Privacy statement

The NKI processes the following personal data, among others:

• Last name and first name
• Contact information: e-mail address and phone number
• Application data: curriculum vitae and cover letter, report of the job interviews and all personal data included in them

• Handling of the application procedure

• You have given us explicit consent for the processing of your personal data

We only process your personal data as long as necessary. For application data this means that we destroy or anonymize all data after a maximum of four weeks after the completion of the application procedure. The only exception is if you have given us explicit permission to keep your personal data after this period. If this is the case, your personal data will be stored for recruitment and selection purposes for one year after the completion of the application procedure.

In general, we do not share the personal data that you provided us with third parties. In certain cases, we may share your personal data for the purpose of an assessment. You will be notified beforehand.

Upon your visit to NKI or AVL websites, third-party services like YouTube may place cookies on your device (with your explicit consent). These third parties will receive your IP address. Please see our cookie policy for more information.

Your IP address will be shared with parties beyond the European Union – including the US – through a cookie placement. We have an agreement with all third parties concerning the purposes for which the data may be used, how all data should be processed and what security measures must be implemented.

We have taken appropriate technical and organizational security measures to protect your personal data from loss or unauthorized use. For example, we secure our systems in accordance with applicable information security standards and we have established relevant agreements with all our service providers.

Within the NKI, personal data are only accessible to employees who need to access them to perform their work. All employees are obliged to maintain confidentiality.

Automated individual decision-making and profiling is not applicable.

The General Data Protection Regulation (GDPR) states that you can exercise a number of rights in relation to your data. Please find a brief clarification of your rights below.

• Right of access. You can view and request a copy of the data we have collected from you at any time.  
• Right to rectification. You can request NKI to change your personal details if these are incorrect or outdated.
• Right to object. You can object to the processing of your personal data.  
• Right to erasure. You may ask the NKI to destroy your personal data. However, we cannot comply with your request in every case. We cannot delete personal data either that need to be processed by law.  
• Right to data portability. You can request the NKI to provide other organizations with personal data that you have given us digitally.

To exercise your rights, please contact us at privacy@nki.nl. We will ask you for identification in response to your request.

NKI is committed to protecting your personal data to the fullest extent possible. If you have any questions about the processing of your personal data, please contact our Data Protection Officer at privacy@nki.nl.

If you have a complaint about the protection of your personal data, you can also contact the NKI complaints officers or the Data Protection Officer at the aforementioned email address. In addition, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens; Dutch DPA).

The NKI reserves the right to change this Privacy Statement at any time. We recommend that you consult this statement regularly.