PRIVACY STATEMENT FOR APPLICANTS 

12 december 2024 

1. Introduction

This Privacy Statement sets out how Collins Foods Netherlands Management BV and all its affiliated Dutch entities that operate KFC restaurants in the Netherlands in the capacity of franchisee (“KFC”, “we” or “us”), in their role as data controller in the meaning of Article 4 paragraph 7 of the General Data Protection Regulation (hereinafter referred to as “GDPR”), process your personal data if you apply for a position at KFC. It also describes your rights, including the right to object to certain elements of KFC’s data processing operations. More information about your rights and how you can exercise them can be found in section 9 ‘Your rights’. 

The entities that operate KFC restaurants in the Netherlands are; Collins Foods Netherlands Operations B.V., Martijn Ipek, Birol Holding B.V., Benelux Food Group, I&F B.V. and EG Services BV. 

2. Personal data we process

We may process the following personal data if you apply for a job with us or otherwise show an interest in employment at KFC: 

  • Personal data provided by you: We process data that you provide to us yourself because you apply for a job with us. This includes your name, contact details, date and place of birth, gender, your application documents (CV, motivation, previous work experience, education), your desired salary, type of position you are looking for, availability, your identification documents (passport number, social security number if allowed). , immigration status), and other information you provide to us, including correspondence between you and us during the application process. Conversations we have with you as part of your application may be recorded in transcripts or notes. 
  • Personal data obtained from other sources: We also obtain information about you from other sources, such as through engaged recruiters, employment agencies, assessment agencies and similar companies. We may also obtain your data through identification verification services if you are not a citizen of the European Union and we are obliged to check whether you have the correct work permit or by approaching references nominated by your references, consulting websites and/or other publicly available information. accessible data on the Internet. 
  • Personal data obtained automatically through means of communication: If you submit your application or contact us through our website www.werkenbijkfc.nl, we may collect information sent to us by your computer, mobile phone or other access device. This includes, for example, the pages you visit, your device’s IP address, device identifiers, the type of operating system you use, your location, network information, standard web log data and other information, your browser type, and traffic to and from our site. 

3. Why we collect, use and store this personal data

We collect, use, store or otherwise process your personal data for one or more of the purposes below: 

A. to assess your suitability for the position you are applying for;

B. to do background checks; 

C. to approach you again in the future for another (similar) position at KFC, if you are not hired for the current position for which you are applying; 

D. for the security and protection of our property, buildings and employees, e.g. if you are filmed by our security cameras when entering our premises in connection with a job interview; 

E. handling expenses incurred by you (to the extent that you qualify for such reimbursement); 

F. being able to answer and deal with questions, complaints or other contact; 

G. to comply with laws and regulations or court orders or rulings. 

4. Basis of the processing 

A legal basis is required for the processing of personal data. We process your personal data based on the following legal bases: 

  • You have given your permission for this (purpose C). You have the right to refuse consent at any time. We will then no longer be able to use your application information provided in this application process to determine whether we will approach you for future vacancies. You can also revoke the consent you have given at any time. Withdrawing consent does not affect the lawfulness of the processing up to that point.
  • The processing is necessary for compliance with a legal obligation to which we are subject (purpose G)
  • The processing is necessary for the representation of our legitimate interests, unless the interests or rights of you as a data subject outweigh the legitimate interests of us or a third party (purposes A, B, D, E and F)

5. When does KFC share my personal data with third parties

We only provide your personal data to third parties if this is necessary for one or more of the purposes in chapter 4. For example, we share your personal data with persons within the KFC group who are involved in the recruitment and selection process (such as the KFC franchisee whose store you are applying for or the KFC head office to the extent that you are applying for a position there) or to draw your attention to other vacancies similar to those you have applied for (including with the KFC franchisees who operate the KFC stores). Your personal data may also be shared with the following parties: 

  • suppliers: for example an assessment agency, an agency specialized in integrity research or the software service provider with which we handle your application. We obtain – after your permission – the results thereof from the agency that carried out the assessment or research; 
  • referees named in the cover letter or CV to verify your competencies; 
  • if you have given permission for this or if this results from a legal provision: other third parties, and 
  • processors: for example, our IT suppliers (in the event that we keep your personal data in our systems) and security companies (when entering one or more of our physical locations). 

6. International transfers of your personal data

For some of the purposes specified above, your personal data may be processed by us and by some of the third parties with whom we share your personal data in or accessible from countries located outside the European Economic Area (“EEA”). located. 

In such situations, we provide appropriate safeguards that provide an adequate level of protection for your rights and freedoms as a data subject in accordance with the GDPR. We do this, for example, by concluding model contracts for data transfer approved by the European Commission, or by only passing on your personal data to third parties who, according to the European Commission, guarantee an adequate level of protection. 

If you would like more information about the international transfer of your personal data, including a copy of the documents used to protect your information, please contact us using the contact details set out in section 10. 

7. Security of your personal data

We have taken appropriate technical and organizational measures that, in accordance with the GDPR, protect your personal data against destruction, loss, alteration, unauthorized disclosure or access, including by ensuring that: 

  • the confidentiality of your personal data is guaranteed and the integrity and availability of your personal data will be maintained; 
  • our staff is trained in information security requirements; and 
  • your personal data is protected against unauthorized access. 

8. Retention periods 

In principle, we never store your personal data longer than is necessary to fulfill the purposes described in this privacy statement. 

The information you provide to us will only be kept for the duration of the application procedure. 

If you have given your consent, your data will not be deleted until after a period of 12 months (or longer if indicated), so that we can keep you in mind for future vacancies. 

When you join us, your data will be part of the personnel file and will be kept for a maximum of two years after you leave your employment. You will be notified of this in a separate notice that we will provide to you upon acceptance of employment. 

If you would like to receive more information about our retention policy, please contact us using the contact details listed in section 10. 

9. Your rights 

As a data subject, you have a number of rights that you can exercise in the context of our processing of your personal data: 

  • right to information; 
  • right of access; 
  • right to rectification; 
  • right to removal; 
  • right to restriction of processing; 
  • right to data portability; 
  • right to object; 
  • right to withdraw your consent; 
  • right to submit a complaint to the Dutch Data Protection Authority. 

To exercise your rights, you can contact us via the contact details mentioned in section 10. Your requests will in principle be handled electronically, unless this is not possible or you request otherwise. In principle, we will not charge you any costs for handling your aforementioned requests, unless your requests are excessive, manifestly unfounded or if you request additional copies with the right of access. 

Please note that in some cases your rights are not absolute and we may not be obliged to comply with your request. We will always check on a case-by-case basis whether this must be implemented and will inform you of this. 

10. Contact us 

If you have any questions or complaints about this Privacy Statement or about our processing of your personal data, please contact us at [email protected]. If you believe that your rights have been violated, you can also submit a complaint to the Dutch Data Protection Authority. (www.autoriteitpersoonsgegevens.nl). 

If you suspect that the security of your personal data has been breached as a result of which your personal data may have been exposed to loss or unlawful processing, please contact us immediately. You can send an email to [email protected]. 

11. Changes

This Privacy Statement was last updated on December 12, 2024 and supersedes our previous Privacy Statement. If we make changes to this Privacy Statement in the future, we will post the amended Privacy Statement on our website (werkenbij.kfc.nl). In the event of changes that could significantly affect you, we will do our best to inform you immediately. All changes will take effect as soon as the statement is posted on the website werkenbij.kfc.nl