Home > Data protection for job candidates

Data protection for job candidates

Home > Data protection for job candidates

The protection of your personal data is important to the BNP Paribas Group, which has adopted strong principles in that respect for the entire Group. These principles are set out in our Privacy Charter.  

This Personal Data Protection Notice provides you with transparent and detailed information relating to the protection of your personal data processed by BNP Paribas SA and/or its subsidiaries as a recruiter (“us”) in the context of our application and recruitment procedures.

This Personal Data Protection Notice applies to all candidates who have applied for a job offer through BWELCOME website at the BNP PARIBAS Group (“you”).

This Data Protection Notice lets you know which personal data we collect about you, the reasons why we use and potentially share such data with third parties, how long we keep it, what your rights are and how you can exercise them.

1. WHICH PERSONAL DATA DO WE COLLECT AND USE ABOUT YOU?

We collect the following categories of personal data  directly from you when applying for a BNP Paribas Group job offer or from third parties (such as recruitment firms):  

Depending on the nature of our intended employment relationship, the targeted position and the stage of recruitment, we may process various types of personal data, including:

  • Identification and personal information about you , e.g.: full name, , gender, date of birth, f nationality and photograph;
  • Contact details e.g.: postal address, place of residence, e-mail address and phone number;
  • Information about your training and career path e.g.:  your CV, cover letter, diplomas and certificates obtained and conversations reports of interviews;
  • Information from screening that you have been subject to in the recruitment process e.g. :  assessments, pre-employment screening,  Certificate of Good Behavior (VOG). Note: in this context we may also process information on your criminal convictions and offence. We will solely process such data to assess your suitability for the position in accordance with applicable laws and regulations.
  • Employment information and data related to previous work experience, e.g. name of your previous employer, current position etc. ;
  • Economic and financial information: e.g.: salary expectations
  • Information about your work permit , e.g.: residence and immigration status.;

These personal data will be processed to the extent necessary for the purposes described in section 3 of this Personal Data Protection Notice.

2. WHO IS CONCERNED BY THIS NOTICE AND FROM WHOM DO WE COLLECT PERSONAL DATA?

This Personal Data Protection Notice is addressed to all candidates who have applied for a job offer at BNP Paribas (“job applicants”) A job offer may relate to all available job opportunities at BNP Paribas including but not limited to Fixed Term Contracts, Trainee/internships and international volunteer Programs.

Occasionally we also collect  personal data from other persons during the recruitment process, such as your references (manager at former employer, professor, etc.). When you provide contact details of references with us, we request you to inform them about our processing of their personal data and to direct them to this Personal Data Protection Notice.  

3. WHY AND ON WHICH BASIS DO WE USE YOUR PERSONAL DATA?

a. To comply with our regulatory obligations

As a potential employer, we process personal data to comply with the following legal obligations by which BNP Paribas is bound:

  • To perform  checks on integrity and reliability;
  • To perform screenings in order to comply with regulation relating to sanctions and embargoes;

b. To enter into an employment contract with you

We process your personal data to assess your suitability for the position and possibly enter into an employment contract with you. The assessment of your suitability takes place in the context of the  recruitment process that includes the following activities:

  • To analyze professional skills and the pre-selection and analysis of applications,;
  • To assess and to verify of your abilities, skills, professional skills and interest for the targeted job (conducting interviews, face-to-face or remote; conducting tests and evaluation);
  • To communicate with you about the current recruitment process and your application;
  • To use data collected during the recruitment phase for human resources management purposes for selected candidates.

c. To fulfil our legitimate interest

We also collect and use your personal data where we have a legitimate reason:

  • To manage our platform for job applications;
  • To check professional references; to perform checks not required by law, such as assessments and checks on integrity
  • To conduct data analytics studies to review, better understand and monitor our recruitment procedures;
  • To ensure physical security of our buildings, (including managing access to our buildings);
  • To perform screenings not required by law in order to comply with regulation relating to sanctions and embargoes;
  • To prevent, detect and manage fraud, bribery and money laundering and financing terrorism;
  • To monitor compliance with the Bank’s code of conduct, including our Code of Conduct, such as monitoring of email communication between you and our employees.  
  • To manage our defense of legal claims and litigation.

In any case, our legitimate interests remain proportionate, and we verify according to a balancing test, that your interests and fundamental rights are preserved. Should you wish to obtain more information about such balancing test, please contact us using the contact details in section 9 “How to contact us” below.

d. On the basis of your consent for a specific processing

At your application we request your consent to retain certain personal data for the period of 1 year for the purpose of being able to contact you for possible other vacancies that match your profile, in case your application does not lead to employment with BNP Paribas. We note that, if you grant consent, you can withdraw this consent at any time and we refer to section 7  of this Personal Data Protection Notice for more information about your privacy rights.

4. WHO DO WE SHARE YOUR PERSONAL DATA WITH?

a. Sharing of information within the BNP Paribas Group

To fulfill the purposes set out in section 3, we may share your personal data with the following categories of recipients within BNPP Paribas:

  • Human Resources (HR) staff, to the extent they are involved in the recruitment and hiring process.
  • IT staff, to the extent they are involved in the management of recruitment websites and tools.

In principle, your personal data will only be shared within the BNP Paribas entity in which you apply for a job. Are you applying for multiple job applications in the Netherlands? In that case we will share personal data with the other relevant BNP Paribas entity /(ies). Naturally, we will apply a reasonable period between the different job applications in this context.

In all other cases we will only share your personal data contained in your Candidate profile with other BNP Paribas Group entities, if you have given consent for this purpose. You can choose one of following options (*)when creating your account on our career website (*):

  • Your profile is shared internationally with other BNP Paribas Entities: in this case, any BNP Paribas entity could propose you other job opportunities that could match your profile at a worldwide level.
  • Your profile is shared only with BNP Paribas entities located in your residence country : any BNP Paribas entity could propose you other job opportunities that could match your profile at a national level.
  • Your profile is not shared: we will not send you any other job opportunity.

In case you have given us with consent to share your personal data with other BNP Paribas entities, we will share only the following data:

  • Identity information and contact details
  • Information regarding your work experience, skills and job preferences.
  • The files uploaded at your account creation or at the job application launch (ex: CV, cover letter etc).

(*) Please note You can modify at any time this initial option selection in your Candidate Profile.

 b. Disclosing information outside the BNP Paribas Group

In order to fulfil some of the purposes described in section 3, we may disclose from time to time your personal data with the following third parties outside BNP Paribas:

  • Partners and service providers  with whom we  engage to (partially) perform the recruitment process on our behalf;
  • Dutch and  foreign public authorities, such as police and judiciary,  regulators, courts and the tax authorities, where we are required to disclose data pursuant to:
    • their request;
    • defending our interests in judicial proceeding;
    • complying with regulation or other mandatory requests of requirements  .
  • Certain regulated professionals engaged by us or you, such as lawyers, notaries, rating agencies and auditors under specific circumstances (e.g. litigation, audit, etc.)

5. INTERNATIONAL TRANSFERS OF PERSONAL DATA

Currently we do not transfer your personal data to recipients located in a country outside the European Economic Area (EEA). The EEA consists of the Member States of the European Union plus Norway, Iceland and Liechtenstein.  

Should we wish to transfer your personal data to a non-EEA country in the future? In that case we will comply with the rules asset out in the General Data Protection Regulation (GDPR). This means that in case personal data will be shared with a non-EEA country that is recognized by the European Commission as providing an adequate level of data protection, your personal data will be transferred on this basis.

For transfers to non-EEA countries where the level of personal data protection has not been recognized as adequate by the European Commission we will either rely on a derogation applicable to the specific situation. Is this not possible? Then we will  implement one of the following safeguards to ensure the protection of your personal data:

  • Binding Corporate Rules (BCR);
  • Standard contractual clauses (SCC)  as adopted by the European Commission;

To obtain a copy of these safeguards or obtain additional details, you can send a written request as outlined in Section 9.

6. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will retain your personal data that we obtained in the context of your job application for 4 weeks starting when the application procedure has ended. Your CV, cover letter and other correspondence may be considered of interest after that period given possible other vacancies that match your profile.

Therefore we request you at your job application to give us consent to retain these personal data for a period of 1 year. Do you give us such consent? In that case we will retain these personal data for 1 year starting when the application procedure has ended.

7. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

In accordance with applicable regulations and where applicable, you have the following rights:

  • to access: you can obtain information relating to the processing of your personal data and a copy of this personal data;
  • to rectify: where you consider your personal data to be inaccurate or incomplete, you may request that your personal data be amended accordingly;
  • to erasure: you can require the deletion of your personal data. We are not always obliged to accede to the request. Naturally we will comply to your request if we are obliged to do so by law;
  • to restrict: in certain cases, you can request the restriction of the processing of your personal data. This means that we may (temporarily) not use your personal data;
  • to object: you can object at any time, on grounds relating to your particular situation, to the processing of your personal data. In such case, we will no longer process your personal data (for a specific purpose) unless we demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. • to withdraw your consent: where you have given your consent for the processing of your personal data, you have the right to withdraw your consent at any time;
  • to data portability: where legally applicable, you have the right to have the personal data you have provided to us be returned to you or, where technically feasible, transferred to a third party.

If you wish to exercise your rights, please contact the HR department of the BNP Paribas where you applied for a job offer. The contact details are provided in the confirmation that you received after submission of your job application.

In accordance with the applicable rules, in addition to your rights above, you are also entitled to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens / AP). For further details, please refer to www.autoriteitpersoonspersoonsgegevens.nl

8. HOW CAN YOU KEEP UP WITH CHANGES TO THIS DATA PROTECTION NOTICE?

In a world of constant regulatory and technological changes, we may need to regularly update this Personal Data Protection Notice. Therefore we advise you to review this Personal Data Protection Notice regularly when visiting our website. Here you will always find the latest version of this Personal Data Protection Notice.

The latest version of this Notice dates from 21-06-2024.             

9. HOW TO CONTACT US?

If you have any questions relating to our use of your personal data under this Personal Data Protection Notice, you can contact our Data Protection Officer by sending an email to:  bnpp.nl.dpo@bnpparibas.com or sending a letter to:

BNP Paribas
Data Protection Officer
Postbus 10042
1001 EA Amsterdam