Home / Privacy
Privacy Policy
As of: 30 April 2026
1. Responsible entity
Responsible for data processing on RecruitingFlow is GMS Consulting GmbH, Bern, Switzerland, info@gmsit.ch. The managing director is Edson Gomes dos Santos.
2. Scope
This policy applies to the entire platform at recruitingflow.ch and all subdomains, as well as to all emails we send in connection with the use of the platform.
3. What data we process
3.1 Candidates
When you register as a candidate, we process the following data: email address, first and last name, place of residence, professional background, language skills, desired working conditions (workload, type of employment, salary), uploaded documents (CV, references, diplomas), preferred language for email communication. This data remains visible to companies for as long as your profile is active and you have consented to visibility.
3.2 Companies and business contacts
When you register as a company, we process: company name, address, UID number, industry, website, contact persons with name and email, as well as payment methods (processed via Stripe; we do not store card data). For each requested candidate profile, we create an audit log entry with the request and decision date.
3.3 Job posting aggregation
We aggregate publicly published job postings from Swiss job portals and career pages. Personal data of advertisers (contact persons, telephone numbers, email addresses) is only displayed if it appears publicly in the posting, and only to internal recruiters for acquisition purposes.
4. Legal bases
Processing is carried out on the basis of the performance of the contract with you (use of the platform), your explicit consent (release of your profile to companies) and our legitimate interest (aggregation of public job postings).
5. How we share data
We do not pass on your personal data to companies without your active consent via one-click email confirmation. If you decline, your profile remains anonymous. If you consent, the company sees your name, contact and CV, and we charge a flat fee of CHF 49.90 per release.
6. Update and deletion cycle
If you do not confirm your profile for 90 days, we automatically deactivate it. Beforehand, you receive reminder emails on day 31, 46 and weekly from day 61. 180 days after deactivation, you receive a deletion warning with a 30-day deadline. On day 210, we irreversibly anonymise your personal data. Audit logs and reminder history are retained for legal reasons.
7. Third-party processors
| Service | Purpose | Location |
|---|---|---|
| Exoscale (Akenes SA) | Database and encrypted file storage; technical database operation by Aiven Ltd. (EU company) as a subprocessor of Exoscale | Switzerland (Geneva) |
| Mailpro | Transactional emails | Switzerland |
| Hostpoint AG | DNS and incoming email | Switzerland |
We have concluded data processing agreements (AVV/DPA) with all third-party service providers that process personal data on our behalf.
8. Your rights
You have the right to access, rectification, deletion, restriction and portability of your data. To exercise these rights, contact datenschutz@baseforjobs.ch. We respond within 30 days. In the event of violations, you can lodge a complaint with the competent supervisory authority (in Switzerland: EDÖB, in the EU: the respective national data protection authority).
9. Cookies
We use exclusively technically necessary cookies (login session, cookie consent status, preview gate status). We do not set any marketing or tracking cookies. Details under Cookie policy.
10. Security
All connections are TLS-encrypted. We do not store passwords in plain text (we use exclusively magic link login without a password). Database access is protected by rotating tokens, and accesses are logged.
11. Updates
We update this policy in the event of material changes and inform you by email, provided you have an active account.
12. Contact
Questions about data protection: datenschutz@baseforjobs.ch
GMS Consulting GmbH, Bern, Schweiz