Data Protection Statement

I. Introduction
Your privacy is important to us.

During data management, HeziHold pays special attention to the applicable data protection regulations, especially on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; “GDPR”) and Act CXII of 2011 on Informational Self-determination and Freedom of Information (“Info Act”)

If you have any comments regarding this statement, please contact us at info@HeziHold.hu, and our colleagues will get back to you.

HeziHold applies appropriate technical and organizational measures to ensure the legality and security of data management.


II. Data controller is HeziHold Kft.
Seat: 1134 Budapest, Tüzér utca 39.
Phone: +36 30 269 2929
Telefon: (available from Mon-Fri, between 9 -5.30 pm CET)
Email: info@HeziHold.hu Mail address: 1134 Budapest, Tüzér utca 39.


III. Data management by HeziHold
1. Cookie management of www.HeziHold.hu (webpage)
HeziHold website uses cookies. Cookie is a small data file your browser installs when you visit our website and read it from there later. Cookies are used from two purposes, one category is used to provide the right user experience, while the other category is used for statistical purposes via using Google Analytics.
You can delete these cookies or disable them in Cookies/ Data security/ History/ Unique settings/ Tools/Settings in your browser.
In case you disable using cookies, you may not be able to visit certain parts of our website or you will not be able to use certain functions.

a) User experience cookies
The user experience cookies store the personal data of the device and browser you use when opening the website, in order to ensure that the functions of the website function properly. User experience cookies are used for the legitimate interests of HeziHold, as HeziHold pays special attention to ensuring that all interested parties can access the information displayed on the Website in a readable, organized form, i.e. the management of user experience cookies is also in the interest of Website visitors. You cannot be identified based on the data read from the user experience cookies. User experience cookies are deleted after they are used, i.e. when the browser is closed.

b) Google Analytics cookies These cookies are used to collect statistical information about how visitors use our site without uniquely identifies them. The cookie distinguishes the visitors of our website from each other and makes it possible to determine their geographic location. The management of Google Analytics cookies is based on your consent, which you can give by clicking the “I accept” button in the pop-up window of the website.

Google Analytics cookies are automatically deleted after a year. The use of these cookies can be disabled by installing the Google Analytics application developed (http://tools.google.com/dlpage/gaoptout). You can find more information in the Help menu. See more information about Google Analytics cookies at https://www.google.com/policies/technologies/cookies.


2. Management of the data of contacts and representatives of business partners
HeziHold stores the following data of its business partners: names; email addresses and phone numbers of contact persons.
HeziHold further stores personal data needed for conducting contracts, such as data of Representatives which are anyway available in the Company Register.


3. Contacting HeziHold
If you contact HeziHold, processing of your personal data you provide will be based on your consent. The purpose of data management is to maintain contact with you. Such personal data is mainly the data of the sender, such as e-mail address, address and name.
HeziHold deletes such personal data if you withdraw your consent or on January 31 of the year following the limitation period (generally it is 5 years).


4. HeziHold contacting you
HeziHold initiates contact with its potential partners and customers, for which purpose it manages the names, positions, e-mail addresses, and telephone numbers of contact persons. Such data stored will be deleted by HeziHold if no contact is made for at least two years after the data was recorded. HeziHold will delete the data no later than January 31 of the year following the second year.


5. Data management related to job applications
Your personal information included in your applications are handled based on your consent.
After giving consent to data management, HeziHold processes job applications until the respective job application is closed, in order to assess the job applications.
HeziHold requests the applicants’ consent for further data management for a maximum of one year. If this is granted, it can process the data of the affected person for 1 year after the end of the tender, in order that if it is looking for a new applicant for a position for which the applicant may be suitable by the date of cancellation, in this case, the application materials can be used by HeziHold.
HeziHold manages the personal identification and contact data of job applicants, which the applicant provides during contact or in his/her application, for the purpose of evaluating applications. HeziHold manages the data and information voluntarily provided by the applicant in the CV or application, in particular the applicant’s name, address, e-mail address, telephone number, education and professional experience.


6. Handling of Complaints
If you submit a complaint, the personal data you provide and the complaint itself will be handled by HeziHold for taking care of the complaint and being in contact with you.
During the investigation of complaints, HeziHold handles name, address, mailing address and telephone number of the complainant.
HeziHold handles the personal data provided during the complaint handling based on its legitimate interests, as the investigation of the complaint is extremely important to HeziHold to provide its services at the highest possible level.
HeziHold pays special attention to the confidential handling of complaints, especially ensuring complaints are only known to those who participate in their assessment.
HeziHold deletes the personal data provided during placing a complaint by January 31 of the following year after limitation period (it is 5 years). If justified, HeziHold may forward the data to the competent authorities.


7. Rights of data subjects
You, as data subject, have the right to request the deletion of your personal data, or to receive information about your managed personal data, or to access your personal data and request their correction or restriction of data processing, or to object to data processing, and to request the portability of the data.
You can send your written request to the availabilities listed in Point II. HeziHold provides information to the data subject in its response to the written request submitted. HeziHold will respond to the request within 1 month: provides information on the actions taken.
HeziHold will respond to the inquiries at no cost, unless the request is unfounded, in which case a reasonable fee might be charged or taking an action can be rejected.


8. Right to information
HeziHold ensures that it provides the information to data subjects acording to Article 13 of the GDPR Regulation (in transparent, understandable and easily accessible form, clearly and comprehensibly worded).


9. Right of access
The data subject has the right to request information on whether his personal data is being processed, as well as to receive information regarding the following:

a) the purposes of data management.
b) categories of personal data concerned.
c) recipients or categories of recipients to whom the personal data has been or will be communicated, especially 3rd party recipients or international organizations;
d) planned period of storage of personal data or, if this is not possible, the criteria for determining this period.
e) the data subject’s right to request the correction, deletion, or restriction of processing of his/her personal data and to object to the processing of such personal data from the data controller.
f) the right to submit a complaint to a supervisory authority.
g) if the data were not collected from the data subject, all available information about their data source.
h) the fact of automated decision-making, including profiling, as well as at least comprehensible information regarding the logic used and the significance of such data management and the expected consequences for the data subject.
i) provides the copy of the personal data to the data subject.



10. Right to rectification
The data subject may request HeziHold change any of his or her personal information at any time.


11. Right to erasure
The data subject may also initiate the deletion of his/her personal data without delay if any of the listed reasons apply:

a) personal data are no longer needed for the purposes specified in this statement.
b) data subject recalls her/his consent and there is no other legal basis for the data processing.
c) the data subject objects to data processing.
d) personal data were handled unlawfully.
e) personal data should be deleted due to the Law applicable on data controller
f) the collection of personal data took place in connection with the offering of services related to the information society.


12. Right to restriction of processing
data subject may request that his / her data be blocked if any of the listed reasons apply:

a) data subject disputes the accuracy of the personal data, in which case the restriction applies to the period that allows the data controller to verify the accuracy of the personal data
b) data management is illegal, and data subject requests the restriction of data usage instead of deleting them
c) data controller no longer needs the personal data, but data subject needs the data and requests the restriction of the processing in order to enforce his legal claims; or
d) data subject objected to data processing based on non-consent; in this case, the restriction applies to the period until it is determined whether the legitimate reasons of the data controller take priority over the legitimate reasons of the data subject.


13. Right to data portability
Data subject has the right to, upon request, transfer his/her personal data managed by the data controller to another data controller designated by him/her in Microsoft Excel format.


14. Right to object
Data subject has the right to withdraw his consent to data management at any time, which, however, does not affect the legality of data management prior to the withdrawal.


15. Right to object to data processing
Data subject may object to the processing of his/her personal data if personal data is processed on a legal basis other than the original consent given for fulfilling the contract concluded with the data subject.

If the objection is justified, data controller is obliged to end the data management and delete all the data or take measures to restrict the data management at the request of the data subject, unless they are necessary to enforce legal claims. If the data management is carried out for business and/or marketing purposes, HeziHold will end the processing of the data under objection.


16. Indemnities
The person concerned who suffers damage because the data manager or processor violated the laws governing data management


17. Complaints and remedies
You may request legal remedy regarding the processing of your data, please contact us (see Point II.).

In the event of a violation of rights, the person concerned has the right to appeal to the court.

You may also file a complaint at the supervisory authority.

Supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatósága / Hungarian National Authority for Data Protection and Freedom of Information (located at 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf. 9, phone: +36 (1) 391-1400, email: ugyfelszolgalat@naih.hu.