Privacy Statement

APG looks after the pensions of workers and employers in education, the public sector, the construction industry, the cleaning and window cleaning industry, the housing corporation sector, the energy and utilities industry, the sheltered employment organizations, and the architecture industry, as well as the pensions of medical specialists.

In managing and administering pensions, APG processes personal data on a large scale. APG furthermore processes the personal data of its own staff and others working for APG. And finally, APG processes the personal data of visitors to its website(s).


How we handle your privacy

APG takes your privacy extremely seriously. We handle privacy with due care, respect, and confidentiality. APG wants anyone whose personal data we process to be able to trust the way we handle their privacy and personal data.

Read this privacy statement to find out how we do that. We are always transparent about what personal data we collect and how and why we collect that personal data. And we let you know exactly how long we will keep the personal data on file. Aside from that, we inform you about any third parties with whom we share your personal data, and we make you aware of your rights and how to exercise them.

This privacy statement is, together with the cookie statement, part of APG’s Data Protection Policy (only available in Dutch). In it, APG details how we fulfill our obligations under privacy laws and regulations, and especially under the General Data Protection Regulation (GDPR).


Why we process personal data

To be able to provide the best possible service to you and do our work to the highest quality standards and as meticulously as possible, APG collects and processes personal data.


APG processes personal data for various purposes. First of all, we process personal data as part of our operations as a financial services provider. And secondly, we process personal data in the context of good employment practices. But we also process your personal data if we procure goods or services from you. And finally, we record personal data of visitors to our websites, so as to be able to communicate with them about our websites, and ultimately improve our websites’ user-friendliness.

Personal data

How long we keep your personal data on file

We keep your personal data on file for as long as necessary for the purpose for which we need the personal data and for which we are authorized to process the personal data. We always abide by legal retention periods in this respect. Retention periods differ and depend on the nature of the data we use. Data that is relevant to the Dutch Tax Administration, for example, is kept on file for at least 7 years. Personal data concerning your health is kept on file for at least 15 years. Data submitted as part of a job application procedure will not be kept on file for longer than 4 weeks without your consent, and video footage will not be kept on file for longer than 4 weeks without your consent either.

Keep personal data

Referral - retaining data for referring potential colleagues

APG has a referral program to encourage employees to refer people from their network to vacancies at APG. By completing the referral form, the referrer agrees to the storage of his name and e-mail address by APG for a maximum period of 1 year, with the consent of the nominated candidate. After the term, this data will be automatically deleted. We only store this data for the purpose of making a link between the referrer and the nominated candidate and to reward the referrer - in the event of a successful mediation. If the nominated candidate decides to actually apply, APG's privacy policy regarding application data will apply.

Your rights

You have the right to be kept informed by us on what personal data of yours we process. And you also have a right of access to your personal data and a right to rectification and/or erasure of your personal data. Aside from that, you can exercise your rights to restrict the processing of your personal data, to data portability, and to object to a processing operation.


Whenever you contact us to exercise any of these rights, we will respond no later than one month after receipt of your request. This term may be extended by two months. If we decide to extend this term, we will notify you thereof within a month after receiving your request.


If we decide not to fulfill your request, we will let you know and explain why no later than one month after receipt of your request.

Rights personal data