Data protection
Data controller and contact details
POST Luxembourg and POST Telecom SA (hereinafter referred to jointly or separately as ‘POST’) attach great importance to protecting your privacy and are aware of how important this is to you.
- The registered office of POST Luxembourg is located at 38, place de la Gare – L-1616 Luxembourg
- The registered office of POST Telecom SA is located at 1, rue Emile Bian – L-1235 Luxembourg.
You can contact our Data Protection Officer (DPO):
- by email: privacy@post.lu
- by post: POST Luxembourg – DPO, 20 rue de Reims, L-2417 Luxembourg
Data processing (purpose and legal basis)
The personal data POST collects about you through the forms on the careers.postgroup.lu website are subject to digitised processing for the purpose of managing your application electronically: creating a personal account where you can save your applications and store your documents (CV, letter of application, etc.), processing requests, assessing your application, checking the information provided against information in the public domain, matching up applications with posts and/or internal recruitment services, etc.
The legal basis for this processing is legitimate interest – see article 6 1. (f) of the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Nature of the personal data collected
The types of personal data POST collects for this processing purpose are listed below.
- Standard identification data: title, surname, first name, postal address, email address, landline/mobile number.
- Personal characteristics: date & place of birth, age, marital status, nationality, language, hobbies, interests, etc.
- Education, training, professional qualifications: academic CV, schooling, training, diplomas obtained, exam results, patents and professional awards, special licences (operating machinery, etc.), membership of organisations & associations, professional experience/years of service, letter of application, etc.
- Authentication data: login and password used to access your personal account.
- Extracts from the criminal record (only for candidates selected for specific functions where this is requirement).
Recipients and security of your personal data
The personal data collected and processed by POST are exclusively intended for internal use. Only authorised people involved in the recruitment management process will have access to your personal data.
POST implements appropriate and reasonable security measures in light of the risks posed by the processing carried out in order to protect your data against destruction, loss, modification, disclosure or unauthorised access and any other form of illegal processing. Your data are stored securely in an EU or EEA country.
Personal data retention period
Your personal data will be stored for a maximum period of two years from the last time we are in contact with you.
Your rights
You can access your personal data, correct them if they are inaccurate or incomplete, or request their deletion if they are obsolete. You also have the right to object to or limit the processing of your data, and the right to have your data permanently erased (‘right to be forgotten’).
You can exercise your rights free of charge, on the careers.postgroup.lu website directly, by logging into your personal account (‘Login’ section) or by contacting our DPO at the address above. You may be asked to submit a copy of both sides of your identity document along with your request so that we can respond securely.
POST undertakes to respond within one month of receiving your duly completed request.
If, after contacting POST, you feel that your rights have not been respected or that this processing does not comply with data protection rules, you can file a complaint with the National Commission for Data Protection (CNPD) on its website www.cnpd.lu