Privacy and your personal data

You share all kinds of personal data with us, for example, when you visit our website, apply for a job, or conduct transactions with us. We process this data with care and would like to inform you about this clearly and straightforwardly.

Frequently asked questions about our Privacy Statement

Personal data is data that directly or indirectly identifies you. If you are a customer (or customer representative), was a customer of Rabobank or you make contact with us, we collect and process your personal data. For example, we may process your data if you leave your name and e-mail address on our website.

We may process the personal data of the following persons:

Customers & potential customers: we process the personal data of customers, former customers and their representatives, but also of persons who show an interest in us, our products, and services.

Business partners: we process personal data from people who are associated with a company or organization with which we have, want to get, or have had a relationship e.g. employees, directors, or ultimate beneficiary owners. We might also process the data of tenants of our customer or someone otherwise related to a customer.

Sometimes, businesses or organizations provide us with personal data. Examples of this include data of employees, directors, Ultimate Beneficial Owners (UBOs) or stakeholders. We also collect personal data ourselves, e.g. through the Trade Register. We expect you to inform your employees, directors and other stakeholders of this. You can provide them with this Privacy Statement or a link to it, so they can read how we handle their personal data.

This privacy statement is about the processing of personal data by Rabobank Wholesale Banking in the Netherlands. It also contains information on Rabobank’s processing of personal data outside the Netherlands. In the privacy statement on Privacy and your personal data - Rabobank you can find information on the data processing by Rabobank retail banking. Other subsidiaries and associates of Rabobank Group have separate Privacy Statements. Rabobank employees and applicants in the Netherlands also have their own Privacy Statement, as do the members of Rabobank’s local supervisory boards (Privacy Statements by Region - Rabobank). Data can be exchanged within Rabobank Group. Below in this Privacy statement is explained how data exchange work within Rabobank Group.

We receive your data because you share it with us yourself, or because you use our services. For example, when you enter into an agreement with us. Or if you leave your details on our website. Sometimes we don't get your data directly from you. For example, we may receive your data from:

Group units within the Rabobank Group.

Other (financial) institutions.

Suppliers or other parties we collaborate with:
If you apply for a credit or loan, or have a credit or loan, we will receive data from – for example – the Dun & Bradstreet. We also receive data from the Land Registry, and the Chamber of Commerce, among others. In addition, we receive data from parties that offer data sharing applications, which provide data about you. These are often referred to as “source data”.

Public sources such as public registries, newspapers, the Internet and (public) social media. This allows us to use these sources to prevent fraud and money laundering, and protect Rabobank. But we also use public sources for relationship management and promotional and marketing purposes.

Another party:
Because you have agreed to that party sharing data with us. For example, because you have given permission to another bank or payment service provider to transfer transaction data to us.

Other indirect sources:
This is data that we do not obtain directly from you. For example: (i) if your (legal) representative, such as a fiduciary administrator or a third party you have engaged, discloses information to us. Examples of third parties include a broker appraiser, independent intermediary or tax advisor; (ii) if a customer has pledged claims to Rabobank and there is personal data on so-called “debtor lists”.

We may only process your personal data if there is a good reason for doing so. This is referred to as the “basis”. The law on the protection of personal data (the General Data Protection Regulation) specifies the possible bases.

These are the main bases we use:Processing personal data is necessary to enter into and perform an agreement with you and/or others.

Processing personal data is necessary to enter into and perform an agreement with you and/or others.

The processing of personal data is necessary to comply with a legal obligation imposed on us.

The processing of personal data is necessary because the bank or others have a “legitimate interest” in processing your data. Our interest in using your personal data then outweighs your right to privacy.

Because you have given your consent for the processing of personal data.

Balance of interests

In this context, it is explained that “legitimate interest” is one of the bases for the processing of personal data. If we use “legitimate interest” as the legal basis for processing your data, we will balance Rabobank’s interests or those of a third party against your right to privacy. Examples of our interests include the following:

We protect our own financial position. We do this by – for example – assessing whether you can repay your loan, or if we want to resell your loan or other obligations.

We combat fraud, money laundering and the financing of terrorism in order to prevent us or other persons, companies and organizations from being harmed, or to prevent damage to the financial sector. Our internal records must be in order. We must take measures within the framework of business management, and need to check our internal processes.

We do statistical research. This research is performed by – among others – our own research department. This department is called “Rabo Research”. This department measures, for example, economic developments. We also carry out research for internal control purposes, and to be able to – for example – answer questions from regulators.

We create models and calculate risk scores. We do this to assess whether you can repay your credit or loan. And to determine the level of buffers that we as a bank must maintain.

We transfer claims, merge or acquire companies.

We also collect information about customers’ sustainability or their efforts to become more sustainable in relation to our services or products, for example the energy labels of business premises for which we provide a loan. We do this because we have to report on this because – for example – we have made commitments or have obligations. In addition, we can also use this information when making you an offer. We will – for example – also ask you about your sustainability preferences if you want to invest (asset management or investment advice). We do this so that, to the extent possible, we can take your preferences into account within your portfolio. We also do this because we are obliged to do so.

We record data in our basic systems in order to keep our records and services in order. This allows us to use the same data within the bank.

Sometimes the law isn’t clear on exactly what obligations we have when processing your data. Doing so is not an obligation under any law, the law does not apply directly to us, or the law does not apply yet, but we are already taking measures to comply with it. In some of these cases, a regulator requires that we process certain data. In that case, we may also use your data based on legitimate interest. We weigh our interests or the interests of other people, companies and organizations against your interests and your right to privacy. e.g. by trying to see if there are other ways to achieve the same goal, and whether we really need all that data.

We process your data for various purposes. In the Privacy Statement for your region or location, you can read exactly the purposes and legal basis for which we process your personal data. For example, we process personal data to meet our legal obligations (such as Anti Money Laundering, Know Your Customer, or fraud prevention activities) or we process your data because you apply for a position at Rabobank. We can use your personal data for a purpose other than that for which we received it only when new purpose is compatible with the original one.

We always have a purpose when processing personal data:

Establishing a relationship and entering into an agreement: if you want to become our customer, if you contact us or if you are already a customer and request a new product, we will need and process your personal data.

Performing agreements and relationship management: if you are a customer with us, we like to properly perform the orders received and agreements concluded. We have, after all, agreed this with you. When doing so, we process personal data.

Your, the bank’s and the financial sector’s security and integrity: we process your personal data to ensure your security and ours, as well as the security of the financial sector. We also aim to prevent fraud, money laundering and the financing of terrorism.

Developing and improving products and services: we are constantly improving our products and services. We do this for ourselves, for our customers and for other parties.

Promotional and improving products and services: we are constantly improving our products and services. We do this for ourselves, for our customers and for other parties.

Entering into and performing agreements with vendors and other parties we work with: if you have contact with us for your work, we may process your personal data. For example, to establish whether you are permitted to represent your business, or to give you access to our offices, our online services or applications.

Complying with legal obligations: under national and international laws and regulations, we have to collect and analyse a large amount of data relating to you and sometimes transfer such information to European and other government authorities.

For legal obligations: under national and international laws and regulations, we have to collect and analyse a large amount of data relating to you and sometimes transfer such information to European and other government authorities.

For archiving, scientific or historical research or for statistical purposes: We may also process your personal data if this is necessary for archiving purposes in the public interest, for scientific or historical research, and for statistical research or other statistical purposes.

We only share your data with others if there is a lawful reason for us to do so, such as a legal obligation or legitimate interest. For example, we might share your personal with other divisions within the Rabobank Group (e.g. if you do business with the bank in multiple locations or you make use of multiple products offered by the bank). Additionally, we might share your data with parties outside of Rabobank Group, such as the Government/Regulatory bodies or third parties who assist us in the provision of services and where we are legally obliged to do so. We do not sell your personal data.

a. Right to information
With this Privacy Statement, we inform you about what we do with your data. Sometimes we need to provide more information. For example, when we record your data in our incident logs. Then – if permitted – we will inform you separately by letter, by email or by another means of our choosing.

b. Right of access and rectification
You may ask us whether we process personal data relating to you and if so, which data this concerns. In that case, we can give you access to the personal data that relates to you that we process or have processed. or – for example – give you the opportunity to listen back to a conversation. If you feel that your personal data has been processed incorrectly or incompletely, you may request that we change or supplement the data (rectification).

c. Right to erasure of personal data
You may request that we erase data concerning yourself that we have recorded. We are not always obliged to do this, however. And sometimes we are not even allowed to do it. For example, if we still need to retain your data because of legal obligations.

d. Right to restriction
You may request that we temporarily restrict the personal data relating to you that we process. This means that we will temporarily process less personal data relating to you.

e. Right to data portability (transferability of data)
You have the right to request that we provide you with data that you previously provided to us in the context of an agreement with us or with your consent, in a structured, machine-readable format or that we transfer such data to another party. If you ask us to transfer data directly to another party, we will only be able to do this if it is technically feasible.

f. Right to object to the processing of your data
If we process your data because we have a legitimate interest in doing so you can object to this, with statement of the reason why you object. In that case, we will reassess whether it is indeed the case that your data can no longer be used for that purpose. We will stop processing your data if your interest outweighs our interest. We will inform you of our decision and the arguments on which we based this decision.

g. Right to object to direct marketing
You have the right to ask us to stop using your data for direct marketing purposes. You have this right even if you only object to being approached through a certain channel. For example, if you want to continue to receive offers via email, but no longer want to be contacted by phone. We will then ensure that you are no longer contacted through that channel.

At Rabobank, we have implemented Binding Corporate Rules. This means that all entities, in which Rabobank Group has a controlling interest, must meet minimum standards in relation to the collection and processing of personal data of its clients and employees. As an organization, we are committed to taking the necessary organizational and technical measures to protect your personal data when we process it and share that data with third parties.

In addition, all Rabobank employees are subject to confidentiality obligations, meaning that you can trust that your data will not be shared improperly or unlawfully.

Rabobank has committed to protecting your data, however, we also recommend several actions you can take to protect your data:

Install necessary software on your electronic devices (e.g. phones, computers & tablets) to protect their security (e.g. anti-virus, anti-spyware, and firewall software).

Do not leave your unlocked devices or security tokens unattended.

Protect your secure access to systems by logging out when they are not in use and storing passwords securely (e.g. via a secure password manager).

Do not share your login information with other people.

Pay attention to unusual activity such as phishing (via email, text, or call) or security breach alerts. Rabobank will never ask you to provide your password or PIN to validate your identity when contacting you via telephone, email, or text.

If you have a question or complaint about the processing of personal data in your region or location, please contact Rabobank in your region or location. You can also contact Rabobank Group Data Protection Officer at dpo@rabobank.nl or by post, writing a letter to the Global Privacy Office, for the attention of the Data Protection Officer, Postbus 17100, 3500 HG Utrecht. Of course, you can also submit your question or complaint about the processing of personal data by Rabobank to the Data Protection Authority.

Last updated on June 2026.

Privacy and your personal data

Frequently asked questions about our Privacy Statement

What is personal data and from whom do we process personal data?

What does processing mean?

What does Rabobank expect from businesses and organizations?

Who is responsible for the processing of your personal data?

How does Rabobank obtain your personal data?

What does Rabobank use your personal data for?

Legal bases for processing

Balance of interests

For what purposes can we process your personal data?

Who do we share your personal data with?

What rights do you have?

How do we protect your personal data?

What can you do to protect your data?

Do you have a question or complaint about the processing of your personal data?

Can Rabobank change this Privacy Statement?

More about Privacy

Privacy Statement by Region

Cookies

Contact