Privacy Policy of ENVIPROG
1. General
In connection with the data management of Enviprog Group Korlátolt Felelősségű Társaság (hereinafter: Data Controller) concerning personal data, Act CXII of 2011 on the right to information self-determination and freedom of information Act and Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (=GDPR), we provide the following detailed information:
The Data Controller manages the processing of personal data for the purpose and in the manner detailed in each section, in full compliance with the requirements of the legislation in force at any given time, in accordance with the Data Controller's objectives, operational, regulatory and technological measures to ensure and enforce these rights.
2. Name and contact details of the Data Controller
Company Name: Enviprog Group Korlátolt Felelősségű Társaság
Registered Office Address: 3/a Honvéd utca, 8000 Székesfehérvár, Hungary
Company Registration Number: 07-09-022580
Tax Number: 23983102-2-07
Representative: Tóth Roland, CEO
Privacy Officer: Tóth Roland
Email: iroda@enviprog.com
3. Definitions
Personal Data: any information relating to an identified or identifiable natural person ("Data Subject"); identifies a natural person who, directly or indirectly, in particular by reference to an identifier such as name, number, location, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable.
Data Management: any operation or set of operations on personal data or data files, whether automated or non-automated, such as collecting, recording, organizing, segmenting, storing, transforming or altering, querying, viewing, using, communicating, transmitting, distributing or otherwise making available harmonization or interconnection, restriction, deletion or destruction.
Data Controller: a natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of the processing are defined by EU or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by EU or Member State law.
Data Processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
Data Subject 's Consent: a voluntary, specific and well-informed and clear statement of the data subject's intention to indicate his or her consent to the processing of personal data concerning him or her by means of a statement or an act which unequivocally expresses the confirmation.
Data Subject: a natural person identified or identifiable on the basis of any information.
Third Party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or persons who have been authorized to process personal data under the direct control of the data controller or data processor.
Recipient: az a természetes vagy jogi személy, közhatalmi szerv, ügynökség vagy bármely egyébszerv, akivel vagy amellyel a személyes adatot közlik, függetlenül attól, hogyharmadik fél-e. Azon közhatalmi szervek, amelyek egy egyedi vizsgálat keretében az uniós vagy a tagállami joggal összhangban férhetnek hozzá személyes adatokhoz, nem minősülnek Címzettnek; az említett adatok e közhatalmi szervekáltali kezelése meg kell, hogy feleljen az adatkezelés céljainak megfelelően az alkalmazandó adatvédelmi szabályoknak.
4. The purpose of data management and the scope of personal data processed
4.1. Personal information related to contact
Scope of personal data managed:
Personal data provided on the website www.enviprog.com, provided when contacting any of the Data Controller's contact details, in particular:
- Name
- Mailing address
- Email address
- Phone number
In addition, any personal data that the Data Subject provides during the contact.
Purpose of data management:
General contact so that the Data Subject can request specific information or measures from the Data Controller.
Legal basis of data management:
Voluntary consent of the Data Subject by contact. (See parapraph 5.a)
Duration of data management:
Until the date of withdrawal of the data management consent.
4.2. Management of applications and CVs sent to the Data Controller
Scope of personal data managed:
Personal data provided on the website www.enviprog.com, provided when contacting any of the Data Controller's contact details, in particular:
- Name
- Date of birth, place
- Address/residential address
- Email address
- Phone number
- Educational qualifications
In addition, any personal data that the Data Subject provides in the course of contacting.
Purpose of data management:
General contact so that the Data Subject can request specific information or measures from the Data Controller.
Legal basis of data management:
Voluntary consent of the Data Subject by contact. (See parapraph 5.a)
Duration of data management:
- In the case of CVs, applications, portfolios and motivation letters received for the job advertised by the Data Controller until the date of filling the position.
- In the case of CVs, applications, portfolios and motivation letters voluntarily submitted by the Data Subject for work not advertised by the Data Controller, the Data Controller declares to the Data Subject whether he / she consents to the data processing by the Data Controller. In this case, the Data Controller shall keep the documents containing the personal data received by him / her for 1 year or until the date of revocation of the data management consent.
5. Legal basis for data management
- The data subject has consented to the processing of his or her personal data for one or more specific purposes.
- Data processing is necessary for the performance of a contract in which the data subject is one of the parties or to take steps at the request of the data subject prior to the conclusion of the contract.
- Data processing is necessary to fulfill the legal obligation of the data controller.
- The processing is necessary to protect the vital interests of the data subject or of another natural person.
- The processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless those interests take precedence over the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular if the child concerned.
6. Rights of the Data Subject
The Data Subject may exercise, inter alia, the rights described below in relation to the personal data managed by the Data Controller.
Transparent information
The Data Controller shall provide information on its data management activities to the data subject in a concise, transparent, comprehensible and easily accessible form, clearly and comprehensibly worded, at the request of the data subject.
The Data Controller shall provide the requested information in writing as soon as possible after the submission of the data subject's request, and no later than within 30 days from the receipt of the request.
Right of access
The data subject shall have the right to receive feedback from the controller as to whether the processing of his or her personal data is in progress and, if such processing is in progress, the right to have access to the personal data and the following information:
- what personal data,
- what legal basis,
- for what data processing purpose,
- how long
it handles and provide information on the recipients to whom the personal data have been or will be communicated.
Right to rectification
The data subject shall have the right, at his request, to have inaccurate personal data concerning him rectified without undue delay. Taking into account the purpose of the data processing, the data subject has the right to request that the incomplete personal data be supplemented, inter alia, by means of a supplementary statement.
Right of cancellation
The data subject shall have the right, at the request of the controller, to delete personal data concerning him or her without undue delay, and the controller shall delete personal data concerning him or her without undue delay if one of the following reasons exists:
- personal data are no longer required for the purpose for which they were collected or otherwise processed;
- the data subject withdraws his or her consent on which the processing is based and there is no other legal basis for the processing;
- the data subject objects to the processing and there is no overriding legitimate reason for the processing;
- personal data have been processed unlawfully;- personal data must be deleted in order to comply with a legal obligation imposed on the controller by applicable EU or Member State law.
Right to restrict data processing
The data subject shall have the right, at the request of the controller, to restrict the processing if one of the following is met:
- the data subject disputes the accuracy of the personal data, in which case the restriction applies to the period of time that allows the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the deletion of the data and instead requests that their use be restricted;
- the controller no longer needs the personal data for the purpose of data processing, but the data subject requests them in order to make, enforce or protect legal claims.
The right to data portability
The data subject shall have the right to receive personal data concerning him or her made available to a controller in a structured, widely used machine-readable format and to transfer such data to another controller without being hindered by the controller whose provided the personal data to him.
Right to protest
The data subject has the right to object to the processing of his / her personal data at any time for reasons related to his / her situation, if in his / her opinion the data controller would not properly process his / her personal data in connection with the purpose stated in this data management information. In that case, the controller may not further process the personal data unless the controller demonstrates that the processing is justified by compelling legitimate reasons which take precedence over the interests, rights and freedoms of the data subject or which are necessary to bring, assert or defend legal claims are related.
7. Data Protection
In order to preserve the confidentiality of personal data stored in electronic form at the Data Controller, we protect the data against unauthorized access, accidental destruction, damage or modification by taking the necessary precautions (password protected, backing up, etc.). We do not pass on personal data to third parties, except in the mandatory cases required by law. Data stored on paper is stored in a way that prevents unauthorized access and ensures the preservation of documents.
8. Cookies and third party service providers
What are cookies? This Cookie Policy explains what cookies are and how we use them, the types of cookies we use i.e, the information we collect using cookies and how that information is used, and how to manage the cookie settings.
Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.
How do we use cookies? As most of the online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.
The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.
You can change your cookie preferences any time by clicking the "Cookies" link in the Footer section of the website. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.
In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc
Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
If you are using any other web browser, please visit your browser’s official support documents.
9. Enforcement
In the event of unlawful data processing, the data subject may initiate legal proceedings against the Data Controller. The trial of the lawsuit falls within the jurisdiction of the Metropolitan Court. The lawsuit may, at your option, be brought before the court of your place of residence. You can file a complaint or complaint with the National Authority for Data Protection and Freedom of Information (www.naih.hu, 1055 Budapest, Falk Miksa utca 9-11, phone: + 36-1-391-1400, e-mail: ugyfelszolgalat@naih.hu), indicating that the processing of personal data has been infringed or is in imminent danger.
10. Final Provisions
- In case of a request from an authority or another organization based on a legal obligation, the Data Controller may be obliged to provide data or may be obliged to do so. In such cases, the Data Controller shall endeavor to release only as much and such personal data as is absolutely necessary for the obligation to release the data.
- With regard to issues not regulated in this prospectus, the data processing is indicated by the CXII of 2011 on the right to information self-determination and freedom of information Act and the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016
- Data Controller reserves the right to amend the data management information. Amendments to the prospectus will be published on our website, and any amendments will only be effective after publication.
This Privacy Policy is effective from April 28, 2025.
Székesfehérvár, 28 April 2025