Privacy statements

In this Privacy Notice, CDM eStratégiai Kft. (registered office: 1023 Budapest, Lajos utca 28-32.; company registration number: 01-09-926695, represented by András Müller, email address: (hereinafter referred to as the "Data Controller"[1] or the "Company") provides detailed information on its data management practices concerning you, which comply with the applicable data protection provisions, in particular, but not limited to, the General Data Protection Regulation (hereinafter referred to as the "Regulation"). The Controller complies with its information obligations under the Regulation. The Data Controller reserves the right to amend this notice if changes in its operational procedures or guidelines of the competent supervisory authority (NAIH) or changes in legislation make it necessary.

The Data Controller considers itself bound by the information contained in this notice in the process of assessing the application. This document will be made available upon request. A copy of this information sheet, which sets out in detail the principles and procedures of data processing, will also be provided in paper or electronic format upon request.

Purpose of processing: to establish identity, to establish contact, to assess professional and other skills required for the job, professional qualifications and other conditions of employment set out in the vacancy notice. The personal data contained in your application will be processed solely for the purpose of assessing your suitability for the post and will not be used for any other purpose by the Data Controllers.

Categories of personal data processed: name, address, telephone number, e-mail address, CV, other documentation of qualifications and professional experience, references, photograph and other documents necessary to fill the vacancy (e.g., diploma, ID number). If an interview is conducted, the scope of the personal data of the data subject is extended to include additional personal data obtained during the interview.

Source of personal data: your application, regardless of the channel through which it comes to us, is sent to us on your initiative.

Legal basis for data processing: by submitting your application and application material, you have initiated the contact. By submitting your application, you have given your consent to the processing of your personal data.

Retention period: in the event that no interview or personal meeting takes place, the Data Controller will keep the physical and electronic documentation containing your personal data for 1 year for legitimate reasons, in order to be able to contact you again in case of a future vacancy. You have the right to object to this at any contact details of the Data Controller.

If the Company does not enter into a contract with you for the advertised position, the Company will destroy any physical or electronic documents containing personal data received and generated during the interview after the one-year retention period or if you object.

In the event of a successful application, the Data Controller will return the application documents (e.g. copies of documents proving qualifications, other qualifications and skills, and references), unless the Data Controller is required by law to keep them. It shall delete/destroy electronic and paper copies of interview notes and guarantee access to the application material to those entitled to see it in accordance with its internal procedures. The obligation to erase includes all those who are entitled to access your personal data during the application process. As an employee, your personal data will henceforth be processed in accordance with the normal rules for employees.

Persons authorized to have access: the Data Controller's internal procedures ensure that the data protection rules are respected by those who have access to the application material. For example, it also requires those who have access to your personal data to delete/destroy your personal data, the documents and copies containing them.

Your rights: you have the right to request information about the personal data processed by the Company about you, to request its rectification or integration, and to request the erasure or restriction of your personal data. You may make such a request using any of the above contact details of the Data Controllers, to which we will reply promptly and no later than one month after receipt of the request.

If you believe that the Company has acted unlawfully in processing your personal data, you may lodge a complaint at any of the Company's contact details. Your complaint will be investigated without delay and you will be notified in writing within one month at the latest.

In the event of unlawful processing, you may lodge a complaint with the competent authority:

National Authority for Data Protection and Freedom of Information (Address: 1055 Budapest, Falk Miksa street 9-11.

You have the right to take legal action against unlawful processing. You can find the competent court here:

[1] REGULATION (EU) No 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, pursuant to Article 4(7)