privacy policy

Welcome to Jörg Lienert AG

We are the operators of the website www.joerg-lienert.ch and have specialised since 1983 in finding qualified specialists and executives for SMEs and large corporations, organisations, NPOs and the public sector. We connect companies across sectors with the right leaders. A respectful and appreciative approach forms the basis of everything we do. We take responsibility and keep our promises, including in the area of data protection. We are the data controller/data processor within the meaning of the European General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), as well as the Ordinance to the Federal Act on Data Protection (VDSG).

What is this privacy policy about?

This privacy policy explains what data Jörg Lienert AG collects during your visit to this website and other digital tools, and how Jörg Lienert AG uses this data. It also sets out the rights you are entitled to in relation to your personal data.

Jörg Lienert AG treats your personal data with confidentiality and complies with the statutory data protection provisions, namely the Federal Act on Data Protection (FADP). The European Union (EU) recognises that Swiss data protection law ensures an adequate level of data protection. This means that we only process personal data where we are permitted to do so by law, or where you have given us your consent. The following explanations provide an overview of how we ensure this protection and what data we process for what purposes.

This privacy policy applies to the website www.joerg-lienert.ch and contractual agreements, as well as to all products and services provided by Jörg Lienert AG. It also applies to digital platforms created by us, such as the ‘Customer Portal’ or the candidate portal (as at 10/2025). Specific details on this can be found in this privacy policy and in the special terms of use for the ‘Customer Portal’.

The data protection officers at Jörg Lienert AG are:
Stephanie Briner, Head of the Lucerne Branch
Silvan Winkler, Head of Leadership Assessment

If you have any questions regarding the processing of personal data, or wish to make a request for information or erasure, or to inspect the processing logs for individual data sets, you may contact the data protection officers at Jörg Lienert AG at any time, either by post or by email to‘datenschutz@joerg-lienert.ch’, enclosing a copy of an official identity document.

General information on data protection

1. Description and scope of data processing

1.1 In principle, it is possible to use the Jörg Lienert AG website without providing any personal data.

1.2 However, should a data subject wish to make use of specific services offered by our company via our website, the processing of personal data may be necessary. In this case, we generally process users’ personal data only to the extent necessary to provide a fully functional website, along with its content and services.

1.3 Data processing during contract conclusion
We would like to inform you that the provision of personal data is in some cases required by law (e.g. tax regulations) or may also arise from contractual provisions (e.g. details of contractual partners).
In some cases, the conclusion of a contract may require a data subject to provide us with personal data, which we must subsequently process. Failure to provide such personal data would mean that the contract with the data subject could not be concluded.
Before personal data is provided, Jörg Lienert AG informs the data subject on a case-by-case basis, as set out in section 14 et seq. or in the ‘Terms of Use for the Customer Portal’, about how the data processing will occur.

2. The legal basis for processing
The processing of personal data is carried out in every respect in accordance with the DSG and the GDPR and on the basis of a valid legal basis, which is usually the user’s consent. An exception applies in cases where it is not possible, for practical reasons, to obtain consent in advance and where the processing is permitted by statutory provisions.

3. Purpose of data processing
Through this privacy policy, our company aims to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs data subjects of their rights.

4. Data security
Jörg Lienert AG, as the data controller, has implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via the website www.joerg-lienert.ch and other tools. Nevertheless, internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed.

Definitions under the DSG/GDPR

Our privacy policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance. In this privacy policy, we use the following terms, amongst others:

TermsStatement
ControllerThe operator of the website and the portals, in this case Jörg Lienert AG.
Data subject / UserA user of the website, the portals or their services; in this case, you.
Personal dataInformation that can be used to identify a person, i.e. details that can be traced back to a specific individual. This includes your name, email address or telephone number. Data relating to preferences, hobbies, memberships or which websites you have visited also constitutes personal data.
Data processingProcessing refers to any operation or set of operations performed on personal data, whether or not by automated means. This may include the collection, recording, organisation, structuring, data storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of provision, the matching or linking, the restriction, erasure or destruction of data.
Third partyA third party is a natural or legal person, public authority, enterprise or other position authorised to process personal data.
consentExpress consent is deemed to have been given if you have voluntarily registered on the platform and have expressly agreed (e.g. by ticking the relevant box) that your stored data may be processed using the relevant tools.
ProfilingProfiling is any form of automated processing of personal data which consists of using such personal data to perform evaluation of certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person.

Technical and organisational measures

5. Access control system
Jörg Lienert AG ensures, by means of an access control system, that only authorised persons are granted access to the premises, server rooms and workstations. Technical aids such as alarm systems, badges, access codes, locks or other electronic access controls are suitable for implementing this. This procedure also applies in our certified data centre in Switzerland.

6. Access control system
Computer systems should only be accessible to persons with the appropriate authorisation to use them. Measures implemented for this purpose:

  • Access to systems via HTTPS only
  • Encryption of data storage media and mobile devices
  • Secure firewall
  • Anti-virus software
  • Authentication via password entry and two-factor authentication
  • Password policies, including requirements for password complexity
  • Creation of user profiles

7. Access control system
Access permissions are granted in accordance with the same strict guidelines. In this context, users may only use data processing systems to the extent permitted by their respective configured access permissions. There are data protection-compliant password rules and an authorisation policy in place for this purpose. Administrators involved in the respective projects have access to the database. This data access control ensures that no one can process personal data beyond the scope of their authorisation. This means that no one can copy, read, modify or delete personal data without authorisation.

8. Availability and recoverability
Jörg Lienert AG ensures data integrity so that personal data is protected against destruction or loss, and so that it can be restored in the event of a failure (backup and recovery policy). All data is hosted in certified data centres and is backed up in a secure area. Data recovery tests are also carried out.

9. Employees
The employees of Jörg Lienert AG receive regular training on data protection and data security.
All our employees are bound by a duty of confidentiality in accordance with the provisions of the Swiss Code of Obligations relating to employment contracts and the staff regulations.

Lienert website www.joerg-lienert.ch

10. Purpose and scope of data processing on the website

10.1 The Jörg Lienert AG website collects a range of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the server’s log files. The following may be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (known as the referrer), (4) the sub-pages on our website accessed via an accessing system, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the internet service provider of the accessing system; and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.

10.2 When using this general data and information, Jörg Lienert AG does not draw any conclusions about the data subject. Rather, this information is required in order to (1) deliver the content of our website correctly, (2) optimise the content of our website and the advertising on it, (3) ensure the long-term functionality of our IT systems and the technology underpinning our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This data and information, collected anonymously, is therefore analysed by Jörg Lienert AG both for statistical purposes and with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.

11. Right to object and right to erasure
The collection of data for the purpose of providing the website and data storage in log files is absolutely essential for the operation of the website. Consequently, the user has no right to object.
Any data storage beyond this is carried out in an anonymised form, which means that no personal data is processed any longer and, consequently, there is no right to object.

12. Duration of data storage
Website-related data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected, provided that further data storage is not justified by overriding interests or legal obligations of the data controller. This is usually the case after 24 hours. Further data storage for the purposes of website optimisation and statistical analysis is possible. In this case, users’ IP addresses are deleted or anonymised so that it is no longer possible to identify the client from which the request originated.

13. Contact options via the website
The Jörg Lienert AG website contains information that enables users to send contact requests to our company quickly by electronic means and to communicate directly with us, including a general electronic mail address (email address). If a data subject contacts the data controller via email or a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data, provided voluntarily by a data subject to the data controller, is stored for the purposes of processing the enquiry or submitting a contact request to the data subject. This personal data is not disclosed to third parties.

application process

14. Applicant Management System & Assessments

14.1 General
If you apply for a advertised position via the contact form on the Jörg Lienert AG website, the data you provide (your surname and first name, your address, your telephone number and email address, links to your Xing and/or LinkedIn profile, your uploads), as well as your personal enquiry, will be stored and processed by us in Jörg Lienert AG’s applicant tracking system in order to answer your questions or deal with your enquiry.

Please note that, for data security reasons, application documents should not be sent via unencrypted email.

You can apply for a position advertised at www.joerg-lienert.ch by filling in the application form under ‘job openings’ for the relevant position (no login required) or by registering under ‘candidate portal’, entering your details and then applying for a vacancy using the information you have already provided.

If you send us an application by email or post, we will process your application in the same way as one received via the applicant portal. Your data will be processed in the applicant management system we use. We use your data throughout the entire recruitment process.

The data you provide must be accurate, complete and up to date, and must not be misleading. Otherwise, this may result in us not considering your application or, following hiring, taking appropriate legal action.

14.2 Application and assessment process
All data is stored for the purpose of processing the application procedure in relation to your potential employment. Where permitted, it will be analysed and processed for the purposes of communicating with you, verifying your qualifications and suitability (where applicable, via an assessment), conducting a potential interview, and assessing whether or not to enter into an employment relationship.

To this end, the stored data is processed in the applicant management system we use. In doing so, employees of JLAG and of the client for whom your application has been received will have access to your data. The documents you submit as part of assessments may be viewed by the client and by those involved in the diagnostic aspects of the assessment. The data and documents required for the assessment are also stored in our internal data repository.

By submitting an application or taking part in an assessment, you voluntarily authorise us to process your data; we will only request as much data as is necessary to process your application. If you refer to other platforms such as LinkedIn, Xing or others in the contact form or in your application dossier, this data will also be taken into account in the recruitment process.

Once your application has been successfully submitted, you will receive a confirmation email stating that your application has been received by the applicant management system.

14.3 References
If you provide us with references as part of the application process, we assume that you have obtained their consent to the data processing of their data by us. We will only contact these references with your consent, which we will obtain separately.

14.4 Deletion of data
If the application process does not result in hiring, we will delete the application documents you have submitted (CV, cover letter, certificates) no later than 6 months after notifying you of the conclusion of the application process, unless a statutory period requires us to retain them for longer or we are permitted to store your data to fulfil legal obligations or to defend against or assert legal claims. Our legitimate interest in such cases would, for example, be the burden of proof in discrimination proceedings.

The data collected during the assessment will be processed and stored for as long as is necessary for the purposes for which we received the data (in accordance with 14.7).

If you register on the candidate portal, we will store your data until you withdraw your consent, in order to offer you relevant job openings that match your professional qualifications.

14.5 Right to withdraw consent
You may withdraw any consent you have given at any time with future effect.

Once a valid objection has been made, we will no longer process your personal data and will delete it, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. Please note that in such cases we may no longer be able to provide services or maintain a business relationship.

14.6 Is the data, or access to my data, shared with third parties?
The data contained in your application documents submitted in response to a specific job advertisement will, following review, be made available to the client company via the client portal for inspection (see clause 16).

Data may be shared or accessed for the purposes of our applicant tracking system if external service providers, for example as part of an assessment, process the data on our behalf under a contractual relationship.

To ensure the technical implementation of our applicant tracking system, we have entered into a contractual relationship with a service provider. This allows the service provider to access the data.

All these third parties are equally obliged to comply with all data protection regulations. They process your data solely for the purpose of providing the job portal and delivering the associated services and functionalities. All external service providers are carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly monitored. They receive data only to the extent necessary to carry out the specifically agreed data processing tasks. Upon request, we will provide information about our other contracted service providers.

Otherwise, data will only be passed on or otherwise disclosed to uninvolved third parties if permitted or required by law, if necessary to fulfil legal obligations, or if we have your consent to do so.

14.7 How long will your data be stored and when will it be deleted?
In principle, your data will be processed and stored for as long as is necessary and permissible for the purposes for which we received the data. This means that we will retain your data for as long as we have a relationship with you following a contact request, or as an applicant or prospective employee; for as long as you have given us your consent for data storage; or there are (potential) obligations or obligations towards us, for as long as there is a statutory obligation to retain or document data, where a specific legal situation requires it – such as in relation to legal disputes, limitation periods or regulatory investigations – or for as long as was communicated to you at the time of data collection.

Once you have exercised your right to withdraw consent or object, once the stated purposes have been achieved, or once existing tax or commercial law, other statutory or contractual retention obligations and time limits have expired, we will delete your data, insofar as this is technically possible, or anonymise it, or, where permissible, restrict its processing, unless you have given consent to the further use of your data (candidate portal).

15. Candidate Portal
The candidate portal is a platform for job seekers who store their personal data in the system (search profile) or upload it (e.g. CV upload). You can register with the candidate portal independently (by logging in on the website), in connection with an application for a position advertised at www.joerg-lienert.ch, without reference to a specific position, or upon recommendation by employees at Jörg Lienert AG. Upon registration, the data you provide to us (CV, references, etc.) will be stored in our applicant tracking system. The information you enter in your search profile (including desired role, sector, salary, etc.) will also be stored.

To register on the candidate portal, you must provide an email address. You can decide for yourself how much detail to include in your profile. However, you must provide at least your first name, surname, address, telephone number, email address and date of birth. It is up to you whether you choose to include any further personal data in your profile (e.g. CV, references, etc.). You can amend your details or delete your registration at any time.

Your personal data is collected, processed and used in order to inform you of job vacancies and to introduce you to our clients as part of our personnel placement services, insofar as this is necessary for these purposes.

By registering on the candidate portal, you agree that the data you have entered in your profile may be used to introduce you to companies, following consultation with you.

16. Lienert Client Portal
The client portal is available as a platform for ‘managing and viewing application dossiers’. A login is created upon contract conclusion and the activation of the application.

As part of the registration process and the use of the customer portal, Jörg Lienert AG stores user data which the user provides themselves upon activation or by making changes to their profile.

Jörg Lienert AG processes the user’s personal data via the portal for the purpose of fulfilling the contract. Further details can be found in the specific terms of use for the ‘Customer Portal’.

Google Analytics and Cookies

17. Data Protection Provisions on the Use of Google Analytics

17.1 Description and scope of data processing
The website www.joerg-lienert.ch uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’, which are text files stored on your computer that enable an analysis of your use of the website.

Google Analytics collects and stores the following data:

  • The user’s IP address and the requesting internet service provider
  • Name of the web page accessed, file(s)
  • Browser type and version
  • The user’s operating system
  • Referrer URL (the previously visited page)
  • Number of page views
  • Bounce rate
  • Average time spent on the website

The information generated by the cookie regarding the user’s use of this website is usually transmitted to a Google server in the USA and stored there. However, the user’s IP address is truncated by Jörg Lienert AG before being transmitted to Google and is thus anonymised. The data transmitted can therefore no longer be traced back to the user. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The operator ensures, through a contractual agreement, that Google complies with the provisions of the applicable data protection legislation. The data transmitted by the user’s browser as part of Google Analytics is not merged with other data held by Google.

When visiting our website, the user is informed about the use of Google Analytics and their consent is obtained for the processing of the personal data used in this context. In this context, reference is also made to this privacy policy.

17.2 Legal basis for data processing
The legal basis for processing user data via Google Analytics is the user’s consent, where such consent has been given.

17.3 Purpose of data processing
On behalf of Jörg Lienert AG, Google will use this information to analyse the user’s use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. This enables Jörg Lienert AG to continuously improve its website and its user-friendliness.

17.4 Duration of data storage
The data will be deleted as soon as it is no longer required for our record-keeping purposes and provided that further data storage is not justified by overriding interests or legal obligations of the data controller. For this website, this is the case after 14 months.

17.5 Right to object and right to be heard
Like other cookies, the Google Analytics cookie is also stored on the user’s device. The user can therefore prevent data storage by adjusting the settings in their browser software accordingly. Furthermore, the user may prevent the collection of data generated by the cookie and relating to the use of the website (including the IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage...

18. Use of cookies

18.1 Description and scope of data processing
The Jörg Lienert AG website uses cookies. Cookies are small files that enable specific, device-related information to be stored on the user’s device (PC, smartphone, etc.) in order to identify the device when the website is visited again. On the one hand, they serve to enhance the user-friendliness of websites and thus benefit users (e.g. for data storage of login details). On the other hand, they are used to collect statistical data on website usage and to analyse this data with a view to improving the website.

When visiting our website, users are informed about the use of cookies for analytical purposes and their consent is sought for the processing of personal data used in this context. In this context, reference is also made to this privacy policy.

18.2 Legal bases for data processing
The legal basis for the processing of personal data using cookies for analytical purposes is the user’s consent.

18.3 Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of the website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page has been changed.

The user data collected by technically necessary cookies is not used to create user profiles.

Analytics cookies are used to improve the quality of the website and its content. These cookies enable the operator to understand how the website is used and thus to continuously optimise its offer.

Cookies are stored on the user’s device and transmitted to our site by that device. Users can therefore control the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, please note that the use of the website, and in particular the user experience, will be limited without cookies.

contact request

19. Contact request

19.1 Description and scope of data processing
When making a contact request for Jörg Lienert AG (for example, via the contact form or by email), all relevant user details are generally stored for the purpose of processing the enquiry and in the event that follow-up questions arise.

This includes, in particular, the following information:

  • The user’s surname and first name
  • Email address
  • Telephone number
  • Address

19.2 Legal basis for data processing
The legal basis for the processing of data is the user’s consent.

The legal basis for processing data transmitted when sending an email is the user’s consent. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is the performance of the contract.

19.3 Purpose of data processing
We process the personal data entered via the contact form solely for the purpose of handling your contact request. Where contact is made by email, this also constitutes the necessary legitimate interest in processing the data. Data storage for a certain period enables the operator to refer back to it in the event of follow-up enquiries.

Any other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

Furthermore, Jörg Lienert AG reserves the right to retain correspondence with the user, including the user’s personal data contained therein, for evidential purposes.

19.4 Duration of data storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected, provided that further data storage is not justified by overriding interests or legal obligations of the data controller. This is the case where it can be assumed, or is apparent from the circumstances, that the matter in question has been conclusively resolved and no further enquiries are to be expected.

Data stored for evidential purposes is generally deleted after 14 months. Here too, in exceptional cases, a legal obligation or an overriding interest may justify a longer storage period.

19.5 Right to object and right to erasure
The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by email or via the contact form, they may object to the data storage of their personal data at any time by email. In such a case, the conversation cannot be continued.

All personal data stored in the course of a contact request will be deleted in this instance.

Rights of the data subject / user

20. Right of access (Art. 8 DSG)
Every data subject has the right to request confirmation from Jörg Lienert AG as to whether their personal data is being processed. If this is the case, they have the right to request from Jörg Lienert AG, free of charge, information about the personal data stored concerning them, together with a copy of this data or access to it.

21. Right to rectification (Art. 5 DSG)
The data subject has the right to rectification and/or completion of their personal data with Jörg Lienert AG, provided that the personal data being processed concerning them is inaccurate or incomplete. Jörg Lienert AG shall carry out the rectification without delay.

22. Right to erasure (right to be forgotten) (Art. 15 DSG)
The user has the right to request that the personal data relating to them be erased. This is subject to clause 14.7 (Duration of data storage).

23. Right to restriction of processing (Art. 15 DSG)
The data subject has the right to request the restriction of the processing of personal data relating to them.

24. Right to data portability (Art. 4 et seq. DSG)
The data subject has the right to receive the personal data concerning them, which they have provided to Jörg Lienert AG, in a structured, commonly used and machine-readable format. Furthermore, they have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from Jörg Lienert AG.

25. Right to object (Art. 15 DSG)
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them; this also applies to profiling based on these provisions.

If the data subject objects to processing for the purposes of direct marketing, the personal data relating to them will no longer be processed for those purposes.

26. Right to withdraw consent under data protection law (Art. 15 DSG)
The data subject has the right to withdraw their consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.

27. Right to lodge a complaint with a supervisory authority (Art. 25 and Art. 37 of the Data Protection Act)
Without prejudice to any other administrative or judicial remedy, the user has the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data infringes the DSG or the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

28. Data Protection Officer
Any data subject may contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection, as well as regarding the exercise of their rights (see Introduction).

Cookie settings
Functional information stored as cookies or in local storage or session storage is essential for a website to function. They are used, for example, to save the shopping cart in an online store or to set the language of a website. Technically necessary information may be set without the user's consent and cannot be deactivated, as otherwise the website will no longer function properly. This information also stores user preferences such as "dark mode", ad sizes, language, etc.
Statistical information is used to analyze user behavior on a website. For this purpose, various data such as the pages visited, the time spent on a page or the clicks on certain elements are recorded. This data can then be used to improve the website, for example to make it more user-friendly or to better tailor content to users' interests.
This consent enables the storage of advertising-related cookies (web) or device identifiers (apps).
This consent enables the use of personalized ads from Google Ads and social media platforms such as Facebook, Instagram, LinkedIn, etc.
This consent allows user data to be sent to Google and social media platforms such as Facebook, Instagram, LinkedIn etc. for online advertising purposes.