Privacy Policy
Vigilo is a platform for regulatory affairs, quality and clinical professionals across Europe. This Privacy Policy explains how we handle personal data when you visit vigilomedtech.com, create an account, subscribe to our communications, purchase a service or contact us.
1. Who is responsible for your data?
Thomas Cardot, operating under the Vigilo brand, is the controller responsible for the personal data described in this policy.
Postal address: Via Alle Cantine 1, 6862 Rancate, Ticino, Switzerland
Email: contact@vigilomedtech.com
Swiss data protection law applies to our activities. Where applicable, we also comply with the EU General Data Protection Regulation and UK data protection law.
2. Personal data we collect
The information we collect depends on how you use Vigilo.
Visitors
We process technical and usage information, including IP addresses, browser and device information, access times, referring pages and interactions with the website.
Optional analytics and tracking depend on your consent choices. Our Cookie Policy explains the technologies involved.
Candidates and account holders
We process the information you provide when creating or updating your account, including:
- Name, email address and account authentication information.
- Professional field, experience, skills and sector background.
- Country of residence and preferred work countries.
- Seniority, preferred contract types, workplace preferences and languages.
- Saved jobs, job-alert preferences and account settings.
- Registration dates and records of relevant choices and permissions.
You do not need an account to browse public job listings. Information required for a particular feature is identified when you provide it. Optional profile information helps us personalise your experience.
Vigilo does not offer CV uploads or collect application dossiers through its candidate profiles.
Newsletter subscribers
We process your email address, any profile information you choose to provide, subscription source, confirmation status, subscription preferences and unsubscribe records.
Email services also generate delivery information, such as delivery failures and spam complaints. Where enabled and permitted, email tracking records opens and link clicks. Opening measurements are approximate and may be affected by email privacy features.
Employers, advertisers and business contacts
We process names, professional contact details, company information, billing details, orders, subscription information, payment status and correspondence.
Information submitted for publication, such as company descriptions, logos and job advertisements, is displayed publicly. Please avoid including personal information that is unnecessary for publication.
Messages, forms and surveys
When you contact us or complete a form or survey, we process your responses and the information needed to handle your request. Any additional purpose is explained when the information is collected.
Please do not submit sensitive personal information, identity documents or confidential candidate records unless we have specifically agreed a secure and appropriate process with you.
3. Information obtained from other sources
We may obtain professional contact information and vacancy information from company websites, public career pages, professional networks such as LinkedIn, and job-data providers.
This may include a person’s name, job title, employer, business contact details or contact information included in a public vacancy.
We use this information to identify relevant opportunities, maintain listings and communicate about relevant business matters where permitted. Public availability does not mean information can be used without restriction.
We do not add people to our newsletter simply because their email address is publicly available.
4. Why we use personal data
Where the EU or UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Create and manage accounts, save jobs and provide requested alerts or recommendations | Performance of our agreement with you |
| Process purchases and deliver advertising services | Performance of a contract; legitimate interests in administering relationships where you act for a company |
| Send newsletters and promotional emails, including sponsored editions | Consent, except where a specific legal exception permits otherwise |
| Operate optional analytics and consent-based tracking | Consent |
| Answer enquiries and discuss services you request | Steps before entering a contract or legitimate interests in responding to enquiries |
| Maintain relevant public job listings and company information | Legitimate interests in operating a useful professional platform |
| Conduct permitted business outreach | Legitimate interests in developing relevant business relationships, subject to applicable marketing rules |
| Protect accounts, prevent abuse and maintain service security | Legitimate interests in protecting our users and services |
| Keep required business records and respond to lawful requests | Compliance with legal obligations |
| Establish, exercise or defend legal claims | Legitimate interests in protecting legal rights |
Where we rely on legitimate interests, we assess those interests against your rights and reasonable expectations.
Providing information necessary for an account, purchase or request is voluntary, but we may be unable to provide the relevant service without it.
5. Candidate privacy and job recommendations
Candidate profiles are not publicly searchable and are not made available to recruiters or advertisers. They are accessible to you and to authorised personnel and service providers where necessary to operate and support Vigilo.
We do not sell candidate profiles or provide employers with downloadable candidate databases.
Recommendations may use your professional information, preferences and interactions to identify relevant jobs. This personalisation may constitute profiling under applicable data protection law.
Vigilo does not use these recommendations to make hiring decisions, rank candidates for employers or make solely automated decisions that produce legal or similarly significant effects on you.
If we introduce recruiter access to profiles in the future, we will explain the change beforehand and obtain any permissions required. Existing profiles will not automatically become recruiter-visible.
6. Applications take place outside Vigilo
Job listings direct you to the employer’s or recruitment provider’s application channel.
That organisation is responsible for the application information you submit to it and processes it under its own privacy policy. Vigilo does not receive your CV, cover letter or application dossier through that external application process.
We may record a click on an application link for permitted measurement purposes. A click does not tell us whether you completed an application or were hired.
7. Newsletters, alerts and sponsored communications
Our newsletter includes industry information, career opportunities and, where included in your subscription choice, commercial or sponsored content.
We may send dedicated sponsored emails as part of the communications described when you subscribe. These are sent through Vigilo; sponsors do not receive our subscriber list.
Our planned maximum is four dedicated sponsored emails per calendar month across all sponsors, with no more than one per sponsor in that month, in addition to the weekly newsletter.
Newsletter registration uses email confirmation. Creating a website account does not, by itself, constitute permission to receive promotional newsletters.
Job alerts relate to the opportunities and preferences you request. You can unsubscribe from the relevant communications using the links provided or contact us for assistance.
Necessary account, security, billing and service messages may still be sent when relevant, even after you unsubscribe from marketing.
Where required, optional email tracking is subject to consent. Newsletter subscription does not automatically authorise every form of tracking.
8. Who receives personal data?
We use service providers to host and operate the platform, deliver communications, process payments, manage forms and measure permitted activity.
Our service providers and platforms include:
- Cavuno, for the job board, accounts, profiles, saved jobs, alerts and related platform functions.
- Beehiiv, for newsletter subscriptions and email distribution.
- Stripe, for online payments and related payment administration.
- Typeform, when we use it to collect form or survey responses.
- OVHcloud and email service providers, for business correspondence.
- Google Analytics 4, where enabled with the required consent, for website analytics.
- LinkedIn, when you interact with our page or content on that platform.
Some providers act on our instructions. Others, including payment providers and social networks, may also act as independent controllers for their own legal, security or service purposes.
Advertisers receive aggregate campaign reporting, such as listing views, application-link clicks, email delivery totals and LinkedIn reach. We do not provide individual subscriber identities, candidate profiles or person-level browsing histories in these reports.
We may also disclose limited information to professional advisers, authorities or other recipients where necessary to comply with the law or protect legal rights.
If ownership of the business changes, relevant data may be transferred subject to appropriate safeguards and applicable information requirements.
9. International processing
Vigilo is operated from Switzerland. Our providers may process personal data internationally.
In particular, Cavuno identifies the United States as the location of its primary platform infrastructure, and Beehiiv processes subscriber information in the United States. Other providers may process information in additional countries through their service infrastructure and subprocessors.
Transfers must comply with the data protection rules applicable to the information concerned. Depending on the destination and recipient, an appropriate mechanism may include an applicable adequacy decision or recognised contractual safeguards, including relevant Swiss and UK adaptations where required.
A provider’s presence in a country does not, by itself, establish that a transfer is adequately protected.
You may contact us for information about the destinations and safeguards applicable to your data, including a copy of relevant safeguards subject to necessary redactions.
10. How long we retain information
We retain personal data only for as long as necessary for the purpose for which it was collected, taking account of legal requirements, security needs and relevant limitation periods.
- Account and profile information is retained while needed to provide your account and requested services. Following a valid deletion request, we delete or anonymise it unless a specific retention obligation or justified exception applies.
- Newsletter and alert information is retained while the relevant subscription remains active. Following withdrawal, we stop the relevant communications.
- Limited suppression information may be retained to ensure that an unsubscribe or objection continues to be respected.
- Consent records are retained for as long as necessary to demonstrate and manage the permissions relied upon.
- Enquiries and business correspondence are retained while the matter remains relevant and, where necessary, for related contractual or legal purposes.
- Billing and accounting records are retained for the period required by applicable law.
- Security and technical records are retained for periods proportionate to protecting the service and investigating incidents.
- Analytics and tracking records are retained according to their purpose, configuration and applicable consent choices.
We review whether information remains necessary. Residual copies may remain temporarily in backups until their scheduled replacement or deletion and are not used for ordinary business purposes.
11. Cookies and similar technologies
Our website uses technologies necessary to operate the service and may use optional analytics or other tracking technologies.
Optional technologies requiring consent must remain inactive until you accept them. Refusing optional tracking does not prevent access to public job listings.
See our Cookie Policy for information about the technologies used and how to manage your choices.
12. Security
We use technical and organisational measures appropriate to the information and risks involved, including access restrictions and security controls provided by our service providers.
No system can guarantee absolute security. Please keep your account credentials confidential and contact us if you suspect unauthorised access or a security issue.
13. Your rights
Depending on the law applicable to your situation, you may have the right to:
- Obtain information about how we process your personal data.
- Access your data and receive a copy.
- Correct inaccurate or incomplete information.
- Request deletion.
- Restrict certain processing.
- Receive eligible data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time.
You can object to the use of your personal data for direct marketing at any time, including related profiling.
Withdrawal of consent does not affect processing lawfully carried out before withdrawal. Some rights are subject to legal conditions and exceptions.
To make a request, email contact@vigilomedtech.com. We may ask for proportionate information to verify your identity. We respond within the time limits required by applicable law.
You may also complain to the Swiss Federal Data Protection and Information Commissioner, the supervisory authority in your EU country of habitual residence or work, or the UK Information Commissioner’s Office, as applicable. You do not have to contact us before making a complaint.
14. Adults only
Vigilo’s account and subscription services are intended for people aged 18 or over.
We do not knowingly collect personal data from children through these services. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.
15. Changes to this policy
We may update this policy as our services and processing activities change. The date at the top identifies the latest revision.
We will provide appropriate notice of material changes and obtain new consent where required before using your data for a new consent-based purpose.
16. Contact
Thomas Cardot — Vigilo
Via Alle Cantine 1
6862 Rancate, Ticino
Switzerland