1. Introduction

Below we would like to inform you about the information related to certain data processing performed by HAJDU Autotechnika Ipari Zrt.

This Privacy Notice contains important information about the processing of your personal data. By providing your personal data, you agree to the terms and conditions of this Privacy Notice. Please read this Privacy Notice regularly, as changes to it will automatically apply to the processing of the personal data you provide, even if a previous privacy notice was in effect when you provided your personal data. We will publish changes to this Privacy Notice on our websites or notify you in other ways, depending on the source of your data. Please read the provisions in this Privacy Notice in bold, as they may contain important provisions regarding the processing of your personal data.

If the data processing takes place on our website, by using the Website, you accept the terms and conditions contained in this Privacy Notice. If you do not agree to the contents of this Privacy Notice, please do not use the Website. You may find more information about the data processing related to the cookies used on the website in the information on data processing related to online platforms ( (Cookie Policy ).

Our Website: www.hajduautort.hu (hereinafter: ‘Website‘)

This Privacy Notice applies only to the personal data of the Data Subjects of the natural person, taking into account that the data of legal persons or other organisations that do not qualify as legal persons do not qualify as personal data. The following legislation on data protection applies:

▪ Regulation of the European Parliament and of the Council (EU) 2016/676 (General Data Protection Regulation; better known as GDPR)

You may found the text of the regulation here

Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv);

You may found the text of the Infotv here

 

 

2. Basic information

2.1. The primary legal ground for data processing by Hajdu is the voluntary consent of the Data Subject. When processing is based on consent, the Data Subject may withdraw their consent at any time, but it shall not affect the lawfulness of the processing carried out prior to the withdrawal. Data on the proof of the fact of consent shall be kept by Hajdu for as long as the provability of the consent or other legitimate interest of Hajdu so requires.

2.2. The Data Subject is responsible for the authenticity and accuracy of the personal data provided by them. Hajdu does not verify the authenticity of the personal data provided. Hajdu shall not be liable for the processing of inaccurate or untrue data provided by the Data Subject, nor for damages to the Data Subject or to third parties due to incorrect or untrue data disclosure provided by the Data Subject. Hajdu shall not be liable if Hajdu is deceived as to the capacity of the Data Subject.

2.3. Consent is given

a) in the case of a Website, by using the Website or otherwise providing personal data,

b) in all other cases by other verifiable means by the Data Subject (in writing on paper, by e-mail, fax, etc.)

.

2.4. In the case of an incapacitated minor under the age of 14, only the data subject's legal representative may provide personal data on behalf of the Data Subject. The declaration of the legal representative is required to provide the personal data of an Incapacitated User. The signed declaration must be sent to Hajdu by personal delivery or by post, e-mail or fax, or the declaration may be made in other verifiable ways (e.g., video and/or audio recording).

2.5. For the processing of the personal data of a minor with limited legal capacity who has not yet reached the age of 16, requires the declaration of consent of the minor's legal representative (made in the manner specified in Section 3.6).

2.6. The consent or subsequent approval of their legal representative is not required for the validity of your legal statement (i.e., the provision of their personal data) of minors who has reached the age of 16 to consent to data processing. Such Data Subject may give their consent to the processing of the data, depending on the method of data collection.

2.7. The Data Subject's consent shall be deemed to have been given in respect of personal data communicated or disclosed by them in the course of the data subject's public participation.

2.8. Hajdu processes the personal data provided to it - unless otherwise provided by law - only for the purposes described in this Privacy Notice, to the extent and for the time necessary to achieve the purpose.

2.9. Hajdu does not perform profiling.

 

3. VARIOUS PROCESSING ACTIVITIES

a) NEWSLETTER

Data subjects

Persons subscribing to the newsletter on the hajduautort.hu website

Purpose of data processing

Sending an informative e-mail containing the newsletter sent by the Website.

Scope of processed data

Name*, e-mail address*

Legal ground of data processing

Consent

Processor

AW Studio., represented by: Csaba Balázsi (private entrepreneur) registered office: 4400 Nyíregyháza, Hunyadi utca 42, attic /10., company registration number: 66226198-2-35

HAJDU Autotechnika Ipari Zrt, 4243 Téglás, Suburban area, topographic lot number 0135/32,

company registration No.: 09-10-000395

Giganet Kft. registered office: 4400 Nyíregyháza, Vasvári Pál utca 1, ground floor, company registration number: 15-09-067789

 

The Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308) data processing activities: providing newsletters

Duration of the processing

Until consent is withdrawn.

Other

The data marked with * are required to use the service. If you do not provide the information, Hajdu will not be able to send you a newsletter.

 

b) REQUEST FOR AN OFFER

 

Persons filling in the contracting authority subpage of the Website
 

Management of offer requests sent to the Data Controller via the Website
 

Name*, e-mail address*, phone, details of the area covered by the offer.
 

Consent
 

AW Studio., represented by: Csaba Balázsi (private entrepreneur) registered office: 4400 Nyíregyháza, Hunyadi utca 42, attic /10., company registration number: 66226198-2-35

HAJDU Autotechnika Ipari Zrt, 4243 Téglás, Suburban area, topographic lot number 0135/32,

company registration No.: 09-10-000395

Giganet Kft. registered office: 4400 Nyíregyháza, Vasvári Pál utca 1, ground floor, company registration number: 15-09-067789
 

5 years in case of a contract, otherwise one year.
 

The data marked with * are required to use the service. If you do not provide the information, Hajdu will not be able to give you a suitable price offer or contact you to make a suitable offer.

 

 

 

c) MESSAGING

 

People who send a message to Hajdu through the website

 

Resolving and answering the question indicated by the Data Subject, handling complaints if necessary

 

Name*, email address*, phone number, personal data that may be included in the message

 

Consent

 

AW Studio., represented by: Csaba Balázsi (private entrepreneur) registered office: 4400 Nyíregyháza, Hunyadi utca 42, attic /10., company registration number: 66226198-2-35

HAJDU Autotechnika Ipari Zrt, 4243 Téglás, Suburban area, topographic lot number 0135/32,

company registration No.: 09-10-000395

Giganet Kft. registered office: 4400 Nyíregyháza, Vasvári Pál utca 1, ground floor, company registration number: 15-09-067789

 

For 1 year after the settlement of the case indicated by the data subject, and for 5 years in case of a complaint.

 

The data marked with* is mandatory, without this Hajdu will not be able to reply to the message.

 

 

 

d) DATA PROCESSING RELATED TO HAJDUHÍR MAGAZINE

 

Persons who have given their consent for the publication of a photo or other content about them in HajduHír magazine.

 

Publication of a monthly magazine published by HAJDU for the employees of the group.

 

Name, facial image, other content

 

Consent

 

Center-Print Kft., registered office: 4027 Debrecen, Füredi út 76., company registration number: 09-09-001761 (data processing activity: performing printing work related to the publication of HajduHír magazine)

 

Content published in the magazine will not be discarded.

 

 

 

 

 

e) PROCESSING OF DATA OF PERSONS SUBMITTING APPLICATIONS TO HAJDU

 

Persons applying for a job at the data controller or selected in connection with a specific job advertisement

 
  • The purpose of the data processing performed until the evaluation of the application is: to assess the professional suitability of the applicant in relation to the advertised position. Where the collection of specific personal data has a different purpose, it is expressly indicated in the line below.
  • The purpose of data processing after the assessment of the application: direct inquiries by the data controller in order to create additional job opportunities, provided that the data subject has consented.

 
  • Name, place and date of birth, nationality, permanent address, place of residence (purpose of data processing: identification of the applicant)
  • Phone number:, e-mail address (purpose of processing: contact)
  • Details of the position applied for
  • Data on educational qualifications
  • Data on professional experience
  • Data on language skills (in case of an applicant for employment in an intellectual position)
  • Wage demand
  • Public profile of a community site (e.g., LinkedIn) if the information provided here provides information relevant to the position applied for
  • As required: CV and data in it, e.g.
  • facial image, if included in the CV
  • natural identity data (name, gender, place and date of birth, nationality)
  • language skills, educational and other qualifications, professional experience, preferred position, area of ​​interest
  • where applicable, the type of driving licence, and
  • other information contained in the CV.
  • As required: motivation letter and its content. Please do not provide any information in your CV and personal statement that is not relevant for the establishment of the employment relationship!
  • As required: aptitude tests (tests may require the applicant to solve logical and mathematical problems, depending on the position held). We do not use the tests to collect information about the applicant other than the assessment of professional suitability, and the tests we use are not suitable for learning such information. The tests are analysed by an expert, and the results can be accessed by our recruitment staff. In addition, we can test the applicant's language skills and test their knowledge of certain software in the job interview.)

 

Applicant's consent. Please note that you are not obliged to give your consent. However, if you do not consent to the processing of data for recruitment purposes, we will not be able to process your job application. If you have given your consent, you may withdraw it at any time without giving any reason, but the withdrawal shall not affect the lawfulness of the processing operations performed before the withdrawal.

 

-

 
  • In the event of an unsuccessful application, 90 days after the period of assessment of the application for employment, if the data subject has not given their consent to further requests.
  • If the data subject has consented or the data subject has not applied for a specific job, the CV (application) will be kept for two years and used to communicate job opportunities.
  • In the event of a successful application, the data controller will further process the data required for the establishment and maintenance of the employment relationship from the data provided at the time of application, in accordance with the separate information to be provided to employees.

 

With regard to data processing related to recruitment, the joint data controllers with HAJDU are the members of the HAJDU company group, HAJDU Infrastruktura Zrt and HAJDU Hajdúsági Ipari Zrt. The contact details of the data controllers correspond to the contact details described in this Privacy Notice. HAJDU designates the company to which the applicant submits its application as the primary data controller. 

 

 

4. Data processing

4.1. A natural or legal person or any other body that processes personal data on behalf of the controller is considered a data processor. Data processing does not imply the right to decide on the data: the data processor implements the data processing decisions of the data controller.

4.2. Hajdu described the identity and tasks of the data processors in connection with the detailed information related to each data processing. With respect to that this information is not suitable for naming all data processors, we summarise the services provided by the data processors used by Hajdu:

a) hosting

b) IT support service

4.3. In individual cases (sweepstakes, promotions, etc.), Hajdu may also use other data processor(s), which will provide information about the person(s) in the given conditions of participation.

4.4. The data processor may not make a substantive decision concerning data processing, may process personal data obtained only in accordance with the provisions of Hajdu, may not process data for its own purposes, and is obliged to store and preserve personal data in accordance with Hajdu's provisions.

5. Data transfer

5.1. When describing the various types of processing, Hajdu lists the recipients of transferred data and their categories..

5.2. Hajdu may also transfer personal data to other companies of the HAJDU company group on the basis of its legitimate interest (e.g., the creation of uniform, group-level records for administrative purposes):

HAJDU Infrastruktura Zrt. (4243 Téglás, 0135/9; company registration No.: 09-10-000106), HAJDU Hajdúsági Ipari Zrt. (4243 Téglás, 0135/9; company registration No.: 09-10-000396).

5.3. Hajdu is entitled and obliged to transfer any personal data available and regularly stored by it to the competent authorities, the transfer on of which is its legal obligation, imposed by the law or in an effective order of an authority. Hajdu may not be held liable for such data transfer or any consequences thereof.

6. Data transfer to a third country

6.1. Hajdu does not transfer personal data to any controller registered in a third country (a non-EEA state)

6.2. Where appropriate, Hajdu may use a data processor established in a third country. Hajdu, for example, in some cases uses MailChimp’s service provider, The Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308) to send mass newsletters. Mailchimp operates under the Privacy Shield, adopted in 2016, which allows for the lawful transfer of data between data controllers and data processors in the European Union and the United States.

 

 

7. What rights do you have in relation to data processing?

  • You have the right to request information about data processing. We exercise your right to information as described herein, but if you do not find the answer to your question in the information provided here, please let us know by e-mail or call us at the contact details indicated above. Of course, you can also write us a letter.
  • You have the right to access the data we process about you and to request a copy of the personal data processed. The first copy is free, and additional copies may incur a reasonable fee based on administrative costs.
  • You have the right to request the rectification of inaccurate data.
  • You have the right to withdraw your consent to the data controller (this does not affect the lawfulness of the data processing before the withdrawal). Withdrawal of consent may affect you, depending on the purpose of the data processing, e.g., we will not be able to offer you suitable jobs, we will not be able to make repairs, etc. after your consent has been withdrawn.
  • You have the right to request the erasure of your data, in which case we cannot offer you suitable jobs.
  • In some cases, we do not erase the data, but rectify the data processing to storage only. This may occur if (i) you dispute the accuracy of your personal data, (ii) the processing is unlawful but you do not wish to request the erasure of the data, you only request a restriction on the use of the data, (iii) the purpose of the processing is no longer valid, but you are requesting data processing to enforce any right (iv) you have objected to the data processing, but we must examine whether the legitimate interest of our company take precedence over your legitimate interests.
  • You have the right to receive the data we process and to request transfer of them to others (right to data portability). You have the right to receive the data you provide in a structured, widely used, machine-readable format, or to transfer it to another data controller, and you may request that your data be transferred directly to another data controller.
  • In certain cases, you have the right to object to the data processing (for example, if the data is processed for a reason necessary to enforce a legitimate interest or for direct marketing).
  • If you find that we are processing your data unlawfully in any way, please indelicate us in any case, so that we can correct the infringing situation as soon as possible.
  • You also have the right to contact the authority directly at the following contact details:

National Authority for Data Protection and Freedom of Information

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Postal address: 1530 Budapest, PO Box: 5.

Phone: +36 -1-391-1400

Fax: +36-1-391-1410

E-mail: ugyfelszolgalat@naih.hu

  • If you experience illegal data processing, you can also initiate a civil lawsuit. The case falls within the competence of the general court. The lawsuit can also be initiated before the court of your place of residence (you can find the list and contact details of the courts at the following link: http://birosag.hu/torvenyszekek).
     
  1. How can you enforce your rights?

If you would like to contact us to exercise any of the above rights, please contact us at the contact details indicated above.

If you notify us that you wish to exercise one of your rights, we will inform you of our measures taken on the request without undue delay, but no later than one month from the receipt of the request. This period may, however, be extended by two months if warranted by the complexity of the request or the number of requests. We shall definitely notify you of any such extension within one month of receiving the request; such a notification shall include the reason of the extension. If you have submitted your request electronically, we will also respond electronically, unless you expressly indicate otherwise.

If we consider that we do not need to take action upon your request, we shall notify you without delay, but no later than one month after receipt of your request, of the reasons for such failure and that you may place a complaint at the supervisory data protection authority and may seek judicial legal remedy.

We provide the exercise of your rights free of charge. However, if your request is clearly unfounded or, in particular because of its repetitive nature, excessive, we may charge a reasonable fee or refuse to act on the request.

 

8. Contact

If you have any questions, comments or requests regarding this Privacy Notice, would like to make a complaint or would like to exercise your rights, please contact us at + +36-52/582-700 or at the following contact details:

HAJDU Autotechnika Ipari Zrt.

4243 Téglás, 0135/32.

info@hajduautort.hu

 

9. Scope

This Privacy Notice is applicable from 25 May 2018.