Careers

PRIVACY STATEMENT FOR RECRUITMENT ACTIVITIES

The Vifor Pharma Group takes your privacy rights seriously. Personal data collected in connection with our application and recruitment activities, including with the use of a web-based platform (the “Database”), will be treated as strictly confidential and will only be processed as set out in this privacy statement. We will comply with all the applicable data protection and employment laws.

(In this privacy statement, we refer to information relating to you as your "Personal Data" or your “data”.)

If you have any questions or concerns in relation to this privacy statement, please contact us by email or by post:

• Recruitment: careers.ch@viforpharma.com

• Group Data Protection Officer: GroupDPO@viforpharma.com

• Vifor Pharma Management Ltd.

  Attention: Recruitment

  Flughofstrasse 61

  P.O. Box

  CH-8152 Glattbrugg

  Switzerland

  (This is the “Controller” of the Personal Data)

• Vifor Pharma Deutschland GmbH

  Baierbrunner Strasse 29

  D-81379 Munich

  Germany

  dataprivacy_EEArep@viforpharma.com

  (This is our representative in the EU / EEA for data privacy purposes)

For candidates located in the United States, please refer to the Privacy Policy at https://www.relypsa.com/privacy-policy/. In case of questions, please reach out to: privacy@relypsa.com or recruiting@relypsa.com

I. What Personal Data do we collect and why?

We collect the following types of information in connection with our recruitment process:

1. CV and personal details:
   a) name, description of your work experience, professional skills, education and qualifications; b) contact information e.g. address, e-mail, and telephone number; c) nationality, residency status; d) accompanying documents such as your motivation letter and certificates; and e) any other information that you may have included in your CV or which you share with us during the application or recruitment process.
2. Interview notes:
   If you have had an interview with us, we may store a short assessment in the Database. Such assessment will only contain information that relates to the hiring process or your job profile.
3. Log files:
   If you access the Database, the server environment you used for that visit can be tracked by an internet protocol address. We store such internet protocol addresses (IP addresses) in their logfiles for data security reasons. We shall in no case use the information drawn from these log files to identify users of the Database except for the sole purpose of fighting potentially illegal server attacks which are directed against your Personal Data or against the functionality of the Database.

We use this information only for the purpose of supporting and managing our application and recruitment process, including without limitation to verify your identity, qualifications and suitability for the position you have applied for and, where permitted by applicable law, to perform background or employment checks.

The CV data may be used for anonymous statistics in an aggregated form. No individual user of the Database can be identified from this information. We may also use IP addresses for the purpose of general and anonymous statistics showing for example the number of visitors, page impressions or similar information. We will not create individual user profiles from such information.

If you provide to us information about someone you know as part of our “Refer a Friend” program, please ensure that that person agrees to your sharing of his/her information with us. You should also make that person aware of the information in this privacy statement.

Cookies and similar tracking software are used on the website through which you access the Database. Please refer to the Cookie Policy on the website for details.

II. With whom do we share your data?

Personal Data is stored in the Database provided by Avature GmbH, our data processor. The data is stored on servers, which are owned and maintained by the Avature group and which are located in the European Union. Insofar as we or Avature use the services of further third parties for the technical maintenance, administration or processing of data, we or Avature, as the case may be, forward your Personal Data to these parties to the extent required to ensure smooth and secure technical handling of your Personal Data in accordance with the EU General Data Protection Regulation 2016/679 of 27 April 2016 and Swiss data protection law.

Your Personal Data can be accessed by our HR department and hiring line managers of the Vifor Pharma Group companies worldwide. You can see the location of the companies of the Vifor Pharma Group at https://www.viforpharma.com/en/about-vifor-pharma/global-presence Your Personal Data may also be shared with service providers engaged by the Vifor Pharma Group to support the application and recruitment process, such as for background checks or to support the interview process. In addition, members of the team for which the position is being recruited may receive access to your CV.

We may disclose your Personal Data to third parties in connection with the sale or transfer of all or part of our business, in which case we would require the third parties to treat those data in accordance with this privacy statement.

Under exceptional circumstances we may also disclose your Personal Data to:

• official authorities if required by a court order or for an investigation or legal proceeding; or
• our legal and other expert advisors who are legally bound to keep the Personal Data confidential.

The above persons or entities accessing your Personal Data may be located outside the country where you live, including in countries that are not regarded by the competent authorities as providing an adequate level of protection for personal data. In such cases, we ensure that appropriate safeguards are in place to protect your Personal Data, such as EU standard contractual clauses. A copy of the EU standard contractual clauses may be obtained from our data protection officer (GroupDPO@viforpharma.com)

III. Legal basis for Personal Data processing

The legal basis for the collection and use of your Personal Data is our legitimate interest in operating an efficient and effective application and recruitment process.

IV. Data retention and viewing, editing, updating or deleting your data

If you wish to have your CV deleted from the Database, please contact our HR department (careers.ch@viforpharma.com) to request this.

You can access, edit, update or delete any other Personal Data that you have entered into the Database at any time by logging into the Database or asking our HR department to do this for you. You can also ask for the processing of your Personal Data to be restricted.

Your Personal Data will be retained in the Database until you delete it yourself, ask our HR department to do this for you, or exercise the option to delete it by clicking on the link in the automatically generated email which you will receive every six (6) months while your Personal Data is still in the Database. Please note that the only way to have your CV deleted from the Database is to request its deletion by contacting our HR department. While your Personal Data is in the Database, it can be accessed by personnel of the Vifor Pharma Group companies engaged in recruitment worldwide, who may contact you about suitable open positions. If you have any concerns about the use of your Personal Data you have the right to lodge a complaint with a data protection supervisory authority.

V. Data security

We and our data processors use a variety of methods such as firewalls, intrusion detection software and manual security procedures to secure your Personal Data against loss or damage and to help protect the accuracy and security of your Personal Data and to prevent unauthorized access or improper use. Please be aware that the transfer of your Personal Data via the internet into and out of the Database is only protected by SSL encryption if the key symbol on your button browser line is shown as locked and if the address starts with httpS://www----. Data transfer is then protected via the SSL (Secure Socket Layer) process in connection with a 128-bit encryption which prevents unauthorised third parties from reading your Personal Data. If this option is not active you might want to choose not to send certain data over the internet.

Please do not forward or disclose your user name and log-in details to any third party.

VI. Notification of changes

We may periodically update this privacy statement by posting updated versions on this page. If we make significant changes, we will display a prominent notice of the change on this website so that users are aware of the change. A revised privacy statement will apply only to your Personal Data collected after its effective date.

Effective Date: 9 November 2020