Data privacy

I. Terms used in the Prospectus

The purpose of this Prospectus, together with the applicable data protection rules and guidelines, is to set out the rights of data subjects in a concise, transparent, comprehensible and easily accessible form, in a clear and comprehensible manner. To achieve this goal, to make the Prospectus easier to understand, we summarize the meaning of the terms used below:

• Personal Information: Any information or data about you
• Data management: any operation or set of operations on personal data, whether automated or non-automated, such as collecting, recording, organizing, segmenting, storing, transforming or altering, querying, viewing, using, communicating, transmitting or otherwise making available , harmonization or interconnection, restriction, deletion or destruction;
• Data controller: during the present data management the Company
• GDPR: Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Regulation (EC) No 95/46

II. Contact details and data of the data controller

Name: Cheppers Service Provider Private Limited Company
Company registration number: 01-10-048970
Tax number: 25742066-2-41
Headquarters: 1137 Budapest, Szent István körút 22. 3. em 3.
Designated contact person: Zsófia Major
Email address: info@cheppers.com
Phone number: + 36-1-472-5234

III. Management of data of interested parties

Source of personal information

Inquiries can be received in the following forums:

• via the Are you interested in the position? panel on the www.cheppers.hu website
• to the electronic mail addresses of the Company and the employees of the Company
• The Company is also available on various community forums, so inquiries can also be made on the following interfaces: LinkedIn, Facebook, Instagram, Twitter

Scope of data managed

• In the case of Website: name; e-mail address; other information provided during the inquiry
• In the case of electronic mail: e-mail address; other information provided during the inquiry
• Community forums: name; other information provided during the inquiry

Purpose of data management

Name: Your name is required to contact you
E-mail address: the e-mail address is required for contact between the Company and you, if necessary, for consultation and response.
Other information provided: Other information provided by you is required to better understand the question

Legal basis for data management

Article 6 (1) (a) GDPR - voluntary contribution

Recipients of personal data

The Company does not transfer personal data to third parties, authorities or courts, except as required by law

Duration of storage of personal data

The Company manages the managed data until the withdrawal of the consent. Withdrawal of consent is possible at any of the contact details provided in point I.

VI. Management of job applicant data

Source of personal information

Inquiries can be received in the following forums:

• via the Are you interested in the position? panel on the www.cheppers.hu website
• to the electronic mail addresses of the Company and the employees of the Company
• The Company is also available on various community forums, so inquiries can also be made on the following interfaces: LinkedIn, Facebook, Glassdoor, Dreamjo.bs, Nofluffjobs

Scope of data managed

Personal information provided in the CV:

• name
• place and time of birth
• contacts: place of residence, whereabouts, telephone number, e-mail address
• study data
• professional experience

Other information provided by the applicant:

• LinkedIn profile
• Other shared profiles (professional: github, behance, dribbble, etc. and less often Instagram, Facebook, etc.)
• Wage demand
• Any other shared reference work (development work, UX portfolio, etc.)
• Cover letter

Purpose of data management

The purpose of data management is to provide the Company, as a data controller, with the most complete picture possible of the personal and professional characteristics of the applicants (necessary for the performance of the work) in order to select the appropriate workforce.

Legal basis for data management

Article 6 (1) (a) GDPR - voluntary contribution
Article 6 (1) (b) GDPR - pre-contractual data

Recipients of personal data

The Company does not transfer personal data to third parties, authorities or courts, except as required by law.

For ease of use, the Company will record and track applicants through an online service called recruitee: https://recruitee.com/.

Duration of storage of personal data

Due to the rapid development of the IT sector, the Company is constantly looking for new staff. The recruitment is continuous, but recruitment is intermittent. You can apply for our open positions continuously, however, the application will not be closed intermittently - depending on your economic performance. Accordingly, personal data will be stored for 2 years from the date of the consent or until the consent is withdrawn. Withdrawal of consent is possible at any of the contact details provided in point I.

V. Cookie data management

In order to use our website in a customized and efficient way, as well as for the fullest possible user experience, our website contains a small data package on your computer, the so-called you can place a cookie. Cookies (cookies) are identifiers that our website or the server of the partner collecting the cookie can send to the computer you use to identify the computer used during your stay on our website and store technical data about the use of the website (such as clicks, other navigation data).
Most browsers automatically accept these cookies by default. These settings only apply to the browser and computer you are using, and the settings and disabling of cookies must be set separately for each computer and browser. By disabling cookies, we cannot guarantee the proper functioning and full use of all functions of the website.

VI. Common rules: rights of data subjects

During the period of data processing, you have the following rights in accordance with the provisions of the GDPR:

• access to personal data and data management information;
• the right to rectification;
• data management restrictions;
• right of cancellation;
• the right to protest;
• the right to portability;
• right to withdraw consent.

The data subject 's right of access

You have the right to receive feedback on whether your personal data is being processed and, if data is being processed, you have the right to access your personal data and the following information:

• the purposes of data management;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be communicated, including in particular third country recipients or international organizations;
• where applicable, the intended period for which the personal data will be stored or, if that is not possible, the criteria for determining that period;
• the data subject's right to request the controller to rectify, delete or restrict the processing of personal data concerning him or her and to object to the processing of such personal data;
• the right to lodge a complaint with a supervisory authority;
• if the data were not collected from the data subject, all available information on their source;
• the fact of the automated decision-making referred to in Article 22 (1) and (4), including profiling, and, at least in those cases, comprehensible information on the logic used and the significance of such processing and the expected outcome for the data subject; consequences.

The purpose of exercising the right may be to establish and verify the lawfulness of the data processing, therefore, in case of repeated requests for information, we may charge a fair fee in return for the provision of the information.

We provide access to personal data by sending you the personal data and information we process after you have been identified. Please indicate in your request whether you are requesting access to personal data or requesting data management information.

You have the right to have inaccurate personal data about you corrected without delay upon request.

Right to rectification

The data subject shall have the right, at his request, to have inaccurate personal data concerning him rectified without undue delay. Taking into account the purpose of the data processing, the data subject has the right to request that the incomplete personal data be supplemented, inter alia, by means of a supplementary statement.

Right of cancellation

You have the right to delete personal data about you without undue delay if any of the following reasons exist:

• personal data are no longer required for the purpose for which they were collected or processed;
• You withdraw your consent and there is no other legal basis for the processing;
• You object to the processing of data on the basis of a legitimate interest and there is no overriding legitimate reason (ie a legitimate interest) in the processing of the data,
• the personal data have been processed unlawfully and this has been established on the basis of the complaint,
• personal data must be deleted in order to comply with a legal obligation under Union or Member State law applicable to us.

If we disclose personal information processed about you for any legitimate reason and are required to delete it for any of the reasons set out above, we will take reasonable steps, including technical measures, to inform other data controllers, taking into account available technology and implementation costs. data controllers that you have requested the deletion of the links to the personal data in question or of a copy or duplicate of this personal data. As a general rule, we will not disclose your personal information.
Deletion does not apply if data processing is required:

• for the purpose of exercising the right to freedom of expression and information;
• to fulfill an obligation to process personal data under applicable EU or Member State law (such as data processing in the context of invoicing, as the retention of the account is required by law) or in the public interest or in the exercise of a public authority conferred on the controller;
• to submit, enforce or defend legal claims (eg if we have a claim against you and has not yet fulfilled it, or a consumer or data processing complaint is being processed).

Right to restrict

You have the right to restrict the processing of your data if you request one of the following:

• You dispute the accuracy of your personal information, in which case the restriction applies to the period of time that allows us to verify the accuracy of your personal information, if verification is not required, we will not apply a restriction;
• the processing is unlawful and you oppose the deletion of the data and instead ask for a restriction on its use;
• we no longer need your personal data for the purposes of the designated data processing, but you require it to make, enforce or protect legal claims; obsession
• You have objected to the data processing, but our legitimate interest may also justify the data processing, in which case, until it is determined whether our legitimate reasons take precedence over your legitimate reasons, the data processing must be restricted.

If the processing is subject to restrictions, such personal data may be processed, with the exception of storage, only with your consent or for the purpose of bringing, enforcing or protecting legal claims or protecting the rights of another natural or legal person or in the important public interest of the Union or a Member State.

We will inform you in advance about the lifting of the data management restriction (at least 3 working days before the lifting of the restriction).

Right to data portability

If the data processing is necessary for the performance of the contract or the data processing is based on your voluntary consent, you have the right to request that the data you provide to us be received in a machine-readable form, which we provide you in .xml, .JSON or .csv format, or, if this is technically feasible, you may request that the data be transferred in this form to another data controller.

Right to protest

The data subject shall have the right at any time to object to the processing of his or her personal data pursuant to Article 6 (1) (e) or (f), including profiling based on those provisions, for reasons related to his or her situation. In that case, the controller may not further process the personal data unless the controller demonstrates that the processing is justified by compelling legitimate reasons which take precedence over the interests, rights and freedoms of the data subject or which are necessary to bring, assert or defend legal claims. are related.

Remedies

If, in your opinion, the data management of the Data Controller does not comply with the legal requirements, the National Data Protection and Freedom of Information Authority (Postal address: 1530 Budapest, Pf .: 5., e-mail address: ugyfelszolgalat@naih.hu, website: naih.hu ) may institute proceedings or bring legal proceedings.

VII. Final provisions

This Privacy Notice is effective as of May 25, 2018.