Privacy Policy

GÉANT Candidate Privacy Notice



This notice will inform you and individuals who apply to work for GÉANT (hereinafter referred to in singular: “you” and in plural: “candidates”) of what personal data GÉANT collects, uses, shares and transfers for recruitment purposes only, including how information gathered using our online recruitment software (Networx). It also explains how you may view and amend such information.

This Privacy Notice does not address the processing of personal data of employees of GÉANT.

The “Data Controller” is GÉANT Vereniging (referred to as throughout “GÉANT” or “we”) whose registered business address is Hoekenrode 3, 1102 BR Amsterdam, The Netherlands. GÉANT also has a registered UK Establishment located at City House, 126-130 Hills Road, Cambridge, CB3 1PQ.

GÉANT has designated the Data Protection Officer, who can be contacted at

GÉANT has certain obligations under the General Data Protection Regulation (EU) 2016/679) including its national implementation legislation (“GDPR), to notify candidates (or “you”) as to how it will process any personal information it collects about them during recruitment and selection processes.

The recruitment software we use is supplied by Net-Worx (2001) Ltd (trading as Networx) and they are defined as a Data Processor under the GDPR.  Networx will only process your data in accordance with our instructions. Networx can be contacted at: The Engine House, Wharfebank Business Centre, Ilkley Rd, Otley LS21 3JP. Networx has designated the Data Protection Officer who can be contacted at


2.Why do we collect information about you?

GÉANT needs to collect and process information about candidates to consider their suitability for employment or as a worker. We use your information so that we may provide recruitment services and carry out statistical analysis on GÉANT’s recruitment activity.

“Personal data” is any information that relates to an identifiable, living person. Examples of personal data include your name, address, contact details, and CV.

The term “process” means any activity relating to personal data, including (for example) collection, storage, use, consultation and transmission.


3.What information do we collect about you?

We will only collect and process personal data that we need to process your application and make a hiring decision. For example, information you provide whilst registering a candidate account, in your CV, covering letter and application form, and share with us during interview.

The types of personal data we collect and process in relation to candidates (“candidate information”) may include the following:

  • Name, address, email, telephone number, date of birth
  • Applicant registration/account details, including your chosen password/log-in information
  • Answers to questions around your recruitment preferences
  • Any other information you wish to provide in support of building up your candidate account
  • Answers to application questions
  • Application reference number
  • Details of the position you have applied for
  • If you are currently employed by, or on behalf of GÉANT, as an employee or other worker
  • Whether you are at risk of redundancy or are on a fixed term contract
  • Employment history information
  • Education and qualifications information and other skills and any other relevant professional memberships or qualifications
  • Compensation and salary information
  • Previous employer feedback / references
  • Information that you make publicly available on job seekers sites and social media sites
  • Nationality / visa / right to work permit information
  • National identifying numbers e.g. passport, driving licence, NI or BSN numbers
  • Copies of any correspondence or other documents created by GÉANT when considering your application, including interview notes and feedback of the interviewers
  • Claims for expenses relating to recruitment
  • Equalities information, including information as to your gender, to the extent that we are allowed to pursuant to local applicable law
  • Information relating to your skills and experience, if you are unsuccessful in your application, to inform you if any other relevant vacancies arise
  • How you heard about the vacancy
  • Whether you require any additional adjustments due to any medical condition
  • Your availability for interviews and agreed interview times and dates
  • Any other information that you volunteer during the application or recruitment process

If you accept a job offer with us we will process the following information about you:

  • Name
  • Address
  • Contact telephone numbers
  • E-mail address
  • Date of birth
  • Former or recent residential addresses
  • Evidence of entitlement to work in the UK and/or NL such as passport and visa documentation
  • Equalities information, including information as to your marital status and gender
  • Results of any verification checks we deem necessary for the role you have applied for e.g. checks to verify your identity, address, qualifications, financial background, credit history and the Dutch certificate of conduct (VOG or verklaring omtrent gedrag)
  • Previous employer feedback and references information
  • Information about criminal convictions and offences (only when this required for the role and permitted by local applicable law)

We may collect your feedback (e.g. surveys) for business purposes, such as improving processes. There is no obligation to respond to these and they have no impact on your application.


4.How do we collect your information?

If you wish to apply for one of our vacancies, you will be directed to our recruitment system (Networx), where you can register a candidate account with us. Once you have a candidate account you are then able to submit a job application to us. All the data you submit using Networx is stored on secure servers in Rackspace in London.

We may also hold your personal data securely in paper files, other computerised files and other electronic databases.

GÉANT may use external service providers to collect, process and/or validate candidate information. For example, we may use recruitment agencies, test providers, video interview providers, background checking agencies etc. GÉANT requires that any such service provider ensures adequate protection for candidate information and that it complies with local legal requirements.


5.How will collected information be used?

Your personal data will only be processed in relation to your application for a role with GÉANT, as described in this notice. We are required by law to have a “lawful basis” (i.e. a reason) for processing your personal data. Personal data of candidates is only processed when it is:

  • necessary for us to comply with a legal obligation
  • necessary for the purpose of the legitimate interests of GÉANT (such as ensuring compliance with legal obligations other than those related to employment or social security, the protection of GÉANT assets, reputation and GÉANT employees and contractors) except where such interests are overridden by the interests or fundamental rights and freedoms of the candidates
  • necessary for the purposes of substantial public interests
  • necessary for us to take steps, at your request, to potentially enter into an employment contract with you, or to perform it

If you choose not to provide your personal data to us, we may not be able to enter into or continue our contract of employment / engagement with you or provide any additional benefit or services to you that you have applied for.

We may use your information in the following ways:

  • To allow us to contact you in relation to your application
  • To allow us to contact you where we are required by law to do so
  • To allow us to reference your application and ensure that any correspondence or communications received are filed correctly
  • To allow us to identify whether your education, skills and experience (both in and outside the work place) meets the requirements for the advertised vacancy
  • To allow us to match your experience and work history against the requirements of the position
  • To allow us to determine whether, if you are successful, you are required to undergo the pre-employment and vetting process
  • To allow us to identify how effective our job advertisement process is
  • Where you have indicated you require reasonable adjustments, we will contact you to discuss what support or adjustments we can reasonably offer you to assist you in the application process
  • To allow us to arrange a mutually convenient time and date for any interview
  • To allow us to organise and carry out online video interviews (i.e. recorded interviews)
  • To allow us to consider and record the reasons whether your application is successful or unsuccessful
  • To process any claims for travelling expenses
  • We are required to retain records of any payments made by us for accounting and auditing purposes
  • To allow us to prepare statistical reports for business management / recruitment purposes
  • Whether you have consented to GÉANT retaining your CV so that we can notify you of any other vacancies arising in future that suit your skills and experience
  • To validate your identity, address or qualifications
  • When applicable law requires us to undertake a check, to check and retain evidence of the check of your entitlement to work in the Netherlands or the United Kingdom as appropriate to your regular place of work
  • To allow us, if your application is successful, for individuals who have accepted a job that is falls under CAA regulation: for candidates based in the UK, to undertake an enhanced criminal records check (which includes spent convictions), or for candidates based in NL, to obtain a Dutch certificate of conduct (verklaring omtrent gedrag or VOG)
  • To validate the employment history and background provided by you


6.Background checks

We may decide to perform background checks (e.g. verification of identity, address and qualifications). These checks will be proportionate to the role that the candidate has applied for and as permitted by local law. These checks are only performed in relation to candidates who have been offered a role. Your consent will be requested before any screening checks are performed.  You have the right to withdraw such consent at any time, this will not affect the validity of the processing prior to the withdrawal of consent.


7.Criminal record checks

For any roles that have significant responsibility for GÉANT’s assets and/or finances, we will conduct either a Dutch certificate of conduct (verklaring omtrent gedrag or VOG) for candidates based in NL, or appropriate criminal records check for candidates based in the UK. These checks are only performed in relation to candidates who have been offered a role. Your consent will be requested before any background checks of this nature are performed. You have the right to withdraw such consent at any time, this will not affect the validity of the processing prior to the withdrawal of consent.


8.Transferring personal data within GÉANT and abroad

As a European business with legal establishments in both Amsterdam NL and Cambridge UK, we may transfer your information outside your country of residence, and specifically to other countries within the EU. Processing and/or transfer of candidate information and the release of information within GÉANT and/or to third parties outside your country of residence is subject to local law and, where required, will be subject to your consent.


9.Who do we share your information with?

We may ask third parties service providers to carry out certain business functions for us, such as the administration of background checks, our payroll, our benefits providers and our IT service providers. These third parties will process your personal data on our behalf (as our processor). We will disclose your personal data to these parties, only where necessary, so that they can perform those functions.

Before we disclose your personal data to other people, we will make sure that they have appropriate security standards in place to make sure your personal data is protected, and we will enter into a written contract imposing appropriate security standards on them.

GÉANT may be obliged to release candidate information to external parties as required by legislation or by legal process, such as Government Authorities, as well as to parties you authorise GÉANT to release your personal data to.

 We will disclose your personal data to third parties:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • Our service providers supplying services on GÉANT’s behalf, which require the use and/or creation of candidate information.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or to protect the rights, property, or safety of GÉANT, its customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction (only as permitted under local applicable law).

We have set out below a list of the categories of recipients with whom we may share your personal data, where it is necessary to do so:

  • Government bodies, including HMRC, DWP and UKBA; in NL these include UWV, SVB, Belastingdienst and IND
  • Organisations providing goods and/or services on our behalf, including third party contractors e.g. background checking agencies, pension providers, organisations providing back-up storage services and other IT services, medical practitioners (including occupational health advisors and company doctors)
  • Our Auditors
  • The Disclosure and Barring Service for Criminal Records Checks
  • Any contractors providing services required in relation to your application, including our legal advisors
  • Regulatory bodies, for example the CAA
  • Your former employer(s) and/or referees
  • Consultants and other professional advisors
  • Any other third parties, where authorised or directed by you to do so

At all times we will comply with our obligations under local data protection laws.


10.Automated decision making

Automated decision-making means making decision about you using no human involvement. Within the process of your application to GÉANT no decision will be made about you solely on the basis of automated decision making (where a decision is taken about you using an electronic system without human involvement) which has a significant impact on you. We may use some automated screening tools as part of our application process for rating and categorizing applications, what enables the HR team to take decision regarding recruitment short-listings. 


11.How do we protect your information?

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. When you register a candidate account with us, you must choose a password which enables you to access certain parts of the system. You are responsible for keeping this password confidential.

Once we have received your information, it is protected with physical, technical, organisational and procedural safeguards that are proportionate to the sensitivity of the personal data which we store. These safeguards are designed to protect your personal data from loss and unauthorised access, copying, use, modification or disclosure.

GÉANT will ensure that third parties who process your personal data on our behalf also have equivalent or greater safeguards in place.


12.How long do we keep your information for?

Personal data relating to candidates who are unsuccessful will be retained for a maximum of 12 months after a hiring decision has been made (unless you have asked us to retain your details to allow us to notify you of any similar vacancies in the future). After this time, it will be securely destroyed and permanently deleted.

If you start work with us, any personal data processed as part of your employment records will normally be held for a period of 7 years from the end of your employment with us, except where we are:

  • legally required to retain the information for longer
  • legally required to delete the information within a specified period
  • where the personal data is required in relation to any legal or other type of dispute, either with you or with a third party

Any personal data contained in any work-related correspondence may be retained for longer, dependant on the relevant retention period for that work or matter.


13.Your rights and accessing your information

Under your local law you may have the right to access, review, amend, withdraw and delete the personal data that GÉANT holds about you (subject to certain legal limitations).

You have the right to request the following, in respect of the processing of your personal data:

  • access to your personal data;
  • have any incorrect personal data corrected or erased;
  • the restriction of the processing of your personal data whilst any request to have incorrect personal data corrected or erased is being considered;
  • to object to any processing of your personal data undertaken on either public interest or legitimate interest grounds;
  • to object to being subject to any decision based solely on automated processing;
  • a review to any decision made based solely on automated processing, to be undertaken by a human, and provide additional evidence or submissions to support any review
  • a copy, provided in a structured, commonly used and machine-readable format, of any personal data that you have provided us, where the information is processed on the basis of your consent or in the course of a contract between you and us.]

You can log into your Networx account at any time and amend and/or delete your personal data. You can also delete your entire Networx candidate account in this manner. You are encouraged to ensure that the information you provide to GÉANT is kept up to date and accurate.

Where we process your personal data solely on the basis of your consent, you are entitled to withdraw your consent at any point. If you chose to do this, this means that we will be unable to further process your personal data for that purpose, but any processing undertaken prior to the withdrawal of your consent would still be deemed lawful.

However, we may not be able to comply with your requests, where the information falling within the scope of your request is exempt, due to the circumstances and/or purposes to which we are processing this information. If this is the case, we will respond to your request explaining the reasons why we are unable to comply with your request.

Where you exercise your right to object or withdraw your consent we may process your personal data without your knowledge or consent where we are permitted or required by law or regulatory requirements to do so. In such a case, we will not process more personal data than is required under the circumstances.


14.Further assistance and complaints

If you have any queries or requests or are concerned with the accuracy or completeness of any information, please contact us by email at

If you remain dissatisfied, you have the right to make a complaint with a relevant Data Protection Authority:


United Kingdom

Information Commissioner:

Wycliffe House
Water Lane
Wilmslow, Cheshire

Tel: (+44) (0)303 123 1113 (local rate) or (0)1625 545 745



Autoriteit Persoonsgegevens:



Tel: (+31) (0)70 888 85 00


15.Changes to this Privacy Notice

We reserve the right to modify or amend this privacy notice at any time and for any reason, providing it maintains compliance with the General Data Protection Regulation (EU) 2016/679).

Any changes we make to this privacy notice will be made available to you using the Networx system.