Effective from: 2024.04.19.

Privacy Notice

I. PREAMBLE

 

The aim of the Profession.hu job portal is to create opportunities for active and passive employees in the labour market to find new job offers, receive new job offers and then apply for these jobs, and to support them in successfully building their future careers.

 

Active employees as registered users can apply for job advertisements posted / published by employers as contracted third parties on the www.profession.hu portal, or they can receive attractive job offers directly from Profession.hu’s current partners based on their documents uploaded to the CV database and their completed personal profile, or through Profession.hu’s job notification service, or they may be included in the candidates recommended for the attention of Profession.hu’s current partners within the framework of the candidate recommendation service. Passive jobseekers can get fresh and relevant (i.e. tailored to their abilities) job offers with the effective participation of Profession.hu without making any special effort. In addition, Profession.hu provides employees with up-to-date information through its written content and services (e.g. calculators) so that they can confidently and successfully position themselves in the labour market through their awareness.

 

The purpose of this privacy notice (hereinafter: Notice or Privacy Notice) is to provide information with regard to the data management practice followed and applied by profession.hu Korlátolt Felelősségű Társaság (1123 Budapest, Nagyenyed utca 8-14. IV. emelet, Cg. 01-09-199015, hereinafter: the Company or the Service Provider) through the provision of the  services (hereinafter: Service or Services) accessible at the technical interfaces and platforms (hereinafter: Interface) related to the Profession product at the websites www.profession.hu and www.professionservices.hu, according to the Employer Privacy Notice and the Terms of Use. The Company shall be bound by this Notice and its content, respecting the privacy of natural persons [jobseekers, employees, users, site visitors, etc., hereinafter collectively: User(s)] who use the Services in any way.

 

This privacy notice shall be available on the Interface in conjunction with the provisions of the Employer Privacy Notice, the Terms of Use and the General Terms and Conditions, and the provisions and concepts defined therein shall also apply hereto. We inform the Users that a detailed description of each Service is included in the document called the Terms of Use (too).

 

The Company declares that the data processing related to its activities complies with this Privacy Notice and the applicable legislation (including in particular, but not limited to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter General Data Protection Regulation (GDPR) and Act CXII of 2011 on the right to information self-determination and freedom of information). This Notice is continuously available on the Interface.

 

The Company is committed to the protection of the personal data of the Users, it considers it extremely important to respect the right of the Users to self-determination of information. The Company treats personal data confidentially and imposes all security, technical and organizational measures that serve the security of the data. While browsing the Interface and using the Service(s), the User also provides data at the same time.

 

By using the consent(s) given by the User when visiting the Interface or by using the Service(s), or a part of them, or by initiating the use of the Service (s), the User acknowledges and agrees to provide data to the Company and accepts that the voluntary provision of certain personal data is required for visiting certain parts of the Interface and for using certain Services.

 

Certain elements and functions of the Interface, the use of the Service(s) will become available to the Users only after registration or login. If the User decides not to provide the requested personal data, thereby he / she acknowledges and accepts that he / she does not have access to certain parts of the Interface, certain Services, certain elements of the Services.

 

By registering on the Interface and using the Services, the User declares that he / she wishes to be an active participant in the Hungarian employee community and labour market, acknowledging that the information, data, opinions, other content shared by him or her, and such part of that which is determined in this Notice, will become available to Users and employers, or a specific portion of them. If this intent of the User changes, please indicate this clearly to our Company by terminating your registration.

 

The global goal of the service provided on the Interface is to help the User’s presence in the Hungarian employee community, as well as to get a job, to have a successful presence on the labour market, and to build community relations.

 

The processing of data by the Company is carried out on the basis of the voluntary, express consent of the Users based on prior information, as well as the pre-determined legitimate interest of the Company, or pursuant to the provisions of law.

 

Due to the purpose of the Interface, the Interface and our Services may only be used by persons over the age of 16.

 

The User uses the Interface and the individual Services for the purpose of his / her own job search. The User shall be responsible for the user content shared by the User.

 

The User is solely responsible for the authenticity and accuracy of the personal data, and the User is obliged to keep them up to date. The Service Provider shall not be liable for any deficiencies in the communication of data or for any consequences arising from incorrectly provided data, and expressly excludes its liability in this respect.

 

Unless expressly stated otherwise herein, an employer and / or advertiser shall also mean employers, employment agencies and advertisers seeking employees.

 

For the purpose of this Notice, an application / bid for each job advertisement shall mean all data provided by the User in the context of an application for a job advertisement, including the attached CV, motivation letter and other documents and their content.

 

The Service Provider reserves the right to change or terminate any content element, name, contact information on the Interface at any time without prior notice, or to change its appearance, content, theme and operation. These changes do not affect the purpose of the data processing listed here and the data processing consent.

 

All data processing is governed by the fact that our Company does not manage the data deleted by itself or the User after the deletion, and such data are removed from the database.

 

Terms used in this Privacy Notice shall be construed in accordance with the terms defined in the GDPR Interpretative Provisions.

II. COMPANY INFORMATION:

 

profession.hu Kft.
Postal address, registered office:  1123 Budapest, Nagyenyed utca 8-14. 4. emelet
Telephone: +36 (1) 224-2070
Website address:: www.profession.hu
E-mail: ugyfelszolgalat@profession.hu
Customer service: https://ugyfelszolgalat.profession.hu
Data protection officer: p2m Informatika Kft., E-mail: adatvedelem@profession.hu

III. CERTAIN DATA PROCESSES BY THE COMPANY 

 

  1. Registration (Create profile)

 

Certain Services of the Company can only be used with registration, during which personal data is collected and processed in the scope of the processed data. If the registration takes place during the use of individual services, the range of data required to be filled in according to the form may be different.

 

The Company provides several ways to facilitate registration. Based on the User’s consent, the authenticity of the user’s e-mail address will be verified by the Company or external service providers (for all e-mail addresses). In case of registration via Facebook and Google user account, it is not necessary to authenticate the registration email address by the person concerned. In the case of registration with Facebook and Google, the personal data specified in the information provided by Meta Platforms Ireland Ltd. and Google Inc. during registration will be transferred to the Company with the voluntary consent of the User in compliance with the privacy policies of Meta Platforms Ireland Ltd and Google Inc.

 

Scope of the processe  

name, e-mail address, place of residence, willingness to travel (maximum distance of future job to the place of residence is by default 15 km), job / newcomer, jobseeker status and reason for job seeking;

in case of registration using social media: Facebook ID / Google ID, Google profile photo

the fact of registration on a mobile device and the device ID (IOS_ID, Android_ID, device_ID);

the fact whether the User has consented to the Company sending him a direct business acquisition and marketing request with advertising content.

In addition to the above, it is necessary to either provide a telephone number or upload a CV (depending on the advertisement) if registration is started / completed at the same time as applying for the job advertisement.

When creating a profile, you can also start uploading / filling in the CV profile.

 

The purpose of data processing  

User (employee) registration, identification of the User, differentiation from other Users, contacting / keeping in touch with the User, making the basic and certain other functions of the Interface available, facilitating the customization of each Service, using the convenience functions, searching, filtering on behalf of the Company according to the preferences given by the employers / advertisers, search for / notify / inform Users about job opportunities, personalized service for Users, registration of Users, targeted display of job offers, ensuring the quality of search services, providing the possibility of applying for job advertisements, storing CVs for later application.

 

In addition, in the case of prior special consents:

  • • send job notification,
  • • making Users searchable and offerable in the CV database within the framework of the Candidate Recommendation service,
  • • recruitment for employers / advertisers,
  • • sending questionnaires measuring the level of satisfaction with the Service by e-mail to the Users in order to ensure and improve the quality of the Service, as well as to handle possible complaints, messages for the purpose of market research, prize games, direct business acquisition and marketing inquiries with advertising content (in the cases referred to in Clause II.6-8, with detailed content).

 

Duration of data processing  

In the absence of the verification of the email address as referred to in Clause III. 1 of the Terms of Use – for 6 full days (144 hours); in case the e-mail address is verified – for 720 days from the last activity in the User’s profile (e.g. from the last use of the Interface, the last viewing or clicking on the job notification, or the last job application); or until the registration is otherwise terminated, including the event that the User terminates its registration.

 

Legal basis of data processing  

User’s consent.

 

During the process of applying for a job advertisement, the Service Provider initiates the registration on the basis of legitimate interest until the verification of the e-mail address. In the course of the verification of the e-mail address, the final registration will take place with the voluntary consent of the user, otherwise the data processing will be terminated. Registration is initiated based on the legitimate interest for data security reasons. The Service Provider ensures the necessary data security measures by the so-called ATS system, which is a Candidate Management System for employers/advertisers which helps to manage applications for job advertisements securely, and accordingly the Service Provider uses the candidate management system instead of sending data by e-mail. The right of self-determination of the data subject is ensured during the authentication of the e-mail address, the data management is absolutely necessary and proportionate to achieve the necessary purposes.

 

Possibility to modify and delete data by Users  

The registration information can be changed at any time within the user account under the menu item “ Default settings>> (My page) To modify registration information “. It is also possible to change the registration data during the application process.

Deletion of the registration can be initiated within the user account via the menu item “ Default settings >> (My page) Delete user account“. Simultaneously with the deletion of the registration, it can be initiated that the employers affected by the job application continue to process the data concerned for 90 days from the date of the application.

 

Data controllers entitled to access the data (data transfer) In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing
Enforcement of Users’ rights to informational self-determination   

As described in Chapter IV.

 

 

  1. Curriculum vitae profile, curriculum vitae database (CVDB)

A prerequisite for data management  

Existence of a Profession Registration as described in Clause 1.

 

Scope of data managed (CV profile)  

  • • CV – together with a photo (portrait), other uploaded user content (reference, motivation letter). Data that may be provided in the user CV profile, in addition to CV:
    name, address, e-mail address, year of birth, telephone number, mother tongue, previous and current job and employment data (professional experience, position held, business sector, field of occupation, position, responsibilities, date of the commencement of and exit Fromm employment), education and training data (level of education, name of education, name of institution, country), language skills, computer skills, job search and employer preferences (possible time of employment, place of work, position sought, field of occupation, motivating factors at work, net salary and benefits expectations, interest in working abroad), type of driving license, reference (name of declarant, text of reference), professional strengths, personality traits, data describing skills, data relating to a special legal status ( student, full-time; disabled; retired; self-employed), introduction, hobbies, achievements, CV profile availability status and date of last status setting.

 

  • • additional data managed on the basis of conclusions drawn from CV profile data and user behaviour:
    number of years spent in a given position / field, last job application on the profession.hu website / application, number of years spent in a specialty field in total, distance between workplace and place of residence, job application activity (high, medium, low), the last date of updating / modifying the CV profile and making it available to employers, the date of the last job search activity (at which the Company takes into account the following activities of the User: registration, login, job notification pixel, job notification click, application, job notification subscription, change of job notification, view of job posting, view of job postings list page).

 

The purpose of data processing  

Operation of the Curriculum Vitae Database (CVDB) service, including the Candidate Recommendation service, making the CV profile available (for viewing and downloading) to the subscribing partners (employers / advertisers, recruitment agencies and temporary agencies, our recruiters, as well as employers testing the trial CVDB service with reduced data) and to the Company, search, filtering by the Company among the Users according to the preferences given by the employers / advertisers, or using the Candidate Recommendation search engine algorithm (using text analysis and comparison of parametric data), transfer of users’ CV profile data to employers / advertisers subject to prior consent.

 

Duration of data processing  

The User’s CV profile will be kept until the User’s registration is terminated, but its availability can be set at any time by the data subject (they can revoke their consent to make it available, and can give their consent again).

 

Legal basis of data processing  

Consent (Article 6(1)(a) GDPR), explicit consent in the case of a disability designation (Articles 6(1)(a) and 9(2)(a) GDPR).

 

Possibility of data correction, restriction and deletion by Users  

The User’s CVDB profile information can be changed at any time under the menu item “My CV“. Based on the results of the language test, language skills can be modified.

The User has the option to set the availability of the CVDB profile (available / not available) under the menu item “My CV“. Depending on the availability setting, the User’s CVDB profile is either available and searchable for advertisers / employers or not available, not searchable.

 

Applicant activity indicator  

The Company measures job application activity on the basis of how many job advertisements the concerned User applied for using the profession.hu service within the 30 days, accordingly  the job application activity is as follows:

high: more than 15 applications

medium: up to 6-14 applications

low: up to 5 applications.

The legal basis for the examination of the activity is the legitimate interest of the Company and employers using the CVDB (GDPR Article 6 (1) f)): providing a value-added curriculum vitae database by the Company and increasing the efficiency of employers job search. The job application activity indicator only indicates the activity shown on the relevant profession.hu page.

 

Enforcement of Users’ rights to informational self-determination  

 

The data, CV and other documents uploaded to the CV database (CVDB) are handled, in addition to the Company, by the partners using the various CVDB services (including the Candidate Recommendation service), and consequently both the Company and the employer using the CVDB service are considered joint data controllers. The partners can provide information on the partners’ data management process, the tools used by the partners, the data processors and the general circumstances of the data processing performed by the partner.

 

Claims related to the processing of personal data (request for information on data processing, request for rectification, blocking, deletion of personal data, protest against the processing of personal data) can be submitted to our Company or directly to the partner using the CVDB service. The User can see in his / her user profile which partners have downloaded his / her CV and viewed the data of his / her CV profile, and in the framework of the enforcement of his / her informational self-determination rights, the User can request our company to provide information on which partners have viewed / downloaded their personal data.

 

When sharing CVDB profile data with employers, our Company and our partners using the CVDB service (including the Candidate Recommendation service) are considered joint data controllers. In view of the joint controllership we recommend that you send your request for the exercise of your right to informational self-determination to both the Company and the partner.

 

The Company undertakes to forward to the partner the requests related to the personal data processing by the partner, provided that such request was forwarded to the Company, within the scope of the exercise of the Users’ right to informational self-determination, and the Company undertakes to ensure the enforcement of the Users’ right of informational self-determination to the fullest extent, the Company will request the partner to state whether the partner has complied with the User’s request. The Company will take all measures expected of it in order that the partner responds to and complies with the request (see Section 10.2 of Chapter X. Data Protection of the GTC ). Also the Company will inform the User on the response of the data processing partner upon receipt of such response.

 

If the User considers that he / she may be a suitable candidate for a job opportunity, he / she has the opportunity to apply for any job advertisement voluntarily, regardless of whether his / her data has been shared with employers / advertisers.

 

Data controllers entitled to access the data (data transfer)  

The Users’ CV profile available in the CV database is made available by the Company to the partners who use the CV database (the partners – and with the same conditions and purpose also the Company acting as an employer and recruitment service provider – can view and download the Users’ CV profile and process it within a maximum of 90 calendar days from the download / recommendation).

 

Partners using the CV database can search among Users having a CVDB profile using a number of search parameters, in particular (i) the date of the last job application, (ii) the last date of updating, modifying the CVDB profile or activating the CV, and (iii) the date of the last job search activity.
Partners using the CV database can also search for Users having a CVDB profile within the Candidate Recommendation Service, during which the Company uses a search algorithm (text analysis and comparison of parametric data) to examine the textual content of the advertisement posted by the partner having a subscription for the Candidate Recommendation Service and the User’s registration data and CV, as well as his/her job application activity in order to make the data of potential candidates for the given job advertisement available to the employer / advertiser in a limited number. The range of data used to examine the advertisement – candidate matching: i) data provided by the User during registration (location, language skills, studies, last position), ii) completed / uploaded CV profile data (location, language skills, studies, last position, professional strengths), iii) the date of the User ‘s last application for a job posting on www.profession.hu, iv) the keywords in the completed / uploaded CV profile and job advertisement.
In order to promote the CVDB service, the Company may make a CVDB service with less functionality and limited access to personal data (excluding name, photo and contact information) available to employers on a trial basis.
The User can identify the current partners using the CVDB service on the sub-page of the job advertising firms. The Users may exclude some partners from accessing their profile, or may deny access to all future partners under “My CV >> CV Visibility, Company Exclusion” feature. If the User temporarily does not want the partners looking for recruitment to have access to his profile, he can pause the service with the “Not available” button under the “My CV” menu item and later on may turn back on the availability of his CV at any time (“Available”).

In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing

 

Jobs recommended for me (Nekem ajánlott állások” menu item)

 

In view of the limited number of candidates that can be recommended within the Candidate Recommendation Service, the Company will make available under the “Jobs recommended for me” menu a list of job advertisements that are relevant to the User, based on the analysis of the ad text and the data provided / uploaded by the Users. The Company examines exclusively the job offers advertised on the website www.profession.hu and job offers provided by the Candidate Recommendation service, as well as the data of the Users making their data available in the CV database, with the help of a search algorithm (automated software data management with text analysis and parametric data matching).

 

 

The scope of the data processed to examine advertising and candidate matching  

  • • data provided by the user during registration (location, language skills, studies, last position)
  • • CV (location, language skills, studies, last position, professional strengths)
  • •  The last date of the User’s application for a job posted on www.profession.hu
  • • monitoring keyword matching in CV and job postings

 

 

The purpose of data processing  

Collect and publish relevant job postings based on data provided by the Users

 

Method of data processing  

Search algorithm (automated software data management with text analysis and parametric data matching)

 

Duration of data processing  

Until the User’s resume is available in the database, until the user’s registration is terminated or until the service is requested to be turned off.

 

Legal basis of data processing  

It is in the legitimate interest of our company to increase the quality of its service, the extent of its use, to help and facilitate the access of Users to work (which is also in the interest of those concerned), and to be able to operate the Candidate Recommendation service. It is in the common interest of the User concerned and the advertiser to make the job search more efficient, and listing the relevant job opportunities will help therein.

In the course of providing the service, the Company examines only the data provided by the User for the purpose of job search. The User may apply for job opportunities not included in the list. The data subject can request at any time that the transfer management does not cover him. In view of all this, data processing is absolutely necessary and proportionate to achieve the objectives detailed above, and the right of self-determination of the data subjects is ensured.

 

Possibility of data correction and deletion by the Users and enforcement of the Users’ information self-determination rights  

 

The authenticity and accuracy of personal data shall be the exclusive responsibility of the User. It is in the User’s interest to keep his / her data up to date, which allows for receiving truly relevant job offers. The registration data and the curriculum vitae can be updated as specified in Chapters I and II.

 

If the User considers that he / she can be a suitable candidate for a job opportunity, he / she has the opportunity to voluntarily apply for any job advertisement in addition to the job opportunities offered for him/her.

 

Deactivating the application of the algorithm (objection to data processing) can be initiated by sending an e-mail from the registration e-mail address to ugyfelszolgalat@profession.hu.

 

 

 

  1. Applying for a job advertisement

 

Scope of the processed data  

Data processing when applying via a form

  • • name, e-mail address, CV or telephone number, cover letter, net salary expectation concerning the job;
  • • documents uploaded during the application e.g. motivation letter, reference, photograph containing a portrait, certificate of education;
  • • whether the User has consented to the Company sending him direct business acquisition and marketing request with advertising content, whether the registration was made on a mobile device and the device ID (IOS_ID, Android_ID, device_ID);
  • • application details (fact of application, date, position name, name of employer / advertising company, category, subcategory, location) and status of the application process (Seen by the employer, Rejected), employer / advertiser comments related to the application.

 

With the application, the following data of the users will be shared – depending on the completion of the CV profile – in the so-called ATS (Application Tracking System, Candidate Recommendation System) with advertisers: name, email address, attached documents, phone number, photo, place of residence, net salary expectation related to the application or failing that completed and shared in the profile, qualifications (level of education, specialization, name of institution), level of spoken languages and language skills, positions, employers, period spent with employers, field of expertise, duration of professional experience, cover letter sent, data regarding the special legal relationship shared in the attached documents ( student, full-time; disabled; retired; self-employed), whether the person concerned is available in the CV database, date of application, introduction, results, free time activity, driver’s license.

.

 

Data processed in case of applying for an ad linking to a career page: application date, position name, name of employer / advertising company, category, subcategory, location data, name, e-mail address, if provided, depending on the completion of the profession.hu profile: phone number, place of residence, qualifications (level of education, specialization, name of institution), level of spoken languages and language skills, positions / entry status, employers, period spent with employers, field of specialization, duration of professional experience, job search activity, whether the person concerned is available in the CV database, application date, introduction, results, free time activity, driver’s license.

.

 

During the sharing of application data with employers in the Application Tracking System , our Company and the advertiser are considered joint data controllers. With regard to joint data management, we recommend that you send your request regarding the exercise of your right to informational self-determination to both the Company and the advertiser. The partners can provide information about the process of the advertiser’s data management outside the Candidate Management System, the tools and data processors used by the partner and the conditions of the data management carried out by the partner in general.

 

Direct application to the advertiser’s own candidate management system on the interface:

If it is possible to accept the advertiser’s privacy notice trough a separate check box on the application form, based on the data subject’s consent, the following data will be transmitted to the advertiser as an independent data controller via an encrypted channel: name, e-mail address, CV, phone number, documents uploaded during the application, e.g. letter of motivation, reference, photo with likeness, document proving education, application data (application date, position name, category, subcategory, location).

 

Application for a job advertisement marked with the Profession Services logo

Job advertisements with the Profession Services logo are published by the Company as part of a recruitment process. These advertisements do not contain any information about the identity of the employer / advertiser offering the job.

When applying for job advertisements marked with the Profession Services logo, the attached CV and other data provided by the User will be stored in the Candidate Management System at the Company. The data will be transmitted only with the express, prior, informed consent of the User.

 

Data managed during the application tracking service (ATS)

Curriculum vitae attached to the job application / bid, application details (applied, date, position name, employer / advertising company, category, subcategory, location) and the status of the application process (e.g. Hired, Approved, Rejected), the employer’s / advertiser’s comments in connection with the application.

 

The purpose of data processing  

Forwarding the User’s application to the employer / advertiser, searching, filtering on behalf of the Company among the Users based on the preferences given by the employers / advertisers, providing and using the Profession Candidate Management System service, personalized service for the Users.

Allowing Users to track their applications and their status. (Application tracking)

 

Simultaneously with the application for the job advertisement, the User agrees to the transfer of his / her data to the employer / advertiser, as well as to the availability of the registration data necessary for the job application (see above for the processed registration data) in the ATS (Application Tracking System), in some individual cases, to transmit your application data by e-mail, so the additional purpose of data processing is to make the User’s application / bid and the data provided available to the employer / advertiser.

 

In order to organize the applications for individual advertisements for employers / advertisers, the so-called ATS is provided by the Company. When applying through the form, the registration process will start in order that it appears securely in the ATS. Upon authentication of the candidate’s e-mail address, the data subject either consents to the retention of the registration on the basis of his / her voluntary declaration or may request the deletion of his / her personal data by the Service Provider and the termination of the registration.

 

Making available the application material submitted by the Users applying for the advertisement, the compliance with the announced application, and the registration data until the end of the recruitment process for the given advertisement, but up to 90 calendar days from the date of application.

In some individual cases, the Company also provides the advertiser/employer with the following application data via e-mail: name, e-mail address, telephone number, attached documents (e.g. CV, motivation letter), cover letter, date of application.

 

  In case of direct application to the advertiser’s own candidate management system:

If it is possible to accept the advertiser’s privacy notice through a separate check box on the application form, the purpose of data management is to transmit the data provided by applicants to the employer/advertiser as an independent data controller via an encrypted channel directly into their candidate management system. In this case, the applicant data will not be shared with the advertiser/employer via the Profession ATS system.

Our company stores and processes these applications for statistical purposes for 90 calendar days (see III. CERTAIN DATA PROCESSING BY THE COMPANY 13. Statistical data management)

 

Duration of data processing  

The Company processes (stores) the data of the given job application for a maximum of 90 calendar days in accordance with the duration of making it available in the ATS referred to above. If the employer indicates to the Company that the position has been filled, the Company will delete the data from the ATS. Data processing will cease upon termination of registration, including in the event that the User terminates his registration. If, in the course of the termination of the registration, the data subject declares that he / she wishes to maintain his / her job applications, his / her application data will be forwarded to the given employer(s) affected by the job application upon the deletion of his / her data. Advertisers have the right to process applicant data for 90 days from the date of application – without obtaining a separate consent or in the absence of a separate legal basis for data processing.

In case of direct application to the advertiser’s own candidate management system and application after career link redirection:

If it is possible to accept the advertiser’s privacy notice through a separate check box on the application form, and in the case of an external application on the career page after being redirected from a career link advertisement, the advertiser determines the duration of data management according to its own candidate management system.

 

Legal basis of data processing  

Consent (Article 6(1)(a) GDPR), explicit consent in the case of a disability designation (Articles 6(1)(a) and 9(2)(a) GDPR).

 

Possibility of data correction (and deletion) by Users  

After logging in, the User can cancel his application in the “Applications” menu item on the menu bar. The advertiser will be notified by e-mail about the withdrawal of the application via the ATS. The User’s personal data will be deleted from the ATS in connection with the given advertisement, and the advertiser will be prompted by e-mail to delete the personal data related to the given job application.

 

Enforcement of Users’ rights to informational self-determination  

In addition to the Company, also the employer / advertiser handles the data provided during the application for job advertisements and the attached, uploaded CV. It is the employers / advertisers that can provide information on the data management process of employers / advertisers, the tools used by employers / advertisers, about the data processors and the conditions of data processing by employers / advertisers in general.

Requests related to the processing of personal data (request for information on data processing, request for rectification of, blocking, deletion of personal data, protest against the processing of personal data) may be submitted to our Company or directly to the employers / advertisers at the contact details provided in the job advertisement, and in the case of advertisements marked with the Profession Services logo, at the contact details provided to the User during the first contact and the request for consent.

 

In view of the above joint data management, we ask the User to send his / her request to both the Company and the employer / advertiser.

 

The Company undertakes to forward to the employer / advertiser the requests related to the processing of personal data related to the processing of personal data by the advertiser / employer, and to enforce the Users’ right to information self-determination to its fullest extent, and accordingly request the employer / advertiser to declare whether they have complied with the request concerned. The Company undertakes to forward to the employer / advertiser requests related to the processing of personal data related to the processing of personal data by the advertiser / employer and to enforce the Users’ right to information self-determination in order to ensure its fullest extent. declares to the employer / advertiser whether he has complied with the application. The Company will take all measures expected of it in order for the employer / advertiser to respond to and comply with the application (see Section 10.2 of Chapter X. Data Protection of the GTC).Upon receipt of the employer’s / advertiser’s response, the Company will also inform the User.

 

In case of applying for a job advertisement, the User’s application / bid will be forwarded to the employer / advertiser who posted the advertisement, and will be made available together with the registration data in the so-called ATS.

In case of direct application to the advertiser’s own candidate management system and application after career link redirection:

If it is possible to accept the advertiser’s privacy notice through a separate check box on the application form, and in the case of an external application on the career page after being redirected from a career link advertisement, the advertiser determines the duration of data management according to its own candidate management system.

Comparison between the advertisement and the applicant’s profile  

By matching the keyword between the advertisement and the candidate’s application profile (position name and professional skills) and matching the parametric data (location, sector (i.e. subcategory), number of years of experience, level of education, language skills and its level), the Company informs the advertiser about the level of matching by assigning a percentage to each job applicant in the ATS. The match is based solely and exclusively on the match of the data provided.

The legal basis for the comparison is the legitimate interest of the Company and the advertisers: to provide a value-added candidate management system (ATS) by the Company and to increase the recruitment efficiency of the advertisers. Examining the percentage match makes it easier to review the CV profiles, but does not provide additional information or assessment with regard to the applicant, and consequently the applicants’ privacy is not violated. The result of the comparison will be made available to the advertiser by the Company until the end of the recruitment process for the given advertisement, but up to a maximum of 90 calendar days from the date of application.

 

 

  1. Recruitment activity

In order to help the User to get a job and to be present in the labour market as effectively as possible, our company carries out recruitment activities on behalf of employers / advertisers in accordance with the preferences they have given (Profession Services).

 

Within the framework of the employment agency activity (private employment agency registration number: BPM / 01 / 15807-3 / 2015-1003), our Company performs screening activities for each job opportunity on behalf of the employers / advertisers in accordance with the preferences they have given

  1. in the registration data, CVDB data, job application data, applications / bids received and / or
  2. in the employers’/advertisers’ own databases, according to the provisions of the employers’/advertisers’ own data management regulations, the relevant legislation and the contractual conditions relating to data processing, and
  3. in databases to which the Company has lawful access, in compliance with the legal and contractual conditions applicable to the given database

and may contact those who, on the basis of information legally available to the Company, can meet the expectations of employers / advertisers through a personal inquiry, interview (by telephone or video call, other technical equipment, electronic means of communication) and / or an online personality test or the completion of a professional test for employers / advertisers (contact).

 

Our recruitment principles

  1. We only expect you to provide information that does not violate your privacy and is relevant to the establishment, performance or termination of your employment.
  2. You are also entitled to know the results of the aptitude and suitability test applied in the recruitment process.
  3. If we make a note during the hearing with you, we will inform you of the fact that a note was made, and allow you to get to know the note.
  4. We do not use psychology, graphology tests, polygraph examination.
  5. We only ask for a certificate of good conduct in justified cases (e.g. if it is a legal requirement).
  6. Our Company may request an assessment from your previous employer exclusively with your prior express consent.
  7. You can withdraw your application at any time, change your mind, ask our recruiting colleague or by email to services@profession.hu to stop our searching for job offers.

 

Data transfer to a potential employer

 

If the User gives express consent, the Company will record the information and data relevant to the position indicated in the job opportunity posting and given during the personal inquiry or interview, as well as the results of the personality and professional test. The application / bid / CV of those Users that meet the preferences of the employers/advertisers, and the information and data agreed with such Users during the first contact, as well as the results of the personality test and the professional test of the employers / advertisers, will be forwarded by the Company to the employers/advertisers indicated upon requesting consent.

It is important for a potential employer to screen out candidates who have previously been employed by it or who are included in their own jobseeker database to help them decide whether they want to work with you in the future or whether such candidates are considered as ones recommended by our Company or as their own candidates. In view of this, our Company will provide your name and date of birth, as well as the data set indicated by our Company’s partner, to the potential employer for the purpose of pre-screening (name verification, commonly known as: namecheck) on the basis of your express informed consent. If you do not provide the necessary information for the purpose of pre-screening, there is a possibility that you will not be invited for an interview, this is at the individual discretion of the employer. Due to the fact that you know the identity of the employer in advance, your consent is informed, you can request the deletion of your data at any time, you can protest against the data processing at any time, and your privacy will not be harmed.

 

Retention of data for future job application

 

Subject to the prior consent of the User we store and use the above data in order to serve the future needs of other employers / advertisers that may have similar requirements, to send additional / later offers and job opportunities to the Users, to provide information about it, and to perform screening for other employers / advertisers. To avoid all misunderstandings: the data stored by our Company and transferred to an employer/advertiser with the consent of the User are not automatically transferred to other / additional employers / advertisers by our recruiting colleagues but exclusively with the express prior consent of the User. You can exclude companies at any time, which means that we can’t contact you with offers from specific companies. You can exclude a company from the user account under “CV profile >> CV Profile Settings >> Access settings“.

 

 

 

Scope of the processed data  

  • • Data provided and recorded upon registration, in the CV profile, upon applying for a job advertisement, in particular the CV data
  • • data extracted from databases (for example, munkahelyek.hu, LinkedIn) to which the Company have legal access in compliance with the legal and contractual conditions applicable to the given database,
  • • information agreed with the User, relevant to the position indicated in the job opportunity, made during the call and the first contact, professional experience and its duration, language proficiency and level, language test and its results, as well as the results, also agreed with the User, of the personality test and the professional test of employers / advertisers, job applications, reason for changing jobs, motivation, personality traits – the result of the personality test, how would you recommend yourself, self-description, photo, location data, approach to work, attitude, behaviour, strengths, other skills relevant to the given job opportunity, soft skills, successes, reason for leaving the last job, possible date of starting the offered job, income claim, data recorded during the conversation, video files provided by the User and other content
  • • competency test result.

 

Based on the individual consent obtained during the personal and other inquiries and interviews with the User in the course of recruitment, we forward the processed data of the User to the employer / advertiser.

 

Data transfer is optional, it takes place if the User meets the employer’s / advertiser’s preferences, and the User will be informed accordingly.

 

The purpose of data processing  

 

Identification of the User, differentiation from other Users, facilitating the Users getting a job, operation of recruitment service, search, filtering by the Company among Users, contacting / keeping contact with the User, contacting the Users, notification / information about job opportunities, further contacting the User to provide the User with a job, introduction of Users to partners.

 

 

Duration of data processing  

 

Data processing lasts until the withdrawal of the consent.

 

 

Legal basis of data processing  

 

User’s consent

 

 

Possibility of data correction (and deletion) by the Users and enforcement of the Users’ information self-determination rights  

 

If the User modifies his / her registration data or the data provided in the CVDB, the data modification will also take place in the candidate management system.

 

If the User considers that he / she can be a suitable candidate for a job opportunity, he / she has the opportunity to apply for any job advertisement voluntarily, regardless of whether his / her data has been shared with the advertiser as a suitable candidate in connection with the given advertisement.

 

The User may exclude employers / advertisers to whom he / she does not wish to transfer his / her personal data, or may prohibit the transfer of data to all future employers / advertisers under the menu item CV profile >> CV Profile Settings >> Access settings.

 

The operator of the databases of employers / advertisers outside the Candidate Management System (ATS) is the employer or the advertiser that is responsible for the handling and use of personal data in accordance with the law and the employer’s / advertiser’s own data management regulations. It is the employers / advertisers that can provide information based on their own data management policies on the data management process of employers / advertisers, the tools used by employers / advertisers, about the data processors and the conditions of data processing by employers / advertisers in general, etc. Claims related to the processing of personal data (request for information on data processing, request for rectification, blocking, deletion of personal data, protest against the processing of personal data) can be submitted to our company and directly to the employer / advertiser based on the contact details provided upon first contact.

 

The Company undertakes to forward to the employer / advertiser requests received in connection with the processing of personal data related to the processing of personal data by the advertiser / employer, and in order to enforce the Users’ right to information self-determination to the fullest extent, requests the employer/advertiser to declare whether it has complied with such request. The Company will take all measures expected of it in order for the employer / advertiser to respond to and comply with the request (see Section 10.2 of Chapter X. Data Protection of the GTC). Upon receipt of the employer’s / advertiser’s response, the Company will also inform the User about such response.

 

The User is kindly requested to send his / her request to both the Company and the employers / advertisers involved in the data transfer.

 

Data controllers entitled to access the data (data transfer)  

 

Due to the nature of the Service, both the employers / advertisers and the Company act as data controllers. With regard to the data shared during recruitment, the recipients act as independent data controllers.

In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing

 

Data management of data subjects recruited and hired by the employer on the basis of a success fee agreement  

 

If the employer who commissioned the recruitment pays a success fee on the basis of the conclusion of a contract with the person who is successfully mediated, the amount of the success fee is calculated on the basis of the annual gross basic salary of the person concerned at the time of conclusion of the contract.

It is in the legitimate interest of the employer who commissioned the recruitment and the Company that accounting and payment of fees can take place in accordance with the contractual relationship between them and that accounting obligations can be complied with based on all of this. The expected salary is known during recruitment, the person concerned can count on this data management, and his base salary may even differ from the starting base salary during the 1 year. Data processing is absolutely necessary to achieve the goals detailed above and is proportional to it, the right of self-determination of the data subjects is ensured, due to the fulfillment of accounting obligations based on legislation, objections are limited.

 

 

 

  1. Curriculum vitae maker

     

Scope of the processed data  

In order to use the service you need:

last name, first name, email address. Optional information: phone number, address, place of birth, date of birth, photo, information about previous and current schools, information about previous and current jobs and work experience, language skills and miscellaneous knowledge.

 

The purpose of data processing  

Providing a CV creation service, providing a service that enables the compilation of a CV using templates and automations,

 

Duration of data processing  

30 days after the completion of the CV, as a goal / the last use of the service.

 

Legal basis of data processing  

User’s consent

 

Possibility of data correction (and deletion) by Users  

After the preparation and completion of the CV, the User has the opportunity to check, correct and supplement the entered data by clicking on the link in the e-mail sent to him / herself.

 

Data controllers entitled to access the data  

Only the User is entitled to access the completed CV in the following way:

exclusively during the use of the CV creation service, the URL (link) containing a so-called hash key is sent by the Users by email to themselves is used for access, and it is only the document previously edited by the User at that particular link that can be accessed via the URL.

 

Further details of data processing  

If the User decides to register with his / her completed CV, the provisions relating to the “Registration” shall apply to his / her registered data. (II. 1).

 

 

 

  1. (Individual) Market research 

     

In the absence of providing prior information to the contrary and an explicit request for consent, responses and data provided during the market research will not be linked to the identity of the respondents, and accordingly the market research will be anonymous.

 

Scope of the processed data  

According to the information provided at the time of data collection.

 

The purpose of data processing  

Market research according to the information provided at the time of data collection.

 

Duration of data processing  

Unless otherwise stated in advance, the Company will process the data of market research participants for 6 months.

 

Legal basis of data processing  

The processing of the data of the Users who participated in the market research is based on their consent

 

Possibility of data correction (and deletion) by Users  

It can be initiated at the Service Provider at any of the contact details provided in this Notice.

 

Data controllers entitled to access the data  

The Company does not transfer data to other data controllers, with the exception of requests from public authorities or courts. (In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing)

 

 

Regular statistical data production 

 

From time to time, the Company will send an e-mail questionnaire to a randomly selected group of Users who have subscribed to direct business acquisition and marketing request with advertising content, including user / consumer habits question (s) and requests to share the following data: gender, age, education, type of settlement, labour market status, based on which the user cannot be identified from the outset. The answers provided are also processed anonymously, and neither the answers nor the e-mail addresses are linked to the identity of the respondents, and accordingly the statistical data generation is anonymous. Those who fill in the questionnaire can participate in the related prize game according to the individually specified and accepted conditions, in which case their e-mail address must be provided. The completed questionnaires are sent by the User directly to Micra-S Piackutató- Marketing- és Üzletviteli Tanácsadó Betéti Társaság. Micra-S Bt evaluates the answered questionnaires and notifies the Company of the statistical result.

 

 

  1. Prize game 

 

The circumstances and conditions of the data management during the prize games, the scope of the managed data, the purpose and duration of the data management, the legal basis of the data management, the possibility of data correction, the scope of data controllers entitled to access the data, the data processor are set out in the rules of the prize game concerned.

 

  1. Job notification

 

 

Scope of the processed data

 

 

 

name, e-mail address, position sought / professional knowledge, category of position sought, location of job search (place of residence and willingness to travel), professional qualification, professional experience in time, language skills, nature of employment sought, work schedule, whether subscription was initiated on a mobile device and device ID (IOS_ID, Android_ID, device_ID), the advertisers / employers from whom the User would like to receive an advertisement, the frequency of notification, the date of opening an e-mail notification, the form of sending notifications, employers, activity in the User Interface (e.g. subpages, data sheet and assessment of companies viewed on the Interface), keyword usage, search options, job seeker status and reason for job search. The Company also takes into account the applied, viewed job advertisements and list pages, as well as searched keywords for the targeted display of job offers.

 

The purpose of data processing  

Sending job notifications (email / push message)

 

Profile creation, sending targeted job notifications:  

The Company sends the job notification with targeted content based on the data provided by the User and the conclusions that can be drawn from the User’s activity on the Interface, and provides information about this in the e-mail request. Profiling is done during and for the purpose of the provision of the service. Job advertisements that correspond to the data provided to the User and are in line with their behaviour on the Interface may also be displayed in the job notification.

 

Duration of data processing  

The service can be used after authentication of the e-mail address or immediately after setting it up in the mobile application. The job alert can be turned off (paused) via the link available at the bottom of the job alert email or in the user account/mobile app, and then turned back on in the user account/mobile app. The data processing lasts until the job alert is deleted and until the registration is terminated, including in the event that the User terminates his/her registration.

 

Legal basis of data processing

 

 

 

User consent by setting a job alert.
In the case of application for a job advertisement and registration – in the absence of a job advertisement set up – the job advertisement is set up on the basis of legitimate interest, which is adapted to the job advertisement concerned by the application and the registration data. Given that the data processing concerns only users who are active jobseekers, the job advertisement can be freely modified, deactivated or deleted, the processing is strictly necessary and proportionate for the purposes detailed above and the right of self-determination (deactivation, deletion) of the data subjects is guaranteed.

 

Possibility of data correction and deletion by the User:  

You can change the details of the job notification at https://www.profession.hu/allasertesito/list or int the mobile app.

You can turn off the job alert in the footer of the job alert email or by emailing ugyfelszolgalat@profession.hu, in the mobile app, and you can also set it up in your user account and in the mobile app.

The details, parameters and channel (e-mail/push message) of the Job Alert can be changed at any time in the user account under “My Job Alerts” and in the mobile application under “My Jobs” in the “Job Alerts” tab. You can unsubscribe (deactivate) or delete a job alert in your user account under “My job alerts” and in the mobile application under “My jobs” in the “Job alerts” tab. Disabling the receipt of a Job Alert will take effect no later than 72 hours after the settings have been saved.

 

Data controllers entitled to access the data (data transfer):

 

 

The Company does not transfer data to other data controllers, with the exception of requests from public authorities or courts. (In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing)

 

Enforcement of Users’ rights to informational self-determination 

 

 

 

As described in Chapter IV. The User is entitled to request the Company, acting as the data controller, to send the job notification without creating a profile, exclusively on the basis of the data provided by the User for the purpose of using the job notification service. The setting can be made in the user account under the menu item “My basic settings>> (Basic data) Electronic advertisement settings” (which is also available from the “My notification settings” menu item).  The Users are also entitled to request human intervention on the part of the Company in connection with the profiling, to express their opinion, and to file an objection against the job notification and/or the sending of the job notification.

 

 

 

  1. Electronic advertising and marketing messages (e-DM)

Scope of managed data, targeted inquiry (profiling)  

 

Data provided during registration, in particular: surname, first name, e-mail address, highest level of education, language skills, specialization, professional experience, place of residence (postcode, city), bid tracking information, current position, job seeker status and reason for job search, fact and date of unsubscription, in case of paper consent: the signature, as well as the data related to the user account: contact info in CVDB, the fact of a job notification subscription, the fact of downloading the mobile application.

 

The Company sends certain e-DM messages with targeted content and frequency on the basis of the data provided by the User, as well as to the activity performed in the User Interface (including the mobile application) and in the e-DM (e.g. opening / not opening e-mail, clicking on e-mail content, save jobs, start applying for a job ad, viewed jobs, job applications, other conversion events on the website and mobile app, page visits) and on the basis of the automatic evaluation and analysis of the conclusions that can be drawn from the said data. Content corresponding to the data provided to the User and consistent with his / her conduct on the Interface will be displayed in some e-DM messages.

 

 

The purpose of data processing  

 

Sending messages for the purpose of direct business acquisition or marketing with advertising content to the e-mail address provided by the User (hereinafter e-DM).

The e-DM may include the Company’s own offers; a description of the Company’s Services, events, prize games; a warning about a service started but not completed; a notification containing third-party offers related to the HR profession, third-party job offers; a career newsletter with articles, tips and news related to the HR profession and job search; questionnaires for generating statistical data to be processed anonymously; questionnaires measuring satisfaction with the Service.

 

 

Duration of data processing  

 

The service can be used after the authentication of the e-mail address. Data processing lasts for 720 days from the last activity in the User’s account (e.g. since the last use of the Interface, the last viewing or clicking on a job notification or other notification, or the last job application). The data processing and consent also lasts until the withdrawal / unsubscription / protest and/or the termination of the registration, including the case when the Users terminate their registration. The Company draws the Users attention to the fact that it requires a maximum of 72 hours after the withdrawal of the consent in order that the Users will not receive notifications from the service which they have unsubscribed from.
The fact and date of the unsubscription are recorded in order to be provable in such a way that the previous personal data cannot be recovered from it, but the unsubscription can be proved when specific data is provided.

 

Legal basis of data processing  

User’s consent

 

Possibility of data correction (and deletion) by Users  

 

Consent may be revoked at any time without restriction or justification, free of charge, and data processing may be prohibited.

 

The consent can be revoked in the user account under the menu item “Settings >> Default settings >>  Settings for electronic job openings “(also available from the ” Notification Settings” menu), “, as well as at the Company’s electronic and postal address specified in Chapters V and VI of this Notice, and in the manner indicated in the e-DM message.

 

Enforcement of Users’ rights to informational self-determination:  

As described in Chapter IV.

The Data Subject is entitled to request the Company, acting as the data controller, to send e-DM messages containing job offers without creating a profile by blocking / deleting the behaviour monitoring cookie (see cookies) stored in the browser on the basis of the consent given in the Interface, and/or by deleting the data stored in the internal storage of a mobile phone. The users also have the right to request human intervention on the part of the Company, to express their position, and to object against the sending of electronic advertising and marketing messages. Sending messages warning of started but not completed services can be prohibited by e-DM unsubscription.

As the processing of personal data in the present case is for the purpose of direct business acquisition, the User is entitled to object at any time against the processing of personal data relating to him for this purpose, including profiling related to direct business acquisition at any of the Company’s contact details referred to in Section II.9.

 

Data controllers entitled to access the data (data transfer)  

The Company does not transfer data to other data controllers, with the exception of requests from public authorities or courts. (In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing)

 

 

 

Satisfaction survey

 

Scope of the processed data  

For registered users:

Basic data provided by the User during registration:

  • • name, telephone number, e-mail address, age, number of job applications during the past 12 months, time of registration, location, education, professional experience, main field of expertise, language skills, whether job notifications are set, the advertisement applied for,
  • • the numerical evaluation of the opinion expressed during the response to the satisfaction questionnaire and the corresponding textual feedback.

For non-registered Users:

  • • mail address, name, phone number, evaluation and textual opinion

 

 

The purpose of data processing  

 

Sending questionnaires measuring the satisfaction with the Service by e-mail to the Users in order to ensure and improve the quality of the Service and to handle any complaints. Satisfaction questionnaires will only be sent out to registered Users exclusively if the User has subscribed to and expressly consented to massages of direct business acquisition and marketing request (eDM) containing advertising content.

In the case of an unregistered User, we provide the opportunity to express an opinion on the service, to ensure and improve the quality of our service, and to handle any complaints during electronic communication.

 

 

Duration of data processing  

 

Unless otherwise announced in advance, the Company will process the data of the participants of the satisfaction survey for 3 months.

 

 

Legal basis of data processing  

 

User’s consent

 

 

Option to correct (and delete) data

buy Users 

 

 

It can be initiated at the Service Provider at any of the contact details provided in this Notice.

 

 

Enforcement of Users’ rights to informational self-determination:  

As defined in Chapter IV.

 

Data controllers entitled to access the data  

 

The Company does not transfer the data to another data controller.

 

 

 

 

  1. Data management related to customer service and complaint handling

Administration related to the Company’s services, provision of customer service, data management for the purpose / in the interest of checking lawful operation

 

 

Scope of the processed data  

  • • By e-mail: name, e-mail address, content of request
  • • By written request: name, address, content of the request, copy of the reply
  • • In case of telephone administration: name, voice recording, start time and duration of the call, telephone number, unique call ID
  • • For chat conversation: request content, response, chat log data (chat start and end time, duration, latency, chat content, IP address, location, network, browser type, version and language, operating system, screen resolution, statistics)
  • • In the case of reporting surface illegal content: name, e-mail address, trusted whistleblower status, content of the report

 

The purpose of data processing  

Administration of the Company’s services available on the Surface, provision of general information, and provision of customer service in order to verify the legal operation (verification of the adequacy of the right to use the service) and the handling of consumer complaints, as well as the reporting and action mechanism and legal remedy in accordance with the EU regulation on digital services.

 

The Company handles the data on the starting time and duration of the call, as well as the telephone number (data used for call identification) in order to identify the calls and distinguish them from other calls.

 

The chat log data is handled in order to distinguish it from other chat conversations, as well as to control the operation of the chat service, to make it more efficient and to improve it.

 

In case of complaint handling: The purpose of data processing is to handle complaints received by the Company orally, by telephone, in writing and by e-mail, to document the User’s identity, the exact time of the complaint and the content of the complaint, and to document the information provided for the Company about the complaint and prepares a report, if necessary.

In case of reporting illegal content, the purpose of data management is to provide a reporting and action mechanism and legal remedy in accordance with the EU regulation on digital services, to investigate the report, and to prevent abuse of the possibility of reporting.

 

Duration of data processing  

 

24 months, except for pending requests, cases in which case the data processing is terminated 6 months after the case has been settled.

 

On the basis of Sections 17 / A. § (7) of Act CLV of 1997 on Consumer Protection (Fgytv), the record made on the complaint and a copy of the response to the complaint shall be kept by the Company for five years and presented to the audit authorities upon request

 

 

Legal basis of data processing  

 

The legal basis for data processing related to customer service administration is the legitimate interest of the data controller (GDPR Article 6 (1) point f) to subsequently prove the administration – and thus compliance with consumer protection and regulations for users of digital services – by the data subject and the The service provider can also assert its rights and legal remedies, and at the same time provide more accurate information, which results in greater customer satisfaction and provides an opportunity to provide information, as well as to handle objections and requests.

 

The legal basis for the processing of consumer complaints is Article 17/A of Act CLV of 1997 on Consumer Protection (Article 6(1)(c) GDPR, fulfilment of a legal obligation).

 

In the case of telephone customer service, voice recording is carried out with the consent of the data subject (Article 6 (a) GDPR). If the User does not consent to voice recording, he/she may express his/her refusal to consent by not selecting the menu item or by disconnecting the call. In this case, our Company can be contacted by e-mail at ugyfelszolgalat@profession.hu or by post (1123 Budapest, Nagyenyed utca 8-14, IV. floor, 1123 Budapest).

 

Data controllers entitled to access the data, data transfer  

The Company does not transfer data to other data controllers, not including Consumer Protection Authorities, supervisory bodies, courts, conciliation bodies, out-of-court dispute resolution board. (In the case of a request for data by public authorities or courts: see III. CERTAIN DATA PROCESSES BY THE COMPANY. 17. Further data processing)

 

Enforcement of information self-determination rights  

 

The User may at any time request the deletion of the voice recording. In this case, our Company will delete the recorded conversation and audio recording and, if justified by the content of the conversation, will record the essence of the conversation in a written record (only a summery). The record is prepard (legal basis for processing: Article 6 (1) (f) GDPR) in order to be able to prove the content of the conversation. If the content of the conversation does not justify the drawing up of the record, the conversation will be deleted without drawing up a record.

 

The User may request a written copy of the voice recording, chat conversation, e-mails written to the customer service, by e-mail or by post, which the Company shall provide to the User in electronic form, protected by a password in the case of voice recording, or by electronic mail in other cases. The Users may not use the copy for any other purpose, accordingly they may not disclose it or pass it on to third parties, in particular, but not exclusively, to other job portals. Our Company only consents to the use of the conversation in accordance with this section, i.e. to provide the Users with information about their processed data.

The User may object to the processing of data in the course of written/chat/e-mail correspondence with the Customer Service. The Company will then examine whether or not the processing is justified by compelling legitimate grounds which override the interests, rights and freedoms of the User or are related to the establishment, exercise or defence of legal claims and will decide whether or not to maintain/terminate the processing.

The exercise of the right to information self-determination is otherwise governed by Chapter IV of this Notice.

 

 

 

 

  1. Corporate Integration Index (CIX)

 

Based on the answers given to the Corporate Integration Index (CIX) questionnaire, it can be determined to what extent the User filling in the questionnaire fits in the value system, expectations and company culture of the companies sending the job advertisement and using the CV database.

The questionnaire on which the index is based can be filled in by both employee Users and employer users. The questionnaire seeks to learn about the expectations of employees and employers towards corporate culture and compares these expectations based on how the two parties weighted their responses. The index is based on a mathematical weighting calculation.

 

Scope of the processed data  

• responses to the corporate integration questionnaire

• % integration index of responses by respondents and firms (CIX: corporate integration index)

 

The purpose of data processing  

Making the labour selection process more efficient, helping job search and recruiting by comparing the expectations of the employees and the employers regarding work / company culture and through comparing approaches.

 

Duration of data processing  

Until the withdrawal of consent, at the latest until the termination of registration.

The CIX questionnaire can be deleted, modified and re-completed in the menu item Profile >> Default settings >> Company fit questionnaire.

 

Legal basis of data processing  

 

User’s consent (Article 6 (1) (a) of the GDPR).

 

 

Data controllers entitled to access the data, data transfer  

The Company makes the answers to the CIX questionnaire available to CVDB users and those partners who advertise jobs in the candidate management system, if such job advertisements are applied for by the job seeker concerned. The advertiser will be given access to the corporate integrity index, too.

The Users can at any time set the questionnaire/index to be seen only by advertisers or only by CVDB users, or they can disable the data transfer in the Profile >> Default settings >> Company fit questionnaire menu item.

 

 

Enforcement of information self-determination rights

 

 

The User may at any time request the deletion of the answers given to the questionnaire, modify them or fill in a new questionnaire in the menu item >> Profile >> Default settings >> Company fit questionnaire.

 

 

  1. Company raiting and review

 

Scope of the processed data  

• scaled according to pre-defined evaluation criteria or with markings;

• review.

 

Duration of data processing  

Until consent is withdrawn, or until registration is terminated at the latest. The rating&review will be deleted even if the User deletes the position in connection with which he submitted an rating&/reviewor the evaluated employer from his professional profile..

 

Legal basis of data processing  

 

The User’s consent (GDPR article 6 (1) point a)).

 

 

Data controllers entitled to access the data, data transfer  

If the User only evaluates with scaled parameters, the rating is displayed as aggregated data.

If the User also formulates a written opinion, his rating and review will be made available in addition to the public publication of the following data:

the User’s current/former employee, the number of years spent in the given position at the employer, the subcategory of the position according to the Service Provider’s professional category system (e.g. “Receivables management, Collection” in the case of a debt collection employee), work schedule (e.g. full-time, part-time), employer’s specific seat/location according to the settlement, parametric rating made by the User.

The evaluation will not appear publicly on the Platform as long as the employer’s descriptive company page is not available on the Platform, or if the company page ceases to be available later.

The Service Provider is obliged to release the User’s data at the request of investigative authorities and courts (e.g. in the case of litigation initiated due to suspicion of defamation, libel, damage to reputation), for them or on the basis of other legal obligations. (In the event of a request for data from an authority or court: see III. CERTAIN DATA PROCESSING BY THE COMPANY 17. Other data processing)

 

 

Enforcement of information self-determination rights

 

 

The User has the right to cancel his rating and review and submit a new one at any time.

The scaled rating can be deleted together with the review and added again or, in the absence of a text opinion, they can be modified by themselves. The deletion or modification can be initiated in the user account under the menu item https://www.profession.hu/munkavallalo/ertekelesek, or in the application under the My evaluations menu item.

 

 

 

  1. Statistical data management

 

The Company continuously monitors the labour market trends (by regional, industry, applicant type, advertiser type, etc) by analysing the personal data processed by it and other information (logged, inferred) available to it through the provision and use of the Services, as indicated in this document, and by making anonymous statistics.

The Company uses the analyses for business acquisition (operation of fee-based services, preparation of studies) and business development (introduction of a new service, modification of services) purposes – including not only the analysis, but also the publication of statistics / analysis and communication thereof to third parties.

Within this framework, the Company uses it, among other things, to provide Profession Premium services and as part of it the Company collects the net salary expectation data provided by the persons applying for the job advertisement during the given application or failing this provided in the CV profile for average calculation; the language skills, level of education, level of experience for the establishment of applicant ratios; the Company uses the current position according to the profile to categorize it and the Company makes available to subscribers to the Premium Profile service the average figures calculated from the profile/net salary expectations at the time of application indicated by the applicants for the given job, diagrams, ratios, numbers and percentages based on the other mentioned applicant data.

The statistical data processing is carried out in the interest of the quality service provision by the Company, on the one hand, and the operation of the Premium Membership service, on the other hand, as legitimate interests, as well as for the benefit of the subscribers to the Premium Membership service (self-positioning as a legitimate interest). Given that statistics can only be published anonymously, the privacy of data subjects is not violated.

 

  1. Registration in an employer career portal (Profession Passport) 

 

Some advertisers maintain a career page where they provide an opportunity for those concerned to sign up with a Profession registration account.

Registration with Profession Passport on the advertiser’s career portal: at the request of the Users and with their express consent, their e-mail address and the so-called profession ID will be forwarded to the employer / advertiser indicated when requesting consent in order to register and create a profile on the employer’s / advertiser’s career portal and to be able to re-enter the career portal. Registering with Profession Passport will help with email address authentication if no further data transfer was consented to by the person concerned. As a result of the transfer, the employer / advertiser operating the career portal also becomes an independent data controller.

 

In addition to the above, at the request of the User and subject to the express consent to the transfer of basic data (surname, first name, date of birth, telephone number, country ID, postcode, city, mother tongue, type of driving license), that is consent to the transfer of all basic data, the basic data will be transferred together, while if consent to the transfer of data relating to professional experience, qualifications, language skills, strength, approaches, and CVs and other uploaded documents (e.g. photos, motivation letters) have been given individually, such data will be transferred to the employer / advertiser indicated in the request for consent, when a job application is made through an employer / advertiser’s career portal.

In all cases, the data transfer takes place at the express request of the User initiated on the career portal of an employer / advertiser, after the consent has been given, and refers to the data / documents covered by the consent.

Any subsequent changes made to the data / profile in the User’s profession user account will not be transferred to the profile created in the employer’s / advertiser’s career portal, nor will they be transferred from the latter profile to the former.

 

We would like to draw your attention to the fact that after the data transfer, the User may exercise the right of information self-determination with regard to the transferred data against the given employer / advertiser.

 

The Users can obtain detailed information about the employer’s / advertiser’s data processing activity in connection with the use of the career portals, and about the conditions of using the career portal in the career portal of the employer / advertiser. Please read this information in detail before registering on the career portal, using the service, or initiating the data transfer.

 

 

 

Our Company uses cookies and other similar technologies in the provision of the Services to ensure the proper functioning of the Platform, the Services, to provide the essential and convenience features of the Platform, to enhance the user experience, to take advantage of the Services, to monitor User behaviour, to compile statistics and to provide Users with repeat access to external interfaces. The detailed cookie policy is available at the following link: www.profession.hu/cookieszabalyzat.

Behavioral monitoring cookie
In order to provide the User with a personalized service, to offer jobs/job advertisements that best match his/her interests and needs, to increase the efficiency of the service, to analyze the visits and use of the Site (the fact and duration of the visits to the Site and its sub-sites/sub-areas, monitoring of applications), we place a cookie on his/her browser, and thus on his/her computer, phone or other device (end-user device) and use it if the User has given his/her prior and explicit consent. This consent is accepted by the User in the text bar that appears on the Site. The behavioural cookie stores a randomly generated identifier and the application records certain user events (login, ad view, visit duration, keyword, location, device type) in the database. After logging into the Site, the data recorded about the User’s behaviour is linked to the User.

 

 

  1. Referral systems

In the context of the Content Service, the Company may use advertising and/or the data provided and made available by the User and the Service during registration (including data obtained from information collected by the Company and cookies placed by third party service providers about the User’s behaviour detected by the Site, logging data), conversion events to form user groups and to display targeted content and/or advertising on the Site to the user groups. The Company will also use the data obtained in this way to send e-DM messages. For example, during and for the purpose of the targeted display of job offers, the following data is processed: applied for, viewed job advertisements and list pages, data of searched keywords.

 

  1. Further data processing

 

 

Public authority data request

Courts, public prosecutors, investigating authorities, offence authorities, administrative authorities, consumer protection conciliation bodies, the National Authority for Data Protection and Freedom of Information, or other bodies authorised by law may request the controller to provide information, to disclose or transfer data or to provide documents. Our company is obliged to provide the data – if the requesting body has indicated the exact purpose and scope of the data – (legal basis for data processing: GDPR Article 6 (1) c)). The provision of data is limited to what is strictly necessary to achieve the purpose of the request.

 

Logged data

The Service Provider continuously logs the following data for statistical and debugging purposes, as well as to prevent abuse, to verify the performance and operation of the Service, and to delete these data after 180 days: date of visit, IP address, address of the page viewed.

 

As part of tracking the operation of the Interface, the logged error event (so-called standard yii log, date, time, name / description of the error event, IP address with data content) is stored for 180 days from the date of the error event.

 

The logging is done in the legitimate interest of the Service Provider so that the latter is able to ensure the IT security of the Interfaces and their resistance to offensive, illegal or malicious acts and activities against the website / application (e.g. unauthorized access). Logging is absolutely necessary and proportionate to achieve the goals detailed above.

 

 

 

System messages

 

It is not possible to sign off of the system notifications relating to the registration, its termination, and the operation of the Service

 

 

 

Providers operating webstores

Providers for the stores for mobile and tablet applications (e.g. Apple Store, Android Store) that is for example Apple Inc., Google Inc.) independently process the User Data of the Services installed on the end user device, and send update notifications independently of the Company.

 

 

Review on the application process

The person concerned has the opportunity to make a review anonymously on the application process for the job advertisement. During the review (legal basis for data management: GDPR Article 6. (1) point a)) the fact of the review and the date of the last review are recorded. Data processing lasts until the profile is terminated.

 

 

Information about data processing not mentioned herein will be provided when data is recorded.

IV. USERS’ RIGHTS TO INFORMATION SELF-DETERMINATION REGARDING DATA PROCESSING AND REMEDIES

 

We would like to inform you that any inquiries and requests contained in this paragraph or intended to be addressed to our Company have to be sent by regular mail to the headquarters of our Company as disclosed in the Interface (currently 1123 Budapest, Nagyenyed utca 8-14. IV. emelet) or by email to ugyfelszolgalat@profession.hu. The Company considers the request received from the e-mail address provided to the Company in connection with the given Service to be a request received from the User. In the case of a request submitted from another e-mail address and in writing, it is necessary that the User or other interested party certifies that he/she is a user, his/her identity and his/her relationship with the data concerned.

 

In view of the fact that the user account is password protected and the preservation of the secrecy of the password is the responsibility of the User, requests submitted through the user account shall be considered by the Company as requests received from the User.

 

Information on the transfer of data to employers

 

In addition to the Company, also the employer / advertiser handles the data provided during the application for job advertisements and the attached, uploaded CV, as well as the data transmitted to the employer / advertiser with the consent of the User in accordance with this Notice.

 

It is the employers / advertisers that can provide information on their data management process, the tools used by them, about the data processors and the conditions of data processing by employers / advertisers in general.

 

We would like to inform you that in relation to the data transmitted by our Company to the advertiser / employer for the purpose of data processing, the given advertiser/employer may be requested to give information, make corrections, delete, block the data, and the statement on exercising the right to protest may be submitted directly to the advertiser / employer at the contact details provided in the job advertisement, and in the case of advertisements marked with the Profession Services logo, at the contact details provided to the User during first contact and consent request, and if the User does not have the given contact details, out Company will provide those to the User.

 

Inquiries / requests related to the data processing of the advertiser / employer, but submitted to our Company, will be forwarded by our Company to the advertiser / employer.

 

The Company undertakes to forward to the employer / advertiser the requests related to the processing of personal data, and to enforce the Users’ right to information self-determination to its fullest extent, request the employer / advertiser to declare whether they have complied with the request concerned. The Company will take all measures expected of it in order for the employer / advertiser to respond to and comply with the application (see Section 10.2 of Chapter X. Data Protection of the GTC). Upon receipt of the employer’s / advertiser’s response, the Company will also inform the User.

 

In view of the joint data processing, we ask the User to send his / her request to both the Company and the employer / advertiser. Upon receipt of the employer’s / advertiser’s response, the Company will also inform the User.

 

User rights

 

  1. Access to personal data

 

At the request of the User, the Company shall provide information on whether the Company conducts data processing in relation to the user’s personal data, and if so, the Company shall give access to the personal data, and shall inform the User about the following information:

  • • The purpose(s) of data processing;
  • • the types of personal data involved in the processing;
  • • in case of transfer of the User’s personal data, the legal basis and recipient(s) of the transfer;
  • • the planned duration of the data processing;
  • • the rights of the User in connection with the rectification, deletion and restriction of the processing of personal data, as well as in relation to the protest against the processing of personal data;
  • • the possibility of recourse to the Authority;
  • • the source of the data;
  • • the names, addresses and data processing activities of the data processors.

 

The Company shall provide the User with a copy of the personal data subject to data management free of charge. The Company may charge a reasonable fee based on administrative costs for additional copies requested by the User. If the User submitted the request electronically, the requested information shall be made available in widely used electronic format, unless the data subject requested otherwise.

 

The Company is obliged to provide the information at the request of the User in a comprehensible form without undue delay, but no later than within one month from the submission of the application. User may request access at the contact details set out in Section II.

 

If the Company’s data processing is not based on the data subject’s consent, but the data processing has been abusively initiated by a third party, then the data subject, upon verifying his/her identity and relation to the personal data, may file an inquiry to the Company (deletion, blocking, rectification, protest, information on data processing).

 

 

  1. Request for rectification of personal data

 

The User is entitled to request the correction of his / her personal data or the supplementation of incomplete data (indicating the correct data), taking into account the purpose of data management, at the contact details of the Company set out in Section II, in both cases with proof of identity. The Company shall make the correction in its records without undue delay and shall notify the person concerned in writing of the correction.

Our Company shall mark the processed data if the User disputes their correctness or accuracy but such incorrectness or inaccuracy may not be clearly ascertained.

Please be informed that in certain cases and according to methods of data processing specified in Chapter III of this Privacy Notice, the User may correct his / her own personal data himself / herself as set out therein.

Modify / delete basic data:

https://www.profession.hu/hu/munkavallalo/criteria

Modify / delete CV data:

https://www.profession.hu/hu/munkavallalo/cvdb/employee

Modify / delete job notification:

https://www.profession.hu/hirlevel/list

Modify / delete job applications:

https://www.profession.hu/hu/munkavallalo/palyazataim

Modify / delete CV storage:

https://www.profession.hu/cvfeltoltes

Modify / delete saved jobs:

https://www.profession.hu/allasaim

 

 

  1. Deletion of personal data (right to forget)

 

By giving proof of identity, the User may contact the Company at the contact details set out in Section II, and request the deletion of the personal data concerning him/her or her without undue delay, and the Company shall delete such personal data without undue delay, where one of the following grounds applies:

  1. the personal data is no longer needed for the purpose for which they have been collected or otherwise processed;
  2. the User withdraws his consent and there is no other legal basis for data processing;
  3. the User objects to the processing of his personal data;
  4. the processing of personal data was unlawful;
  5. the personal data have to be erased for compliance with a legal obligation of the EU or the Member State legislation to which the data controller is subject to;
  6. the collection of personal data has taken place in connection with the provision of information society services to children.

 

If the Company has disclosed (made available to a third party) personal data and is required to delete it in accordance with the above, it shall take reasonable steps and measures to inform the data controllers that process the personal data concerned, taking into account the available technology and the cost of implementation, that the User has requested the deletion of the links to the personal data in question or of the copy or duplicate of such personal data.

 

The personal data need not be deleted if data processing is necessary:

  • • for exercising the right of freedom of expression and information;
  • • for compliance with a legal obligation which requires the processing of the personal data by EU or Member State law to which the controller is subject to, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the controller;
  • • on grounds of public interest in the field of public health;
  • • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • • for the establishment, exercise or defence of legal claims.

 

Please be informed that in certain cases and according to methods of data processing specified in Chapter II of this Privacy Notice, the User may delete his / her own personal data as set out therein

 

Modify / delete basic data:

https://www.profession.hu/hu/munkavallalo/criteria

Modify / delete CV data:

https://www.profession.hu/hu/munkavallalo/cvdb/employee

Modify / delete job notification:

https://www.profession.hu/hirlevel/list

Modify / delete job applications:

https://www.profession.hu/hu/munkavallalo/palyazataim

Modify / delete CV storage:

https://www.profession.hu/cvfeltoltes

Modify / delete saved jobs:

https://www.profession.hu/allasaim

 

The Company may delete the User’s personal data in accordance with the sanctions specified in the Terms of Use. In the case of inactivity referred to in the Terms of Use, the Company may delete the personal data of the User.

 

Upon the termination of the Service, the Company will delete the personal data of the Users of the Service processed exclusively in connection with the specific Service, except the data required for the performance of the statutory (e.g. accounting) obligations. The renaming or transformation of the Service, or its merger with another Service, shall not mean the termination of the Service.

 

 

  1. Restriction of processed data

 

The User is entitled to request the Company to restrict the data processing instead of correcting or deleting the personal data, if one of the following conditions is met:

 

  • • the User disputes the accuracy of the personal data, in which case the restriction applies to the period of time that allows the data controller to check the accuracy of the personal data;
  • • the processing is unlawful, and the User opposes the erasure of the data and requests the restriction of their use instead;
  • • the data controller no longer needs the personal data for the purposes of the processing, but the User requires them for the establishment, exercise or defence of legal claims; or
  • • the User objected to data processing; in this case, the restriction applies to the duration of determining whether the data controller’s legitimate reasons prevail over the data subject’s legitimate reasons.

 

If data processing is restricted, such personal data may be processed, with the exception of storage, only with the consent of the user, or for the purpose of submitting, validating or defending legal claims, or for the purpose of defending the rights of another natural individual or legal person, or in the public interest of the EU or a Member State.

 

The Company shall inform the User at whose request the data processing has been restricted, in advance of the lifting of the data processing restriction.

 

 

  1. The right to data portability

 

The User shall have the right to receive the relating personal data that he or she made available to the Company in a structured, widely used, machine-readable format, and is also entitled to transfer such data to another data controller without being hindered by the Company, to whom he/she made available the personal data, if:

  1. data processing is based on consent; and
  2. data processing is automated.

In exercising the right to data portability, the data subject shall have the right to request the direct transfer of personal data between data controllers, if technically feasible.

 

Such right shall not apply where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 

The right to data portability must not adversely affect the rights and freedoms of others.

 

 

  1. Profiling rights

 

In the case of profiling based on automated data processing by the Company, the User has the opportunity to:

  • • request human intervention on behalf of the Company,
  • • express his/her views in the context of profiling concerning himself/herself,
  • • file an objection to the Company’s decision based on automated data processing related to profiling.

 

 

  1. The right to object

 

The User may object to the processing of his / her personal data if the data processing

  • • is necessary for the performance of a task in the public interest or in the exercise of a public authority conferred on the Company;
  • • is necessary to enforce the legitimate interests of the Company or a third party.

 

In the event of a User’s objection, the Company may no longer process personal data unless it proves that the processing is justified by compelling legitimate reasons which take precedence over the User’s interests, rights and freedoms or which are related to the submission, enforcement or protection of legal claims.

 

The Data Subject may, at any time, object to the processing of his or her personal data based on a legitimate interest, including profiling, for reasons related to his or her particular situation. In this case, personal data may not be further processed unless the Company proves that the processing is justified by a legitimate interest on its part that takes precedence over the interests, rights and freedoms of the Data Subject or which are related to the submission, enforcement or protection of legal claims.

 

The right of objection referred to above shall be expressly brought to the attention of the data subject at latest at the time of first contact, and such notification shall be displayed clearly and separately from any other information.

 

The User does not have the right to protest if data processing is based on:

  • • consent
  • • performance of the contract
  • • fulfilment of a legal obligation
  • • protection of vital interests.

 

  1. Notification and procedural rules related to the exercise of the User’s rights

 

The Company shall inform all recipients with whom the personal data have been communicated of the rectification, erasure or restriction of the processing of personal data, unless this proves impossible or requires a disproportionate effort. Upon request, the Company will inform the User about these recipients.

 

The Company shall inform the User without undue delay, but no later than within one month from the receipt of the request, of the measures taken in response to the request for access, rectification, deletion, restriction, protest and data portability. Such deadline may be extended by two months if necessary, taking into account the complexity of the request and the number of requests. The Company shall inform the User about the extension of the deadline, indicating the reasons for the delay, within one month from the receipt of the request. If the User has submitted the request electronically, the information shall, if possible, be provided electronically, unless the data subject requests otherwise.

 

If the Company does not take action at the request of the User, it shall inform the User without delay, but no later than within one month from the receipt of the request, of the reasons for non-action and that the User may file a complaint with a supervisory authority and have legal remedies.

 

At the request of the User, the information, the notification and the action taken on his/her request shall be provided free of charge. If the User’s request is clearly unfounded or, especially due to its repetitive nature, excessive, the Company may charge a reasonable fee or refuse to act on the request, taking into account the administrative costs of providing the requested information or notification or taking the requested action. The burden of proving that the request is manifestly unfounded or excessive is on the Company.

 

In the event of the User’s death, by presenting the death certificate after obscuring irrelevant data or sending a certified copy to the Service Provider’s customer service address after obscuring irrelevant data, any close relative of the User or the person receiving the estate may request the deletion of data, and upon proving a legitimate interest, the transfer of data in accordance with the relevant legislation.

 

In certain cases early deletion of personal data may result in losing certain rights (e.g. exclusion from a prize game, etc.).

 

 

  1. Judicial recourse, possibility to apply to the National Data Protection and Freedom of Information Authority 

 

The Company makes every effort to ensure that the personal data is processed in accordance with the law, however, if the User feels that this has not been complied with, it is possible to write the Company’s contact details set out in Section II.

 

Please be informed that anyone may initiate an investigation at the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11., mailing address: 1374 Budapest, Pf .: 603., phone: + 36-1 / 391-1400, fax: + 36 -1 / 391-1410, e-mail: ugyfelszolgalat@naih.hu, website: www.naih.hu) by filing a notification on the grounds that an infringement has occurred or is imminent with regard to the processing of personal data or the exercise of rights of access to data of public interest or public data in the public interest.

 

The User may apply to a court in the case of:

  • • refusal to provide information,
  • • rejection of a request for rectification, erasure or blocking,
  • • a breach of rights, and
  • • disagreement with the decision on the request for protest, or
  • •  our company misses the deadline for processing the request for protest, within 30 days from the announcement of the decision and the last day of the deadline.

 

The court proceedings fall within the jurisdiction of the court of the place of the headquarters of the Company as defendant (Fővárosi Törvényszék) . The court proceedings may also be instituted at the court of the address or place of residence of the User, at the User’s discretion.

 

If our Company causes damage to another person by illegally handling the User’s data or violating the data security requirements, it is obliged to compensate for it. If our Company or another data controller violates the User’s right to privacy by illegally handling the User’s data or violating the data security requirements, the User may claim damages from our Company.

 

In case of any complaints or objections related to the data processing of our Company, please feel free to contact our Company before initiating the above procedures.

 V. Handling and reporting data protection incidents

 

A data protection incident is any incident that involves the unlawful handling or processing of personal data, in particular an incident resulting in the unauthorized or accidental access to, alteration, communication, deletion, loss or destruction and accidental destruction of and damage to the personal data in connection with personal data handled, transmitted, stored or processed by the Company.

 

The User who detects a data protection incident in the course of his/her work must immediately report it to his/her supervisor and the person responsible for data protection. The  Data Protection Officer shall immediately investigate the reported or detected data protection incident and, within 24 hours of becoming aware of the data protection incident, propose to the Company’s decision-making manager the necessary measures to deal with and manage the data protection incident. The person responsible for data management or the response to the data protection incident shall inform the data protection officer of the measures taken to deal with the data protection incident and the results thereof within 3 working days after the implementation of the measures.

 

The data protection officer shall, without undue delay and, if possible, no later than 72 hours after becoming aware of the data protection incident, notify NAIH of the data protection incident, unless the Company can demonstrate that the data protection incident is not likely to pose a risk to the rights and freedoms of natural persons. If the notification cannot be made within 72 hours, it shall state the reason for the delay, and the required information may also be provided in parts without further undue delay. The notification to the NAIH shall contain at least the following information:

 

  • • the nature of the data protection incident, the number and category of data subjects and personal data;
  • • the name and contact details of the person responsible for data protection;
  • • the likely consequences of the data protection incident;
  • • the measures taken or planned to manage, deal with or remedy the data protection incident.

 

If the data protection officer finds during the investigation of the data protection incident that the data protection incident is likely to pose a high risk to the rights and freedoms of natural persons, it shall immediately inform the decision-making manager of the Company. The Company will inform the data subjects about the data protection incident via the Company’s website within 72 hours after the detection of the data protection incident. Disclosure of the information is the responsibility of the data protection officer.

 

The Company keeps records of data protection incidents in order to monitor the measures related to the data protection incident and to inform the persons concerned. Keeping the records is the responsibility of the data protection officer. The records shall contain the following information:

 

  • • the scope of the personal data concerned;
  • • the scope and number of the persons concerned;
  • • the date of the data protection incident;
  • • the circumstances and effects of the data protection incident;
  • • measures taken to deal with the data protection incident.

 

The Company will keep the data in the records for 5 years from the detection of the data protection incident.

VI. Data security

 

 

The Service Provider shall take the necessary technical and organizational measures and establish appropriate procedural rules in order to ensure the security of personal data during the entire process of data processing. The Company undertakes to ensure that the data are kept safe and to take technical and organisational measures and create a procedural framework to protect the taken, stored and managed data and prevent their destruction, illegal use and unauhorised alteration. The Company undertakes to call any third party to which the data may be transferred or disclosed, to comply with such obligations.

 

The Company stores an encrypted imprint of the password that is only suitable for verifying the correctness of the password, but the password itself cannot be recovered from it.

Only competent persons holding relevant positions may have access to personal data with the highest level of access controls in place.

Communication between the User’s browser and the web servers takes place via an encrypted channel.

 

Data management by the Company also takes place at its registered office.

VII. Data processors

 

 

 

Name of data processor Contact details of the data processor The purpose of data processing Scope of data involved in data processing
Zoomsphere Neumannova 1453/28, Zbraslav, 15 600 Praha 5, Czech Republic Managing Facebook comments Publicly available data on Facebook (social media) e.g. name, email address, place of residence, etc. and the totality of the personal data that the Data Subject voluntarily sends to the Service Provider e.g. phone number
Sajtóművek Bt. 1192 Budapest, Gutenberg körút 3. 1. em. 5. social media agency data usage Publicly available data on Facebook (social media) e.g. name, email address, place of residence, etc. and the totality of the personal data that the Data Subject voluntarily sends to the Service Provider e.g. phone number
Magyar Posta Zrt. 1138 Budapest, Dunavirág utca 2-6. delivery of prizes to winners by post name, address
Micra-S Piackutató- Marketing- és Üzletviteli Tanácsadó Betéti Társaság 2161 Csomád, Liget utca 14. Market research, production of statistical data by evaluation of questionnaires (Individual) Market research:
see Section III./6
DESIGN CD Bt. Budakalász, Árpád u. 14, 2011 delivery of postal items name, address, position
Event and More Kft. Budapest, Csetneki u. 11, 1113 registration for events name
ZeroTime Services Korlátolt Felelősségű Társaság 2013 Pomáz, Mikszáth Kálmán utca 36/4. tasks relating to system administration Registration data (see Section III./ 1.)
Data saved in the CV database (see Section III./ 2.)
Data saved when applying for a job advertisement (see Section III./ 3.)
Data saved in the Profession Candidate Management System (see Section III./ 4.)
Data saved in case of registration on the employer career portal (see Section III./ 11.)
Data saved in the CV builder (see Section III./ 5.)
(Individual) data saved for market research (see Section III./ 6.)
Data saved for direct sales and marketing inquiries (e-DM) with advertising content (see Section III./9.)
Mocha Technologies Inc.. 2093 Philadelphia Pike #1395,
Claymont,
Delaware,
19703, USA
professional pre-screening of job applicants name, e-mail address, professional test
Cascade Informatikai és Energetikai Zrt. 1145 Budapest, Bácskai utca 29/b. software operation and error correction during the operation of the Candidate Management System Data saved in the Profession Candidate Management System (see Section III./4.)
Invitech Megoldások Zártkörűen Működő Részvénytársaság 2040 Budaörs, Edison utca 4. operation of customer registration and management system, server service see Section III.
Salesforce.com Inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA sending electronic direct marketing messages e-DM data (see Section III. 9
UNITED CONSULT K2 Kft. 1117 Budapest, Bogdánfy Ödön u. 6 dintroduction and development of a direct marketing messaging system e-DM data (see Section III. 9
Hotjar Ltd. Level 2 St Julians Business Centre, 3, Elia Zammit, Street St Julians STJ 1000, Malta generating statistics from cursor movement and click data for product usage analysis and development click and cursor movement data
Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland OneDrive cloud service Candidate application material for a labour brokerage service share
Arenim Technologies Kft. 1095, Budapest, Lechner Ödön fasor 6. Operating a customer service telephone system Voice record
RTB HOUSE S.R.O. Vinohradska 2828/151, Zizkov, 130 00 Prague 3, Czech Republic online remarketing see cookie table
Google Ireland Limited Gordon House,

Barrow Street,

Dublin 4,

Ireland

Google Analytics analysis service see cookie table
Gemius Hungary Kft. 1053 Budapest, Szép utca 5. 1st floor. Number2 Digital Audience Measurement Council (DKT) measurement see cookie table
Wanadis Kft. 1112 Budapest, Budaörsi út 153. Maileon e-mail marketing service users name, e-mail address