The Vifor Pharma Group takes your privacy rights seriously. Personal data collected in connection with our application and recruitment activities, including with the use of a web-based platform (the “Database”), will be treated as strictly confidential and will only be processed as set out in this privacy statement. We will comply with all the applicable data protection and employment laws.

(In this privacy statement, we refer to information relating to you as your "Personal Data" or your “data”.)

If you have any questions or concerns in relation to this privacy statement, please contact us by email or by post:

  • Recruitment:

  • Group Data Protection Officer:

  • Vifor Pharma Management Ltd.

    Attention: Recruitment

    Flughofstrasse 61

    P.O. Box

    CH-8152 Glattbrugg


    (This is the “Controller” of the Personal Data)

  • Vifor Pharma Deutschland GmbH

    Baierbrunner Strasse 29

    D-81379 Munich


    (This is our representative in the EU / EEA for data privacy purposes)

For candidates located in the United States, please refer to the Privacy Policy at In case of questions, please reach out to: or

I. What Personal Data do we collect and why?

We collect the following types of information in connection with our recruitment process:

  1. CV and personal details:
    a) name, description of your work experience, professional skills, education and qualifications; b) contact information e.g. address, e-mail, and telephone number; c) nationality, residency status; d) accompanying documents such as your motivation letter and certificates; and e) any other information that you may have included in your CV or which you share with us during the application or recruitment process.
  2. Interview notes:
    If you have had an interview with us, we may store a short assessment in the Database. Such assessment will only contain information that relates to the hiring process or your job profile.
  3. Log files:
    If you access the Database, the server environment you used for that visit can be tracked by an internet protocol address. We store such internet protocol addresses (IP addresses) in their logfiles for data security reasons. We shall in no case use the information drawn from these log files to identify users of the Database except for the sole purpose of fighting potentially illegal server attacks which are directed against your Personal Data or against the functionality of the Database.

We use this information only for the purpose of supporting and managing our application and recruitment process, including without limitation to verify your identity, qualifications and suitability for the position you have applied for and, where permitted by applicable law, to perform background or employment checks.

The CV data may be used for anonymous statistics in an aggregated form. No individual user of the Database can be identified from this information. We may also use IP addresses for the purpose of general and anonymous statistics showing for example the number of visitors, page impressions or similar information. We will not create individual user profiles from such information.

If you provide to us information about someone you know as part of our “Refer a Friend” program, please ensure that that person agrees to your sharing of his/her information with us. You should also make that person aware of the information in this privacy statement.

Cookies and similar tracking software are used on the website through which you access the Database. Please refer to the Cookie Policy on the website for details.

II. With whom do we share your data?

Personal Data is stored in the Database provided by Avature GmbH, our data processor. The data is stored on servers, which are owned and maintained by the Avature group and which are located in the European Union. Insofar as we or Avature use the services of further third parties for the technical maintenance, administration or processing of data, we or Avature, as the case may be, forward your Personal Data to these parties to the extent required to ensure smooth and secure technical handling of your Personal Data in accordance with the EU General Data Protection Regulation 2016/679 of 27 April 2016 and Swiss data protection law.

Your Personal Data can be accessed by our HR department and hiring line managers of the Vifor Pharma Group companies worldwide. You can see the location of the companies of the Vifor Pharma Group at Your Personal Data may also be shared with service providers engaged by the Vifor Pharma Group to support the application and recruitment process, such as for background checks or to support the interview process. In addition, members of the team for which the position is being recruited may receive access to your CV.

We may disclose your Personal Data to third parties in connection with the sale or transfer of all or part of our business, in which case we would require the third parties to treat those data in accordance with this privacy statement.

Under exceptional circumstances we may also disclose your Personal Data to:

  • official authorities if required by a court order or for an investigation or legal proceeding; or
  • our legal and other expert advisors who are legally bound to keep the Personal Data confidential.

The above persons or entities accessing your Personal Data may be located outside the country where you live, including in countries that are not regarded by the competent authorities as providing an adequate level of protection for personal data. In such cases, we ensure that appropriate safeguards are in place to protect your Personal Data, such as EU standard contractual clauses. A copy of the EU standard contractual clauses may be obtained from our data protection officer (

III. Legal basis for Personal Data processing

The legal basis for the collection and use of your Personal Data is our legitimate interest in operating an efficient and effective application and recruitment process.

IV. Data retention and viewing, editing, updating or deleting your data

If you wish to have your CV deleted from the Database, please contact our HR department ( to request this.

You can access, edit, update or delete any other Personal Data that you have entered into the Database at any time by logging into the Database or asking our HR department to do this for you. You can also ask for the processing of your Personal Data to be restricted.

Your Personal Data will be retained in the Database until you delete it yourself, ask our HR department to do this for you, or exercise the option to delete it by clicking on the link in the automatically generated email which you will receive every six (6) months while your Personal Data is still in the Database. Please note that the only way to have your CV deleted from the Database is to request its deletion by contacting our HR department. While your Personal Data is in the Database, it can be accessed by personnel of the Vifor Pharma Group companies engaged in recruitment worldwide, who may contact you about suitable open positions. If you have any concerns about the use of your Personal Data you have the right to lodge a complaint with a data protection supervisory authority.

V. Data security

We and our data processors use a variety of methods such as firewalls, intrusion detection software and manual security procedures to secure your Personal Data against loss or damage and to help protect the accuracy and security of your Personal Data and to prevent unauthorized access or improper use. Please be aware that the transfer of your Personal Data via the internet into and out of the Database is only protected by SSL encryption if the key symbol on your button browser line is shown as locked and if the address starts with httpS://www----. Data transfer is then protected via the SSL (Secure Socket Layer) process in connection with a 128-bit encryption which prevents unauthorised third parties from reading your Personal Data. If this option is not active you might want to choose not to send certain data over the internet.

Please do not forward or disclose your user name and log-in details to any third party.

VI. Notification of changes

We may periodically update this privacy statement by posting updated versions on this page. If we make significant changes, we will display a prominent notice of the change on this website so that users are aware of the change. A revised privacy statement will apply only to your Personal Data collected after its effective date.

Effective Date: 9 November 2020

Vifor Pharma Website Cookie Policy

Cookies are small text files that are placed on your computer or device when you access certain websites. They are widely used to make websites work more efficiently, and to provide information to the owners of the sites. Cookies enable the collection and storage of information such as your domain name, your internet service provider, your operating system, the date and time of access, the pages you visit or the types of searches performed. This helps with navigation between pages, makes the website work as expected, enables your settings to be saved during and between visits and may improve the speed of the website.

We use Google Analytics on this website. Google Analytics is a web analytics service provided by Google Inc. Google Analytics uses cookies and similar technologies to collect information about the use of the website, including the IP (internet protocol) addresses of website visitors’ computers or devices. That information is transmitted to Google and stored on servers controlled by Google or its wholly owned subsidiaries. Google uses the information to compile aggregated statistics about the use of the website, which we consult to help us to improve it. Google may transfer the information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Types of cookies used on this website

Name Purpose Expiry
ASP.NET_SessionId ASP.Net:
Session maintenance cookie: used to maintain session between client/end user application and the server.
Removed after browser closes
AWSELB AWS cassic load-balancer cookie: load-balancing cookie used to map a session onto a particular instance. Removed after session with server closes
incap_ses_* Incapsula DDoS Protectiona and Web Application Firewall:
Cookie for linking HTTP requests to a certain session (AKA visit). Re-opening the browser and accessing same site are registered as different visits. In order to maintain existing sessions (ie, session cookie)
Removed after browser closes
nlbi_* Incapsula DDoS Protectiona and Web Application Firewall:
Load-balancing cookie to ensure that requests by a client are sent to the same origin server.
Removed after browser closes
visid_incap_* Incapsula DDoS Protectiona and Web Application Firewall:
Cookie for linking certain sessions to a specific visitor (visitor representing a specific computer). In order to identify clients that have already visited Incapsula. The only cookie that is persistent for the duration of 12 months.
Persistent for 12 months
__utm* Incapsula Classification cookie:
To see how the client reacts to and handles a malformed cookie in order to identify what that client is.
Exists up to 900 seconds

By accessing and using this website, you agree to our use of cookies as described in this Cookie Policy.

How to control and deactivate cookies: most browsers are set so that they automatically accept cookies. You may however deactivate the storage of cookies by adjusting your browser settings to stop it from accepting cookies or to notify you as soon as cookies are set. You can visit, which contains information on how to deactivate cookies on a variety of browsers. If you choose to refuse cookies, you may not be able to use the full functionality of the website.