Last updated: March 29, 2021.
1. PURPOSE OF THE NOTICE
The purpose of this notice (hereinafter: “Notice”) is to present how KNP LAW Nagy Koppany and Lencs Law Office (registered seat: H-1011 Budapest, Hunyadi János út 20.; website: www.knplaw.com; hereinafter: “KNP LAW” or “Controller”) processes the personal data provided by you and how KNP LAW ensures the safety of such personal data when you send your CV and/or other documents related to your application for a position (hereinafter jointly: “CV”) to us (either by using the application “Join us!” on our website or in any other way, e.g. via email or by using staff recruitment services).
2. WHAT IS PERSONAL DATA?
a, Personal data
Any and all information that refers to an identified or identifiable natural person (i.e., a human being – or “data subject” as used by the law) shall be considered personal data. A natural person is identifiable if that person can unambiguously be identified directly, or indirectly, i.e., especially on the basis of an identifier such as a name, number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, intellectual, economic, cultural or social identity of that natural person.
b, Special categories of personal data
Special categories of personal data are personal data revealing the racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, furthermore genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Please do not provide any sensitive data specified above in your CV and in any related document!
3. WHAT SHALL I DO IF I PROVIDE SOMEBODY ELSE’S PERSONAL DATA IN MY APPLICATION?
If you also provide us with personal data referring to another person in your application (e.g., the name and contact details of a person you indicated as reference), it shall be your obligation and responsibility to make sure that such personal data are disclosed to us lawfully. If applicable, we advise you to acquire the related express and documented consent of the persons concerned and to provide them with this notice prior to sending us their personal data.
4. LEGAL BACKGROUND OF DATA PROCESSING
As controller, KNP LAW is committed to being fully compliant with the provisions of the prevailing national and European laws and regulations – especially the General Data Protection Regulation No. (EU) 2016/679 (hereinafter: “GDPR”) when processing the data of its clients, partners and other natural persons it comes into contact with.
Therefore, KNP LAW will take every reasonable measure to ensure the safety of the personal data provided by you at the highest level possible and will within such scope take every necessary technical and organizational measure and develop the required procedural rules to protect the personal data processed by KNP LAW from unauthorized access, disclosure, unauthorized alteration and deletion.
5. WHAT IS THE PURPOSE OF DATA PROCESSING PERFORMED BY KNP LAW?
KNP LAW processes the personal data provided by you in your application for the following purposes:
a, If you send your CV not to apply for a specific position advertised by KNP LAW (e.g. by using staff recruitment services), the purpose of data processing is that KNP LAW should store the personal data provided by you in its database for the period specified in Section 8 of this Notice in order to be able to contact you if there is a vacant position at KNP LAW which you may be suitable to fill on the basis of your CV.
b, If you apply for a position specifically advertised by KNP LAW (e.g. by using staff recruitment services), the purpose of data processing is that KNP LAW could evaluate your suitability for the position advertised (and related to it, that KNP LAW could initiate and keep contact with you).
6. LEGAL GROUNDS OF DATA PROCESSING
The legal basis of data processing is your consent to the processing, in accordance with Article 6(1) a) of the GDPR. You give your consent to the data processing (by implication) upon sending your CV (either by using the application “Join us!” or in any other way) to us (or to the provider of staff recruitment services if you use such services).
Your consent is given freely (you decide if you want to send your CV to us to apply for a position or not) and can be withdrawn at any time. However, we hereby inform you that the withdrawal of your consent to data processing does not affect the lawfulness of the data processing performed by us prior to the withdrawal.
If you withdraw your consent after sending your CV to us:
a, If you apply for a position not specifically advertised
Your personal data will be deleted from our database, in consequence of which we will not be able to contact you if if there is a vacant position at KNP LAW which you may be suitable to fill.
b, If you apply for a position specifically advertised
KNP LAW will not be able to evaluate your suitability for the position you applied for by sending your CV (or if the evaluation has already taken place, KNP LAW will not be able to contact you in this matter.
7. WHAT KIND OF PERSONAL DATA ARE PROCESSED BY KNP LAW?
In order to achieve the purposes specified in Section 5 of this Notice, KNP LAW processes the following personal data provided by you:
a, In case of application for a position not specifically advertised by using the application “Join us!” on our website
a) your name; b) your email address; c) your telephone number (if you provided it); d) your qualifications; e) year of graduation (or expected year of graduation); f) degree or major in the given educational institution; g) level of foreign language skills; h) the personal data included in the CV uploaded by you.
b, In case of application by using staff recruitment services
a) all personal data you provided the staff recruitment service provider with (see the exact list of such personal data in the related privacy notice of the staff recruitment service provider).
c, In case of application in any other way (e.g. by email or post)
a) all personal data you provided in your application.
8. HOW LONG ARE THE PERSONAL DATA PROVIDED BY ME PROCESSED?
a, If you apply for a position not specifically advertised
We will store the personal data specified in Section 7 of this Notice in our database for one (1) year.
Upon the expiry of the data processing period, we might contact you to acquire your consent to the continuation of the processing of your personal data (or their eventually updated version) by KNP LAW for the purpose specified in Section 5 a) of this Notice.
b, If you apply for a position specifically advertised
If you apply for a position specifically advertised by KNP LAW via any channel, your personal data will exclusively be processed until your application has been evaluated and the related communication has taken place.
If you have not been admitted to fill the position advertised by us as a result of the evaluation of your application, we might request you to consent that we could continue to store the personal data provided by you in our database, in order to be able to contact you if there is a vacant position at KNP LAW which you may be suitable to fill in our view.
9. DATA PROCESSORS USED BY KNP LAW
In the course of data processing in accordance with this Notice, KNP LAW engages the following data processors to perform certain data processing activities:
NAME OF DATA PROCESSOR
DATA PROCESSING ACTIVITY PERFORMED BY THE DATA PROCESSOR
|CENTER.HU Kft. (registered seat: H-1094 Budapest, Tompa utca 13.; company Registration No.: 01-09-681704)||Operating the IT systems of KNP LAW.|
|Seal-Comp Kft. (registered seat: H-1074 Budapest, Csengery utca 28.; company registration No.: 01-09-375702)||Operating the IT systems of KNP LAW.|
|Dr. Péter Hanák individual entrepreneur (registered seat:
H-2183 Galgamácsa, Hétház utca 25.; registration No.: 11780289)
|Operating the IT systems of KNP LAW.|
|Sill Law Office (registered seat: H-1011 Budapest, Hunyadi János út 20.; tax No. 18646463-2-41)||Providing legal consultancy service for KNP LAW.|
|Dr. László Ágai individual attorney-at-law (registered seat: H-1016 Budapest, Mészáros utca 4. I/1.; tax No.: 18192012-2-42)||Providing legal consultancy service for KNP LAW.|
KNP LAW reserves the right to change or extend the above list of data processors, if necessary; however, you can request KNP LAW any time to provide you with information on the name and contact details of the data processors it engages. KNP LAW undertakes to ensure that the data processors it engages fully comply with KNP LAW’s instructions and with the applicable laws and statutory provisions pertaining either to data protection or other issues within the scope of carrying out their data processing activities.
10. ARE PERSONAL DATA TRANSFERRED TO A THIRD COUNTRY?
As a general rule, the personal data provided by you to KNP LAW will not be transferred to a country outside of the European Economic Area (hereinafter: “EEA”). If, however, due to any rare and important reason it becomes necessary to transfer any personal data on an ad hoc basis to a country outside of the EEA, KNP LAW undertakes to perform any such transfer exclusively in compliance with an adequacy decision in accordance with Articles 45-46 of the GDPR, sufficient guarantees or if a special condition stipulated in Article 49(1) of the GDPR is fulfilled.
11. WHO HAS ACCESS TO THE PERSONAL DATA PROVIDED BY ME?
The personal data provided by you are exclusively accessible (in addition to the data processor we use in the given field) to KNP LAW members and employees who are involved in assessing (and also communicating with you in this matter) whether you are suitable for the position that you applied for or that we have selected for you on the basis of your CV.
12. WHAT RIGHTS DO I HAVE IN CONNECTION WITH THE PROCESSING OF MY PERSONAL DATA?
According to the applicable Hungarian and EU data protection regulations, you have the right to
– receive confirmation / feedback of whether or not your personal data are being processed, and if they are, you are entitled to request access to your personal data. Within such scope you can receive the following information: the purposes of processing, the categories of personal data concerned, the recipients or categories of recipients to whom personal data have been or will be disclosed, the duration of data processing, the source of the personal data processed and your right to lodge a complaint with a supervisory authority (see the detailed description of such right in Article 15 of the GDPR);
– request the rectification of your inaccurate personal data or have your incomplete personal data completed (see the detailed description of such right in Article 16 of the GDPR);
– request the erasure of your personal data in cases specified by the GDPR (e.g., if you have withdrawn consent on which the processing is based or your personal data are no longer necessary in relation to the purposes of data processing) (see the detailed description of such right in Article 17 of the GDPR);
– request the restriction of the processing of your personal data in cases specified by the GDPR. You can request it if you contest the accuracy of your personal data processed by KNP LAW, or you object to the processing of your personal data or if KNP LAW processes your personal data unlawfully and you request the restriction of processing instead of the erasure of your data. You are also entitled to exercise this right if KNP LAW no longer needs your personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims. If you have requested the restriction of the processing of your personal data in the above way, the data concerned can only be further processed (beyond their storage) within the narrow scope specified by the GDPR (e.g., if the personal data affected by the restriction are required to exercise legal claims) (see the detailed description of such right in Article 18 of the GDPR);
– exercise your right to data portability by requesting KNP LAW as Controller to provide you with your personal data in a structured, commonly used and machine-readable format or to transmit such data to another controller. You have the right to data portability if the processing is based on your consent or on the performance of a contract which you are a party to, and – in both cases – if the processing is carried out by automated means (for example within the scope of a computer system) (see the detailed description of such right in Article 20 of the GDPR).
13. HOW CAN I EXERCISE MY RIGHTS AND HOW CAN I CONTACT KNP LAW IF I HAVE QUESTIONS REGARDING DATA PROCESSING?
If you want to exercise your above rights or you have any questions or comments regarding this Notice or the data processing performed by us, please contact us via any of the below contact details:
Contact details of KNP LAW as controller:
Name: KNP LAW Nagy Koppany and Lencs Law Office
Address: H-1011 Budapest, Hunyadi János út 20.
KNP LAW strives to reply to your queries or perform your requests concerning privacy as soon as possible, but not later than one (1) month following the receipt of your message. Please note, however, that – if necessary due to the complexity and/or number of your requests – KNP LAW may, on the basis of the GDPR, extend the above deadline by two (2) additional months. We shall inform you about any eventual extension of the deadline within one (1) month following the receipt of your request.
If we find your request not to be grounded and, consequently, KNP LAW cannot perform your request, we shall send you a related notification (also including the details of our refusal) within one (1) month following the receipt of your request.
Please also note that we can only perform your requests related to the processing of your personal data by us following the verification of your identity, without which (e.g., via the telephone) we can provide general information only.
14. WHAT LEGAL REMEDIES DO I HAVE?
If you believe KNP LAW (or its data processors) violated your rights in the course of the data processing it carried out, you have the following options:
– contact KNP LAW directly via the contact details specified in the previous Section;
– lodge a complaint with any of the supervisory authorities (e.g., in Hungary with the Hungarian National Authority for Data Protection and Freedom of Information, hereinafter “NAIH”). Contact details of NAIH: registered seat: : H-1055 Budapest, Falk Miksa utca 9-11; P.O box: 1363 Budapest, Pf.: 9.; telephone: +36-1-391-1400 e-mail: firstname.lastname@example.org;
– initiate an action before court if you believe that KNP LAW or one of its data processors processed your personal data unlawfully. In this case you are entitled to initiate the action – apart from applying the general rules on competence – before the county court having jurisdiction over your home address or place of residence. See the competences and contact details of the courts on the following website: www.birosag.hu
In any case we advise you to contact us first with your privacy related concerns, complaints or observations, and we will do our best to comply with such.
15. PRIVACY NOTICE UPDATES
We may amend this privacy Notice (primarily in order to comply with any amended statutory requirements) in the future. The amendments of the privacy Notice shall enter into force when the updated version of the Notice is published on our website www.knplaw.com.The date of the last update of the privacy Notice is indicated at the top of the document.