Last updated: September 2026
This notice informs you, in accordance with Art. 19 of the Swiss Federal Act on Data Protection (FADP) and, where applicable, Art. 13 of the EU General Data Protection Regulation (GDPR), about the processing of your personal data when you apply for a position at SMBC Capital, whether in response to a vacancy or on your own initiative (for example by email).
1. Controller
SMBC Capital
Zugerstrasse 32, 6340 Baar, Switzerland
Email: info@smbccapital.com
2. What data do we process?
We process the personal data you provide to us as part of your application, in particular:
- master data (surname, first name and, where provided, date of birth and nationality),
- contact details (address, email address, telephone number),
- application documents (cover letter, CV, references, certificates and proof of qualifications),
- the content of our communication with you and, where applicable, interview notes.
Sensitive personal data (Art. 5(c) FADP) or special categories of personal data (Art. 9 GDPR), such as health data, are processed only if you provide them of your own accord or where a legal obligation exists. Please do not include such data in your application unless it is relevant.
3. Purposes and legal bases
We process your data to carry out the recruitment procedure, that is, to assess your suitability and to decide on the establishment of an employment relationship. Under Swiss law, this processing is based on Art. 328b of the Swiss Code of Obligations (processing of data concerning suitability for the employment relationship) in conjunction with Art. 31 FADP. Where the GDPR applies, the legal bases are:
- Art. 6(1)(b) GDPR (pre-contractual measures taken at your request),
- Art. 6(1)(f) GDPR (our legitimate interest in establishing, exercising or defending legal claims),
- Art. 6(1)(a) GDPR (your consent, for example for extended retention in our talent pool, see our Explicit Consent declaration).
4. Recipients of your data
Within our company, only the persons involved in the decision on your application (management and the relevant team members) have access to your data. In addition, IT and hosting service providers engaged by us may have technical access to the data; they process it only on our behalf and in accordance with our instructions (Art. 9 FADP, Art. 28 GDPR). We do not pass your data on to other third parties without your consent, unless we are legally required to do so.
5. Transfers abroad
Your application data is processed in Switzerland. Where service providers process data outside Switzerland and the EU/EEA in a country without an adequate level of data protection, we ensure appropriate safeguards in accordance with Art. 16 et seq. FADP and Art. 44 et seq. GDPR, in particular standard contractual clauses. You can request information on these safeguards using the contact details above.
6. Retention period
If you are hired, your application data will be transferred to your personnel file. Otherwise, we retain your data for up to six months after the conclusion of the recruitment procedure, in order to answer any questions and to defend possible legal claims (for example under the Swiss Gender Equality Act); after that it is deleted or destroyed. Longer retention (for example in our talent pool for future vacancies) takes place only with your explicit consent.
7. Your rights
- Right of access (Art. 25 FADP; Art. 15 GDPR)
- Right to rectification (Art. 32 FADP; Art. 16 GDPR)
- Right to erasure (Art. 32 FADP; Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 28 FADP; Art. 20 GDPR)
- Right to object to processing (Art. 30 and 32 FADP; Art. 21 GDPR)
- Right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise your rights, simply email info@smbccapital.com.
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland and, where the GDPR applies, with a data protection supervisory authority in the EU/EEA member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
8. Necessity of providing your data
Providing your data is necessary for carrying out the recruitment procedure. Without this data we cannot consider your application.
9. No automated decision-making
No automated individual decision-making, including profiling, within the meaning of Art. 21 FADP and Art. 22 GDPR takes place in the recruitment procedure.
10. Further information
General information on how we process personal data can be found in our Privacy Policy.