UEFA recruitment privacy notice

General information

Union des Associations Européennes de Football (UEFA) and its subsidiaries (together “UEFA Parties”, “us,” or “we”), acting as controllers under data protection law, are committed to respecting your privacy and protecting your personal data.

This UEFA Recruitment Privacy Notice (“Privacy Notice”) describes how we handle and protect your personal data in connection with UEFA Parties’ recruitment processes and programs. In case of a conflict between this Privacy Notice and applicable law, applicable law will govern.

This Privacy Notice only applies to the personal data of job applicants, potential candidates for employment or partnership, and those who participate in our recruiting programs.

If you have any questions on the processing of your data in the course of your application, you may reach out to our Data Privacy Team at privacy@uefa.ch.

By submitting an application via our recruitment portal, you express your interest in taking up work with us. In this context, you transmit personal data, which we will use and store exclusively for the purpose of executing the recruitment process and preparing contracts.

Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.

In particular, the following personal data is collected:

• Contact details. Your name (first and last names), e-mail address, phone number and postal code.
• CV and other information included in the application. We will process your CV, cover letter, work, samples, references, letters of recommendation and other information you provide us with in your application. These may contain additional personal data such as date of birth, gender, photo, nationality, address and your other statements made therein.
• Data from interviews, assessments and other reference information. This means notes from interviews with you, assessments or tests made, expectations, salary requirements and availability.
• Communications data. We will collect and store your communication with us, and any information provided to us in such communication.
• Special categories of personal data ("sensitive data"). If sensitive data is included by you in your communication with us or in your resume, we will process such information only to the extent necessary and justified in accordance with the consent you have provided us.

Only authorized HR staff and/or staff involved in the recruitment process have access to your data.

The personal data is stored, as a rule, exclusively for the purpose of filling the vacancy for which you have applied.

Article 31 (2) (a) of the Swiss Federal Act on Data Protection (FADP) provides the legal ground for processing personal data for the purpose of deciding on the establishment of an employment relationship (recruitment data).

We process your personal data for the following purposes and based on the following legal grounds:

• To administer incoming applications. Your personal data will be processed in order for us to administer and manage incoming applications. This processing is based on a balancing of interests, where our legitimate interest is being able to have a structured application- and selection process.
• For the recruitment and selection process. We will process your personal data during the recruitment process, including sourced recruitment, for the purpose of finding and determining whether you are a good fit for us, based on our legitimate interest in being able to recruit personnel with the relevant competence for us, and for the purpose of conducting a background check, where required, based on your consent.
• To communicate with you. Your contact details will be used to communicate with you. This processing is necessary for our legitimate interest in effective communication with you in connection with your application and/or the recruitment process.
• To protect our legitimate business interests and legal rights. We will save and store information if we believe it is necessary to protect and enforce our legal rights, interests and the interests of others, for example in connection with legal claims, discrimination claims, compliance, regulatory and audit functions. This processing is based on a balancing of interests, where one legitimate interest of ours is defending and enforcing legal claims.
• To be able to consider you and your application and contact you for future job openings. In our legitimate interest, and what we believe is yours as well, in being able to consider you and your application and to contact you with regard to other future job openings we keep your data for that purpose.
• With your consent. Your personal data may be used for other purposes than stated above if you ask us to or you give us your consent. Any sensitive data you have provided to us will be processed based on your consent.

Information you give to us. Most of the information we process about you is received from you. You may directly or indirectly give us information about yourself in different ways, for example when you contact us or through your application. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application.

Information we collect about you. We may also obtain your personal data from your current employer or the website of your employer and/or through third parties such as a recruitment service provider, commonly known as “sourced recruiting”. Furthermore, our employees can give us recommendation about a potential candidate. If this is applicable in your case, this privacy policy also applies to you.

Sometimes, we need to share your personal information with other trusted individuals and companies. Your personal information is shared with:

• Our consultants. Your personal data will, when appropriate, be shared with our trusted consultants. However, we will restrict access to those consultants who need it to perform their jobs, for example to provide recruiting services to us. Our consultants are of course subject to strict confidentiality.
• Our service providers. We transfer to or share your personal data with our service providers who help us in our daily operations which require the processing of personal data or suppliers of different types of digital solutions.
• Authorities and other public actors. Sometimes legal obligations may require us to share information about you, for example to respond to lawful requests from law enforcement agencies, regulatory agencies, and other public and government authorities. We may also disclose information if needed to detect and prevent fraud.
• Parties involved in legal proceedings. In connection with a potential legal proceeding, including in the preparatory work for us to be able to defend us against or enforce any legal claims, your personal data may have to be shared with parties involved in the proceedings, such as lawyers.
• Parties involved in a merger or acquisition. We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Other parties, if you request us to or permits us to.

Your personal information may in some cases be transferred to and stored at destinations outside the EU/EEA where the privacy laws may not be the same as, and in some cases may be less protective than, privacy laws in the EU/EEA. We will however take all the necessary steps to ensure that adequate safeguards (such as EU standard contractual clauses including supplementary safety measures or an adequacy decision by the Swiss Federal Council) are in place to protect your personal information and to make sure it is treated securely and in accordance with the FADP. Please contact us for more information about the safeguards in a specific case.

You can contact us for more information about any applicable countries and safeguards in specific cases.

We keep your personal data only as long as necessary to fulfil the purposes for which it was collected. How long depends on the type of information and why we process it. We regularly review our need to keep data, taking into account applicable legislation.

If you apply for a job, we generally keep the collected data during the recruitment process and if you become an employee, we will keep your personal data during your employment (for other purposes than those stated above, which you will be informed of). Article 31 (2) (a) of the FADP provides the legal basis for processing personal data for the purpose of carrying out the employment contract (employee data).

If we have found you through a recommendation, we keep your personal data for up to 12 months from the day your data is submitted or if we have found you through sourced recruiting, up to 12 months from the day your data was uploaded.

If you do not succeed in the recruitment process, we may keep your personal data for future job openings for up to 12 months from the day your application is submitted.

We furthermore save the personal data necessary for us to be able to defend ourselves against claims from you.

Personal data processed on the basis of your consent will be deleted when your consent is withdrawn or upon expiry of the purpose for which your consent was given.

Your data may also be stored for a longer period if required by applicable statutory retention periods.

After these periods, we are obligated to delete or anonymize your data. In case of anonymization, the data will only be available to us in the form of so-called metadata, without any direct personal reference, for statistical analysis (for example, share of male and/or female applicants, number of applications per specified period of time, etc.).

• Right to access your data. You have the right to request a transcript of personal data processed by us, and additional information on how the data have been collected, processed, shared, etc. The first transcript may be requested free of charge, however if you make repeated and unreasonable requests for copies, we might charge you with an administrative fee.
• Right to object. You have right to object to processing based on legitimate interest. This means that we may no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests. You can always contact us for more information on the balance test that has been made. You furthermore have an unconditional right to object to your personal data being processed for direct marketing purposes.
• Right to transfer your data. You have the right to transfer the personal data you have provided to us to another controller under certain conditions.
• Right to rectification. You have the right to correct inaccurate or incomplete information about yourself.
• Right to erasure ("right to be forgotten"). You have the right to request that we delete personal data about you, for example if the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, or if there is no legal basis for processing the data.
• Right to restriction. You are entitled to request that the processing of your personal data should be limited until inaccurate or incomplete information about you has been corrected, or until an objection from you have been handled.
• Right to withdraw your consent. You may at any time withdraw any consent you have given us. However, please note that it will not affect any processing that has already taken place.
• Right to complain. You have the right to lodge a complaint to our lead supervisory authority or the supervisory authority in the country you live or work in, if you believe that we have not complied with our obligations regarding your personal data. Please note that if you request restriction or erasure it might affect our ability to process your application or consider you for a job. Moreover, legal rights or obligations may prevent us from disclosing or transfer all or part of your information, or from immediately deleting your information.

You can assert these rights by clicking on the dedicated link provided in the confirmation email you received after submitting your application or by using this link. The service is provided by Jobylon AB, acting as processor under data protection law, on behalf of UEFA Parties.

Please note that if you request restriction or erasure, it might affect our ability to process your application or consider you for a job. Moreover, legal rights or obligations may prevent us from disclosing or transferring all or part of your information, or from immediately deleting your information.

Please contact us at privacy@uefa.ch if you need assistance.

We reserve the right to adjust this Privacy Notice at any point in time to ensure that it is always in line with the current legal requirements, or in order to accommodate changes in the application process or other processes. In this case, the new privacy notice applies to any later job application.