Adyen Applicant Privacy Notice
Please read this Privacy Statement if you would like to know more about the way Adyen and its group companies around the world (hereinafter referred to as ‘Adyen’ or ‘we’) collect and further process your personal data.
When you apply for a job at Adyen, we process personal data about you as a data controller (or such other equivalent role as applicable in the country of the position you are applying for).
It is important to us that your personal data that we process is treated with care and that you are well informed about the way we process your data. We have written this Privacy Statement to tell you which data we process, how, why and how long we do this for and to inform you about your rights.
When, why and how do we process your data when you apply to Adyen?
When you apply via our website
When you apply via our website, you will be asked to fill out a form and provide information such as your name, contact details, resume and cover letter. The fields on the form which are marked with a red asterisk are required data fields for us to be able to consider and progress your application. The other fields are optional and you may fill them out if you wish.
When you apply during one our events
When you apply during one of our (recruitment) events, you will be asked to register via a short form on which you are asked to provide your name and contact details. After registering, we will contact you and ask you to provide additional information to proceed with your application, such as your CV.
We process this data to assess your suitability for positions within Adyen. We use this data for our legitimate interests of being able to administer and manage our recruitment process.
When you have received an offer
If we choose to make you an offer, we will ask you to send us a copy of your ID, because we have a legal obligation to verify the identity of the people we would like to hire. You have the choice to redact your social security number, if this is shown on your ID, because we do not require this information for our checks.
Where we choose to make you an offer, we will also ask you to send us your telephone number and potentially also your home address (if not already provided), in order to be able to send you a company device (laptop). Please note that we will take your calling preferences into account. We process this information to be able to send you a company device (laptop) and provide you with a welcome gift.
When you work as a freelancer
If you come to work at Adyen as a freelancer, you will be asked to sign an agreement with us. For this agreement we need to process personal data such as your contact details and bank account information for Adyen’s legitimate interest in making sure that the fiscal aspects of our relationship are well arranged, and to comply with our legal obligations.
When you travel for interviews
If you live in a different country from the location of the open position, we may arrange flights for you to be able to attend interviews in person. If you would like us to book your flight, we will ask you for the information required to book the ticket, among which the dates on which you are available and the expiration date and the number of your identification document (but never any national identification numbers or social security numbers). For processing this data we use a third party services provider. The data is processed for the sole purpose of booking tickets.
When we perform screenings
As we provide services in the financial sector, Adyen is legally obliged to conduct certain screenings. We use a third party to conduct the screenings as described below. If you apply for a position which requires a screening, we will provide you with more information before the screening takes place. We will always inform you on the outcome of the screening.
The screening process involves the following: requesting you to provide a certificate of good conduct, us conducting a WorldCheck and checking whether you are registered in the receivership registry or the insolvency registry. We process information in relation to criminal history or offenses because we have a legal obligation as a financial service provider to verify the integrity of our personnel and to be able to make a decision about whether we can hire you.
In addition, we will check your working experience and educational qualifications. We collect this data for our legitimate interest in ensuring you are qualified for the vacancy.
You will also be asked to provide us with a personal integrity statement. For the personal integrity statement you will be asked to answer some questions. These questions concern your (termination of) employment history and extracurricular/side activities. We process information on your personal integrity statement for our legitimate interests of protecting ourselves against integrity issues which could harm our organization, and against conflicts of interest.
When we perform additional screenings
If you are applying for a position that we consider as a high-risk role, for example due to the possibility of having access to our internal systems, you might be subject to additional screening. Such additional screening includes conducting a credit-check and an internet-scan. An internet-scan includes screening of your social-media accounts. We process this information for our legitimate interest of ensuring the integrity of applicants. If this is applicable to you, you will be informed about the process. In case the additional screening leads to a negative outcome, you will be given the right to defend yourself and to provide additional context.
When we perform an assessments
For some positions which require specific skills we need to use assessments in order to assess your ability to demonstrate these skills. For example, if you apply for a coding position, we may ask you to take a coding test. Similarly, if you apply for a writing position, we may ask you to take a writing test. For positions which require particular presentation or speaking abilities, we may ask you to participate in a video interview.
Any assessment we may ask you to take part in will always be used by us in order to assess to which extent you possess the skills we believe necessary for the particular job you are applying for. We use these tests to make sure that the right people end up in the right positions, which is our legitimate interest.
If an assessment is necessary in your case, we will inform you of this in advance and will always also inform you of the outcome of the test.
When you provide DEI information to us
When you apply via our website, you might be given the choice to answer some Diversity, Equity and Inclusion (“DEI”) questions. You can answer these questions on an entirely voluntary basis and providing, or not providing this information, will have no impact whatsoever on your application. Your recruiter and the people involved in your application process will not have access to your answers. Your answers will be aggregated and anonymized as soon as possible. When we process this DEI information (sensitive personal data and other personal data), we do so on the basis of your explicit consent.
We shall only use anonymized and aggregated information to analyze the data to monitor and improve our DEI efforts within the recruitment process. This includes identifying minority-groups which need to be more actively targeted, understanding patterns between different groups, ensuring everyone experiences an inclusive interview process, and to identify successful sources of minority-groups. We will provide aggregated reports to our internal and external stakeholders. We may also process such data to comply with our legal obligations, such as reporting obligations and complying with quotas.
Please note that your consent can be withdrawn at any moment. This data will be processed by Adyen and its recruitment tool provider Greenhouse (who has access to pseudonymised data).
Data we collect from other sources than you yourself
We sometimes process data about you from other sources than you yourself, for example from the references you include in your resume/CV.
For some of our vacancies, we use third parties such as recruitment agencies, sourcing tools and headhunters, to find candidates. If you (are) approach(ed by) one of these third parties and you decide to apply, these third parties will share your application data with us. Also, when you apply via a referral, the person referring to you will upload your contact details and CV (and possibly other data you have provided to this person) in our applicant tracking system. We will always notify you via email after we have received such data from referrals or third parties and will then send you this Privacy Statement. We will also always notify you if we need any more information from you to be able to progress your application.
We process this data we collect from these sources to assess your suitability for relevant positions with us and therefore for our legitimate interests of being able to administer and manage our recruitment process and to make sure that the right people end up in the right positions.
Other purposes
We sometimes use data we gather during the application phase to carry out statistical analyses of our successful applicants, for example to see which (university) degrees our successful applicants often hold. We use these statistics, which are never kept in any way that allows for identification of individuals, to optimize our recruitment strategy. If necessary, we can also use your information for our legitimate interest of protecting our legal rights, for example in connection with legal claims, and when we have a legal obligation to do so
How long do we keep your information?
We will only keep data for as long as we reasonably need it for the purpose. We usually do not keep any data we process during the application phase for longer than one year following the recruitment decision. We generally keep your data for one year due to the fact that we receive a large number of applications and we need to be able to recognize applications which recur within short periods of time and to be able to refer back to such applications. Therefore, we keep your data for our legitimate interest of being able to administer and manage our recruitment administration and optimize the efficiency of our recruitment process.
If your application was not successful, we may contact you about possibly relevant vacancies which may become available in the future, but only if you have given us permission to do this. We will then delete the information in your application file one year after the recruitment decision, except your name and contact details. We will keep your name and contact details to be able to contact you for future vacancies until you inform us that you would no longer like to receive these updates.
The retention terms can be longer if we are required to keep data for longer on the basis of applicable law or to administer our business. If we need to keep any information longer for our legitimate interest of protecting our legal rights, we will keep the necessary information for this purpose until the relevant claim(s) has/have been settled.
If your application is successful and you become a member of our team, we will transfer the data we have gathered during your application phase to your personnel file, for the purpose of administration of your employment. We will keep and use this data in accordance with the Adyen People & Data Protection Info Sheet (a copy of which will be given to you when you start your job with us).
Whom do we disclose this information to?
We need the help of third parties to be able to manage and administer our recruitment process.
Where necessary we disclose your information with our service providers and professional advisers (e.g. recruitment agencies, providers who carry out screenings on our behalf, and, if applicable to the position you are applying for, suppliers who run candidate assessment programmes for us). We have concluded agreements with our service providers to protect your personal data.
If our business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.
We may disclose information to third parties, such as law firms, in connection with legal claims.
Otherwise we will not “sell” or “share” your information with any third party, as those terms are defined under certain privacy laws, unless we have your permission (for example if we wish to share your details with another group company for their recruitment purposes), where this is necessary in connection with the purposes above, for protecting our legal rights or when we have a legal obligation to do so.
Where do we transfer this information?
Some of the information you send us in support of your employment application may be shared with other Adyen group companies outside of the European Economic Area ("EEA"), when this is necessary for the purposes mentioned above. These countries include the countries in which we have operations (you can find a list here). It also includes the countries in which some of our service providers are located, such as the United States.
In addition, our application portal is hosted by an applicant tracking system, which is hosted in the United States. Our interview scheduling software is also hosted by a provider located in the United States.
To protect your data when this is transferred to countries outside of the EEA, we have implemented appropriate safeguards. When we transfer data to our Adyen group companies, these transfers are protected by an intragroup agreement containing Standard Contractual Clauses (read more here). For other service providers located outside of the EEA, we also rely on Standard Contractual Clauses. If you want to receive more information about these safeguards, you can contact us using the details below under (“Contacting us”).
Your Rights
You may have the following rights with respect to your personal data, subject to applicable exceptions:
Right to access. You may be entitled to request that we disclose to you the specific pieces of your personal data that we have collected about you in a portable and, to the extent technically feasible, readily usable format.
Right to know. You may have the right to confirm that we have collected personal data about you and know what personal data we have collected about you, including, as applicable, the categories of personal data we have collected, the sources from which we collected that personal data, the business or commercial purposes for which we collected, that personal data, the categories of personal data that we disclose to third parties for business purposes and the categories of third parties to whom we disclose personal data. Where we process your data for our legitimate interests, you can contact us if you want more information about these.
Right to deletion. You may be entitled to request that we delete the personal data that we have collected from you. We will use commercially reasonable efforts to honor your request, in compliance with applicable laws. Please note, however, that we may need or be required to keep such information, such as for our legitimate business purposes or to comply with applicable law.
Right to object to processing of your personal data. You are entitled to object to us processing your personal data, including profiling. In some cases, you may object to the processing of your data and, where we have asked for your consent to process personal data, you can withdraw this consent at any time. Please note that Adyen maintains a record of withdrawals of consent to ensure that we do not contact you in the future.
Right to correct your personal data. You may also have the right to update inaccurate information that we process about you.
Right to exercise rights without discrimination. You have the right not to receive discriminatory treatment if you exercise the rights conferred to you by applicable privacy law.
Please note that these rights may be limited under applicable laws and are subject to technical feasibility. For example it will not be possible for us to delete your data if we are required by law to keep it or if we hold it in connection with a contract with you. Similarly, access to your data may be refused if making the information available would reveal personal information about another person or if we are legally prevented from disclosing such information.
Please note that we may require additional information from you to verify your identity and process your request. You can also submit a request via an authorized representative using the contact methods described below. If you use an authorized representative, we may request a copy of the representative’s signed permission to act, verify your identity directly, and ask that you confirm the representative’s authority.
If you wish to exercise any of these rights, please contact us using the details below.
Contacting us, questions and complaints
You can submit a data access or deletion request here.
Questions, comments, requests or complaints concerning this privacy notice and the way we process your personal data are welcomed and can be addressed to our Data Protection Officer at dpo@adyen.com or lgpd@adyen.com (if you are located in Brazil) or Simon Carmiggeltstraat 5-60, 1011 DJ Amsterdam, the Netherlands. Adyen employees responsible for privacy issues will review and assess such complaints received in adherence with Adyen’s policies and procedures.
If you would also like to know the contact details of third parties with which your personal data is shared, the purpose of their data processing, and the manner in which data is processed, and how you can communicate with such third party to exercise your data privacy rights please contact dpo@adyen.com or lgpd@adyen.com (if you are located in Brazil).
If you have a complaint about the way we handle your personal data, you also have the right to address this with the data protection authority of the country in which you live or work or the country in which we are located.