Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in accordance with Swiss data protection law.
Introduction
Heads& ("we", "our", or "us") is committed to protecting your privacy in accordance with the Swiss Federal Act on Data Protection (FADP) and other applicable Swiss data protection laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services. We process your personal data in compliance with the FADP and respect your privacy rights.
By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our services.
Data Controller
The data controller responsible for the processing of your personal data is:
Heads&
Strasse + Nr
8000 Zürich, Switzerland
If you have any questions or concerns about the processing of your personal data, please contact us using the information provided in the Contact section below.
Information We Collect
In accordance with the principle of data minimization under Swiss law, we only collect personal data that is necessary for the purposes stated in this Privacy Policy. We may collect the following categories of personal data:
• Personal identification information (name, email address, phone number, job title, postal address)
• Professional information (company name, industry, career history, qualifications, references)
• Information you provide when contacting us, requesting our services, or applying for positions
• Sensitive personal data (only when necessary and with your explicit consent, such as information about health, political opinions, or trade union membership)
• Technical information automatically collected when you visit our website, such as your IP address, browser type, device information, and usage patterns through cookies and similar tracking technologies
We process personal data only to the extent necessary for the purposes for which it was collected, in accordance with the FADP.
Legal Basis for Processing
Under Swiss data protection law, we process your personal data based on the following legal grounds:
• Your consent (Art. 6 para. 1 FADP) - when you have given explicit consent for specific processing activities
• Performance of a contract (Art. 6 para. 2 let. a FADP) - when processing is necessary for the performance of a contract or to take steps prior to entering into a contract
• Compliance with legal obligations (Art. 6 para. 2 let. b FADP) - when processing is necessary to comply with legal obligations
• Legitimate interests (Art. 6 para. 2 let. f FADP) - when processing is necessary for our legitimate interests, provided that your interests or fundamental rights do not override those interests
We will only process sensitive personal data with your explicit consent or when permitted by law.
How We Use Your Information
We use the information we collect for the following purposes, in compliance with Swiss data protection law:
• To provide, maintain, and improve our executive search and board advisory services
• To communicate with you about our services, respond to your inquiries, and send you relevant updates
• To match candidates with opportunities and facilitate the recruitment and placement process
• To conduct background checks and verify qualifications (with your consent)
• To analyze and improve our website and services
• To comply with legal obligations under Swiss law and protect our legal rights
• To prevent fraud and ensure the security of our services
• To maintain business records as required by Swiss law
Information Sharing and Disclosure
We do not sell your personal information. In accordance with Swiss data protection law, we may share your information in the following circumstances:
• With your explicit consent
• With potential employers or clients as part of our executive search services (only with your explicit permission and in accordance with the purpose limitation principle)
• With service providers and processors who assist us in operating our website and conducting our business (we ensure they are bound by appropriate data protection obligations)
• When required by Swiss law or to respond to legal process from Swiss authorities
• To protect the rights, property, or safety of Heads&, our users, or others, in accordance with applicable law
• In connection with a business transfer, such as a merger or acquisition, subject to applicable legal requirements
Data Transfers Outside Switzerland
We primarily process and store your personal data in Switzerland. If we need to transfer your personal data to countries outside Switzerland, we will ensure that appropriate safeguards are in place in accordance with Swiss data protection law.
Transfers to countries with adequate data protection laws (as recognized by the Swiss Federal Council) may occur without additional safeguards. For transfers to countries without adequate protection, we implement appropriate safeguards such as:
• Standard contractual clauses approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC)
• Binding corporate rules
• Your explicit consent
We will inform you about any intended transfer of your personal data to a third country and ensure that appropriate safeguards are in place to protect your data.
Data Security
In accordance with Art. 7 FADP, we implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection
• Secure data storage and backup procedures
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, in accordance with the principle of data minimization. Retention periods may vary depending on the type of data and legal requirements. We will delete or anonymize your personal data once it is no longer needed, unless a longer retention period is required or permitted by Swiss law (e.g., for tax or accounting purposes).
Your Rights Under Swiss Data Protection Law
Under the Swiss Federal Act on Data Protection (FADP), you have the following rights regarding your personal data:
• Right of access (Art. 25 FADP) - You have the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of your personal data and information about the processing
• Right to rectification (Art. 32 FADP) - You have the right to request the correction of inaccurate or incomplete personal data
• Right to erasure (Art. 32 FADP) - You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent
• Right to object (Art. 32 FADP) - You have the right to object to the processing of your personal data in certain circumstances
• Right to data portability - You have the right to receive your personal data in a structured, commonly used format
• Right to withdraw consent - If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
• Right to lodge a complaint - You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) if you believe that the processing of your personal data violates Swiss data protection law
To exercise these rights, please contact us using the information provided in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with Swiss law.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.
We use cookies in accordance with Swiss data protection law. We only use cookies that are necessary for the functioning of the website or with your consent. You can manage your cookie preferences through your browser settings.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
For more information about the cookies we use, please refer to our Cookie Policy (if applicable).
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights under Swiss data protection law, or have concerns about our data practices, please contact us at:
Heads&
Strasse + Nr
8000 Zürich, Switzerland
Email: [contact email]
We will respond to your inquiry as soon as possible and in any event within 30 days, in accordance with Swiss data protection law.
Right to Lodge a Complaint
If you believe that the processing of your personal data violates Swiss data protection law, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC):
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern, Switzerland
Website: www.edoeb.admin.ch
Email: contact@edoeb.admin.ch
Phone: +41 58 462 43 95