In view of the fact that the workers from the cleaning company providing services to the bank need to work on the bank's premises for extended periods, the bank requires the cleaning company to provide the personal data of the workers for identification purposes. This practice is in general appropriate, but the bank must nonetheless take care not to infringe on the right to information of the workers concerned, by taking such caution as to ascertain whether the cleaning company has kept the workers properly informed and whether it has made a personal data collection statement.