Privacy Statement for assessment of managerial skills
What is our legal framework?
All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (‘EUDPR’).
Why do we process personal data?
Personal data are processed for the assessment of management skills, which aims to evaluate your managerial capabilities as a candidate applying for ECB positions at management level.
The selection process for managerial roles at salary band I and above includes an assessment of leadership competencies as set out in the vacancy notice. This assessment is conducted by an external firm, Korn Ferry.
The assessment is designed to provide an insight into your competencies, traits, drivers, learning agility and risk factors. It consists of several components: an online self-assessment using the Korn Ferry Leadership assessment (psychological test); an online career history questionnaire, a behavioural interview; a self-presentation (I band only); a business case (J band and above).
The data is used for the purpose of appointment to managerial positions and is obtained in the context of selection procedures, including mobility. Managerial assessments may be relevant to future campaigns that apply to during their period of validity (see below).
What is the legal basis for processing your personal data?
Your personal data are processed by the ECB:
- in the performance of a task carried out in the public interest, based on Article 5(1)(a) of EUDPR, in conjunction with:
- Part 2 of the Conditions of Employment (Employment Relations) and Article 1a.2.7.4 of Part 1A of the Staff Rules (Selection and Appointment);
- for special categories of data only:
- Any special category personal data you choose to provide will be processed because you have provided your explicit consent following the invitation email. You may withdraw your consent at any time by contacting the below mentioned contact point. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.
Who is responsible for processing your personal data?
The ECB is the controller for the processing of your personal data. The Business Partnering Division in Directorate General Human Resources is responsible for this processing.
The data processor is, the external firm providing leadership assessment , Korn Ferry (https://www.kornferry.com/privacy).
Who will be the recipients of your personal data?
The recipients of your personal data (including entities who have access to that personal data) are you as the data subject; designated ECB staff; Employees of the external leadership assessment provider (Korn Ferry); External observers to the ECB selection procedure; external assessors serving in an advisory capacity under Article 1a.2.7.5 Staff Rules.
What categories of personal data are collected?
The ECB and Korn Ferry process the following personal data in the context of the assessment of managerial skills :
- your personal details (name, email, address, etc)
- Education & training details
- Employment details
- Family, lifestyle and social circumstances
On the basis of consent, special categories of data may be processed by Korn Ferry during the assessment process but will not be referenced in the final assessment report that is shared with the ECB. Please note that special categories of data are not required in order for candidates to progress to the next step / be successful in the interview.
The special categories of personal data may reveal:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data, biometric data for the purpose of uniquely identifying a natural person or data concerning health
- Information regarding an individual’s sex life or sexual orientation
Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?
The Korn Ferry helpdesk is 24/7 and can be contacted in case of IT issues (bugs, errors, forgotten a password, etc.). It has a “follow the sun” model globally, which means your data may be handled outside of the EU if/when you contact the Korn Ferry global help desk, dependant on the time of day and the sensitivity of the issue.
If you contact the Korn Ferry helpdesk, your data may also be processed in third countries (United Kingdom, Czech Republic, India, USA, Philippines) based on an adequacy decision of the European Commission (pursuant to Article 47 EUDPR), which can be found on the European Commission's website and EU Standard Contractual Clauses.
How long will the ECB keep personal data?
All reports are stored in the ECB document management system (DARWIN) and the retention period is aligned with the period of validity of the report. Confirmed leadership assessments are stored for a period of 3 years, while not confirmed reports are stored for a period of 1 year.
Where the leadership assessment is conducted in the context of a recruitment campaign, your leadership assessment report will also be stored in the Darwin recruitment folder for that campaign for a period of 2 years in accordance with the ECB-wide Filing and Retention Plan.
What are your rights?
You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) EUDPR.
Who can you contact for queries or requests?
You can exercise your rights by contacting joinus@ecb.europa.eu. You can also directly contact the ECB’s Data Protection Officer at dpo@ecb.europa.eu for all queries relating to your personal data.
Addressing the European Data Protection Supervisor
If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.