Privacy statement

Deloitte provides global, regional, national and/or practice-specific services; each service is administered by Deloitte Touche Tohmatsu Limited (‘DTTL’) or by one of the affiliated member firms or entities related thereto (jointly referred to as the ‘Deloitte Network’).​

Deloitte the Netherlands (hereinafter also referred to as ‘we’, ‘us’ or ‘our’) is used to refer to all independent subsidiaries or affiliates of Deloitte Holding B.V., which is part of Deloitte NSE, the member firm affiliated with DTTL.   We are a global organization that handles your privacy consciously. We are the entity within the Deloitte Network that is responsible for GDPR compliance within the relationship between Deloitte partners or employees and Deloitte Holding B.V. and therefore act as ‘controller’ in the sense of the General Data Protection Regulation (‘GDPR’). In this Privacy Statement we explain how we use and protect your personal data.  ​

We point out that this Privacy Statement only applies internally between you and Deloitte The Netherlands. It does not apply to the other services or products provided by other entities within the Deloitte Network. This Privacy Statement may be supplemented by privacy statements that are specific to particular parts of the partner or employment relationship or concerning the partner or employment relationship in general.​

Scope

This Privacy Statement applies to the following categories of individuals, jointly referred to as ‘Deloitte partners or employees’ or ‘Deloitte partners and employees’:​

  • Partners: individuals who perform work for Deloitte The Netherlands on the basis of a partnership contract.​

  • Applicants: individuals who will potentially perform work for Deloitte The Netherlands on the basis of an employment contract.​

  • Employees: individuals who perform work for Deloitte The Netherlands on the basis of an employment contract.​

  • Former Employees: individuals who have performed work for Deloitte The Netherlands on the basis of an employment contract.​

  • Interns: individuals who perform work for Deloitte The Netherlands on the basis of an internship contract. ​

  • Third parties: individuals working at Deloitte The Netherlands other than on the basis of an internship contract, partner, employment or internship contract or affiliation agreement (e.g. contractors).​

What personal data is collected and processed?

Text: Your personal data, including your contact details, gender and recruitment data (resume, motivation letter and grade list) will be collected and processed by us based on your consent and/or the legitimate interest pursued by Deloitte for the following purposes indicated below:​

  • Recruitment purposes, including determining the most suitable fit for the vacancy and other positions;​

  • Internal business purposes to determine whether the candidate’s values align and are consistent with Deloitte’s values and code of conduct.​

Another reason why we can process personal data is in order to comply with legal obligations to which Deloitte The Netherlands is subject, for example for tax purposes and/or to ensure that you and Deloitte The Netherlands are enabled to fulfill all of the obligations that arise from your contract, such as, onboarding and performing your daily work activities or paying your monthly imbursement​

We will also process the following personal data based on our legitimate grounds for recruitment analytical purposes:​

  • Candidate‘s name​

  • Candidate ID​

  • Gender​

How is my personal data used?

Text: Your personal data will only be used for the before mentioned legitimate grounds and purposes. For these daily operations, we also use the services of these external parties, which also involves processing of personal data: SmartRecruiters Ltc, Brainsfirst B.V., Starred B.V., Berenschot Groep B.V., First Advantage Europe Ltd., LinkedIn Recruiter System, Codility Limited, ServiceNow Inc.,Crown Relocations B.V.. Additionally, we use services provided by other Deloitte entities, within the Deloitte Network, that are located outside the European Union/European Economic Area (EU/EAA). For these and other transfers of personal data outside the EU/EEA, an intra group transfer agreement is in place.​​

There is no automated decision-making, including profiling, involved in the processing of personal data. Your personal data may be used to protect our rights or properties and, if necessary, to comply with legal proceedings. We use cookies (and similar technologies) to improve the website and to offer personalized content and advertisements on Google, Meta, LinkedIn and Tiktok. Read more about the Google privacy policy here.​

Page link for the word here in the last sentence: https://business.safety.google/privacy/

How can I exercise my rights?

Text: If you wish to exercise your rights under the GDPR, such as accessing, rectifying or erasing personal data, please fill in the form 'Privacy' available here.​

Page link for the word here: https://www.deloitte.com/nl/en/contact

How long is my data processed?

Text: We will process the personal data for the duration of the recruitment process at Deloitte The Netherlands. We shall retain the personal data for one year. The personal data can be retained for a longer period, if this is required either, directly or indirectly by law, or by another type of obligation where Deloitte The Netherlands is subject to, such as insurance agreements or other contractual obligations. We will make our best effort to ensure optimal data protection measures are in place to make sure that the personal data is securely processed throughout its entire lifecycle. ​

Changes to our privacy statement?

Text: We may adjust or change this privacy statement from time to time. We recommend that you regularly read this privacy statement so that you are always aware of the way in which we protect your data.​

How can I file a complaint?

Text: We make every effort to process your personal data in a lawful manner. If you are of the opinion that we violate or harm any of your privacy rights, you have the right to lodge a complaint with the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’). Before turning to the Data Protection Authority, we kindly request you to first inform the Privacy Office here.​

​Page link for the word here in the last sentence: https://www.deloitte.com/nl/en/contact/contact-us.html

Contact

Text: If there are any questions or concerns about the processing of your personal data in respect of the contract between you and Deloitte The Netherlands, please contact the Privacy Office here.​

Page link for the word here: https://www.deloitte.com/nl/en/contact/contact-us.html