ING Recruitment privacy statement
ING Groep N.V. (along with its affiliates and subsidiaries, referred to as “ING”) is a global organisation domiciled in Europe, South and North America, Asia and Australia (see also www.ing.com). ING is committed to protecting the privacy of external and internal applicants. When an applicant visits the ING career website or uses the internal job vacancies site, ING collects information (personal data) about the applicant (e.g. via web forms).
Protecting the privacy and personal data of applicants is of the utmost importance to ING and is a significant aspect of the way ING creates, organises and implements its recruiting activities.
Please read this Privacy Notice carefully. It explains why and how we collect information about you, how we protect it and for how long we retain it. We keep your data as safe and secure as reasonably possible protecting it against loss and unauthorised disclosure or access and we will handle your personal data in strict compliance with applicable data protection laws, in particular the General Data Protection Regulation 2016/679 of 27 April 2016 (‘GDPR’).
This Privacy Notice has been set up as a Q&A list.
1. Who will process my personal data?
The ‘Data Controller’ of your personal data will be the following legal entity, hereinafter referred to as ‘ING’:
- ING Belgium nv, with registered offices at 1000 Brussel, Marnixlaan 24, with company number 0403.200.393
- ING Bank Belgian Branch, with registered offices at 1000 Brussel, Marnixlaan 24, with company number 0828.223.909
- Fiducré nv, with registered offices at 1140 Evere, Henri Matisselaan 16, with company number 0403.173.372
- ING Lease Belgium, with registered offices at 1040 Brussel, Sint-Michielswarande 60, with company number 0402.918.402
- OFP Pensions complémentaires d’ING Belgique/Aanvullende Pensioenen van ING België, with registered offices at 1040 Brussels, Cours Saint-Michel 60, with company number 416.434.955
- OFP Plans additionnels d’ING Belgique/Bijkomende Plannen van ING België, with registered office at 1000 Brussels, Marnixlaan 24, with company number 563.941.865
2. What is the purpose and legal ground for processing my personal data?
The purpose for processing your personal data is to register your application for a job within our company and, if this application leads to start our selection procedure, make a profile of you, meaning that ING will process all the necessary data that is required for us to assess your job application in view of a potential recruitment.
The processing of your data is therefore necessary in order to take steps prior to entering into an employment contract and is in ING’s legitimate interests, i.e. the interest to assess and evaluate you before deciding on making an offer of employment.
In case of positive evaluation and decision to hire, we will also use your personal data to prepare an employment contract.
In case of a decision not to hire you, we will retain your personal data for a period of time as well (see 7) in order to be able to contact you if any future job opportunities would seem to match your profile. This is also in the legitimate interests of ING.
3. Which categories of your personal data will be processed?
Personal data is all information relating to you or on the basis of which you may be identified. Anonymous data, without possibility to identify you, could thus not be considered as personal data.
ING collects and processes applicant data (required and optional) which an applicant provides directly, via forms and attached resume’s, on the ING recruitment website with URL www.ing.jobs. ING also collects and processes applicant data through personal contacts, phone calls or e-mail.
For the purposes referred to here above, the processing of personal data will include the following:
- standard data related to your identity (surname, name(s), address…);
- personal data (date and place of birth, nationality, gender, phone number, email address, hobbies and interests, …);
- your picture, if you decide yourself to provide us with;
- data with regard to your professional experience (profile, data on previous employers, termination of last employments and work carried out, special projects, …), including reference checks if you have provided us with references in your CV (which means that you have consented to us contacting those references);
- data with regard to your education (diploma’s, certificates, internships, special trainings, …)
- language skills;
- if applicable, whether you possess a permit of working and/or reside in the European Economic Area (EEA);
- any other personal data that you present us with as part of your application, related to the exercise of the role;
- digital assessment through the internet (social media presence), insofar as this presence is open for us to see;
- any other personal data (than mentioned above) that require processing by virtue of the law.
ING does not collect or process any sensitive applicant data, such as data that reveals your race or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health or sex life. If, owing to certain circumstances, ING does collect sensitive applicant data, the applicant’s explicit prior written consent will be asked. Please note that by providing ING with unsolicited sensitive applicant data, the applicant consents to ING’s processing of this sensitive applicant data for recruitment purposes.
4. Who will have access to my personal data?
HR and your envisaged hierarchic superior(s) will have access to your personal data on a strict ‘need-to-know’ basis for the purposes described above.
We do not pass on your information to any other third party, with the possible exception of assessments centres etc. or any other third party in case it is relevant for the recruitment process.
Prior to disclosing any information to any third party, ING will ensure that all third party recipients are bound to strict standards of security.
ING does not sell or trade applicant data to any third party. ING may be obliged to disclose certain applicant data to third parties, such as government authorities, in accordance with applicable laws. It may also be necessary for ING to disclose applicant data so as to protect the legal rights of ING, again in accordance with applicable laws.
5. Will my personal data be transferred outside my country of residence?
ING’s recruitment & selection career and job vacancies site (www.ing.jobs and www.jobvacancies.intranet) offers applicants the opportunity to apply on-line (both unsolicited applications and ING current open positions). Applicants can indicate their preferences for a specific country during the on-line application process. If an applicant chooses to apply outside his or her country of origin, the application data will be transferred to the country where the vacancy exists. The transfer of the application data is for recruitment & selection purposes only. Applicants consent to transfer of their application data and to ING worldwide recruiters contacting them to start recruitment activities by accepting this ING recruitment privacy statement.
To operate as a global business and to promote an applicant’s career within ING, it is necessary to process and transfer applicant data within ING's worldwide operations. Applicant data will be entered in an international database that is available for ING recruiters from the various countries where ING operates. The use of this database will involve transferring applicant data outside the country of origin of the applicant. Applicants consent to transfer of their application data (for processing by worldwide ING recruiters) to the various countries where ING operates by accepting this ING recruitment privacy statement.
ING has implemented appropriate safeguards in line with the GDPR for the transfer and processing of applicant data to the ING locations in the various countries where ING operates (potentially located in a third country outside the European Economic Area). More specifically, ING has adopted Binding Corporate Rules applying to every member concerned of the ING group of undertakings.
6. Will ING make use of automated decision-making?
Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects or that significantly affect the individuals involved.
As a rule, ING does not make use of automated decision-making as described above. ING does not base its decision whether or not to hire you solely on automated processing of your personal data.
7. How long will my personal data be retained?
We will only hold your personal data for as long as it is necessary for the purposes described above. ING will only retain applicant data after the recruitment and selection process if there is a legal obligation to do so (e.g. equal opportunity requirements in local employment laws), or if there is a ‘business need’ to keep the applicant data, e.g. keeping an applicant’s resume on file if a suitable vacancy arises.
In case the recruitment does not result in an employment relationship, your personal data will be retained for a maximum period of two year after the end of the job application procedure for the purposes described under 2.
ING uses a number of technical, physical and organizational security measures to assure the integrity, confidentiality and availability of applicant data. ING has implemented security technologies to protect the stored applicant data from unauthorised access, improper use, alteration, unlawful or accidental destruction and accidental loss. ING continues to enhance its security procedures as new technology becomes available. Access to applicant data is limited to ING processors who are involved in ING recruitment activities. ING processors who have access to applicant data are obliged to respect the privacy of applicants visiting ING’s website and the confidentiality of their applicant data. ING ensures adequate security to protect manual and electronic processing of applicant data and prevent its misuse, all in accordance with applicable local legal requirements. ING also ensures (contractually) that third parties and affiliates processing applicant data on ING’s behalf, will observe similarly adequate security measures again in accordance with applicable local legal requirements.
9. What are my rights with regard to the processing of my personal data by ING and who can I contact?
You have at any time the possibility to contact ING should you need any support while applying or managing your personal data. Additionally, you have at any time the right to contact ING if you want to:
- Access, rectify or erase your personal data. ING facilitates access to applicant data and the correction thereof through an on-line self-service system accessible via ;
- Restrict or object to the processing and transfer of your personal data;
- Withdraw your consent to the processing or transfer of your personal data based on consent (however, this will not affect the lawfulness of earlier processing activities);
- Receive your data in order to transmit them to another controller (‘right to data portability’);
- Lodge a complaint with a supervisory authority, if you feel that ING has not acted in line with data protection legislation.
Please send any questions, comments or issues about this privacy statement or ING’s applicant data collection and processing activities to:
Please note that this contact information can only be used to handle privacy related enquiries. Information about ING positions or other non-privacy issues will not be answered.
We may edit this Privacy Notice from time to time to comply with applicable laws or to reflect updated business practices, within the limitation set out by the relevant privacy and data protection laws.
By submitting my application, I confirm having read and understood this ING Recruitment privacy statement and that I agree to its content.