Privacy Notice

This Privacy Notice was last updated* on 28 July 2026.


1. Who is responsible for processing of your personal data?

KPMG Central Services VOF/SNC, having its office at Luchthaven Brussel Nationaal 1K, 1930 Zaventem, Belgium, and registered under company number 0473.719.789, RPR/RPM Brussels (hereafter referred to as “KPMG”), processes your personal data, in its capacity as data controller or as data processor of another Belgian KPMG entity, in accordance with the applicable European privacy legislation (including the General Data Protection Regulation 2016/679 - hereafter referred to as “GDPR”), the national privacy legislation (including but not limited to the Belgian Law of 30 July 2018 concerning the protection of natural persons with regard to the processing of personal data) and all applicable related jurisprudence and guidelines.


2. What personal data do we process?

KPMG may process the following personal data:

  • Contact details (such as your first name, last name, address, e-mail address, phone number);
  • Personal information (such as your date of birth, license plate);
  • Professional information (e.g., information contained in your resume and/or your profile on a public networking website, such as your education and training, (language) skills, professional experience, former employer, former title/function);
  • Information on your right to work in Belgium;
  • Images of you (photos and/or videos);
  • Dietary requirements (such as food intolerance and/or allergy);
  • And/or any other information that you may provide.

3. How do we collect your personal data?

KPMG may collect the personal data that:

  • You provide to KPMG through a dedicated website, online platform, application, survey and/or any other channel you use to contact KPMG or another Belgian KPMG entity;
  • You provide directly to a person working at KPMG or another Belgian KPMG entity (e.g., within the context of KPMG’s referral process);
  • A third party (such as universities, high schools, business schools, student associations, recruitment agencies, recruitment platforms) has transmitted to KPMG
  • You provide for your registration for an event (such as recruiting or networking events) that KPMG and/or another Belgian KPMG entity organizes, sponsors or in which KPMG and/or another Belgian KPMG entity participates;
  • You publish on a public networking website (e.g., LinkedIn).

And for which you shall remain solely responsible.


4. For which purposes do we process your personal data?

KPMG only processes your personal data for specified, explicit and legitimate purposes and will not process your personal data further in a way that is incompatible with those purposes, which may be the following:

  • Communicate with you;
  • Carry out selection and recruitment activities;
  • Review and assess your profile, application and/or suitability for a position within KPMG or another Belgian KPMG entity;
  • Build and enlarge KPMG’s recruitment and talent pool;
  • Invite you to events (such as recruiting or networking events);
  • Take (pre-)contractual measures in relation to your engagement or employment within KPMG or another Belgian KPMG entity;
  • Contact you about job openings and recruitment opportunities, including through public networking websites such as LinkedIn;
  • Capture, store, reproduce images of you and/or publish them on KPMG’s (online) communication media (including but not limited to KPMG’s event websites and social media pages).

5. On which legal grounds do we rely for processing your personal data?

Depending on the purpose of the processing, KPMG may rely on the following legal grounds in order to process your personal data:

  • Processing can be based on your consent, as provided for in Article 6(1)(a) of the GDPR. For example, KPMG will ask for your consent to process personal data in order to add interesting profiles from a public networking website (e.g., LinkedIn) to its recruitment and talent pool or to publish images of you taken during an (online) event on KPMG’s communication media (including but not limited to KPMG’s social media pages).
  • Processing can be based on your explicit consent, as provided for in Article 9(2)(a) of the GDPR: for example, KPMG will ask your explicit consent for the processing of your personal data related to dietary requirements.
  • Processing can be necessary to take steps at your request prior to entering into a contract or for the performance of a contract to which you are party, as provided for in Article 6(1)(b) of the GDPR: for example, KPMG may process personal data in order to establish a (employment) contract with KPMG or another Belgian KPMG entity.
  • Processing can be necessary for the purposes of the legitimate interests pursued by KPMG, as provided for in Article 6(1)(f) of the GDPR: for example, KPMG may have a legitimate interest in contacting you about job openings and recruitment opportunities, including through public networking websites such as LinkedIn.

6. Who has access to your personal data?

Your personal data may be shared with other entities of the KPMG network in the framework of the above-mentioned purposes.

In the context of these processing activities, KPMG may call on several (sub)processors for:

  • Providing and operating KPMG’s recruitment platform and talent pool;
  • Supporting the organization and/or facilitation of events (including but not limited to the distribution of packages or goodies to the attendees);
  • Performing aptitude tests via external test platforms in order to assess your suitability for a position within KPMG or another Belgian KPMG entity.

KPMG may also publish images of you (photos and/or videos) on its communication media (including but not limited to its social media pages) and make them accessible to other users of these media in digital and printed form. In the context of these processing activities, KPMG may process your personal data by publishing them on its social media pages. In this respect, KPMG and the respective social media platform act as “joint controller” and have undertaken the necessary action to be compliant with the requirements of Article 26 of the GDPR.


7. Where do we process your personal data?

Your personal data will mainly be processed in the European Economic Area (hereafter referred to as the “EEA”).

In addition, some of your personal data may be transferred outside of the EEA to outside companies working with KPMG or on its behalf for the purposes described in this Privacy Notice (e.g. in relation to (IT) support and/or infrastructure services). KPMG may also store personal data outside the EEA. If KPMG does so, your personal data will continue to be protected by an appropriate safeguard provided for in the GDPR (such as the standard contractual clauses issued by the European Commission).


8. How long do we keep your personal data?

KPMG will not keep your personal data longer than necessary for the purposes for which they have been collected or otherwise processed. The precise retention time will depend on the purposes for which KPMG processes your personal data. For example, your personal data may be kept for the following periods:

  • Organization and facilitation of KPMG events (such as recruiting or networking events): a maximum of six (6) months following the end of the event, unless you give your consent for an additional period;
  • Selection and recruitment activities based on your consent (such as enlarging KPMG’s recruitment platform and talent pool): a maximum of two (2) years after receiving your personal data, unless you give your consent for an additional period of two (2) years;
  • Selection and recruitment activities based on KPMG’s legitimate interests (such as contacting you about job openings and recruitment opportunities, including through public networking websites such as LinkedIn; inviting you to recruitment or networking events): a maximum of two (2) years after KPMG’s last contact with you;
  • (Pre-)contractual measures: a maximum of ten (10) years after the termination of your (employment) contract with KPMG or another Belgian KPMG entity.

If you withdraw your consent or object to further processing, your personal data will be retained by KPMG for the applicable retention period, but only for the purpose of ensuring compliance with the right you exercise as a data subject. At the end of the retention period, your personal data will be deleted.


9. What rights do you have as a data subject and how can you exercise them?

You have the right to access, rectify and erase your personal data as well as to restrict or object to the processing of your personal data. In addition, you have the right to data portability. You also have the right to withdraw your consent at any time. The withdrawal of your consent shall not affect the lawfulness of processing based on your consent before its withdrawal.

You can exercise these rights by filling out this form and KPMG will make all reasonable and practical efforts to comply with your request, so long as it is consistent with applicable law and professional standards.

You also have the right to lodge a complaint with the Belgian Data Protection Authority should any of your rights be violated.

For the sake of completeness, your personal data will be processed in accordance with KPMG’s Privacy Statement, and where applicable, your images will be processed in accordance with KPMG’s Image Policy.


* KPMG may modify this Privacy Notice from time to time. When KPMG makes changes to this Privacy Notice, KPMG will revise the updated date at the top of this page. KPMG encourages you to periodically review this Privacy Notice to be informed about how KPMG is protecting your personal data.


Dutch version of this Privacy notice
French version of this Privacy notice