Protecting your privacy has been one of our fundamental values ever since the foundation of bpost.

In an increasingly digital world, bpost also collects and processes personal data, for instance when you apply for a job or sign up for a job-related event on our career website.

In this document, we set out our policy for protecting your privacy and personal data.

Personal data means all specific information relating to an identifiable natural person. As part of an application or an event registration on our career website (https://career.bpost.be/en) this includes your name, phone number and email address (hereinafter referred to as “personal data”).

We collect for the career website the personal data of two types of data subjects:

1. Personal data of applicants for a job as postwoman or postman, truck driver, sorter, commercial assistant or call center agent (hereinafter referred to as an “application through recruitment partners”).
2. Personal data of applicants for all other jobs at bpost (hereinafter referred to as an “application through bpost directly”).

We make this distinction because your choice of job will determine who is the data controller of your personal data.

On our career website you can do different actions, namely apply for a job or register yourself for a job-related event. In both cases your data will be processed by different parties.

1. With regard to an application through recruitment partners :
    
   1. Start People nv (Frankrijklei 101, 2000 Antwerp) and Manpower nv (Gemeenschappenlaan 110, 1200 Brussels) (hereafter referred to as "recruitment partners") are the data controllers responsible for processing your data in order to (1) determine whether your application is complete and matches the job vacancy at bpost (2) determine whether your registration for a job-related event (e.g., a Job Day organized by a recruitment partner) may result in an invitation to this event.
   2. bpost nv of public law (Muntcentrum, 1000 Brussels, hereinafter referred to as "bpost") is the data controller with respect to the processing of your personal data once bpost has received them from Start People or Manpower in the context of a recruitment process. bpost will use these data to notify you if any information is missing, to notify you of any further steps to be taken and to inform you of other vacancies that match your profile if you have given your consent to this during the application process.
    
2. With regard to a job application sent directly to bpost :
    
   bpost nv (Muntcentrum, 1000 Brussels, hereinafter "bpost") is the data controller with respect to the processing of your personal data for the purpose of (1) determining whether your application is complete and corresponds to the vacancy at bpost (2) informing you of other vacancies that correspond to your profile if you have given your consent to this in the application process (2) determining whether your registration for a job-related event (e.g. an assessment day for a traineeship) may lead to an invitation to this event.

bpost will not share, sell, transmit or otherwise spread your personal data to parties outside the bpost group, except if this is necessary for the performance of the agreement (such as sharing the data with providers of services to assist recruitment) unless this is required by law or you have given bpost your specific consent to do so.

If you give us your consent at the end of the application process, we will be able to use your data to contact you in order to propose similar job offers or provide general information on employment at bpost during the period in which your profile is active. That period may continue for up to two years after your application is closed (as part of an application through recruitment partners), after your most recent contact (as part of an application through bpost directly) or until the voluntary anonymization of your profile.

Furthermore, access to your application data can also be granted to

• our ICT service providers who process them as processors for technical interventions, maintenance and data hosting and
• Cornerstone OnDemand, Inc. who processes them as processor to support applicant recruitment, follow-up and onboarding as part of an application through bpost directly

These service providers are sometimes located outside the European Economic Area. All measures stated in the model contractual stipulations of the EU are imposed on these service providers.

Your applicant data are retained for two years after your application is closed (as part of an application through recruitment partners) or after your most recent contact (as part of an application through bpost directly). This period is necessary for processing and following up your application or registration for an event or for handling any complaints.

After the expiration of the above-mentioned term, you will be notified before we proceed to permanently remove your file. On the basis of this letter, you can still indicate that you wish to remain in the database for a longer period.

Under certain conditions, you are entitled to request access to your data, to request the rectification thereof if necessary, to request the deletion of your data or the restriction of the processing of your data or to request the transfer of your data. To do so, you can send your request to bpost in one of the two following ways:

• either by sending your written request, dated and signed, including a copy and proof of identity* to: bpost, Data Protection, Office, Muntcentrum (14B), 1000 Brussels
• or online, by completing the "request form concerning your data" (https://www.bpost.be/en/forms/personal_data/step1)

*A copy of your ID Card (if desired you can redact the card number and cover up your photo) or a copy of your driving license or a copy of your international passport (redacting the number and covering up your photo as desired). Please ensure the expiry date is legible. The date of birth is often used to distinguish people with the same name.

Finally, you also have the right to file a complaint with the data protection authority in Belgium if you do not receive an answer to any of the above requests https://www.dataprotectionauthority.be/citizen.

Last updated June 9, 2021