Data Protection Notice for Candidates

Candidates - Netherlands

RSA Luxembourg SA (RSAL) is committed to ensuring that your privacy is protected, as the data controller, we take the necessary measures to ensure the security and confidentiality of the personal information it holds or processes in compliance with the General Data Protection Regulation (EU) of 27 April 2016 ("GDPR") and the Dutch GDPR Implementation Act ("DGIA").

The data you provide will be processed as part of our candidate selection process. The legal basis for this processing is our legitimate interest in considering your application. Unless you object, your CV will be kept for two years after our last contact with you. We may kept your data for the duration of the employment contract in the event of recruitment. Once your employment has ceased, your personal data will be only retained for as long as is necessary to satisfy any legal, accounting or reporting obligations.

Intact Group companies and third-party partners may be recipients of your personal data when required. Sometimes your personal information may be sent to other parties outside of the European Economic Area (EEA) in connection with the purposes set out above.  We will take all reasonable steps to ensure that your personal information is treated securely and in compliance with data protection regulations.

In accordance with data protection laws, you have the right to access and obtain a copy of the data concerning you, object to the processing, have it rectified or deleted. All you have to do is write to the RSAL Data Protection Officer to the following address RSA Luxembourg, S.A. Edif. Torre Europa, Pº de la Castellana, 95 – Planta 19 28046 Madrid (SPAIN) or send an email to the following address RSA.DP@eu.rsagroup.com. We will ask you to confirm your identity if we need to, we have one month from receiving your request to tell you what action we have taken.