EXTRACT FROM THE DATA PROTECTION NOTICE FOR JOB APPLICANTS

Data Controller: Mindspire Consulting Private Company Limited by Shares (registered office: 1027 Budapest, Ganz Street 16., 5th floor, company registration number: 01-10-048810, email: info@mindspire.hu).

Affected parties: Anyone who applies for a job advertised by the Data Controller or for a position not advertised by the Data Controller (hereinafter referred to as the "Applicant" or "Data Subject").

1. Purposes, legal basis, scope and duration of data processing

1.1. The purposes of the different data processing activities:

(I) recruitment;

(II) maintaining contact with;

(III) enforcement of rights.

For data processing purposes I and II (recruitment, maintaining contact):

Legal basis of data processing: voluntary consent of the Data Subject, according to Article 6(1)(a) of the GDPR. If the Data Subject also provides sensitive personal data in connection with his/her application, the legal basis for processing is the voluntary, explicit and informed consent of the Applicant, pursuant to Article 9(2)(a) GDPR. If the Applicant also provides personal data in connection with his/her application material relating to his/her reduced capacity for work, deterioration of health or impairment of health, the Data Controller shall also process such data based on the express consent, according to Article 9(2)(a) of the GDPR.

Purpose of data processing: keeping a record of applicants, evaluating the applications submitted, notifying Applicants for advertised positions following the closure of the selection process, and continued storage of the Applicants’ data in the Data Controller’s own database.

For data processing purposes III (enforcement of rights):

Legal basis for data processing: the processing of the Applicant's data for the Company's legitimate interest according to Article 6(1)(f) of the GDPR.

The purpose of the data processing: to enable the Company to meet its obligation to provide evidence in the event of possible enforcement of rights by the Applicant.

1.2. Scope of data processed and duration of data processing

Scope of the data processed for the purposes of recruitment/maintaining contact regarding point I and II

The Applicants’ data processed by the Company are the following: all the data provided by the Applicant in the Data Submission Form or in his/her application/resume.

The Data Controller shall process the data of the Applicants for recruitment/contact maintenance purposes for a period of 2 years from the date of the Applicant’s application or consent to data processing, or until the Applicant's request for deletion is fulfilled.

Scope of data processed for the enforcement of rights regarding point III

The scope of the data processed for this purpose is consistent with the scope of the data processed in the course of the recruitment process.

Scope, limits and duration of data processing

In case of a rejected job application, the Company will store the data of the Applicant processed for the purpose of enforcement of rights for 2 years from the date of the Applicant's application.

2. Recipients of the processing

The Data Controller's employees and collaborators are entitled to become acquainted with the personal data of the Applicants only to the extent necessary for the fulfilment of their professional tasks.

3. The source of the data

The Data Controller receives the data of the Applicants either directly from the Applicants or a recruitment agency.

4. Data processor

The data processor used: Administrator of the HR Master software: Evolution Consulting Ltd. 3515 Miskolc, Egyetemváros AFKI Building 2nd floor.

5. The Applicant's rights regarding data processing

The Applicants have the following rights: right of access, right of rectification and correction, right to be forgotten, right to the restriction of data processing, right to data portability, right to object, right to withdraw consent.

In the event of a breach of rights in connection with data processing, the Applicant may appeal to the supervisory authority or to a court. Hungarian National Authority for Data Protection and Freedom of Information (website: https://naih.hu/, Postal address: 1363 Budapest, Pf.: 9.). The Data Controller may be brought before a Hungarian court as a Hungarian data controller. The contact details of the courts in Hungary can be found at the following link: https://birosag.hu/ugyfeleknek/birosagok/torvenyszekek.

Further details are available at the link below:

https://www.mindspire-consulting.com/data-protection-notice-for-job-applicants/