Privacy Notice on Personal Data Processing

With reference to the provisions of Article 6 and Chapter III of the European Parliament and the Council Regulation (EU) 2016/679 on General Data Protection Regulation (hereinafter: GDPR), as well as Section 10 (2) of Act I of 2012 on the Labour Code (hereinafter: Mt), Semeris Services Kft. (registered office: 1054 Budapest, Kálmán Imre utca 1.; company registration number: 01-09-444865), as data controller, hereby informs data subjects, i.e. applicants, about the processing of personal data collected during the application process for job advertisements, including internal job applications, as follows:

By applying for a job advertisement published for external applicants, the data subject consents to the processing of their personal data in accordance with this data processing notice. By submitting an application for an internal job posting, the data subject also consents to the processing of their personal data as described herein.

2. Legal Basis for Data Processing

The legal basis for data processing is the data subject’s consent (GDPR Article 6(1)).

3. Purpose of Data Processing

The purpose of data processing is to manage applications for job advertisements published by Semeris Services Kft., including internal job applications, to evaluate submitted applications, establish employment relationships, perform related administrative tasks, and notify the data subject of future job offers.

4. Scope of Processed Data

Semeris Services Kft. processes the following personal data of the data subject (applicant):

Semeris Services Kft. does not process special categories of personal data (e.g., nationality, political opinions, religion or other beliefs, health data).

5. Authorized Persons for Data Processing

Data processing is primarily carried out by Semeris Services Kft., specifically the manager responsible for the relevant position and the responsible person in HR, Finance and Management . Semeris Services Kft. does not engage any data processors.

For employment establishment, necessary data are forwarded to an external payroll partner, who processes only the data required for employment establishment as listed below:

• Full name (birth name)
• Place and date of birth
• Mother’s maiden name
• Nationality
• Permanent address
• Identity card number
• Passport number and date validity of passport (for foreign employees)
• Social Security Number (TAJ)
• Tax identification number
• Bank account number
• Criminal records certificate
• Copy of the highest qualification certificate
• Resident permit certificate for foreign (third-country) employees
• Reference letter from former employer
• Link to social media profiles
• Occupational health assessment certificate

6. Duration of Data Processing

Personal data are processed by Semeris Services Kft. and the data processors specified in Section 5 as long as the purpose of data processing exists.
 As a general rule, applicant data are stored for 1 year or until the data subject requests deletion.

7. Other Rules and Deletion Periods

• If an application becomes inactive or the selection process is completed, personal data will be deleted after 1 year.
• In case of a negative or rejection decision, the applicant’s name and contact details may be retained for 1 year after the selection process ends, then automatically deleted.
• If the applicant withdraws their application, their personal data will be deleted after 1 year.
• In case of successful application, personal data necessary for employment are managed by the responsible person in HR, Finance and Management and retained as long as the employment relationship exists or as required by law.
• Internal application data remain active as long as the applicant is an employee; data will be deleted 1 year after employment termination.
• Semeris Services Kft. does not process or retain personal data for statistical purposes and does not use automated tools for this.

8. Data Processing Methods and Security Measures

The data subject has the right to:

• Request information from Semeris Services Kft. about stored and processed personal data;
• Request correction or supplementation of their personal data (GDPR Article 16);
• Request deletion of their personal data under certain conditions (GDPR Article 17);
• Request restriction of processing (GDPR Article 18);
• Receive their personal data in a machine-readable electronic format and request data transfer (GDPR Article 20);
• Object to data processing if it is based on public authority tasks or legitimate interests (GDPR Article 21).

Consent can be withdrawn at any time without affecting the lawfulness of processing before withdrawal. Upon withdrawal, Semeris Services Kft. will delete the data without delay.

Semeris Services Kft. registers data processing in accordance with GDPR.

9. Remedies

Upon request, Semeris Services Kft. will inform the data subject within 30 days whether it stores personal data about them, which data, and under what conditions.
 If incorrect data are stored, Semeris Services Kft. will correct them upon request.
 If data are processed based on legal obligations or legitimate interests, the data subject may object via the contact details provided in Section 11.
 If the data subject suffers harm due to data processing, they may file a complaint with the National Authority for Data Protection and Freedom of Information.
 In case of rights violations or rejection of objections, the data subject may initiate court proceedings, which will be expedited and fall under the jurisdiction of the relevant court.

Data protection incidents (e.g., unauthorized access, loss, or disclosure of personal data) can be reported via the contact details in Section 11.

Semeris Hungary Ltd. has appointed a data protection officer as per legal requirements:

Peter Jasko

Managing Director

Email: info@semeris.com

10. Miscellaneous

Submission of personal data (e.g., CV) – except for internal job applications – is only accepted via email or electronically.

11. Contact Details