Processing of personal data

DNB is a “controller” as defined in the General Data Protection Regulation (GDPR). We handle the personal data that we process with all due care and we adhere to the principles of the GDPR. This includes refraining from processing more personal data than necessary and properly securing personal data. To this end, we take physical measures (e.g. storing documents in lockable cupboards), logistical measures (e.g. restricting access to personal data), technical measures (e.g. encryption) and procedural measures (e.g. staff awareness programmes on careful handling of data). If personal data are processed outside the EEA, we take steps to ensure that those data remain adequately protected.

In this privacy notice, we explain how and why we process personal data.  

Should you have any questions regarding personal data, please contact the Privacy Office. View the page ‘Recipients of personal data, your rights, and contact details’. 

This is our privacy notice. We reserve the right to amend this privacy notice at any time. This version – 3.0 – was drawn up on 21 june  2022.  

Retention periods for personal data processed by us for our statutory tasks can be found in the selection lists as published by the National Archive (in Dutch).  

In those cases where we process personal data on legal grounds other than those covered by our statutory tasks, retention periods are published within DNB.  

Should you have any questions regarding personal data, please contact the Privacy Office. View the page ‘Recipients of personal data, your rights, and contact details’.