Privacy Policy

Information regarding processing of your personal data 

General Privacy Statement
​​​​​​​F. Hoffmann-La Roche Ltd and Roche’s affiliates around the world (“Roche”) are committed to protecting your personal data. This Privacy Notice outlines the types of personal data Roche may collect; the means by which Roche may collect, use, or share your personal data; steps Roche takes to protect your personal data; and choices you are provided with respect to the use of your personal data. 

Roche is using an internet based Application Tracking and a Candidate Relationship Management system. Roche is using the system globally to post jobs, proactively search for talent, manage the application and recruiting process and potentially send out marketing campaigns related to working at Roche.
Identity and contact details of the data controller
F. Hoffmann-La Roche Ltd, Grenzacherstrasse 124, CH-4070 Basel, Switzerland, email: global.privacy@roche.com (“Roche”) is the data controller. 

In the event that your personal data is covered by the Swiss Federal Act on Data Protection (FADP): F. Hoffmann-La Roche Ltd, Grenzacherstrasse 124, CH-4070 Basel, Switzerland, email: global.privacy@roche.com. 

In the event that your personal data is covered by the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”): EU representative of F. Hoffmann-La Roche Ltd is Roche Privacy GmbH, Emil-Barell-Str. 1, D-79639 Grenzach-Wyhlen, eu.representative.privacy@roche.com.

In the event that your data is covered by the UK GDPR: the UK representative is Roche Products Limited, 6 Falcon Way, Shire Park, Welwyn Garden City, Hertfordshire AL7 1TW, United Kingdom. 

For United States (“US”) residents, the US Supplemental Privacy Notice provides the appropriate channels for contacting Roche with questions, requests, and inquiries in the scope of US state privacy laws.

In the event that your personal data is covered by the China Personal Information Protection Law (PIPL): Shanghai Roche Pharmaceuticals Co., Ltd., No. 1100 Longdong Avenue, Pudong District, Shanghai, email: cn.privacy@roche.com.

Purposes and legal basis for processing
You can apply to a job vacancy or express your interest in Roche by joining our Talent Community or creating Job Alerts.  We will store your personal data in our system and the data provided will be used in the selection process and/or to communicate with you.  Our Talent Acquisition/Strategic Partners  may contact you about other jobs during the time your data is stored. The legal basis for the processing of your personal data is your consent.

In addition by visiting our career site and accepting the personalization cookies, our candidate relationship management system stores some data about you.  This is used to personalize your experience on our careers site.  

For more information regarding our Cookie Settings click on the Career Site Cookie Settings at the bottom of this page.
Categories of personal data processed
Your name, your address, your contact details, work experiences, skills and other information you share with us in the application process or when joining the Talent Community.

Recipients of personal data
Recipients of your data may be Roche’s affiliates around the world including in countries with privacy standards different from those in your country. Our Roche affiliates will use your personal data to provide you with the best potential opportunities. A list of Roche’s affiliates is available in the Our Business section of www.roche.com. 
​​​​​
The personal data that we collect and process may be transferred to and stored in geographic regions in which data protection regulations differ from those in your own country. All such data transfers will be made in compliance with applicable law.  For the transfer of personal data, we rely on the adequacy decision or we ensure the personal data is protected through appropriate contracts, in particular, the so-called standard contractual clauses of June 4, 2021 (EU 2021/914) of the European Commission, the United Kingdom supervisory authority and the Swiss supervisory authority.

The data processor for the web based Recruiting System is Workday, Inc. Roche has established with Workday, Inc. the contracts containing the EU Standard Contractual Clauses (SCCs). In case a background check or an assessment center is part of the recruiting process, your data will be shared with the respective vendor in your country. In any such cases the vendor is either located in the EU/EEA, in a country with adequate data protection standards according to a decision of the EU Commission, or covered by contracts containing the EU Standard Contractual Clauses.

In addition to Workday Inc., Roche is also using Phenom People as a data processor for purposes of career site hosting. Phenom People is managing the career site content and the candidate management and engagement system.  The contract between Roche and Phenom People contains the EU Standard Contractual Clauses (SCCs).
Storage period
We store your Personal Data not more than three years after the end of the year your application process was completed except for applications in 
  • the Netherlands and Slovenia where the data is stored for one month,
  • Denmark and the United Kingdom where the data is stored for six months,
  • Austria where the data is stored for seven months,
  • Czech Republic, Ireland and Slovakia where the data is stored for one year,
  • Hong Kong, Finland and France where data is stored for two years
  • Portugal where data is stored for five years.
Information about your rights
In accordance with GDPR and UK GDPR, please note that you have the right to request from Roche access to and rectification of your personal data as well as the right to data portability, if applicable, or erasure or restriction of processing of your personal data. Erasure or restriction of processing is only possible if and to the extent the processing of personal data is based on consent or legitimate interest. If data processing is based on consent, kindly note that you have the right to withdraw your consent at any time, however, without affecting the lawfulness of processing based on consent before its withdrawal. 

In accordance with the Swiss Federal Act on Data Protection, please note that you have the right to request from Roche access to your personal data, a copy of your personal data, to rectify your personal data or to have Roche register a note dispute. Additionally, you have the right to erasure or anonymisation of your personal data if it is no longer needed for the purpose for which you provided it, and the right to restrict the processing of your personal data to specific purposes if erasure is not possible. If the processing of your personal data is based on your consent kindly note that you have the right to withdraw consent at any time. However, the withdrawal is only valid for the future and we reserve the right to continue to process personal data in the event of a withdrawal, based on a different basis. 

In accordance with the Chinese PIPL you have the right to know what personal data Roche collects about you, the right to request from Roche access to and rectification of your personal data as well as the right to data portability, if applicable, or erasure or restriction of processing of your personal data. In case of consent, you also have the right to withdraw your consent at any time, however, without affecting the lawfulness of processing based on consent before its withdrawal.

For sending us a note to exercise your privacy rights, including withdrawal of consent, please see contact details in the section “Identity and contact details of the data controller” above.

In the event you have the impression that our data processing is non-compliant with applicable privacy laws: You are entitled to lodge a complaint with the responsible supervisory authority.

To avoid that your data is entered in the systems again after your request for erasure, in your interest and for us to comply with applicable privacy laws we may keep your name and e-mail address with a flag “Don’t contact anymore” in our systems. 
Right to withdraw consent
Your consent is voluntary and may be withdrawn at any time by sending a note to above contact details. Any withdrawal of your consent does not affect the lawfulness of the processing of your Personal Data prior to such revocation.