Privacy Statement

Who is responsible for your personal data?

ABN AMRO is responsible for your data. ABN AMRO’s full details are: Gustav Mahlerlaan 10, 1082 PP Amsterdam.

Data Protection Officer

ABN AMRO has a Data Protection Officer. Within ABN AMRO, the officer supervises the application of and compliance with privacy legislation. The contact details are: privacy.office@nl.abnamro.com.

What personal data does ABN AMRO process?

Most of the personal data ABN AMRO processes about you is obtained from you directly. In addition, ABN AMRO also uses data about you that it has obtained from other sources. Examples include the following sources:

• An employment or recruitment agency
• Public sources such as search engines and non-private parts of social media.
• The Financial Institutions Incident Warning System. You can read more about this warning system and how it works on the NVB website: Financial Institutions Incident Warning System Protocol (Pifi)
• Before you join the bank, you will be screened. In that context, the bank receives personal data about you from the agency that carries out the screening. Read more about this screening below under ‘Pre-employment screening’.

On what basis does the bank process your personal data?

ABN AMRO uses your personal data for one or more of the following reasons.

Laws and regulations 

ABN AMRO also processes your data because it is required to do so under various laws and regulations. Many rules apply to banks. ABN AMRO must maintain sound and ethical business operations in order to manage integrity risks and safeguard the integrity of the bank and of the financial sector as a whole. Part of sound and ethical business operations is selecting employees of integrity.

Legitimate interest

ABN AMRO may also use your data if it has a ‘legitimate interest’ in doing so. ABN AMRO’s interest in using your data must outweigh your right to privacy. In doing so, ABN AMRO weighs all relevant interests. Examples of a legitimate interest that ABN AMRO has in using your data in the recruitment and selection process are:

• Recruiting and selecting suitable and competent employees
• Protecting the bank’s property and data
• Protecting the safety of the bank and its employees.

What does ABN AMRO use your data for?

ABN AMRO uses your data for the following purposes.

Recruitment and selection of suitable and competent employees 

ABN AMRO uses your personal data to assess your suitability for the relevant position. If this results in an employment contract, ABN AMRO uses your personal data to draw up that agreement.If it does not result in an employment contract, we retain your data for the creation of a talent pool. This talent pool is consulted when new vacancies arise. You may then be contacted again when we believe another vacancy may be a good fit for you. See the relevant section below for the retention period and your rights.

Protection of integrity and safety

ABN AMRO also uses data to protect the bank, its property, its data, and its employees as effectively as possible against all kinds of breaches and damage.

• For example, the access pass that ABN AMRO uses to track your presence in the building.
• Also, security cameras in and around ABN AMRO buildings.
• ABN AMRO also carries out pre-employment screening. Read more about this screening below.

ABN AMRO uses candidates’ personal data to implement responsible, effective, and efficient HR policies.

• For example, studies in the field of people analytics. These statistical analyses focus on examining the impact of the HR strategy pursued. The results of the studies and the associated advice can never be traced back to individual persons.
• Also, ABN AMRO’s diversity policy. ABN AMRO aims for the bank-wide organization to reflect the growing diversity within society. Therefore, it wants to monitor the level of diversity among candidates in the recruitment and selection process. For this purpose, ABN AMRO uses data on gender and age at an aggregated level. ‘Aggregated’ means that the results of the research cannot be traced back to an individual person.

Pre-employment screening

ABN AMRO considers it important to safeguard the reliability, professionalism, and security of its organization. Therefore, the final stage of the application procedure consists of a pre-employment screening. Data originating from public sources may also be used in this context. ABN AMRO’s pre-employment screening includes at least the following components:

• investigation into irregularities
• identity check
• verification of diploma(s)
• certificate check
• verification of employment history for the past five years
• Certificate of Good Conduct (VOG).
  

The screening consists of an internal and an external part. ABN AMRO performs the internal part and, in that context, will request, review, and verify information about you. For the external screening (applicable only to applications for positions at ABN AMRO in the Netherlands), ABN AMRO uses a specialized screening agency, namely DISA (for more information, see www.disa.com/nl). We share your email address and telephone number with DISA; you enter your own data and upload it in that party’s secure environment. For countries other than the Netherlands, the screening is carried out by a local screening agency, or the organization in the country concerned applies its own screening procedure.

Use for purposes other than those for which ABN AMRO originally obtained your data

ABN AMRO may also use your data for purposes other than those for which you originally provided it. In that case, the new purpose must be compatible with the purpose for which you initially provided your data to the bank. To determine whether this is the case, ABN AMRO looks at at least the following points:

• Is there a clear connection with the purpose for which you previously provided the data? Is the new purpose compatible with that?
• How was your data obtained? Did it come directly from you or was it obtained in another way?
• What type of data is involved exactly? Very sensitive data, or less sensitive data?
• What are the consequences for you if ABN AMRO uses the data in a different way? Is that to your advantage, disadvantage, or does it make no difference?
• What can ABN AMRO do to protect your data as well as possible if it uses it again? Think of anonymization or encryption.

Does ABN AMRO share your data with others?

Only if you were placed through a recruitment agency and this led to a successful placement, we share the offer we made with the relevant agency so that it can charge us the recruitment fee.

ABN AMRO may also share your data with assessment providers, for example for carrying out a personality test.

If ABN AMRO decides to hire you, your data will be shared through an internal and secure environment with Strada so that this party can prepare your employment contract. Strada handles HR-related matters for the bank, such as personnel administration and payroll processing. 

ABN AMRO carefully selects the companies it works with. ABN AMRO makes clear contractual arrangements about how your data is handled. ABN AMRO remains responsible when it engages another company to work on its behalf.

Security of your data

ABN AMRO does its utmost to protect your data as effectively as possible. ABN AMRO invests heavily in its people, systems, and procedures for this purpose. The approach is always aligned with the sensitivity of the data. Employees are trained to handle data securely.

Precisely for your security, we cannot go into detail about the exact measures we take in relation to data security. Under point 2 of ‘5. What does ABN AMRO use your data for?’ you will find examples of measures the bank uses to protect employees’ data.

Is your data also processed outside Europe?

ABN AMRO and its group companies may sometimes share personal data with each other, including when these group companies are located outside Europe. For example, if you apply for a position at ABN AMRO’s branch in Sydney, the bank may pass your data on to that branch. In doing so, the bank must comply with local regulations.

The bank shares personal data with group companies outside Europe on the basis of its global internal policy, the Binding Corporate Rules (BCRs). This policy has been approved by the Dutch Data Protection Authority.

ABN AMRO may also use IT suppliers that are established outside Europe, or that also provide their services from countries outside Europe. If this is the case, ABN AMRO will ensure that such transfers take place in line with privacy legislation.

How does the bank determine how long your data is retained?

The starting point for determining different retention periods for personal data is that such data is in any case retained for as long as necessary to achieve the purpose for which it was collected.Privacy legislation does not prescribe specific retention periods for personal data. Other laws may, however, contain minimum retention periods. In that case, the data must be retained for at least that long.

In principle, ABN AMRO retains the personal data of rejected candidates for 1 year from the date of rejection. Have you been rejected and would you like your personal data to be deleted? You can submit a request for this via werkenbij@nl.abnamro.com. If you are hired as an employee, ABN AMRO retains your personal data for as long as it retains the data of other employees. For most employee data, we apply a retention period of 7 years from the end of your employment.

What rights do you have?

Access, rectification, erasure, restriction 

You have the right to obtain access to the personal data that ABN AMRO processes about you. You may also ask ABN AMRO to correct your data if it is inaccurate. You can submit your request via https://www.abnamro.nl/en/personal/overabnamro/privacy/your-rights.html. 

Erasure of data

In some cases, you may also ask ABN AMRO to erase your data. ABN AMRO is not always required to honor a request to erase your data. For example, not if it is legally required to retain your data for a longer period.

You may also ask ABN AMRO to temporarily restrict the use of your personal data. This can be done in the following cases:

• You believe that your personal data is inaccurate;
• ABN AMRO is using your personal data unlawfully;
• ABN AMRO wants to destroy your personal data (for example after the retention period) but you still need it.
• You can also submit a request for erasure or restriction via abnamro.nl/klantrechtenrecht. Please always clearly state the reason for your request.

For more information about your rights and how to submit a request, please visit https://www.abnamro.nl/nl/prive/abnamro/privacy/uw-rechten.html.

Right to data portability

ABN AMRO can ensure that you receive the data you have provided to it and that is stored by automated means. This only applies if it processes your data on the basis of consent or on the basis of the agreement it has concluded with you. This is called ‘data portability’.

You can submit a request to receive your data or to have it transferred to another party via https://www.abnamro.nl/nl/prive/abnamro/privacy/uw-rechten.html.

Please pay attention to the security of your data. Check whether the party to whom you want to provide your data is trustworthy and handles your data just as securely as ABN AMRO does. If you want to receive your data yourself, make sure that your own equipment is secure enough and, for example, is not or cannot be hacked.

Questions or complaints

Is anything unclear?

Please contact us if you have any questions about the privacy statement. We will be happy to help you via privacy.office@nl.abnamro.com.

Do you have a complaint?

If you disagree with the way ABN AMRO handles your data, you can submit a complaint to Complaints Management via klachtenmanagement@nl.abnamro.com.

You can also lodge a complaint with the Dutch Data Protection Authority.

Amendment of the Privacy Statement

Over time, changes may occur in the use of personal data due to changes in laws and regulations or in internal procedures or systems, which directly affect ABN AMRO’s use of your personal data. In that case, the privacy statement will be amended and ABN AMRO will inform you accordingly. You will then see a notice of the change on the website www.werkenbijabnamro.nl.