PRIVACY POLICY FOR JOB APPLICANTS
(via the website)

We are glad that you are interested in the job application posted by our company.

Before submitting your application, please read our Privacy Policy below carefully.

. Name and contacts of Data Controller (Employer):

ELSZÖV-Automatika Kft.
address: 1106 Budapest, Kabai u. 2.
tel.: +36 1 431 98 40
fax: +36 1 431 98 58
e-mail: info@elszaut.hu

2. Name and contacts of the representative of the Data Controller (Employer):

name: Attila Kovács
position: Managing Director
tel.: +36 1 431 98 40
fax: +36 1 431 98 58
e-mail: info@elszaut.hu

3. The purpose of processing your personal data:

In short, the purpose of processing your personal data is the establishment of an employment relationship between you and our company. In doing so, we handle your personal identification information, contact information, salary demand, education, qualifications, professional knowledge, previous work experience, language skills and other information relevant to your employment.

The definition of some of the personal information that we process about you is set out in the Annex to this document.

Legal grounds for processing your personal data:

• intention to enter into a contract of employment (Article 6(1)(b) of the GDPR)
• the legitimate interest of the employer (Article 6(1)(f) of the GDPR)
• your consent (Article 6(1)(a) of the GDPR)

The legal grounds for the processing of certain personal data about you are listed in the Annex to this document.

Description of the employer's legitimate interests with regard to data processing based on the legitimate interest of the employer:

The GDPR allows the data controller (employer) to invoke its legitimate interest as a reason for data processing. This may be waived where your interests, fundamental rights and freedoms take precedence.

• It is in the employer's legitimate interest to recruit the most suitable candidate for the open position. This is decided by conducting interviews with you and measuring your professional skills through testing. This legitimate interest has been weighed up in a balancing test against the eventual threat to your rights. We apply these methods because the interviews and tests are conducted in such a way as to respect your privacy and these methods are suitable for selecting the right candidate.
• It is in the employer's legitimate interest that, in the event that your job application is unsuccessful and you file a dispute against the employer, it should be able to prove that the application process was legal. This legitimate interest has been weighed up in a balancing test against the eventual threat to your rights. However, it is both in your interest and that of the employer to avoid, or satisfactorily settle, disputes, and therefore we consider that data processing based on such legitimate interest is necessary.

The recipients of personal data:
(those persons to whom the employer transmits personal data)

Your personal information will not be passed on to third parties during the job application process.

When processing your application, only the HR manager, your prospective supervisor and the managers will have access to your personal data.

Your data will not be transferred to a third country or international organization.

7. The intended period for which the personal data will be stored and the criteria for determining this period:

Your personal data will be processed in the following period:

• we will process all personal information you provide until the job application process is completed, with the legal basis that you wish to enter into a contract of employment with our company;
• after the job application process is completed and you get the job, your personal data will be processed in compliance with and on the legal grounds included in the privacy policy valid for your employment. In this case, you will receive a separate privacy policy.
• if the job application process is completed and you do not get the job, we will keep processing your personal data for reasons of contacting you if you give your explicit consent. In such cases, we will inform you if there is an open position at our company. Your consent will be requested for a period of 1 year;
• after the job application process is completed, if you are not employed for the position, your data will be processed in the legitimate interest of the employer to prove, in case of a potential dispute, that the evaluation of the application process was legal. In this case, your data that is no longer used for data processing purposes (such as contact information) will be deleted, but your other data will only be deleted at the end of the 6th month after the last day of the claim deadline.

8. Your rights in relation to data processing:

Based on the GDRP, you are entitled to request the following from your employer:

• access to your personal data, i.e. information about your data we process. You may also request a copy of this information as long as it does not adversely affect the rights of others;
• rectification of your personal data, e.g. if your phone number changes before the job application process is completed;
• erasure of your personal data, unless, among other things, the processing is necessary for filing, enforcing or defending legal claims;
• restriction of the processing of your personal data. If any data is subject to restrictions, such personal data will only be stored; other data processing may only be carried out with your consent, or for the purpose of filing, enforcing or defending legal claims, or for the protection of the rights of any other natural or legal person, or for the public interest of the European Union or any of its Member States;
• You may, at any time, object to the processing of your personal data for any reason related to your situation. In this case, the Employer shall no longer process the personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims;
• You have the right to receive the personal data provided by you a controller, in a structured, commonly used and machine-readable format and to transmit these data to another controller (right to data portability). The exercise of this right is subject to the condition that the data processing is based on your consent or your intention to enter into a contract and that the data processing is automated. Please be advised that, since we do not use automated data processing during the job application process, we cannot guarantee this right in the context of the job application.

9. The right related to data processing based on consent:

If any personal data of yours is processed by us based on your consent, you have the right to withdraw that consent at any time. However, the withdrawal of consent shall not affect the lawfulness of the data processing carried out on the basis of the consent prior to the withdrawal.

10. Information about statutory data processing:

No such data processing is carried out in relation to the job application.

11. Information about data processing based on a contract:

When submitting your job application, your goal is to enter into an employment contract with our company. In order to assess your application, it is imperative that you provide your personal information, such as your name, qualifications, previous work experience, and possibly your language skills. In absence of these, your job application cannot be assessed and will fail.

12. Information relate to the fact of automated decision making, including profiling:

No such data processing is carried out in relation to the job application.

13. Objection against data processing

You have the right to object to the processing of your personal data based on a legitimate interest of the employer at any time on grounds relating to your particular situation, including profiling based on the aforementioned provisions. In this case, the Employer shall no longer process the personal data unless the Employer proves that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

14. Information on data security:

The employer has taken and implements appropriate technical and organizational measures to ensure an adequate level of data security. Accordingly, the employer shall ensure that the documents related to employment are managed in a physically sealed and digitally protected format. The employer has made sure that your personal information is secure by setting appropriate access and authorization levels.

Accordingly, your employment records, including your CV, the notes related to your interview and the admission test results, will be accessible only to the employer's HR staff, your prospective supervisor and the executives.

15. Rights of appeal related to data processing:

You have the following rights related to data processing:

• turn directly to the CEO of the Employer (Attila Kovács);
• lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH), mailing address: 1530 Budapest, POB: 5.; phone: +36 (1) 391-1400; fax: +36 (1) 391-1410; email: ugyfelszolgalat@naih.hu);
• go to court (your competent court will decide about your claim).

Budapest, 2018. august