Privacy Policy

Harvey's Consultancy Services Hungary Zrt. (hereinafter: Data Controller or Harvey's Zrt.) provides the following information regarding the processing of personal data of natural persons applying for one or more of its job postings (hereinafter: Applicant).

When the Applicant contacts Harvey's Zrt. for the purpose of applying for one or more positions, certain personal data is necessarily transferred to the Data Controller during the process. Data processing by Harvey's Zrt. prior to employment takes place exclusively in connection with personal data provided by the Applicants, as described in detail below.

I. Data Controller

Harvey's Consultancy Services Hungary Zrt.
Registered office: 1037 Budapest, Montevideó utca 16/A
Company registration number: 01-10-142235
Website: www.harveys.hu
E-mail: office@harveys.hu

II. Subject and applicable legislation

This privacy policy covers data processing related to the Data Controller's recruitment activities: submission of CVs and other applicant personal data, receiving and evaluating applications, and building an HR database.

Applicable legislation: GDPR (EU Regulation 2016/679), Act CXII of 2011 (Information Act), Act I of 2012 (Labour Code), Act CXCI of 2011.

III. Legal basis for processing

Data processing is fundamentally based on the voluntary consent of the Applicant (GDPR Article 6(1)(a)). For special categories of personal data, the legal basis is the Applicant's explicit voluntary consent under GDPR Articles 6(1)(a) and 9(2)(a). The Applicant may withdraw consent at any time, in which case their data will be deleted.

IV. Purposes of processing

The purpose of data processing is: conducting internal HR procedures necessary for the selection process, maintaining records in the applicant database in case of unsuccessful applications, and sending relevant job offers to the Applicant at a later date.

V. Scope of processed data

The source of personal data is the Applicant. Processed data includes: identification data, educational qualifications, salary expectations, photograph, previous employers and positions, other relevant CV data, and all data voluntarily provided by the Applicant in submitted documents.

VI. Access to data

Persons participating in the selection process on behalf of the Data Controller may fully access Applicant data. Data processors acting on behalf of the Data Controller receive data transfers so they can perform their duties.

VII. Duration of processing

The Data Controller processes Applicants' personal data until the decision on employment is made. With separate consent, data may be retained in the applicant database for up to 12 months. Without consent, or upon withdrawal, data is deleted.

VIII. Data security

The Data Controller ensures the security of personal data and applies technical and organizational measures to protect stored and processed data, prevent unauthorized access, alteration, and destruction.

IX. Data processors

1) Greenventions Kft. (Company reg: 01-09-980386, Budapest) — HR support, recruitment, personality and competency assessment.

2) Sugta Klára EV (Reg: 14285673, Tata) — HR consulting, personality and competency assessment, online questionnaires, coaching, psychological pre-screening.

X. Rights and remedies

The Applicant has the right to: information, access, rectification, deletion, restriction, data portability, objection, withdrawal of consent, and to lodge a complaint with a supervisory authority or court.

National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9-11.
Phone: +36-1-391-1400
E-mail: ugyfelszolgalat@naih.hu
Web: naih.hu

XI. Other provisions

No personal data is transferred to third countries or international organizations. The Data Controller reserves the right to amend this policy unilaterally for the future.