The Royal Concertgebouw Orchestra takes the privacy of applicants very seriously. The Royal Concertgebouw Orchestra’s privacy policy, as set out below, explains how we handle your personal data. In all cases, we process your personal data in accordance with the General Data Protection Regulation and ensure that our policy is up to date and reflects any changes in legislation.
1. Scope
This privacy policy applies to the partially or fully automated processing of personal data collected by the Royal Concertgebouw Orchestra from applicants. ‘Personal data’ means any information relating to an identified or identifiable natural person. We recommend that you read this privacy policy carefully so that you know which personal data are processed, for which purposes and how we manage personal data.
2. Purpose
The purpose of collecting, processing and using your personal data during the application process has a legal basis. The Royal Concertgebouw Orchestra collects and processes only the data necessary to fulfil this legal purpose and basis.
- Your personal data are collected and processed in the applicant records system for the purpose of implementing and monitoring your application. This processing is necessary for the recruitment and selection process, as it enables us to contact applicants to arrange interviews or to provide them with information about a vacancy, for example. We also process your data in order to respond to any requests, comments or questions you have.
- We may use your personal data to safeguard the legitimate interests of the Royal Concertgebouw Orchestra, such as a screening procedure for the security and management of our business operations.
- We may also use your personal data to comply with legal requirements.
3. Applicants’ data
The following types of personal data may be collected and processed:
- General personal information such as your last name, first name, initials, address, email address, telephone number, date of birth and gender.
- Details relating to your application, such as the information contained in your covering letter and CV. This includes education, work experience and employment history, any references, language skills, hobbies and interests. The Royal Concertgebouw Orchestra expressly does not process private or sensitive personal data relating to religion or belief, racial or ethnic origin, political affiliation, sexual orientation or trade union membership.
- Other personal data you choose to provide us with during the application process.
In certain circumstances, we may ask for your consent to process certain personal data. In such an event, we will provide you with full details of the personal data in question and the reason we need them. An example is a possible screening, as it is in the security interests of the Royal Concertgebouw Orchestra to select and employ trustworthy, certified personnel.
4. Processing and management of your personal data
The Royal Concertgebouw Orchestra is required to ensure that the processing and management of your personal data are carried out in an effective and efficient manner. The Human Resources Department is responsible for the actual management of personal data. We take appropriate technical and organisational measures to protect your data against loss and any form of unlawful processing. Personal data are processed solely in accordance with the law and this policy, in a fair and diligent manner, and collected only for the purposes set out in this policy. Personal data must be adequate and relevant; no more of your personal data will be processed or collected than is necessary for record-keeping purposes.
As a matter of principle, we will not disclose your personal data to third parties unless we have first obtained your express consent, notwithstanding any legal requirement to do so.
Any person who is involved in the implementation of this policy and the application process and who is given access to personal data which he or she knows, or reasonably should know, is confidential, and who is not already bound by a duty of confidentiality with respect to personal data by virtue of his or her profession, position or any legal requirement is required to keep such data confidential. This includes relevant departments and individuals involved in the application process.
5. Retention period
The personal data contained in the applicant’s file will be deleted at the request of the person concerned and in any case no later than one month after the end of the application procedure. At the end of the applicable retention period, your personal data will be securely deleted and rendered permanently inaccessible.
6. Your rights
In accordance with all applicable legislation and regulations, you have certain rights with respect to your personal data:
- Right of access: you have the right to access the processed data relating to you personally.
- Right of rectification: we will correct, supplement, delete or secure your data if and to the extent that the data are factually inaccurate, incomplete for the purposes of processing, irrelevant or more extensive than necessary for record-keeping purposes, or otherwise processed in breach of any legal requirement. We will process your request to correct, amend, delete or secure your data at the earliest opportunity, and no later than four weeks after receiving your request.
- Right to lodge a complaint: you have the right to lodge a complaint with the supervisory authority if you believe that your personal data are being processed in breach of this privacy policy.
7. How to contact us
If you have any questions about this privacy policy or about the way in which we process your personal data, or if you wish to exercise any of the rights mentioned above, please contact the Royal Concertgebouw Orchestra at peno@concertgebouworkest.nl.
This privacy policy will be amended from time to time to reflect changes to relevant legislation.