germany
Purpose: Managing and organizing applications
Legal Basis: Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(f) GDPR (legitimate interest)
Data Transfer: Processing occurs within the EU; data processing agreements are in place under Article 28 GDPR.

More information: JOIN Privacy Policy.

6. Use of Cookies and Analytics Tools

Cookies

We use cookies to ensure the functionality of our website. You can adjust your cookie settings at any time through our consent tool.

Legal Basis:

Necessary cookies: Article 6(1)(f) GDPR (legitimate interest)

Optional cookies: Article 6(1)(a) GDPR (consent)

7. Use of Plugins and Tools

Adobe Fonts

Purpose: Ensuring uniform font display
Legal Basis: Article 6(1)(f) GDPR (legitimate interest)
Data Transfer: USA, certified under the EU-US Data Privacy Framework (DPF)

YouTube

Purpose: Embedding videos
Legal Basis: Article 6(1)(a) GDPR (consent)
Data Transfer: USA, certified under the EU-US Data Privacy Framework (DPF)