top of page

PRIVACY
POLICY

I. General Provisions and Contact Details of the Data Controller

The purpose of this Privacy Policy is to ensure that data subjects receive appropriate information regarding their specific rights and obligations concerning the processing of their personal data. Based on this policy, data subjects will be able to understand the circumstances under which their personal data is processed, allowing them to make an informed decision regarding their consent to data processing.

This Privacy Policy is based on Section 20 (2) of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter: Info Act), according to which the data subject must be clearly and comprehensively informed prior to the commencement of data processing about all facts related to the processing of their data, including in particular the purpose and legal basis of data processing, the person authorized to process and control the data, the duration of data processing, whether the data subject's personal data is processed by the data controller based on Section 6 (5) of the Info Act, and who may access the data. The information provided must also cover the data subject's rights and legal remedies related to data processing.

Pursuant to Section 4 (1) of the Info Act, personal data may only be processed for specified purposes, in order to exercise a right or fulfill an obligation. At every stage of processing, the data processing must conform to its stated purpose, and the collection and processing of data must be fair and lawful. Pursuant to Section 4 (2) of the Info Act, only personal data that is essential for achieving the purpose of the data processing and suitable for attaining that purpose may be processed. Personal data may only be processed to the extent and for the duration necessary to achieve the purpose.

This Privacy Policy applies to personal data collected and processed by Minara Consulting Kft. concerning its clients, employees, and partners (hereinafter collectively referred to as: data subjects).

Minara Consulting Kft. informs data subjects prior to the commencement of data processing activities about the facts concerning data processing through this Privacy Policy. The information provided in this Privacy Policy covers the rights and legal remedies of data subjects regarding data processing, as well as whether a data processor is engaged during the processing.

Minara Consulting Kft. acts as the Data Controller with respect to all data processing activities described in this policy.


Details and Contact Information of the Data Controller:

  • Company name: Minara Consulting Kft.

  • Registered Seat: 2098 Pilisszentkereszt, Őzike u. 16., Hungary

  • Company Registration No.: 13-09-211320

  • Tax Number: 29155408-2-13

  • Represented by: Miklós Rajczi-Juhász, Managing Director

  • Website: www.minara.hu


Relevant Contact Information:

  • Minara Consulting Kft.

  • Address: 2098 Pilisszentkereszt, Őzike u. 16., Hungary

  • Phone number: +36205770505

  • Email address: rjm@minara.hu

  • Website: www.minara.hu

 

​This Privacy Policy is available online at the www.minara.hu website.

​​

​​

​

II. Processing of Data of Job Applicants

Based on its internal Privacy and Data Processing Policy, which is to be interpreted together with this Privacy Policy, Minara Consulting Kft. (hereinafter: "Company") processes the data of natural persons who apply for job opportunities advertised by the Company either via the online registration interface of the aforementioned website or in any other electronic form in connection with its recruitment and placement activities.

​

II.1. Legal Basis for Data Processing

The voluntary consent of the data subjects, expressed by submitting their CVs and associated documents (e.g., certificates proving qualifications, educational background, or clean criminal record) to Minara Consulting Kft. [Section 5 (1) a) of the Info Act]

​

II.2. Purpose of Data Processing

Minara Consulting Kft. processes personal data contained in CVs and attached documents received directly or through its online system to notify data subjects about job opportunities best suited to their qualifications and interests, schedule appointments with them, manage the selection process, and transmit the personal data of selected candidates after matching them against preliminary preferences provided by its contractual partners.

​

II.3. Duration of Data Processing

Personal data of data subjects is processed for an indefinite period in connection with the performance of contracts relating to the services specified in Section II.2, as well as based on the consent of the data subjects.

In accordance with the purpose stated in Section II.2 and aligned with the activities of the Data Controller company, as well as the interests of the data subjects, data processing is carried out for an indefinite duration. This indefinite storage is interrupted in every case by a specific erasure request submitted by the data subject, upon which the Data Controller immediately removes the personal data of the concerned data subject from its database.

Pursuant to Section 6 (5) a) of the Info Act, if data processing is required due to any legal obligation, our Company shall process the data for the duration of such legal obligation.

Applicants may request the erasure of their data or withdraw their consent in writing by post at 2098 Pilisszentkereszt, Őzike u. 16., Hungary, or by email at cv@minara.hu.

​

II.4. Scope of Processed Data

Last name, first name, gender, date of birth, nationality, native language, highest level of education, language proficiency, email address, phone number, educational certificates, as well as any other personal data/information voluntarily provided by the data subject in their CV.

​

II.5. Declaration on IT Support Services

The technical conditions for digital data storage are provided on behalf of the Data Controller by the following hosting provider:

​

II.6. Persons Authorized to Access the Data

Minara Consulting Kft. uses the data exclusively for recruitment and selection purposes. The purpose of online applications is to allow data subjects to quickly apply for positions offered by the Company via www.minara.hu or to be included in a database to which third parties have no access. It is hereby recorded that individuals employed by or under contract with the Company may access personal data strictly for the purpose of data processing.

​

​

​

III. Processing of Employee Data

Minara Consulting Kft. (hereinafter: "Company"), as an employer, processes the personal data of natural persons who maintain an employment relationship with the Company based on its internal Privacy Policy, interpreted together with this Privacy Policy.

​

III.1. Legal Basis for Data Processing

Employee personal data is processed based on the performance of the employment contract concluded between the data subjects and the Company. [GDPR Article 6 (1) (b)]

​

III.2. Purpose of Data Processing

The processing of personal data specified by special legislation regarding Minara Consulting Kft. and its employees is carried out to ensure that statutory reporting obligations on the employer's side are fulfilled in the interest of both the Company and the employees, and that data availability is guaranteed during any official inspections.

​

III.3. Duration of Data Processing

For each data subject, employee personal data is processed following the termination of the employment relationship based on the employment contract and for the retention period prescribed by specific legislation.

Pursuant to Section 6 (5) a) of the Info Act, if processing is required due to any legal obligation, our Company processes the data for the duration of such legal obligation.

​

III.4. Scope of Processed Data

Last name, first name, gender, date of birth, tax identification number, national identity card number, social security (TAJ) number, address card details, and all other data essential for establishing employment under specific regulations.

​

III.5. Declaration on IT Support Services

The technical conditions for digital data storage are provided on behalf of the Data Controller by the following hosting provider:

​

III.6. Persons Authorized to Access the Data

Minara Consulting Kft. processes data solely to lawfully maintain employment relationships. In connection with this, the Company's Managing Director and employees employed by the Company may access the personal data referenced in this chapter.

​

​

​

IV. Data Subject Rights Related to Data Processing

Rights of the Data Subject:

  • Request information

  • Request correction/rectification of data

  • Request erasure or blocking of data

  • Object to data processing

 

Inquiries, requests for correction, blocking, erasure, or objections regarding personal data may be submitted at any time via the following contact details:

  • By post: 2098 Pilisszentkereszt, Őzike u. 16., Hungary

  • By email: cv@minara.hu

  • By phone: +36205770505

  • In person: 2098 Pilisszentkereszt, Őzike u. 16., Hungary

 

IV.1. Request for Information

The data subject (hereinafter: user) may request information at any time from Minara Consulting Kft. (hereinafter: data controller) regarding the processing of their personal data. The Data Controller shall provide the information in writing in an intelligible form upon request within the shortest possible time, but no later than 25 days from the submission of the request.

Users may submit their request for information in writing by post or email to the Data Controller. In the request, the user must provide identifying details enabling the Data Controller to verify their authorization to access the personal data. The user must also specify an electronic or postal address to which the Data Controller can send the information.

Users may request information on the scope of personal data processed, the source of personal data, the purpose of processing, the legal basis relied upon, the duration of data processing, and activities performed by the Data Controller related to personal data processing.

Upon request, the Data Controller will provide information regarding which contractual partners the personal data was transferred to, along with the legal basis for the transfer.

In the event of a personal data breach, users may also request information about the circumstances, effects, and measures taken by the Data Controller to mitigate it. A personal data breach refers to unlawful processing or handling of personal data, in particular unauthorized access, unlawful alteration, transmission, disclosure, deletion, or destruction. It also includes accidental destruction or damage of personal data.

The Data Controller will respond via email within 25 days of receiving the request. If the requesting user did not provide an email address or explicitly requested postal delivery, information will be provided in writing by post. Information regarding the scope of personal data specified in the request is provided free of charge once per calendar year.

The Data Controller may refuse to inform the data subject only in the following two cases:

  • If, in the event of a data transfer, the Data Controller receives personal data from a transferor who informs the Data Controller that the data subject's right to information is restricted by domestic or international law.

  • If the data subject's right to information is restricted by law in the interest of state security (national defense, national security, crime prevention/prosecution, execution of penalties), state or local government economic/financial interests, significant EU economic/financial interests, or for preventing and detecting disciplinary/ethical offenses in professional practice or labour/safety violations - including oversight and supervision - or to protect the rights of the data subject or others.

 

In case of refusal, the Data Controller shall notify the Data Subject in writing of the grounds for refusal, citing the specific legal basis, and inform them of available judicial remedies and the option to apply to the Authority (see Section V below).

​

IV.2. Rectification of Data

The Data Subject may request the Data Controller to rectify inaccurate personal data. If the personal data is inaccurate and the accurate data is available, the Data Controller shall rectify it. Requests for rectification may be submitted in writing by post or email.

If the Data Controller does not comply with the request within 25 days of receipt, it shall communicate the reasons for refusal in writing or, with consent, electronically, specifying the legal basis and informing the Data Subject of judicial remedies and the option to turn to the Authority.

​

IV.3. Erasure or Blocking of Data

The Data Subject may at any time request the erasure or blocking of their personal data in writing by post or email.

The Data Controller shall erase personal data if:
 

It was processed unlawfully;

  • The data subject requests erasure or blocking;

  • Processing is incomplete or incorrect and cannot be lawfully remedied, provided erasure is not excluded by law;

  • The purpose of processing has ceased or statutory storage periods have expired;

  • Erasure is ordered by a court or the Authority.

  • If the request is not fulfilled within 25 days, the Data Controller shall state the reasons and legal basis in writing or electronically, and inform the Data Subject of judicial remedies.

 

Instead of erasure, the Data Controller shall block personal data if requested by the Data Subject or if available information suggests erasure would harm the Data Subject's legitimate interests. Blocked data may only be processed as long as the circumstance preventing erasure exists.

​

IV.4. Objection to Personal Data Processing

The Data Subject has the right to object to the processing of their personal data if:

  • Processing is necessary solely for fulfilling a legal obligation or enforcing legitimate interests of the Data Controller or a third party;

  • Data is processed for direct marketing, public opinion polling, or scientific research;

  • Provided for by law.

​

Objections may be submitted in writing by post or email. The Data Controller shall examine the objection within 15 days of submission, decide on its merits, and inform the Data Subject in writing. If justified, the Data Controller shall terminate processing, block the data, and notify all recipients to whom the data was previously transferred.

​

V. Legal Remedies Available to Data Subjects

If the Data Subject disagrees with the Data Controller's decision, or if the Data Controller fails to meet the 15-day deadline for examining an objection, the Data Subject may apply to court for remedy within 30 days of notification or the deadline's expiry.

For violations of rights related to personal data processing, the Data Subject may seek remedy from the National Authority for Data Protection and Freedom of Information (NAIH) or bring an action before the competent court.

Contact Details of the National Authority for Data Protection and Freedom of Information:

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Postal Address: 1530 Budapest, Pf.: 5., Hungary
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu
Data Processing Registration Number: NAIH-50358/2012

Court proceedings against the Data Controller may also be initiated before the tribunal competent according to the Data Subject's place of residence or stay.

The Data Subject is entitled to consent to data processing by the Data Controller only after becoming familiar with the privacy provisions above and understanding their rights and obligations.

​

Effective as of: February 15, 2021

​

 

​

Minara Consulting Kft.
Represented by: Miklós Rajczi-Juhász
Managing Director

bottom of page