How MyBikePlan AG handles your data
This notice explains what MyBikePlan AG collects when you apply for a role, why, how long it is kept and what you can ask for. It applies to every application you make to MyBikePlan AG through this site.
Who is responsible
MyBikePlan AG is the controller of your application data: it decides why and how your data is used. oryx (oryx.so) provides the hiring platform and processes your data only on MyBikePlan AG's instructions, as its processor.
What is collected
The application form asks for:
- First name
- Last name
- Phone
- Resume
If you take part in interviews, MyBikePlan AG also records interview notes and scores. Emails you exchange with the hiring team are kept with your application.
Why, and on what basis
To assess your application for the role you applied to, which is a step towards a possible employment contract, and to meet legal duties that apply to hiring. Where the law of the role's country allows it, MyBikePlan AG may also keep your application on file so it can get back in touch about future roles; the section below says how long, and where your explicit consent is needed for that.
How long it is kept
The period depends on the country of the role you applied to, not on where you live. Anonymised means your name, contact details, resume and answers are removed and only the stages reached, the dates and the scores remain, without anything that identifies you. Deleted means the whole record is removed.
- Other countries: your application is kept for up to 12 months from the date you last applied, then anonymised. About 30 days before that date you receive one email asking whether to keep your details on file for future roles; keeping them needs your explicit reply, and no reply means they are anonymised on the date.
Applying again restarts the period for every application you have with MyBikePlan AG. Silence is never treated as consent.
Who else processes it
MyBikePlan AG uses these providers to run the process. Each acts on instructions and under a contract:
- oryx (oryx.so): the hiring platform that runs this application process on the employer's behalf
- Supabase: database and file storage for applications and resumes
- Vercel: hosting of the application pages
- SendGrid (Twilio): sending and receiving email with candidates
- Daily: video calls for interviews, where used
The current list, with locations and safeguards for any transfer outside your country, is published at https://oryx.so/privacy-policy.
Your rights
You can ask MyBikePlan AG for a copy of your data, ask for it to be corrected, ask for it to be deleted (subject to any legal minimum retention named above), object to it being kept on file, and withdraw a consent you gave at any time. Where you are in the EU, the UK or another country with a data protection authority, you can also complain to that authority.
How to contact us
Write to the hiring team by replying to any email you receive from MyBikePlan AG, or through mybikeplan.ch.
