Information about data processing

V2 (022024)

Hexagon | Leica Geosystems uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Hexagon | Leica Geosystems.

Shared responsibility

With regard to interaction within the company account of Hexagon | Leica Geosystems, Hexagon | Leica Geosystems and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here to gain information on the key aspects of the agreement.

Data processing by New Work SE

onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.

With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Hexagon | Leica Geosystems, detailed information is available in the XING Privacy Policy at You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.

Job applications with onlyfy one

When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).

Pausing your online application

You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Hexagon | Leica Geosystems in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Hexagon | Leica Geosystems only.

Visibility of your data

The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.

Notes on the special functions of onlyfy one

Calendar function

If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: and

WhatsApp application

If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.

The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.

Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here:

Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.

Applicability of the Swiss Federal Data Protection Act (FADP)

The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.

Privacy Policy / Applicant

Leica Geosystems AG, (“Leica Geosystems” or “we” or “us”) respects your privacy. Leica Geosystems is committed to the safe and secure processing of personal data and compliance with applicable data protection law.  We have implemented appropriate technical and organizational measures to protect your personal data against loss or unlawful access.  The number of persons with access to your personal data is limited. Only individuals associated with Leica Geosystems that need to process your personal data in accordance with the purposes below will have access to your personal data.

The following describes how we process your personal data.


Fulfilling our obligations towards you, for receiving your application documents, sharing them with involved persons, responding to your questions, etc.


How do we obtain your personal data

We obtain personal data from you when you register on our Web Sites, when you add or change personal data in your profile of our E-recruiting tools. We may also obtain personal data from third-party sources such as recruiting agencies. You may have provided us also with personal data by mail or telephone. 

Categories of personal data we process


For the automated processing of your application, the following data are collected and processed:

-  first name, surname, email address and, as necessary, address/location, date of birth, title, telephone number, nationality

-  Additional questions depending on the respective job vacancy (e.g. driving licence)

-  CV, in particular information about professional experience and training

-  Skills (e.g. Photoshop, MS Office)

-  Application photo

-  Qualifications, awards and linguistic skills

-  Covering letter

-  Any files and documents that you upload

-  We store the written electronic communication that takes place between you and us. In addition, we process comments and assessments that are written about you in the course of your application process.

-  To allow us to adapt our services to your needs in future and facilitate easy use of the application, we record statistical information about your surfing behaviour on the website (e.g. the areas of the website you click on or the times when you log in). This data may be recorded for the purposes of support or service optimization.

The purposes of the processing

We process your personal data when you apply for a job at Leica Geosystems to evaluate and assess your qualifications in relation to the job for which you are applying, to manage the recruitment process, to administer the online career portal and to conduct pre-employment checks. If your application is successful, we also process the applicant data to make you an offer and for onboarding purposes.

We process your personal data for these purposes as necessary for the conclusion of an employment contract or for our legitimate interest in the management and administration of our business and recruitment.

In addition, we process your personal data to the extent necessary to comply with legal and other requirements, such as recording and reporting requirements, in response to legal process such as subpoenas and court orders, to pursue legal claims, to defend litigation and to administer internal complaints or claims, to conduct investigations, and to comply with internal policies and procedures. For these purposes, we process personal data to the extent required by law or necessary to establish, exercise or defend a legal claim.

You are under no obligation to provide us with personal information, but if you do not provide us with information that is reasonably necessary for an application, we may not be able to continue with your application.

Legal basis for the processing

It is within the legitimate interest of Leica Geosystems to process your personal data for the above noted purposes. We use your personal data for fulfilling our contractual obligations towards your application process.

To store and process your personal data for the purpose of further consideration and communication in case of suitable job offers in the future we will ask for your consent.

Recipients (or categories of recipients) of the personal data



Where necessary to proceed your application we will share your data with the authorized persons and/or departments within the Hexagon Group.



Where necessary to proceed your application we will also share your personal data with business partners and legal agents which carry out services on our behalf, e. g.

- Companies with which contact is to be made in the context of your application process.

- Sub-contracted processors acting as service providers.

- We may be legally obliged to disclose your data if the data are required to assert, exercise or defend legal claims of Leica Geosystems in respect of the authorities.

Retention period

- As long as the application process is running, data is stored for up to 12 months.

- Personal data of rejected applicants are stored for a maximum of two months, starting from the date of rejection of the application. If you prefer a longer storage period for your application process (to continue your application at a later date, for example), we request that you adjust the settings accordingly when you register.

- Longer storage periods may also result from the fact that the data are required to assert, exercise or defend legal claims in respect of the authorities or if statutory storage periods apply. The data will be stored as long as necessary to fulfil these purposes.



Your personal data may be transferred to a country outside of EU/EEA such as Canada (commercial organizations), New Zealand and Switzerland, which offer similar level of protection as within the EU/EEA. The transfer is based on the legal basis outlined in HOW WE PROCESS YOUR PERSONAL DATA and is for the purpose outlined in HOW WE PROCESS YOUR PERSONAL DATA. The transfer to these countries is based on the adequacy decision of the European Commission.

Your personal data may be transferred to a country outside of EU/EEA such as Australia, Brazil, Chile, China, Colombia, Hong Kong, India, Indonesia, Japan, Malaysia, Mexico, Peru, Philippines, Russia, Singapore, South Africa, South Korea, Taiwan, Thailand, UAE, United States, Venezuela, which may have a lower level of protection than within the EU/EEA. The transfer is based on the legal basis outlined in HOW WE PROCESS YOUR PERSONAL DATA and is for the purpose outlined in HOW WE PROCESS YOUR PERSONAL DATA.  When transferring personal data to these countries, Leica Geosystems uses standard contractual clauses approved by the European Commission to ensure a sufficient level of protection of your personal data. The standard contractual clauses can be found via the following link:



You are entitled to know what personal data we are processing about you. You have the right to request access to your personal data and you can request that we provide a copy of such data to you.  You are entitled to have incorrect personal data regarding you corrected, and in some cases you may request that we delete your personal data. You also have the right to object to certain processing of your personal data, and request that the processing of your personal data be limited. Limitation or deletion of your personal data may result in Leica Geosystems not being able to fulfil its commitments to you. You also have the right to request data portability, where your personal data would be extracted in a machine-readable format and transferred to another controller. Leica Geosystems may not always be obliged to comply with a request from you for deletion, restriction, objection or data portability. Additional circumstances such as exercising the right of freedom of expression and information, compliance with a legal obligation which requires processing by EU or Member State law or processing for establishment, exercise or defence of legal claims can justify further processing by Leica Geosystems.  Leica Geosystems will assess the eligibility of your request and inform you about Leica Geosystems decision and reasoning.  Where you have given us your consent to process your personal data, you can withdraw your consent at any time and without justification. Where you withdraw your consent, certain personal data (only to the extent that it is absolutely required) will be retained on our “do not contact” list.

If you have questions regarding how we process Personal Data concerning you, you are most welcome to contact us at Email:



If you have any objections or complaints with the way in which we process your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority, where the applicable laws provide for such remedy.



The Leica Geosystems Privacy Officer can be contacted at:



Hexagon AB, Swedish Company Registration Number 556190-4771, Lilla Bantorget 15, P.O. Box 3692, SE-103 59 Stockholm, Sweden (, its subsidiaries and controlled joint ventures are the controller(s) of your personal data.

Leica Geosystems operates within a matrix/division structure and utilises data processing tools shared between multiple Hexagon Group entities. It follows that your location and your business relationship with Leica Geosystems are essential in determining the relevant controller(s) in terms of the processing of your personal data within the Hexagon Group.

Upon your request to the Privacy Officer, you will be provided with full details of the relevant controller(s) within the Hexagon Group which is/are responsible for the processing of your personal data. We will provide the name and the contact details of any data protection officer where appointed by the applicable controller.




Please see our Cookie Policy.

This Privacy Policy was last amended on October13, 2020