Processing of data obtained through application or registration
By submitting an application for an advertised position or registering in our database, you provide us with certain information that is considered personal data under the provisions of the Act CXII of 2011 on the right of informational self-determination and on freedom of information (Privacy Act). Please be informed that data provision is voluntary, and our company shall only request data that is necessary for your application or registration. The collected data shall be handled in accordance with the provisions of the Privacy Act.
Compulsory information is marked with a red star. The provided information is recorded in the database used during the company’s recruitment and selection process. As data controller, we may assign additional information to the data obtained during the selection process, including additional data shared or received during the selection processes, results and evaluation of the selection process, the purpose of which is to support and conduct the selectionprocesses.
In addition to the above, we may use the data to prepare statistics, reports and other summaries for internal use to plan, monitor, assess the effectiveness of, and evaluate the recruitment processes.
Legal basis of data processing
The legal basis of data processing is the following: consent of the data subject given pursuant to point a) of section 5 (1) of the Privacy Act; in certain cases point b) of section 6 (5) of the Privacy Act to enforce the data controller’s interest if a consent is withdrawn.
Purpose of data processing
The data is processed for the following purposes: recruiting human resources; selecting human resources and conducting processes to fill the advertised positions; taking into account information previously recorded in the database of applicants for a later process that aims to fill a vacant or a newly established position; establishing and maintaining contact; carrying out evaluation; planning, evaluating and measuring the effectiveness of the data controller’s campaigns; and operating a candidate referral system of the contracted recruitment partners of the data controller; and making accounts of candidate referrals.
The data is processed by NNG Software Developing and Commercial Limited Liability Company (registered office: H-1037 Budapest, Szépvölgyi út 35-37, Hungary). The provided data is accessible to the staff of NNG LLC’s HR department, in addition, the company’s employees, leaders involved in the selection process, and IT specialists performing a variety of IT tasks related to the operation of the data controller’s computer system.
Duration of data processing
Your personal data is retained for a period of 2 years after your application or registration, unless you specifically request the deletion thereof.
We send you a notification email to your given email address 6 months before the deadline of the data processing expires, which contains an activation link, and which informs you that your data will be deleted at the end of the 2-year period. The activation link enables you to extend the data processing period by 2 additional years and to update your data as described in the “Data modification” section.
In the event you withdraw your consent within 1 year after your application or registration, we will keep certain data (name, date of birth, email address) for the purpose of operating a candidate referral system and making accounts of referrals with our contractual recruitment partners for a period of 1 year after your application or registration.
You may update your data at any time after your application or registration by recording your data as new data recording on the registration interface. The system checks whether there are any matches in the database, and if yes, it shows the following message: “Your data already exists. Would you like to update?” By pressing “yes”, you may go on with your registration and record your current data. In this case, your previous data will not be automaticallydeleted, except if you specifically request so, as described in the “Data deletion” section.
Your data may be deleted upon your request, by sending an email to email@example.com or a letter addressed to the HR department of NNG LLC at H-1037 Budapest, Szépvölgyi út 35-37, Hungary. In this case, your personal data shall be immediately deleted from our database; however, if you withdraw your consent within 1 year after your application or registration, your name, email address and date of birth shall be kept for the duration and purposes specified in the“Duration of data processing” section, independent of the withdrawal of your consent.
Employment of data processor
The data controller employs EVOLUTION CONSULTING Training and Consulting Plc (registered seat: H-3531 Miskolc, Báthory I. utca 12, Hungary) as data processor to perform certain data processing tasks, such as providing server services, improving and maintaining the databases used for recruitment and selection purposes, and operating and maintaining the related web interface.
Traffic data, cookies
Personal data that are technically needed for the provision of services or maintaining the data security level required by the Hungarian law on privacy is recorded in log files created on the server operated by the data processor.
Such data includes in particular:
- the IP address from which the visitor has reached the web page;
- the IP address that contains the link from which the visitor has reached the web page (“referrer”);
- date and time of visit;
- type of browser and operating system used by the visitor;
- protocol data;
- information about the accessed files;
- amount of downloaded data;
- information about the status of connection.
This information may be considered as personal data by the Hungarian law on privacy. The purpose of data processing is to provide a technical background for the provision of services and increase the efficiency of the service specified in the relevant contract of use.
When downloading certain parts of the web page, the web server may automatically send small data files (cookies) to your computer. In certain cases, these data files may be considered as personal data by the Hungarian law on privacy. These data files are necessary for the proper operation of the web page, and you can control the use thereof by setting your browser accordingly. However, some website features or services may not function properly without cookies.
NNG LLC observes regulations regarding the security of personal data, and NNG LLC and its authorized data processor implement appropriate technical and organizational measures to protect personal data, as well as adequate procedural rules to enforce the provisions of the Privacy Act concerning confidentiality and the security of data processing.
Rights and enforcement
By sending an email to firstname.lastname@example.org or a letter addressed to the HR department of NNG LLC at H-1037 Budapest, Szépvölgyi út 35-37, Hungary, you can request information concerning the data relating to you, including the sources from where they were obtained, the purpose, grounds and duration of processing, and – if your personal data is made available to others – the legal basis and the recipients. You may also use the above contact addresses to request the rectification, erasure, or blocking of your personal data.
You may use either of the above contact addresses to object to the processing of data relating to you:
- if the personal data is controlled (transferred) to fulfill the legal obligations of the data controller, or enforce the rightful interests of the data controller, data recipient or third party except in the case of mandatory data control;
- if the personal data is used or transferred for direct marketing, public opinion polls or scientific research purposes;
- if the enforcement of your right to object is otherwise granted by the prevailing legislation.
Please be informed that your data shall not be deleted if the processing thereof has been prescribed by law.
You may lodge a complaint about the processing of your personal data to the National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi És Információszabadság Hatóság), or turn to court pursuant to the provisions set forth in the Privacy Act.