Privacy
Privacy Policy
Data controller
Rima Hallaoui, trading as Rewalz, Alderwies 6, 8700 Küsnacht, Switzerland, is the controller for Rewalz’s own data processing. Each customer company remains the controller for personal data within its organisation; Rewalz processes that data on its behalf.
What data we process
Website visits involve technical access data such as IP address, browser details and time of access. Contact forms collect name, email, company, optional phone and message. On behalf of customer companies, the platform processes employee details, contracts, payroll, social security numbers, absences, working time, documents and applications including video recordings and consent records. This may include health information.
Purposes of processing
We process personal data to provide and secure the website, answer enquiries and administer customer contracts. On behalf of customer companies, we operate HR and recruiting functions, including employee records, time and absence management, payroll, video interviews and applicant communication.
Legal basis
Processing follows the revised Swiss Data Protection Act (revDSG), in force since 1 September 2023. Video recordings of candidates take place only after prior, explicit consent. That consent is recorded with the text version and the timestamp and can be withdrawn with effect for the future. Where Rewalz processes data on behalf of client companies, the company concerned remains the controller.
Retention and deletion
We retain personal data for as long as the relevant purpose or a legal obligation requires. Customer companies choose periods from one month to ten years for application documents and interview recordings; the talent pool has a separate setting. Deactivation is not final deletion. Return and deletion at the end of the contract, and retention of our own contract, accounting and backup records, are governed separately.
Rights of data subjects
Under the revFADP, you have in particular the right to access, rectify and delete your data, the right to have your data released or transferred and the right to withdraw consent you have given. To do so, please contact the address stated below. If your request concerns an ongoing application process, we will forward it to the responsible company where necessary.
Data security
The database and files are stored with Supabase in the Zurich region. We use Vercel for the application and Resend for email. These services may process personal data outside Switzerland, including in the USA. Swiss storage therefore does not mean exclusively Swiss processing.
Contact for privacy inquiries
For privacy enquiries, contact datenschutz@rewalz.com or use the contact form. For enquiries about a customer company’s data, please name the company so we can route your request.
Reach measurement
On the public pages we count visits with Vercel Analytics and measure loading speed with Vercel Speed Insights. Neither sets cookies, neither stores an IP address in plain text and neither recognises anyone again; what is collected is the page path, the referrer, an approximate region and the type of device, and it is only evaluated in aggregate. Vercel is also the provider that serves the website. Inside the signed-in area no measurement runs, so that neither paths from a personnel file nor an invitation link ever reach it.