Niveus Human Resources Kft. (seat: HU-1037 Budapest, Montevideo utca 9., VAT Nr.: 24219604-2-41; company registration number: 01-09-996137) processes your personal data according to the current data privacy policy.

1. THE DATA CONTROLLER, THE PERSONS ENTITLED TO PROCESS THE DATA AND THE DATA PROTECTION OFFICER

The data controller is Niveus Human Resources Kft. (hereinafter referred to as: Data Controller). At Data Controller:

• the following persons are entitled to have access to the personal data processed for the purposes of job advertisements and job applications: the Data Controller's managing director, the office manager, the HR manager and the head, manager of the professional area concerned,
• the following persons are entitled to access personal data processed for the purpose of contacting the Data Controller: the Data Controller's managing director, the office manager, the head, manager of the professional area concerned, the relevant persons and the business development manager involved in the answer of the contact,
• the following persons are entitled to access the personal data processed for the purpose of contacting existing / potential partners: the Data Controller's managing director, the office manager, the head, manager of the professional area concerned, the employees and the business development manager involved in the performance of the given project. 

Data Controller did not appoint a Data Protection Officer, given that it does not carry out any processing activities that would have made this necessary.

2. OPEN JOB ADVERTISEMENT

2.1 THE LEGAL BASIS AND REASON FOR THE PROCESSING

The legal basis for the processing is consent, the purpose of the processing is to evaluate the job application, to provide feedback to candidates and to contact them.

2.2 THE SCOPE AND THE PERIOD OF THE PROCESSING 

CVs and other related documents typically include the following information: name, address, telephone number, e-mail address, education, previous jobs, qualifications, skills, references, jobs applied for, salary requirements.

The consent shall be valid from the date of sending the application until the position is filled (except if, for example, it is necessary to keep it for reasons related to the application or if you withdraw it in the meantime). 

You may withdraw your consent at any time by sending an e-mail to office@niveus.hu. The withdrawal of the consent does not affect the lawfulness of the processing for the period prior to the withdrawal. 

No automated decision-making is carried out in relation to CVs and no personal data is collected from third parties.

3. UNOPENED JOB ADVERTISEMENT, UNSUCCESSFUL APPLICATION

3.1 THE LEGAL BASIS AND REASON FOR THE PROCESSING

The legal basis for the processing is consent, the purpose of the processing is to use the data contained in the CV for the purposes of assessing a possible future vacancy.

3.2 THE SCOPE AND THE PERIOD OF THE PROCESSING 

CVs and other related documents typically include the following information: name, address, telephone number, e-mail address, education, previous jobs, qualifications, skills, references, jobs applied for, salary requirements.

Consent is valid for a maximum of 12 months. 

You may withdraw your consent at any time by sending an e-mail to office@niveus.hu. The withdrawal of the consent does not affect the lawfulness of the processing for the period prior to the withdrawal. 

No automated decision-making is carried out in relation to CVs and no personal data is collected from third parties.

4. CONTACT WITH THE EXISTING BUSINESS PARTNERS

4.1 THE LEGAL BASIS AND REASON FOR THE PROCESSING

The legal basis for the processing is the performance of a contract (in the case of a request as an individual) or legitimate interest (in the case of a request as a contact person other than an individual). The purpose of the data processing is to identify partners, to contact them, to fulfil contractual obligations and to exercise rights, to fulfil accounting obligations. 

4.2 THE SCOPE AND THE PERIOD OF THE PROCESSING

The personal data processed are the name, position, e-mail address and telephone number provided in the course of professional cooperation. 

The personal data will be kept for 5 years from the termination of the relevant agreement, except for personal data for which a longer retention period is required by law (e.g. 9 years for accounting documents).

5. CONTACT THROUGHT THE WEBSITE

5.1 THE LEGAL BASIS AND REASON FOR THE PROCESSING 

The legal basis for data processing is consent, if you contact the Data Controller by using the contact details on its website, the data you provide will be stored in order to forward your message to the appropriate person. 

5.2 THE SCOPE AND THE PERIOD OF THE PROCESSING 

We will process your name, e-mail address, telephone number and any other personal data included in the question, request. Once we have responded, your data will be processed depending on the response

• in the absence of any further future contact, we will delete it after the general limitation period for claims (5 years) in order to avoid future disputes,
• we will process it with regard to our pre-existing contractual relationship (usually 5 years from the year of the last business relationship, but e.g. 9 years for an accounting voucher),
• with regard to our potential future relationship, we will process them either on the basis of the performance of the contract (in the case of an enquiry as an individual) or on the basis of legitimate interest (in the case of an enquiry in a non-individual capacity).

6. THE RECIPIENTS OF THE PERSONAL DATA

The necessary IT background is provided by Niveus Consulting Group Kft. (data privacy policy: here), to whom the personal data for sending the professional newsletter (in the Niveus Group, it manages the relevant database) is transferred, and the data can also be accessed by the IT service providers of Niveus Consulting Group Kft.:           

• Cleverant Kft. (general maintenance, support): https://cleverant.hu/;
• WP Online Magyarország Kft. (web development): https://wpo.hu/hu/  

Data will be provided to the following member companies of the Niveus Consulting Group solely for the proper performance of the contract and in case of a professional request for contact purposes:

• Niveus Tax Services Kft. (data privacy policy: here);
• Niveus Accounting & Payroll Services Zrt. (data privacy policy: here);
• Niveus Service Center Kft. (data privacy policy: here);
• Niveus Audit Kft. (data privacy policy: here);
• Niveus Legal | Halmos és Jánosi Ügyvédi Iroda (data privacy policy: here)

Personal data – with the exception of the above - will not be transferred to third parties. 

7. THE AUTHENTICITY OF DATA SUBJECTS' DATA AND THE PROCESSING OF DATA OF PERSONS UNDER THE AGE OF 16

Data Controller does not verify the accuracy of the personal data provided, in this respect Data Subject shall be solely responsible. Any Data Subject who provides an e-mail address is also responsible for the exclusive use of the e-mail address provided. With regard to this assumption of responsibility, any liability in connection with access to a given e-mail address shall be borne solely by the Data Subject who used the e-mail address.

The personal data of a person under the age of 16 may only be processed with the consent of the person who has parental / representative authority over him / her. The Data Controller is not in a position to verify the eligibility of the person giving consent or the content of his / her declaration, and the user or the person having parental / representative authority over him / her guarantees that the consent is in accordance with the law. In the absence of a declaration of consent, the Data Controller shall not collect personal data relating to a data subject under the age of 16. If we become aware that we have collected personal data from a child under the age of 16, we will take the necessary steps to delete the data as soon as possible.

8. COOKIES

Cookies are small data files that are transferred to your computer through the website by using the website and are saved and stored by your internet browser. Most of the most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your browser settings to refuse or block them, or to delete cookies already stored on your computer. The website contains the following cookies:

• system cookies: session cookies from the web application's firewall, used to prevent cross-referencing misuse (expires at the end of the browser session),
• tracking cookies (third-party): Google Analytics, a web tracking service, to identify new sessions and visitors (https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?authuser=1),

For more information on third party cookies, please see https://www.google.com/policies/technologies/types/ and for information on privacy, see https://www.google.com/analytics/learn/privacy.html?hl=hu.

9. RIGHTS

10.1 At any time, you have the right to request information (in relation to each processing type) about the personal data processed by the Data Controller concerning you, including those identified in this notice, the purposes, the legal basis and the duration of the processing, as well as who is or are receiving your data and for what purposes.

10.2 At any time, you have the right to request the Data Controller to correct / complete your inaccurate / incomplete personal data (in relation to each processing type).

10.3 At any time, you have the right to request the Data Controller to restrict processing (in relation to each of the processing type). Where processing is restricted, the Data Controller may process personal data, other than for storage, only with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another person. You may request the restriction of the processing of personal data if

• there is a dispute over the accuracy of the personal data,
• the processing is unlawful or you object to the erasure of your personal data,
• the Data Controller does not need the personal data for the purposes of processing, but you request the restriction of personal data for the establishment, exercise or defence of legal claims.

Data Controller shall inform you of the lifting of the restriction prior to the lifting of the restriction.

10.4 At any time, you have the right to object to processing on grounds relating to your particular situation (in relation to contact).

10.5 You have the right to request the Data Controller to delete your personal data at any time (in relation to each processing type). Data Controller will delete your personal data if:

• it no longer needs the personal data for the purposes for which it was collected or processed,
• your personal data have been unlawfully processed; or
• it is obliged to erase the personal data in order to comply with a legal obligation.

Data Controller shall investigate and decide on the merits of requests for data processing within a maximum of 30 days from the date of their submission and shall inform the applicant in writing of its decision.

11. COMPLAINT HANDLING

11.1 If you believe that your personal data has not been processed by Data Controller in accordance with the provisions of this policy or that you have not been able to exercise your rights fully, please contact us by using one of the following: 

• HU-1037 Budapest, Montevideo utca 9.
• e-mail: office@niveus.hu (please indicate "Data Processing" in the subject line of the letter)

11.2 If your rights concerning your personal data have been infringed, you can lodge a complaint with the authority using the following contact details:

• National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)
• Mailing address: HU-1363 Budapest, Pf.: 5.
• Seat: HU-1055 Budapest, Falk Miksa u. 9-11
• Phone: +36 (1) 391-1400
• Fax: +36 (1) 391-1410
• E-mail: ugyfelszolgalat@naih.hu.

11.3 In the event of a breach in the processing, you can also take legal actions.