Privacy Policy

1. Cookie Management of www.hezihold.hu (Website)

In operating this Website, HeziHold uses so-called cookies. A cookie is a small data file that this Website stores on your internet browsing device and can later read from there. The Website uses cookies for two different purposes: one category of cookies ensures an appropriate user experience, while another group of cookies serves statistical purposes through the use of the Google Analytics system.

You can delete cookies from your own computer or disable their use in the browser's Tools/Settings menu under Privacy/History/Custom settings under the name cookie/tracking.

If you disable the use of cookies, it is conceivable that some functions of the Website will not work or will not work properly, or problems may arise in displaying the Website.

2. Processing of Data of Business Partners' Representatives

HeziHold stores data of representatives and sales staff of its business partners for contact purposes and to identify their identity. HeziHold stores basic data of its business partners, such as contact names, email addresses, and phone numbers. HeziHold also processes personal data necessary for contract conclusion, including data of representatives authorized to officially represent clients that are available in the Company Registry.

3. Contact with HeziHold

If you contact HeziHold, HeziHold processes your personal data you provide based on your consent. The purpose of data processing is to maintain contact with you. Such personal data particularly includes sender data, such as email address, address, and name. HeziHold deletes such personal data upon withdrawal of your consent or after January 31 of the year following the expiration of the limitation period (generally 5 years).

4. HeziHold's Contact with You

HeziHold initiates contact with potential partners and clients, for which purpose it processes the names, positions, email addresses, and phone numbers of officers of such partners and clients. HeziHold deletes data stored for this purpose if no contact is made for at least two years after data recording. HeziHold performs the deletion by January 31 of the year following the expiration of the two-year period at the latest.

5. Data Processing Related to Job Applications

HeziHold processes personal data in job applications submitted to HeziHold based on your consent.

HeziHold processes job applications from the time consent is given for data processing until the closure of the specific job application, in order to evaluate the job applications.

For further data processing of applications for a maximum of one year, HeziHold requests the applicant's consent, and if given, it may process the data subject's data for 1 year after the closure of the application, in order to use the application materials if HeziHold is looking for a new applicant for a position that the applicant might be suitable for by the time of deletion.

HeziHold processes personal identification and contact data of job applicants that the applicant provides during contact or in their application, for the purpose of evaluating applications. HeziHold processes data and information voluntarily provided by the applicant in their resume or application, particularly including the applicant's name, address, email address, phone number, education, and data related to their professional experience.

6. Complaint Handling

If you submit a complaint, HeziHold processes your personal data you provide and the complaint itself for the purpose of handling it and maintaining contact with you. During complaint evaluation, HeziHold particularly processes the complainant's name, address, mailing address, and phone number.

HeziHold processes personal data provided during complaint handling based on its legitimate interests, as complaint detection and investigation is extremely important for HeziHold to provide its services at the highest possible level.

HeziHold pays special attention to the confidential handling of complaints and takes all reasonable measures to ensure that complaints are only known to those who participate in their evaluation. HeziHold deletes personal data provided with the complaint by January 31 of the year following the expiration of the limitation period (general limitation period: 5 years). If justified, HeziHold may forward the data to the competent authorities.

7. Rights of Data Subjects

As a data subject, you have the right to request the deletion of your personal data, as well as to receive information about your processed personal data, access your personal data, request their correction or restriction of data processing, object to data processing, or request data portability.

Data subject rights can be exercised through written inquiry sent to HeziHold's contact details described in point II. In response to the written inquiry, HeziHold provides information to the data subject. HeziHold responds to the inquiry within 1 month: it provides information about the measures taken.

HeziHold responds to data subjects' inquiries free of charge, except when the request is unfounded, in which case it may charge a reasonable fee or refuse to take action.

8. Right to Information

HeziHold ensures that information about personal data processing specified in Article 13 of the GDPR is made available to data subjects in accordance with the requirements prescribed in the regulation (in a concise, transparent, understandable, and easily accessible form, formulated clearly and comprehensibly).

9. Right of Access

The data subject has the right to request information about whether their personal data is being processed, as well as to receive information about the following:

• the purposes of data processing;
• the categories of personal data concerned;
• the recipients or categories of recipients with whom the personal data have been or will be disclosed, including in particular recipients in third countries or international organizations;
• the planned duration of storage of personal data, or if this is not possible, the criteria for determining this duration;
• the data subject's right to request from the data controller the correction, deletion, or restriction of processing of personal data concerning them, and to object to such personal data processing;
• the right to lodge a complaint with a supervisory authority;
• if the data was not collected from the data subject, all available information about their source;
• the existence of automated decision-making, including profiling, and at least in these cases, meaningful information about the logic involved and the significance and envisaged consequences of such processing for the data subject;
• a copy of the personal data undergoing processing is provided to the data subject.

10. Right to Rectification

The data subject has the right to obtain from the data controller without undue delay the rectification or completion of inaccurate personal data concerning them.

11. Right to Erasure

The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay if one of the following grounds applies:

• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
• the data subject objects to the processing;
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation;
• the personal data have been collected in relation to the offer of information society services.

12. Right to Restriction of Processing

The data subject has the right to obtain from the data controller restriction of processing if one of the following applies:

• the accuracy of the personal data is contested by the data subject, in which case the restriction applies for the period enabling the data controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• the data controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or
• the data subject has objected to processing; in this case, the restriction applies for the period until it is verified whether the data controller's legitimate grounds override those of the data subject.

13. Right to Data Portability

The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another data controller.

14. Right to Withdraw Consent

The data subject has the right to withdraw their consent to data processing at any time, which, however, does not affect the lawfulness of processing based on consent before its withdrawal.

15. Right to Object to Processing

The data subject has the right to object to processing of personal data concerning them if the processing is based on legal grounds other than consent or contract performance with the data subject.

If the objection is justified, the data controller is obliged to cease processing and delete the data, or at the data subject's request, take measures to restrict processing, except when necessary for the enforcement of legal claims. If the processing is for business or marketing purposes, HeziHold will cease processing the data affected by the objection.

16. Right to Compensation

Any person who has suffered material or non-material damage as a result of an infringement of the regulation has the right to receive compensation from the data controller or processor for the damage suffered.

17. Right to Judicial Remedy

If you have any comments or problems regarding HeziHold's data processing, please contact HeziHold with confidence at the contact details specified in point II. In case of violation of their rights, the data subject is entitled to turn to court. In addition to the above, you can also file a complaint with the National Authority for Data Protection and Freedom of Information (registered office: 1055 Budapest, Falk Miksa utca 9-11; mailing address: 1363 Budapest, Pf. 9, phone: +36 (1) 391-1400, email: ugyfelszolgalat@naih.hu).