Purposes and processing of personal data — Carewell Work

This document describes, by category of data subject, the types of Personal Data Carewell processes when delivering the Carewell Work platform, together with the related purposes. It complements our privacy policy and our data protection charter.

1. Healthcare professionals (candidates and staff on assignment)

Identification and contact data

Last name, first name, postal address (street, postcode, city, country), date of birth, gender, marital status, number of children, nationality, communication language, e-mail, phone number, emergency contact (name and phone).

Administrative and tax data

AVS number, IBAN, bank name, withholding tax, residence permit, tax residency, type of employment contract.

Professional data

Profession, country of diploma, authorisation to practise in Switzerland, right to practise, professional GLN number, Red Cross recognition, Red Cross equivalence, skills, work experience, software and languages mastered, references (name, institution, number, e-mail, link).

Supporting documents

ID card, ID photo, work permit, driver’s licence, tax-residence certificate, CV, diplomas, work certificates, special criminal-record extracts (Switzerland and country of residence), Red Cross equivalence.

Availability, preferences and mission tracking

Availability, mission assignments, rating, maximum geographic distance, preferred contract type, schedule preferences, target work percentage, desired and undesired specialties, internal notes, blacklist status, history of e-mail exchanges.

Payment

Salary, IBAN, withholding-tax scale.

Connection and security data

Login credentials (username / hashed password), IP address, login history, browser type.

2. Client institutions

Institution data

Legal name, URL, physical address, billing address, opening hours and global configuration, payment IBAN.

Institution administrator accounts

Gender, last name, first name, e-mail, phone number, hashed password, login history, IP address.

Internal / external professional accounts at the institution

Gender, last name, first name, e-mail, phone number, hashed password, login history, IP address.

3. Purposes and legal basis

Purpose	Legal basis
Creation and management of accounts (professionals, institutions, employees)	Performance of contract
Matching and placement (matching, mission assignment, rating)	Performance of contract / legitimate interest
Verification of qualifications and authorisations to practise	Legal obligation / performance of contract
Temporary employment contracts, payroll and social declarations (AVS, LPP, withholding tax)	Legal obligation
Billing and collection	Performance of contract
Service communications (e-mail, SMS, support)	Performance of contract
Security and fraud prevention (logs, IP, anti-bot)	Legitimate interest
Audience measurement and Service improvement	Legitimate interest / consent
Marketing communications	Consent

4. Recipients of the data

To provide the Service, certain data is shared with sub-processors (hosting, payroll, accounting, e-signature, support, etc.) and with independent recipients subject to their own legal obligations (AVS fund, pension fund, banks, authorities, lawyers, accountants). The up-to-date list of sub-processors and hosting countries is published on the Sub-processors — Carewell Work page.

5. Retention period

In general, personal data is retained for a period proportionate to the purposes pursued by its processing and not exceeding what is necessary to achieve those purposes. At the end of the applicable retention periods, the data is archived and then deleted or anonymised in accordance with applicable legal obligations or overriding interests justifying extended retention.

The retention periods applicable to each category of data are set out in the privacy policy. As an indication, data related to the user account is retained for the entire duration of the contractual relationship, then archived in accordance with applicable legal and regulatory obligations, in particular in accounting, tax and evidentiary matters. Data relating to temporary employment contracts, payroll and accounting/tax obligations is retained for the periods imposed by Swiss law (notably 10 years for accounting documents).

6. Exercise your rights

For any question or request relating to your data, contact our Data Protection Officer.