News for hackers. Stuff that matters.
Re:Ask HN: Can companies ask for private info before any int... by mingodad on Saturday February 02, 2019 @08:55AM (#19062971)
Here is what they ask:

Hi XXXXX!

Thank you for reaching out to us, may I ask you how you found us and what peaks your interest in XXXXXX ? You have built some impressive tools, and I think we can offer you a set of great challenges in your daily work. You can find a brief intro to XXXX: https://XXXXX.XXX/onepager.pdf

I will briefly outline the steps of our hiring process so you have all necessary information and know what is going to happen. Luckily, it's not that complicated. As a startup, we can allow our hiring process to be a lot simpler and faster than what you will find at most big companies! We just want to evaluate a few core competences, the rest we can teach you.

Step 0: CV

Could you please share your CV, including:

- date of birth

- phone number

- physical address

- citizenship

- marital status

- IBAN

- Copy of your passport

After we collected all information we will start the evaluation process. Please note that if there is some personal information which you prefer not to share yet, that is ok! We hope that you can send this to us before the interview in step 2. Furthermore, any confidential information can be encrypted using my PGP key: https://XXXXX.XXX/pgp.asc

Step 1: Challenge We first give all of our candidates a challenge. This challenge is by far our most important means of evaluation, so your effort will be greatly appreciated. Instead of a whiteboard interview, we have chosen for our test to be more similar to the type of work that you will be doing at summitto on a daily basis. That way you know what is awaiting you and we know that you are up for the challenges ahead. Although most of our applicants have been able to finish their challenges in a weekend, we do not set a time limit on any of our challenges, and the time is not taken into account in our evaluation. For us, communicating well and achieving good results are more important than the speed at which you can achieve them. We prefer quality over quantity, same as in our daily business!

Step 2: Interview If the results of the challenge are promising, the interview will only be a formality in which you can talk to our team members during two to three interviews. This is really just a social check to see if we like each other and to see whether we can work together for many hours a day in the same room ;) but no more tests or coding required!

Step 3: offer You made it. The challenge looks great, we match on a personal level, and you've managed to excite us about your talent. We'll send you an offer as soon as possible, normally within a week, and we will discuss which items and equipment we can order to get you all settled in our office.

We're looking forward to working together with you!

Secure regards,

Re:Ask HN: Can companies ask for private info before any int... by davismwfl on Saturday February 02, 2019 @09:09AM (#19063032)
I would quickly pass on this, sounds more like an identity theft method disguised as a job posting. IBAN is linked to your bank account if I understand it correctly, so that's a big no.

Outside the US it isn't rare to see people asking age and marital status (lots of CV's even have it on there), which to American's is a big no-no as it can land the company into trouble with the government. IIRC through it isn't technically illegal in the U.S., just dangerous grounds to be on and all companies train you to avoid those types of questions, or even questions like how many kids etc.

Re:Ask HN: Can companies ask for private info before any int... by yashap on Saturday February 02, 2019 @12:08PM (#19064128)
Yeah, I’m sure there’s variation country-to-country, but in Canada this application would be ridiculous (and likely illegal?), with HUGE identity theft alarm bells going off.
Re:Ask HN: Can companies ask for private info before any int... by Jare on Saturday February 02, 2019 @09:57AM (#19063267)
A lot of that info was traditionally included in CVs in Spain (dob, phone# and address, citizenship, marital status and even driver permit situation, and a photo). These days it is increasingly rarer, and if a company asks it for a tech position it would definitely be a big red flag.

But, IBAN and copy of your passport, in a CV??? I can't believe it is not an outright scam.

Steer clear either way.

Re:Ask HN: Can companies ask for private info before any int... by mapperson on Sunday February 03, 2019 @04:27AM (#19068613)
Not sure about your industry, but during the +10 years that I've been working as Software Engineer in Spain, nobody has asked me for:

- Date of birth: Never been asked that, but they could guess from my graduation date, I suppose.

- Address: Never been asked that. Only if I live in the same city (or close to that). Why should I have to give them my address?

- Marital status: Never been asked that and would be a big red flag IMO. Could be illegal, don't know.

- Driving license: Usually an optional field in resume web forms. Not required unless some travel by car is expected (not my case).

Only full name, citizenship (if Spanish, EU, or residence permit, obviously), city of residence, email and phone (to contact me, obviously). As long as you're legal and speak medium level of Spanish and English, you're clear.

In Spain is expected to include a photo in your CV, but it's not already the case in the world with professional social networks like LinkedIn? Thus, they are going to see me in the recruiting or HR interview, so what's the point on not including it?

Once an employee, IBAN is asked before the first salary monthly payment (obviously) and a photocopy of his/her national ID (or passport) for their legal department.

Re:Ask HN: Can companies ask for private info before any int... by musha68k on Saturday February 02, 2019 @11:08AM (#19063693)
Even if they would be a legitimate company they would need to understand that in this market they are not buying but selling.

So apart from blatant privacy issues - way too many hoops.

Scam either way, stay clear.

(the hiring dynamics described in this article are basically valid for all devs in the current market - pretty much everywhere - don't fall for anachronistic HR schemes: https://hiringengineersbook.com/post/trouble-hiring/)

Re:Ask HN: Can companies ask for private info before any int... by cimmanom on Saturday February 02, 2019 @09:01AM (#19062995)
In the US at least, asking for DOB and marital status could potentially put the company in hot water.

The rest just looks sketchy from an identity theft perspective and is truly unnecessary at the early screening stages of hiring. Even if it’s legal wherever this company is located, I would hard pass on this.

Re:Ask HN: Can companies ask for private info before any int... by mingodad on Saturday February 02, 2019 @09:10AM (#19063034)
Thank you for reply !

Yes I know that happen in USA and also in UK.

Can someone from Netherlands say how is it there ?

Cheers !

Re:Ask HN: Can companies ask for private info before any int... by tnolet on Saturday February 02, 2019 @10:00AM (#19063282)
I’m Dutch. All of the requested data are legal to request as an employer in the Netherlands. Asking for an IBAN number (which is not considered “secret” btw) up front is a bit much though. You would only need that in case you are hired and they need too send the salary somewhere.

See list (in Dutch though) https://www.easypersoneel.nl/files/bewaarrichtlijnen-persone...

Re:Ask HN: Can companies ask for private info before any int... by jib on Saturday February 02, 2019 @11:11AM (#19063712)
It is legal to request, but you would/should never do so as part of interviewing.

You really don’t want to know the candidates age, marital status or citizenship as part of an interview process. Once you do, you’re open to discrimination lawsuits for your hiring practises. Avoid asking questions that reveals information about stuff that is protected from discrimination.

https://www.government.nl/topics/discrimination/prohibition-...

Re:Ask HN: Can companies ask for private info before any int... by Vinnl on Saturday February 02, 2019 @11:36AM (#19063875)
Well, perhaps the IBAN is officially not considered secret, but it's still pretty sensitive - one bank had to disable a new feature in their app that allowed people who knew your phone number to obtain your IBAN: https://nos.nl/artikel/2268664-abn-schakelt-nieuwe-functie-t...
Re:Ask HN: Can companies ask for private info before any int... by marijnz on Saturday February 02, 2019 @11:25AM (#19063795)
Hey. Also Dutch. Most of the things being asked are pretty normal to me (but it's more than I would expect a company to ask for...). I only find the IBAN weird to ask. Did you ask the company why they want your IBAN already? If it's a valid company, I'm pretty sure they're able to answer you.
Re:Ask HN: Can companies ask for private info before any int... by zAy0LfpBZLC8mAC on Saturday February 02, 2019 @12:20PM (#19064214)
No clue about NL specifically, but I would think a bunch of those should be illegal under GDPR?
Re:Ask HN: Can companies ask for private info before any int... by alxlaz on Saturday February 02, 2019 @11:34AM (#19063864)
Frankly, this is the kind of email that makes me reach out to them over some other means of communication to tell them that I've received a suspicious email which makes me believe their email server has been hacked.

At least two of these questions are risky (if not outright illegal) to ask almost everywhere in the civilized world. Worse: there are countries where the phone number, address and the information on a passport may be enough to convince a bank that you've "signed" a sponsorship deal with an NGO, agreeing to deposit a (small) sum of money from an account with a known IBAN account every month.

If this is real and legit, whoever is managing the hiring process there has screwed up big time...

Re:Ask HN: Can companies ask for private info before any int... by detaro on Saturday February 02, 2019 @09:17AM (#19063077)
Looks phishy. Too much information, some of those really should be irrelevant, and others at least have a reason given why they need them. (I.e. there's cases where I could see why they want a proof of citizenship early, but they'd need to say that then. I guess many CVs have phone number and address normally, but those also can be queried once needed. etc.).

Can't comment on the legal situation, especially not without knowing the country.

Re:Ask HN: Can companies ask for private info before any int... by mingodad on Saturday February 02, 2019 @09:26AM (#19063120)
Thanks for reply !

The country is Netherlands.

Re:Ask HN: Can companies ask for private info before any int... by Gonzih on Saturday February 02, 2019 @10:54AM (#19063592)
I never saw an employer asking for IBAN. Feels shady to me.
Re:Ask HN: Can companies ask for private info before any int... by leroy_masochist on Saturday February 02, 2019 @10:00AM (#19063280)
This is identity theft. If it were real they wouldn't need your passport, date of birth or IBAN until they'd already hired you.
Re:Ask HN: Can companies ask for private info before any int... by rootsudo on Saturday February 02, 2019 @09:51AM (#19063232)
I think it's just a test, knowing that the company is summitto . Are you able to say no and reply properly?
Re:Ask HN: Can companies ask for private info before any int... by idle_zealot on Saturday February 02, 2019 @10:25AM (#19063429)
>> may I ask you how you found us and what peaks your interest in XXXXXX ?

May be they should of proof read there copy.

Re:Ask HN: Can companies ask for private info before any int... by mingodad on Saturday February 02, 2019 @10:42AM (#19063529)
I edited the message and put the XXXX in place to not expose that info, but someone here already got it, yes it's summitto.com and I was looking for the link here on HN and it seems that it was removed, probably after this post.
Re:Ask HN: Can companies ask for private info before any int... by chrisseaton on Saturday February 02, 2019 @11:31AM (#19063832)
No they mean you don't 'peak interest', you 'pique interest'. What would 'peak your interest' even mean?
Re:Ask HN: Can companies ask for private info before any int... by kaikai on Saturday February 02, 2019 @11:30AM (#19063823)
You left it in farther down in the post, in case you wanted to edit it.
Re:Ask HN: Can companies ask for private info before any int... by mingodad on Saturday February 02, 2019 @12:59PM (#19064491)
Thank you for reply !

I can not edit anymore, it seems that the software disable that option after some time or other event has passed.

Re:Ask HN: Can companies ask for private info before any int... by ummonk on Saturday February 02, 2019 @11:36AM (#19063876)
I think the GP is referring to the “peaks” spelling which should have been spelled “piques”.
Re:Ask HN: Can companies ask for private info before any int... by mattnewport on Saturday February 02, 2019 @12:07PM (#19064123)
Maybe they should have proofread their comment.
Re:Ask HN: Can companies ask for private info before any int... by obstacle1 on Saturday February 02, 2019 @12:18PM (#19064203)
Please don't ever give a person a copy of your passport as part of a job application. You are being scammed.
Re:Ask HN: Can companies ask for private info before any int... by kabdib on Saturday February 02, 2019 @11:11AM (#19063710)
So many red flags there. Run away.
Re:Ask HN: Can companies ask for private info before any int... by droithomme on Saturday February 02, 2019 @12:39PM (#19064339)
I concur with the others. I'd be shocked if this wasn't some kind of identity theft scheme.
Re:Ask HN: Can companies ask for private info before any int... by tyagis on Saturday February 02, 2019 @07:49PM (#19066984)
You left the company name above BTW.
Re:Ask HN: Can companies ask for private info before any int... by imhoguy on Saturday February 02, 2019 @10:46AM (#19063545)
IANAL. In EU it is too much information upfront which puts this possibly legit company in a dark area of GDPR and equality laws. Phone number and eligibility to work in EU is fine. The company may eventually ask remaining once you accept an offer. Still scanning a passport is a fishy practice if they can verify it when you visit them on site.
Re:Ask HN: Can companies ask for private info before any int... by czbond on Saturday February 02, 2019 @11:35AM (#19063873)
This is a scam. Don't do this.
Re:Ask HN: Can companies ask for private info before any int... by summitto on Tuesday March 05, 2019 @03:06PM (#19313738)
This is not how we wanted to be featured on Hacker News but here it is. First of all let me start by saying: yes, we are legally required to ask all those questions in the Netherlands at a certain point, and to delete all of the data if we don't hire you. Do we have to ask all of this information in the first mail? No! In fact, our only goal was to have an efficient hiring process. Improving privacy is our company's mission, so we took the author of this post very serious, even before we came across this. Although we always made clear this information is optional and can be shared at later stages as well, we did not realize that it could be interpreted by our candidates as if he/she might get rejected if they refuse to share information. We do not want anyone to feel pressured. We therefore went back to the drawing board and changed our procedure.

Fortunately we only sent this mail to a handful of people before we realized that this is not the right approach. In the end, what we really wanted to know was: "Are you allowed to work in the EU?" But then we realized why stop there? We improved our process to ensure candidates are only asked to share a minimum amount of data! Feel free to check it out: https://summitto.com/hiringprocess

As other commenters have already stated, most information we ask is standard and in ~70% of the cases already answered in CVs we receive anyway because most of our applicants come from Germany, the Netherlands or Belgium. We learned now that as we target a global audience those "standard" questions are not a worldwide standard.

Some of you were suspicious that we base our hiring decisions on this information.

Let me state this very clearly: this requested information was never used to evaluate applicants. Summitto evaluates you only on your coding skills, and nothing else. We point to the fact in our first mail to the author of this post: "Please note that if there is some personal information which you prefer not to share yet, that is ok!" Moreover, we clearly stated this again in a second mail to the author of this post as well.

Regarding the IBAN account number: this information is essential to reimburse any flight expenses and of course to pay your salary. For the US citizens in this thread: no, sharing your bank account number in the EU is not comparable to how it works in the US banking system. IBAN numbers are not private or easily exploitable data. Still, we have now scrapped this question from our first email.

Although we truly appreciate the author's criticism in this post regarding the threat of theoretically losing his/her privacy, we would like to point out the irony that by complaining without properly anonymizing the data he/she actually violated ours.

We value the privacy of all of our candidates. We encourage them to protect the data they send using PGP, so it is encrypted in transit and at rest. Any data which belongs to applicants which were not hired is deleted within 30 days after the last contact.

Re:Ask HN: Can companies ask for private info before any int... by arthurcolle on Saturday February 02, 2019 @11:38AM (#19063902)
what a fucking joke. jeez some people have zero scruples