Privacybeleid

1. SCOPE AND PURPOSE OF THIS SPECIFIC PRIVACY POLICY

This Specific Privacy Policy applies to the collection and processing of personal data by bpost in the context of the bpost career website https://career.bpost.be/en and, more generally, in the context of bpost’s recruitment activities, and contains the specific information on how bpost processes your personal data in this context. Please note that our processing of employee personal data is subject to a separate privacy policy.

2. WHO IS THE CONTROLLER?

The Controller is bpost, a limited company under public law with its registered office at 1000 Brussels, Anspachlaan 1 box 1, RLE Brussels VAT BE 0214.596.464. Hereafter also referred to as “we” or “us”.

3. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS?

Categories of personal data

bpost collects and processes the following categories of personal data: For all applicants :

• standard identification and contact details (including your name, first name(s), telephone number, address, e-mail address);
• personal characteristics: your place and date of birth, nationality, age, language, gender;
• your photograph if you provide it voluntarily (e.g. included in your CV);
• data related to your professional experience (profession, (previous) job(s), profile, data on previous employers, termination of last jobs and work delivered, special projects, etc.) including a reference check if you have provided references in your CV or during the recruitment process ;
• data related to your education (diplomas, certificates, internships, references, specific training courses, tests results, etc.);
• language skills;
• if applicable, whether or not you have a work/residence permit in the European Economic Area (EEA) incl. data relating to your right to reside and your right to work ;
• If applicable, check of the information in your criminal record
• digital assessment via the internet (presence on social media), to the extent this information is accessible to us;
• physical capacity questionnaire to comply with workplace health and safety Code ;
• any personal data that is publicly available on social media (e.g. Linkedin) ;
• any personal data (other than the above) that you provide to us in the course of the application process or that must be processed by law.

For applicants who will be hired with a bpost contract after positive assessment :

• Frontier worker or not
• Bank account number
• Work history
• Handicap (if information provided voluntarily)
• Household composition
• Contact persons in the event of an emergency
• Civil status
• Identity card photo
• National registry number
• Identity card number

This personal data is collected via the above-mentioned career website of bpost, social media websites, one of the bpostgroup websites, our external recruitment partners (incl. head-hunter, interim offices,…) and/or in the course of the (physical) recruitment process.

Unless we specifically state so, you are not required to share all the above information with us as part of an application. However, if you do not share the specifically requested data, we may not be able to assess your application.

In principle, we do not process special categories of personal data, from you, such as health data or other types of sensitive data unless you voluntarily provide it to us as part of your application documents or it is necessary to comply with a legal obligation (e.g. offering a safe workplace in accordance with Workplace Health and Safety Code).

We and our service providers may use “cookies” and similar technologies on the Careers Site. Please see our Cookie Policy for more information: https://www.bpost.be/nl/cookie-policy?_ga=2.56289067.1803396688.1681725269-1137112283.1573119944

Categories of personal data

The purposes and legal grounds for processing your personal data are set out in the table below.

4. Does BPOST USE YOUR PERSONAL DATA FOR PROFILING OR AUTOMATED DECISION-MAKING?

bpost does not carry out automated decision-making within the meaning of Article 22 of the General Data Protection Regulation, i.e. automated decision-making that has a legal or significant impact on you, in the context of its recruitment activities.

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

The personal data collected and processed in the context of the career website, and more generally, bpost’s recruitment activities are shared by bpost in particular with:

• Service providers acting as processors, in particular hosting and ICT service providers who process this data for maintenance purposes or hosting of the data ;
• Recruitment partners (interim agencies,…) acting as data controllers, in back-up or reinforcement of bpost internal recruitment teams who process personal data according to their own privacy notices (Startpeople, Manpower, Accent Jobs, Ago…) (;

5.1 If applicable, bpost driving school,our labour medicine partner (Cohezio), external independent doctors who will need certain data to enroll applicants in driving test/training and medical questionnaire/exam. Medical controls process

For some positions within bpost, we must evaluate if providing a specific job to a particular candidate is risky for the health and safety of the applicant. Therefore, we work with an external labour medicine partner (Cohezio) that analyses the applicant's physical abilities (after completing a secured and confidential questionnaire) to avoid providing the applicant with a job that risks their health and safety.

The labour medicine partner will directly receive the questionnaire, and bpost (or its recruitment partner) will only receive the conclusion of the assessment (positive or negative). If the evaluation is negative, bpost asks an external doctor to conduct a medical check. According to the doctor's decision (again, bpost only receives the assessment result), the recruitment process stops or continues.

6. WILL YOUR PERSONAL DATA BE TRANSFERRED TO COUNTRIES OUTSIDE OF THE EUROPEAN ECONOMIC AREA?

Certain service providers or third parties to whom your personal data are transferred may be located in a country outside the European Economic Area where the data protection rules differ from those applicable in Belgium and elsewhere in the European Economic Area. In such a case, bpost takes the necessary measures to ensure an appropriate level of protection for your personal data and provides at least one of the following guarantees:

• For transfers to countries that are deemed not to provide an adequate level of protection (so-called "third countries"), bpost provides additional safeguards, such as the conclusion of standard contractual clauses of the European Commission, which ensure that personal data is given protection equivalent to that provided in the European Economic Area.

In the cases where bpost uses the contractual model clauses of the European Commission for transfers to third countries, bpost has also carried out an analysis of the level of protection offered by the legislation in these third countries and, where necessary, has taken additional measures to ensure that the level of protection is essentially equivalent to that within the European Economic Area. More information on these measures (including a copy of the model clauses) can be obtained by contacting bpost as described in point 9 "How to contact bpost".

7. How LONG DO WE KEEP YOUR DATA?

In the event of a positive assessment and decision to employ you, your personal data will be retained in accordance with our Employee Privacy Policy which sets out the relevant retention periods for processing employee personal data.

If your application for employment is unsuccessful, we will keep your personal data for 2 years after the end of the relevant recruitment process for consideration for further employment opportunities, unless you object. However, we can delete personal information about you (including your CV/ résumé) from our database at any time and without providing any reason. Therefore, please retain your own copy of the personal information provided to us.Images recorded by surveillance cameras in our premises are kept for thirty days from the visit, except otherwise requested by the authorities.

8. What Rights do you have in relation to your personal data?

Under the terms of the General Data Protection Regulation, you have the following rights:

• Right of access -

  You have the right to access the personal data that bpost processes about you and to obtain a copy of these personal data (subject to certain exceptions).

• Right to rectification and erasure -

  You have the right at any time to have your personal data rectified or erased by bpost free of charge, provided that the legal conditions for doing so are met. Personal data that bpost needs in order to fulfil ongoing orders or for which bpost is legally obliged to hold cannot be deleted.

• Restriction of processing -

  You can require bpost, subject to compliance with the applicable legal provisions, to restrict the processing of your data.

• Right to data portability -

  Under certain conditions, you have the right to portability of the personal data you have provided.

• Objection -

  You may object to processing for advertising purposes or processing for the legitimate interests of bpost. You may do so even without grounds for the processing of personal data for direct marketing purposes.

• Withdrawal of consent -

  If bpost processes your personal data on the basis of your consent, you have the right to withdraw it at any time. However, this withdrawal will not affect the lawfulness of the processing of your personal data for the period prior to the time of withdrawal and for processing activities based on another legal basis.

• Complaint to the competent authority -

  You always have the right to contact the data protection supervisory authority of the Member State of the European Economic Area where you normally reside, where you have your place of work (if applicable) or where the alleged breach has taken place, and to lodge a complaint if appropriate. For Belgium, this is the Data Protection Authority (www.gegevensbeschermingsautoriteit.be).

If you wish to exercise your rights in relation to bpost, you can contact bpost via the contact details described in point How Can i contact bpost? “How can I contact bpost?”.

9. How Can i contact bpost?

For questions, complaints or the exercise of your rights, please contact bpost and its data protection officer:

• Online via the web form provided for this purpose;
• By post at the following address: bpost, addressed to the Privacy Office, Anspachlaan 1 box 1, 1000 Brussel.

For security reasons, we ask you to accompany requests with your full contact details and a means of verifying your identity (e.g. a copy of the front of your identity card or driving licence with the photo and national registration number or card number rendered illegible). bpost reserves the right to request additional supporting documents where necessary.

bpost may reject requests that it considers excessive or constitute an abuse of the relevant right.

10. Amendments TO THIS specific privacy policy

bpost reserves the right to modify this Specific Privacy Policy, inter alia to adapt it to changed services or amended legal and/or regulatory requirements. Amendments to this Specific Privacy Policy take effect at the time of publication. We recommend that you always consult the most recent version. The data of the last revision is indicated at the beginning of this Specific Privacy Policy.