This is the Privacy Statement for Applicants to NN Group N.V., NN Personeel B.V. (the Dutch personnel company of NN Group N.V) (hereinafter jointly referred to as: “NN”). This Privacy Statement applies to the processing of all personal data of applicants during the recruitment and selection process (including the Pre Employment Screening) at NN. The protection of your privacy is important to NN. We therefore take our responsibility for protecting your personal data seriously. This is why NN has prepared this Privacy Statement for Applicants. The aim of this Privacy Statement is to be transparent about how NN collects, uses and protects your personal data. We also explain how we comply with privacy legislation, such as the General Data Protection Regulation (GDPR). Please read this statement carefully to understand how we handle your personal data.
NN (Schenkkade 65, 2595 AS The Hague) is responsible for processing your personal data. In some cases, we share your personal data with third parties [see section 4.2]. It may be the case that these third parties are responsible/co-responsible for your personal data. We always require that these companies also comply with applicable privacy legislation.
For general questions or comments about this Privacy Statement, you can contact Human Resources Services via NNServicedesk.hr@nn-group.com. Where necessary, they will refer your question to the Data Protection Officer of NN and ensure that your question is answered.
For this purpose, we process your contact details (such as name and address, email address and telephone number), the personal data from your CV and your covering letter, and where appropriate, to assess your qualifications: your data from public sources (including social media profiles). We send your CV and covering letter to the vacancy holder and the staff of the relevant Human Resources (HR) department. If you are rejected, we keep your personal data for a period of twelve months after the vacancy closing date, unless you have stated that we may not keep your data for longer than one month. We can share your personal data from your CV and your covering letter within various HR departments of NN Group N.V. (hereinafter: “the NN group”). We do this because your profile may also match other jobs and vacancies within the NN group and we would like to draw your attention to them. It goes without saying that only authorised HR staff have access to your data and we handle your data with due care. If you do not wish your personal data to be shared within the various HR departments of the NN group, send your covering letter and CV to: NNServicedesk.hr@nn-group.com: if you are applying for a job in the Netherlands. Your personal data will then only be visible to the vacancy holder and the HR staff of the department to which you apply. NN may also use your data for purposes other than the purposes for which you originally provided it. This new purpose must nevertheless match the goal for which you provided us with your data in the first instance. In addition, we use some or all of your personal data from your CV to prepare analyses to improve the efficiency and effectiveness of our recruitment and selection process. If your application is successful, your personal data will be kept in accordance with our retention policy. The legal basis is NN’s legitimate interest in an efficient implementation of its recruitment and selection process (Article 6, paragraph 1(f) of GDPR).
You can register for a job alert by visiting our career site. To send a job alert, we process your email address and your preferences for the type of vacancy you would like to receive by email. You can unsubscribe from job alerts via the link at the bottom of the emails you receive from us. Staff in the HR department who maintain the career site have access to your name and email address to manage this list. If you withdraw your consent, we will no longer use your email address to send job alerts and will remove your email address from our mailing list. The legal basis for sending a job alert is consent (Article 6, paragraph 1 (a) of GDPR).
Part of the selection process involves a PES to assess the reliability of the applicants. A successfully completed PES is compulsory under the applicable financial supervision legislation. If you are applying for a job in the Netherlands, for the PES of integrity-sensitive positions , the staff of the Corporate Security & Investigations (CSI) department (part of NN Group N.V.) carry out a more comprehensive screening process. For other positions, the PES is performed by a specialist agency, namely: Validata (for more information visit www.validatagroup.com). We do not pass on any of your data to Validata: if you are asked to do so, you are required to enter and upload your data onto this party’s site. Depending on the position you apply for, the above parties process data about your creditworthiness (in the case of an integrity-sensitive position), reliability and the information you enter in the PES questionnaire, as well as information from public sources (including social media profiles), references and other positions. Furthermore, a personal background check is carried out and your references will be checked. The HR department keeps the outcome of this check and your personal data for up to one year after the check. If you are recruited, the Corporate Security & Investigations department keeps your personal data associated with the PES for integrity-sensitive positions for up to eight years after the check. The legal basis of the PES is NN’s legitimate interest in an efficient implementation of its recruitment and selection process Article 6, paragraph 1(f) of GDPR), as well as compliance with a legal obligation (Article 6, paragraph 1(c) of GDPR).
Your personal data is accessible only to people at NN insofar as it is necessary for the performance of their work and it is within the scope of our purposes referred to in section [3]. Who precisely has access to your personal data at NN differs for each category of personal data and you can read about this in section [3].
NN does not sell your personal data to or trade your personal data with a third party. NN can share specific personal data with a supplier or a service organisation that needs to use or record your personal data for the purposes described in this Privacy Statement and in accordance with relevant legislation. Transferring a specific and limited element of the personal data you provide can be necessary to organise internal or external recruitment events during which NN can approach candidates. Or, for example, to perform the PES (see section [3]).
In these limited cases, a specific supplier or a service organisation can access your personal data. Before NN shares your data with such a third party, NN will ensure that this party is held to strict security standards. NN can be required to provide certain personal data to third parties, such as government bodies, in accordance with relevant legislation. It may also be necessary for NN to transfer your personal data to protect the statutory rights of NN, once again in accordance with the relevant legislation.
Because your privacy is important to us, your personal data is handled strictly confidentially. NN also has suitable technical and organisational security measures in place to prevent unauthorised access and/or disclosure, destruction, loss and alteration of personal data. To this end, NN uses several types of security technology, including secure servers, firewalls and encryption as well as physically securing the spaces where data is stored.
Because NN is an international company, in exceptional cases personal data can be transferred to other NN entities, for example, if you work at one of our offices abroad, outside the EU (short-term or long-term assignments).In addition, NN uses IT service providers that sometimes have offices or servers abroad. These companies can have access to specific personal data outside the EEA, such as in the United States. NN has taken additional measures to ensure that your personal data is also properly protected at these foreign companies. For example, NN has made it compulsory for these companies in special agreements to secure your personal data at the level required by GDPR.
No. NN does not use automated decision-making based on your data
You can request access to the personal data that NN processes about you at any time and free of charge. You can ask us to correct or remove this personal data. In addition, you can request NN to limit the processing of your personal data or to transfer your data to another controller. You can also object to the processing of personal data at NN.
You can send a written request to the HR Services department via NNServicedesk.hr@nn-group.com.
If you do not agree with the response from HR Services, you can lodge an objection with the Complaints and Disputes Committee [via klachtenengeschillen@nn-group.com] or with our Values & Code Desk [via: values_code@nn-group.com] or the Data Protection Officer of NN Group N.V. [via: dpo-office@nn-group.com]. You also have the right to lodge an objection with the Dutch Data Protection Authority.
Please state as clearly as possible to which personal data your request relates. We will try to process your request as quickly as possible and in any event within the statutory time limit. NN is required to establish your identity when you submit a request.We cannot meet all requests. NN requires some information so that it can comply with our purposes set out in section [3]. We will therefore consider with you whether your personal data is correct, complete and necessary for the purpose for which we use the information.