1. Type of data processed.
  2. Personal identification data, such as name and address.
  3. Electronic identification data, such as email address, mobile phone number and cookies. 
  4. Personal details, such as age, gender, date of birth, place of birth, marital status, nationality and language. 
  5. Immigration status, such as existence of valid work permit in Belgium.
  6. Psychological descriptions, such as personality by means of psychometric test. 
  7. Academic C.V.
  8. Professional qualifications, such as vocational training and having a driving licence.   
  9. Professional experience.
  10. Membership of/participation in professional organisations. 
  11. Publications.
  12. Information concerning present employment.
  13. Information concerning recruitment.
  14. Information concerning the end of employment.
  15. Career data.
  16. Data on work organisation. 
  17. Evaluation.
  18. Training for the job.
  19. Images.
  20. Data relating to security, such as password.
  21. Data relating to leisure activities and interests. 

In principle, applicants are never asked to give any "sensitive" information as understood by the privacy regulations, except in cases where the law requires or authorises this in a particular case. This is why, when an applicant fills out an application form, completes his or her profile or is involved in any kind of exchange with CHU Brussels personnel, the applicant is not generally asked to give information of this kind. Such "sensitive" information includes data relating to racial or ethnic origin, political beliefs, religious or philosophical convictions or trade union membership, as well as genetic data, biometric data, health data, data on sex life or sexual orientation, data on criminal convictions and offences. 

  1. Data collection

Personal data are collected in various ways. 

  1. Submission of an application

CHU Brussels processes all the data that candidates submit when they complete a registration form, whether in response to a job offer or when making an unsolicited application. 

To complete these registration forms, applicants are invited to communicate their contact data (last name, first name, telephone number and email address) and to submit a CV.  

After having transmitted these data to CHU Brussels, applicants can, if they wish, connect to their personal and secure profile to modify data already transmitted and/or complete their profile by giving other data necessary for the processing purposes as set out below, such as professional experience, training, languages spoken, desired salary and photo. 

  1. Telephone and/or video interview

When an applicant chooses to provide the aforementioned data using a registration form and/or by making an unsolicited application, he or she accepts explicitly that CHU Brussels may use this information to contact them by telephone and/or by email so that the applicant can receive more information from CHU Brussels and, if desired, so that the applicant can provide more information on his or her professional expectations. 

  1. Recruitment interview

When a candidate agrees to be interviewed by CHU Brussels, he or she explicitly accepts that CHU Brussels can use their personal data to invite them to this interview and to assess the candidate during the interview, in particular by means of psychometric tests, and also check the references and information provided. The above implies in particular that CHU Brugmann may contact the companies and/or organisations whose details the applicant provides.  

  1. Purposes of the processing

These data are processed by CHU Brussels for the purpose of recruiting new employees and to analyse and manage applications. This implies: 

- Data collection by means of a registration form or unsolicited application, the applicant's personal profile, a telephone, video or face-to-face interview, psychometric tests, personality questionnaires, etc.  

- Data storage;

- Data consultation;

- Checks and analyses of these data;

- The production of statistics, market studies, etc. with the aim of improving the experience of applicants; 

- The proactive communication of new job vacancies that could match the professional desires expressed by applicants when completing a registration form and/or their profile.  

It is because the applicant has agreed to these purposes that CHU Brussels can process his or her personal data. Obtaining these data is, moreover, essential to enabling CHU Brussels to achieve these purposes. If these data were not obtained, CHU Brussels would not be in a position to correctly manage the applications it receives, for example. That said, as this data processing is wholly dependent on the applicant's consent, the latter is able to withdraw this consent at any time without this in any way calling into question the lawfulness of the processing carried out prior to the withdrawal of consent. 

  1. Data sharing

The applicant's data are only shared with:

- The candidates themselves;

- Members of staff at CHU Brussels;

- Subcontractors of CHU Brussels (for example, the ICT host or the recruiting tool supplier) insofar as this is necessary for carrying out their missions or in cases provided for by the law; 

- The public authorities in cases provided for by the law.

  1. Data retention period

When an applicant fills out a registration form, submits an unsolicited application and/or completes a personal profile, this applicant explicitly accepts that his or her data shall be stored in a database managed by CHU Brussels. 

The data are retained during the period required for the recruitment of the applicant in question in the case of existing job vacancies for which he/she has applied and for a period of five years after completion of the corresponding selection procedure(s). This enables CHU Brussels to manage the administrative and legal follow-up of this application during this period and also to present the applicant with details of other job vacancies that could match his or her professional expectations. However, exceptionally, the data can be kept for longer if the legal and administrative follow-up requires a longer period of data retention.

Applicants are notified by email two months prior to the scheduled deletion of their data. At that time applicants are free to make an explicit request to CHU Brussels to retain their data for a further period of five years so as to enable CHU Brussels to contact them spontaneously with details of any job vacancy that could be of interest to them. In this case the same procedure will apply prior to the expiry of this new five-year period, and so on. If applicants fail to react at the end of this period of two months their data will be automatically and permanently deleted. 

  1. Rights

Candidates are entitled, by connecting to their personal profile, to at any time access their personal data to edit, correct or delete them. They are also free to withdraw their consent for their personal data to be processed. This will result automatically in the immediate and irreversible deletion of their personal data. 

By sending a dated and signed request (including in electronic format) by email to [COMPANY DPO EMAIL] or by ordinary mail, together with proof of identity, all applicants can obtain from CHU Brussels a free copy (including in electronic format) of their personal data as well as, if applicable, the correction or deletion of any data that may be erroneous or incomplete, or a limit to the processing, and this within a period of one month of receipt of the request. All applicants also have the right to the portability of their data. After this period of one month, if no response or reaction has been forthcoming from CHU Brussels, the applicant can consider that the request has been rejected. 

If CHU Brussels has transmitted the data in question to other persons, CHU Brussels will take reasonable steps to inform these persons of the request to delete any link to these data or any copy or reproduction of these data. 

If a candidate wishes to lodge a complaint, this should be submitted to:  The Data Protection Authority // Privacy Protection Commission, rue de la presse, 35, 1000 Brussels,

  1. Data Protection

The personal data of applicants are processed in Belgium and stored at a data center in the Netherlands. 

The recruitment tool supplier shall take the appropriate technical and organisational measures to protect applicants' data, in particular against unauthorised handling and access, and make every effort to ensure that these measures are as up to date as possible, this taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purpose of the processing as well as risks for applicants. 

As privacy legislation is sometimes adapted and improved, this document is also subject to modification. CHU Brussels therefore advises you to consult it regularly and will seek to ensure that any changes or modifications are clearly notified.