Data controller:
S2G Europe Kft. (hereinafter: ‘S2G Europe’)
Reg. no.: 01-09-356360
Reg. office: 9 Berzenczey Street, 1094 Budapest, Hungary
The Privacy Policy for Recruitment Purposes sets out terms and conditions under which S2G Europe, as data controller, collects and manages personal data related to job applicants (hereinafter: “active candidates”) and persons targeted with employment offers (hereinafter: “passive candidates”), while active and passive candidates collectively “candidates” or “data subject” and S2G Europe and a candidate is jointly referred to as the “parties”).
This Policy ensures compliance with the underlying data privacy laws, in particular, but without limitation to Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information of Hungary (“Information Act”), Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR), Act CXXV of 2003 on Equal Treatment and the Promotion of Equal Opportunities of Hungary and shows S2G Europe’s efforts on the protection of the candidate’s personal data, privacy and equal treatment, and its continuous improvement of a data protection management system and data minimization.
This Policy applies to all relationships established with all candidates in the course of the recruitment process and related personal data processing activities at S2G Europe.
In the context of this Policy, personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The fundamental purpose of the data processing prescribed herein is the efficient conduction of the recruitment process at S2G Europe.
The collected personal data will be processed for the following purposes:
S2G Europe needs to process data to take steps at the candidate's request prior to entering into a contract with the candidate. S2G Europe may also need to process the candidate's data to enter into a contract with the candidate. S2G Europe needs to process data in order to fully comply with relevant legal regulations.
Both the candidate and S2G Europe have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing candidates’ data allows S2G Europe to manage the recruitment process, assess and confirm a candidate's suitability for employment and decide to whom to offer a job. The process also allows S2G Europe to remain in contact with and inform actual or potential candidates on openings of vacancies that may be of interest. It is important to note that the candidate can request S2G Europe any time to terminate the candidate's data processing and S2G Europe will comply with such request unless statutory law would provide otherwise.
Consent: In a case where the personal data is required the candidate's explicit consent may be used as the lawful basis of the processing of personal data.
Legal obligation: In a case where the processing is necessary for S2G Europe to comply with the underlying laws (not including contractual obligations).
Legitimate interests: In a case where the processing is necessary for S2G Europe's legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
In order to provide the best possible employment opportunities at S2G Europe that are tailored to the candidate, we need to process certain information about the candidate. We only ask for details that will genuinely help us to help the candidate. Recruitment data may include:
Where appropriate and in accordance with local laws and requirements, we may also collect information related to the candidate's health, diversity information or details of any criminal convictions.
S2G Europe collects this information in a variety of ways. For instance, data might be contained in application forms, cover letters, Curriculum Vitaes or resumes, prezumes, obtained from the candidate's Linkedin profile, or collected through interviews, HR service providers, head-hunters, job platforms or other forms of assessment.
Data will be stored on the following platforms of S2G Europe:
If the candidate submit the candidate's application to S2G Europe, the candidate will be considered as an active candidate and based on the parties’ legitimate interest designated in Clause III, S2G Europe is entitled to keep the candidate's personal data in its records for potential future employment opportunities for which the candidate may be suited. the candidate's personal data shall be maintained for no longer than three years after the submission of the candidate's application. Following the end of this period, all personal data shall be erased and/or anonymized so that no links between the candidate as data subject and the anonymized are further traceable or identifiable.
Once the candidate is being approached by S2G Europe as a passive candidate with an employment offer, S2G Europe will require the candidate's consent in order to have the candidate's data processed and thus to have it forwarded to the data processor designated in Clause VII. If the candidate's consent is given and S2G Europe proceeds with the recruitment process, but at the end of the selection process S2G Europe decides not to provide the candidate with an employment opportunity, based on the parties’ legitimate interest, S2G Europe will keep the candidate's personal data in its records for potential future employment opportunities for which the candidate may be suited. the candidate's personal data shall be maintained for no longer than three years after the candidate's confirmation to proceed with S2G Europe’s recruitment process. Following the end of this period, all personal data shall be erased and/or anonymized so that no links between the candidate as data subject and the anonymized are further traceable or identifiable.
During the aforesaid three-year period, both active and passive candidates have the right to object against the processing of their data in line with the provisions of Clause IX.
S2G Europe may choose to periodically remind via email or other platforms candidates about the processing of their personal data for recruitment purposes. Again, all candidates have at all times the right detailed below, to request termination of the processing of their personal data.
If the candidate's application for employment as an active candidate is successful or the candidate are provided with an employment opportunity as a passive candidate which the candidate duly accept, personal data gathered during the recruitment process will be transferred to the candidate's Human Resources file (electronic and paper based) and retained during the candidate's employment and the candidate will be provided with a new privacy notice and policy concerning S2G Europe employees and this Policy shall no longer apply to the candidate.
For the purposes of the data management carried out by S2G Europe under this Policy, S2G Europe forwards the candidate's data to its legitimate data processor, Randstad Hungary Kft. (contact info on:https://www.randstad.hu/en/contact/), a ‘processor’ under Section (8) Art. 4 of GDPR who will process the personal data on behalf of S2G Europe in their platform (hereinafter: ‘Randstad’ or ‘processor’). S2G Europe and the processor will have at all times an appropriate contractual framework in place to ensure the secure and lawful data transfer processing in compliance with the GDPR and national regulations.
Furthermore, the candidate's information may be shared internally for the purposes of the recruitment exercise. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, managers with a vacancy, IT staff if access to the data is necessary for the performance of their roles.
In the final round of the candidate's recruitment process, the candidate's Prezume may be shared internally with the employees of S2G Europe for the purposes of recruitment exercise.
S2G Europe will not disclose the candidate's data to parties other than the foregoing, unless i) the candidate is an active candidate and the candidate's application for employment is successful or ii) the candidate is a passive candidate and we make the candidate an employment offer which the candidate chooses to accept. We will then be entitled with the candidate's consent, to obtain references from the candidate's former employers or colleagues indicated in the candidate's CV or whom the candidate advised us to contact.
S2G Europe takes reasonable steps to protect personal data in its possession secure against accidental loss, damage, and unlawful or unauthorised use, access, disclosure, alteration or destruction. All employees of S2G Europe are subject to confidentiality, privacy and non-disclosure obligations in accordance with Hungarian laws, with respect to any personal data disclosed to them in the frame of their employment, during and after their employment without time limitation whatsoever.
Keeping the confidential nature of the personal information covered by this Policy is S2G Europe’s key commitment which means that only authorised users are able to have access to this data for the purposes detailed in this Policy.
The candidate's personal data will be processed primarily in Budapest, Hungary, by S2G Europe as controller, save for the case of retaining third party processor as described in this Policy. S2G Europe implements appropriate hardware, software and organisational security measures so to maintain the security and confidentiality of the personal data from its collection until its destruction.
To safeguard personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks, S2G Europe introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and the use of privacy filters to secure all storage and transmission of personal data, and disclosing personal data both internally and to authorized third party service providers and agents only on a need-to-know basis. One should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed with absolute certainty, S2G Europe strives to protect the security of personal data and information and is constantly reviewing and enhancing its information security measures.
The candidate has the right to request access to and rectification or erasure of the candidate's personal data or restriction of processing or to object to processing as well as the right to data portability. At the candidate's request S2G Europe will provide details on the personal data that holds about the candidate. Before providing data or information, S2G Europe might ask for proof of identity and sufficient information about the concerned data subject to locate any relevant data. Accordingly, the candidates, as data subjects may request S2G Europe regarding personal data;
RIGHT TO ACCESS; to obtain from S2G Europe confirmation whether or not personal data is being processed, and, where that is the case, the following information;
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed,
(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from the data subject, any available information as to their source;
(h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
RIGHT TO RECTIFICATION; to obtain from S2G Europe the rectification of inaccurate personal data concerning the candidate. Taking into account the purposes of the processing, the candidate has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
RIGHT TO ERASURE (‘right to be forgotten’); to obtain from S2G Europe the erasure of personal data concerning the candidate and S2G Europe has the obligation to erase personal data without undue delay where one of the following grounds applies:
(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) the data subject withdraws consent to processing and where there is no other legal ground for the processing;
(c) the data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) [objecting automated decision making];
(d) the personal data have been unlawfully processed;
(e) the personal data have to be erased for compliance with a legal obligation in EU or a Member State law to which the controller is subject;
(f) the personal data have been collected from children in relation to the offer of information society services;
RIGHT TO RESTRICTION OF PROCESSING; to obtain from S2G Europe restriction of processing where one of the following applies:
(a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
(b) the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
(c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
(d) the data subject has objected to processing pursuant to Article 21(1) [objecting automated decision making] of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims. A data subject who has obtained restriction of processing shall be informed by S2G Europe before the restriction of processing is lifted.
S2G Europe will communicate any rectification or erasure of personal data or restriction of processing carried out in accordance to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. S2G Europe shall inform the data subject about those recipients if the data subject requests so.
RIGHT TO OBJECT; candidates have the right to object, on grounds relating to their particular situation, at any time to processing of personal data for the purposes of the legitimate interests pursued by S2G Europe or by a third party including profiling based on those provisions. S2G Europe shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
DATA PORTABILITY; candidates have the right to receive their personal data provided S2G Europe, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
(a) the processing is based on candidate consent pursuant or on a contract between candidate and S2G Europe; and (b) the processing is carried out by automated means.
In exercising the right to data portability, candidates have the right to have the personal data transmitted directly from one controller to another, if and where technically feasible. This right shall not adversely affect the rights and freedoms of others.
All rights provided for the candidates above may be restricted by S2G Europe for the establishment, exercise or defence of legal claims, if so permitted by the applicable laws, with special regard to the GDPR provisions.
Questions and requests in relation to the processing of the candidate’s personal data should be addressed in written or electronic form to the HR Department of S2G Europe (email: job@s2geurope.com) describing all relevant facts or circumstances. Requests will be carefully studied and replied in a concise, transparent, intelligible and easily accessible form, using clear and plain language, within 30 days in writing, including electronic means.
In the event of an infringement of rights related to the processing of personal data, the candidate may turn to the Hungarian Authority for Data Protection and the Freedom of Information (1530, Budapest, Pf. 5.; e-mail: ugyfelszolgalat@naih.hu, web: www.naih.hu) or the competent court (including the county tribunal having jurisdiction for the place of residence).
The candidates are under no statutory or contractual obligation to provide data to S2G Europe during the recruitment process. However, if the candidate does not provide the information, we may not be able to process the candidate's application properly or at all.
This Policy shall be governed by and construed in accordance with the law of the European Union and Hungarian national law.