Privacy policy
At Plenio, we place great importance on the protection of your personal data. This privacy policy explains what data we collect, how we use it, and what rights you have under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG). However, whether and to what extent these laws apply depends on the individual case.
If you have any questions, please contact us at support@plenio.com
1. What data we collect and process
We primarily process personal data that we receive from our registered users as part of our services or that we collect during the operation of our platform. This includes in particular:
- Name and email address
- Resume or application documents (if uploaded or submitted, or consented to submission via LinkedIn)
- Feedback you provide while using the platform
- Technical and usage data (e.g., IP address, browser type) when visiting our website
We also use third-party services (e.g., Google Analytics, Gleap, Customer.io) to analyze traffic and user interactions on our landing page (see section 10). These services may collect technical data according to their own privacy policies.
2. How and why we use your data
- To provide access to our services and platform features
- To communicate with you and provide customer support
- To process your application (if applicable)
- To improve and develop the platform through analysis and feedback
- To optimize your overall experience with Plenio
Recruitment purposes: By submitting your resume or an application via Plenio, you consent to the collection, processing, and sharing of your personal data for recruitment-related purposes. Your data may be shared with trusted third parties such as recruiters or partners in the EEA, UK, Switzerland, or other data protection-compliant jurisdictions. Sharing is solely for recruitment. These partners act independently and are responsible for handling the data. Upon request, we will provide their contact details so you can exercise your rights. Your data will not be sold or shared for advertising or commercial purposes.
- Advertising and marketing
- Ensuring the operation of our business, especially IT and our platform
3. Legal basis for processing
- Consent – for voluntary data submission (e.g., resume, feedback; consent can be withdrawn at any time, without affecting prior processing)
- Contract performance – when processing is necessary for contract performance or to prepare a contract
- Legal obligation – to meet legal requirements (e.g., tax, labor law)
- Legitimate interest – to improve our services, analyze or ensure security, provided your rights do not override these interests
4. Data retention and deletion
Personal data is stored only as long as necessary for the stated purposes, including legal, regulatory, and operational requirements.
If you delete your account, all associated data will be permanently deleted within 30 days, unless legal retention obligations prevent this.
You can request access, correction, or deletion of your data via support@plenio.com.
If your data was shared with third parties as part of the application process, we will provide their contact details upon request.
5. Your rights (GDPR / Switzerland)
- Right of access
- Right to rectification of incorrect data
- Right to erasure (“right to be forgotten”)
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw your consent
- Right to lodge a complaint with a data protection authority
Supervisory authorities:
- Switzerland: FDPIC – https://www.edoeb.admin.ch/edoeb/en/home.html
- EEA: https://edpb.europa.eu/about-edpb/board/members_en
6. Data security
We implement technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration, such as:
- Secure servers in Switzerland and the EU
- Data encryption during transmission (HTTPS/SSL)
- Access controls and authentication measures
- Regular system monitoring and vulnerability scans
Despite all measures, complete security cannot be guaranteed. Use is at your own risk. In the event of a data breach that may pose a risk to your rights, affected users and supervisory authorities will be notified in accordance with applicable laws, if required.
7. Profiling and automated decision-making
We partially process your personal data automatically to evaluate certain personal aspects (profiling), especially to provide you with targeted information and advice about products. We use evaluation tools for tailored communication and advertising, including market and opinion research.
Generally, we do not use fully automated decision-making (as regulated by Art. 22 GDPR) to establish or conduct the business relationship. If we use such procedures in individual cases, we will inform you separately if legally required and explain your rights.
8. Children's privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect data from minors.
9. Data sharing and international data transfers
We may share data with third parties in the course of our business activities and for the purposes described above, where allowed and deemed appropriate, either because they process the data for us or use it for their own purposes. This includes:
- Our service providers, such as IT providers
- Vendors, suppliers, subcontractors, and business partners
- Potential employers
- Domestic and foreign authorities, agencies, or courts
These recipients may be located in Switzerland or abroad. You should expect that your data may be transferred to countries in the EEA where our service providers and potential employers are located.
Our servers are located in Switzerland and the EU.
If a recipient is located in a country without adequate data protection laws, we contractually require them to comply with applicable data protection standards (using the EU Commission's revised Standard Contractual Clauses, available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), unless they are already subject to a recognized framework ensuring data protection, or we can rely on an exemption. An exemption may apply in legal proceedings abroad, in cases of overriding public interest, if required for contract performance, if you have consented, or if the data is publicly available and not objected to.
10. Cookies
We use "cookies" and similar technologies on our website to identify your browser or device. A cookie is a small file sent to or automatically stored on your computer or mobile device by your browser when you visit our website. When you return, we can recognize you, even if we don’t know who you are.
We use session cookies (deleted after your visit) and permanent cookies (store preferences and other info, e.g., for two years). You can configure your browser to reject or delete cookies. Most browsers accept cookies by default.
We use permanent cookies to store user settings (e.g., language, auto-login), understand how our services are used, and show tailored offers and ads (also on other websites, which won’t know who you are from us). Some cookies are set by us, others by partners we work with. Blocking cookies may disable some functions (like language selection).
Our newsletters and marketing emails may include visible or invisible images that let us know if and when you opened the email. This helps us understand usage and tailor content. You can block this in your email settings.
We may ask for your consent before using these technologies, depending on the purpose. You can manage your settings via the website.
We sometimes use Google Analytics or similar tools. This service, typically by Google Ireland (and Google LLC in the US), helps us measure website use (non-personally). It uses permanent cookies. We configure it to anonymize IPs in Europe before sending them to the US and disable “data sharing” and “signals.” We assume Google does not receive personal data, but it may link usage data to your Google account if you’re logged in. Google's processing is subject to its own privacy policy. We only receive usage stats from Google, not personal information.
11. Contact information
We are the data controller for the processing described in this privacy policy. You can contact us regarding data protection or to exercise your rights:
support@plenio.com
Cubra AG, Weite Gasse 13, 5400 Baden, Switzerland
+41 43 508 66 49
12. Updates
This privacy policy may be updated to reflect legal or operational changes. The current version published on our website applies. We recommend checking it regularly.