Privacy policy

Data Protection and Privacy Policy of hrguideways.com

Your privacy and the protection of your personal data are of utmost importance to us. To ensure that you are fully informed about how we collect and handle your personal data, please carefully read the following policy.

1. Data Controller

1.1. General Provisions

The operator of hrguideways.com (1618 Terv Bt, registered office: 1046 Budapest, Pálya u. 18. IV.em/50., tax number: 22183859-2-41, company registration number: 01-06-769999, hereinafter referred to as "Data Controller") provides the following information based on Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR). The provision of personal data is voluntary and based on your consent (as well as data processing necessary for the establishment or fulfillment of a contract if you submit a request for an offer or a job application via contact forms, or for other contact purposes) in accordance with Article 6(1)(a) and (b) of the GDPR, as well as Section 6(1)-(2) of Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activities (in case of newsletter subscriptions), as outlined below. The personal data you provide will be processed for the purposes specified in Section 2 of this Policy.

We handle the personal data you provide in compliance with the principles of necessity, fairness, legality, and transparency as outlined in the GDPR. This privacy policy is valid from the moment you give your consent until its withdrawal, or for the period specified by law.

1.2. Definitions

The following terms have the meanings ascribed to them in this Policy:

Data Processor: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.
Data Processing: Any operation or set of operations performed on personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, combination, restriction, erasure, or destruction.
Data Transfer: Making personal data accessible to third parties by the Data Controller.
Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.
Data Subject: A natural person identified or identifiable by personal data.
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Third Country: A country outside the European Economic Area (EEA).
Profiling: Any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects related to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Personal Data: Any information relating to an identified or identifiable natural person ("Data Subject"); an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Identifiable Natural Person: A natural person who can be identified, directly or indirectly, by reference to one or more identifiers such as a name, identification number, location data, or an online identifier.
Recipient: A natural or legal person, public authority, agency, or other body to whom personal data is disclosed, whether or not it is a third party.
Consent of the Data Subject: A freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
Users: Visitors of the websites operated by the Data Controller, available at http://www.hrguideways.com and other specified addresses.
Third Party: A natural or legal person, public authority, agency, or body other than the Data Subject, Data Controller, Data Processor, or persons authorized to process personal data under the direct authority of the Data Controller or Data Processor.
Authority: The National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c., phone: +36-1 391-1400, fax: +36-1 391-1410, email: ugyfelszolgalat@naih.hu, website: naih.hu).
Partner/Client: A natural person who contracts with the Data Controller for product sales or service provision outside the website.
Registration: The recording of personal data by the website user to create a user account.
Service: The services provided by the Data Controller to its clients, partners, and users through the website or by other means.
Website: Websites operated by the Data Controller, 1618 Terv Bt., and other specified addresses.

2. Collection and Processing of Personal Data

2.1 Contact Forms – Online Inquiries, Contact

You can send information or contact us via the contact forms available on the hrguideways.com website, as well as through email or phone.

The Data Controller stores and processes the following personal data you provide:

Your name
Your email address
The organization you represent and its billing information
Your position within the organization
Your address, phone number, and any other personal data you provide in the contact form for the purpose of contacting you personally and providing the requested information.

In addition to the above, we will process and store the data you provide via the online form for the following purposes, based on your consent: newsletter subscription or other marketing-related inquiries. This will only occur if you have expressly consented to the storage and processing of your data for purposes beyond contact and information requests by checking the appropriate box when using the contact form. Therefore, your personal data will be processed based on your consent until its withdrawal or until the purpose of data processing is achieved.

Your personal data is managed by 1618 TERV Bt’s Business Management and Consulting Services division as the Data Controller. Your personal data will not be transferred to third parties. Data processing is not carried out in an automated manner.

2.2 Browsing the hrguideways.com Website – Use of Cookies

The hrguideways.com website uses cookies. Detailed information about the use of cookies, including their authorization, usage rules, the nature of the data they collect, and their purposes, is provided in the attached cookie policy.

Data related to cookies, if provided by you, may include your IP address and browsing history on hrguideways.com.

The following employees of the Data Controller may access your data stored in cookies: website administrator and Data Controller.

Your cookie-stored data may be transferred to the following individuals or organizations: Google and its partners in connection with the Google Analytics service, Facebook in relation to its services, and external website service providers. The processing of personal data is not carried out in an automated manner.

2.3 Types of Cookies Used:

Technically Essential Session Cookies:

Purpose of data processing: To ensure the proper functioning of the website. These cookies are necessary for visitors to browse the website and use its features seamlessly, including remembering actions taken by the visitor on specific pages or identifying logged-in users during a session. The duration of this type of cookie processing is limited to the visitor's current session and is automatically deleted when the session ends or the browser is closed.
Legal basis: Section 13/A (3) of Act CVIII of 2001 on certain issues of electronic commerce services and information society services, which allows the service provider to process personal data necessary for providing the service.

Preference Cookies:

These cookies remember user preferences, such as how the user wishes to view the website. Essentially, these cookies store setting data in cookies.
Legal basis: User consent.
Purpose of data processing: To enhance the efficiency of the service, improve the user experience, and make website use more convenient. This data is stored on the visitor's device, and the website accesses it to recognize the visitor.

Preference Cookies:

These cookies remember user preferences, such as how the user wishes to view the website. Essentially, these cookies store setting data in cookies.
Legal basis: User consent.
Purpose of data processing: To enhance the efficiency of the service, improve the user experience, and make website use more convenient. This data is stored on the visitor's device, and the website accesses it to recognize the visitor.

3. How Do We Collect Your Personal Data?

We collect personal data in two main ways:

Personal data you provide directly to us:
These are the data you voluntarily provide when interacting with us, for example, by submitting forms or using features on our website.
Personal data collected automatically:
We collect data automatically through the use of cookies when you visit our website, according to your browser’s cookie settings. We also collect data when you contact us via the website, such as through the chat function.

4. Data Transfer to Third Parties

The Data Controller may transfer the personal data it manages to designated individuals and companies operating in the following fields, to the extent necessary:

Legal Representation:
Legal representatives for managing disputes in accordance with legal requirements.
Delivery:
Service providers responsible for delivering goods or services.
Accounting:
Our accountant may receive data for financial and bookkeeping purposes.
Debt Collection:
Third-party companies engaged in managing debt recovery.
Marketing:
Marketing service providers assisting with promotional activities.
Billing:
Services involved in billing and invoicing.

Companies and individuals processing or managing data:

Data processing is managed by the managing director of 1618 Terv Bt., and the Lead Consultant of the BUSINESS MANAGEMENT CONSULTING SERVICES division. In addition to the owner, other companies may be involved in the handling and storage of customer data.

Companies Involved in Data Management:

The following companies are involved in data management activities as part of the owner’s operations:

Accountant: Fejes Katalin
Hosting Provider: Hostinger (www.hostinger.hu)
Google Inc.: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, including various Google services like Google Drive, Google Docs, Google Search Console, Google Analytics, Google AdSense, Google Ads, YouTube, Blogger, and Chrome. Refer to Google’s privacy policies for more details.
Facebook Ireland Ltd.: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which supports services like Facebook, Instagram, Messenger, and other products. Refer to Facebook’s data privacy policies for more information.
In specific cases, the contract may involve additional data processors or companies.

Our website is hosted by a professional service provider (Hostinger), which has administrative and operational access to the data transmitted or stored on the site as defined in Section 2 of this Policy. The service provider is bound by confidentiality. Your personal data may only be shared with third parties according to the provisions outlined in Section 2 of this Policy and with your prior consent.

5. Right to Withdraw Consent

You have the right to withdraw your consent for the processing of your personal data at any time, without any additional charges, for any of the purposes outlined in Section 2. The withdrawal of consent does not affect the legality of data processing carried out before the withdrawal.

You may withdraw your consent by sending an appropriate message to the Data Controller via email or postal mail, or by using any of the methods specified in Section 2.

If the data processing is based on your consent, the withdrawal of consent will result in the deletion of your data, which may affect the achievement of the purpose of data processing.

6. Data Security

We implement technical and organizational measures to ensure that our website and other systems are protected from any attempts by unauthorized persons to delete, destroy, alter, or transmit your personal data.

7. Links

Our online presence may include links to other websites. However, we cannot guarantee, nor are we responsible for, whether the operators of these other websites apply appropriate data protection and security protocols.

As a service provider, we are responsible only for the content on our own website, as stipulated by general legal regulations. Our content is distinct from that provided by other third-party service providers. We do not assume responsibility for third-party content provided through links, nor do we treat such content as our own.

The sole responsibility for illegal, incorrect, or faulty content and information lies with the provider of the website to which a link points, especially for any damages that may arise from the use or non-use of such information.

8. Right To Information

The Data Controller informs you that you have the right to request information regarding the processing of your personal data, as well as to request access to your personal data. You may also request the correction of your personal data (e.g., correcting inaccurate or incomplete data), restriction of processing, deletion of your personal data (e.g., in the event of withdrawal of consent or when the purpose of data processing no longer exists), and you can request the cessation of processing for certain purposes. You also have the right to object to the processing of your personal data.

You are entitled to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer this data to another data controller without hindrance from the current Data Controller, provided that the processing is based on your consent or is carried out by automated means.

Additionally, you may request information about personal data processed by any data processor, including the source of the data, the purpose and legal basis of processing, the duration of processing, and details about the data processor's name, address, and data processing activities.

In the event of a data breach, you can request information about the circumstances, effects, and measures taken to mitigate the breach. If the breach is likely to pose a high risk to your rights and freedoms, the Data Controller will notify you without undue delay, in accordance with Article 34 of the GDPR. You can also request information about the legal basis and recipients of any data transfer, should your personal data be shared.

You have the following legal remedies concerning data processing, as outlined in Chapter VIII and Article 21 of the GDPR, and in Section 23 of the Information Act, which allows you to enforce your rights in court, including claims for damages or compensation. If you are unable to resolve your complaint, objection, or request related to your personal data satisfactorily with the Data Controller, or if you believe that your rights have been violated or are at risk of being violated regarding the handling of your personal data, you may file a complaint with the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.; postal address: 1530 Budapest, Pf. 5).

You also have the right to seek judicial remedies in the following cases:

If you object to a legally binding decision made by the supervisory authority.
If the supervisory authority does not address your complaint.
If the supervisory authority fails to inform you of the progress or outcome of your complaint within three months.
If you believe that the Data Controller or its data processor has violated your rights under the GDPR by processing your data in a non-compliant manner.

9. Contact

f you have any further questions regarding data processing, please feel free to contact us. In accordance with Section 6(7) of the Advertising Act, you may use the following communication channels to withdraw your consent regarding the receipt of promotional materials, or to request information about the collection, processing, or use of your data, as well as to request corrections, restrictions, deletions, or the revocation of any other permissions:

Email: info@hrguideways.com
Postal Address: 1223 Budapest, Rózsakert u. 58.
Data Protection Officer: HR Guideways representative, reachable at: info@hrguideways.com