Data controller and the legal background of data processing
VAP Hungary Holding Management Ltd. (registered office: 1025 Budapest, Szépvölgyi út 6.), Gastro-Trend MOM Park Ltd. (registered office: 1025 Budapest, Szépvölgyi út 6.), Gastro-Trend Fashion Street Ltd. (registered office: 1025 Budapest, Szépvölgyi út 6.), Gastro-Trend West End Limited Liability Company (registered office: 1025 Budapest, Szépvölgyi út 6.), Gastro-Trend Vienna Corner Limited Liability Company (registered office: 1025 Budapest, Szépvölgyi út 6 and Gastro-Trend Management Restaurant Development and Operation Ltd. (registered office: 9027 Győr, Budai út 1.) electronic contact: info@vapiano.hu; website address: https://vapiano.hu/ ; telephone number: +36 70 6721 476; hereinafter collectively referred to as: Data Controller)
During data processing, the Data Controller shall comply with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data with regard to the processing of personal data and on the free movement of such data, and repealing Regulation 95/46/EC (hereinafter: GDPR).
During data processing, the Data Controller complies with the recommendations of the National Authority for Data Protection and Freedom of Information (hereinafter: NAIH) and other European Union legal guidelines.
Data processing related to an advertised job application
Purpose of data processing. The purpose of data processing is to contact you via the contact information provided in your CV or by you in order to arrange a time for a job interview or hearing. The Data Controller will also use your CV when assessing your suitability.
Scope of processed data. The Data Controller processes the personal data provided in your CV or provided by you.
Legal basis for data processing. The legal basis for data processing is your consent [GDPR Article 6(1)(a)]. You may withdraw your consent at any time.
Duration of data processing. If you have not been hired for the job advertisement, we ask for your consent to continue storing your CV. If you do not consent to this data processing, your personal data will be deleted.
Data processing related to the retention of CVs
Purpose of data processing. The purpose of data processing is to contact you via the contact details provided in your CV or provided by you in order to arrange a time for a job interview or hearing, if there is a vacancy with the Data Controller. The Data Controller will also use your CV when assessing your suitability.
Scope of processed data. The Data Controller processes the personal data provided in your CV or provided by you.
Legal basis for data processing. The legal basis for data processing is your consent [GDPR Article 6(1)(a)]. You may withdraw your consent at any time.
Duration of data processing. The Data Controller processes personal data for one year from the date of sending the CV, after which it is deleted.
Your rights and the rules governing the exercise of rights
Right to request information. You may request information about the personal data processed by the Data Controller. In this case, the Data Controller will inform you about what personal data we process, for what purpose, the duration of the data processing, and the rights you have in connection with the data processing and the right to submit a complaint to the NAIH.
Right to request a copy. You may request a copy of the personal data processed by the Data Controller. In this case, the Data Controller will forward a copy of your CV and other personal data processed about you to the contact information (e-mail address, mailing address) you have provided.
Right to rectification. Upon your request, we will modify or clarify your personal data in accordance with your request, or we will store your new or modified CV in the future.
Right to erasure. You may request the erasure of your personal data at any time by writing to the Data Controller.
Right to restriction. You may request the blocking of recordings if
– if the processing is unlawful and you oppose the deletion of the personal data and instead request the restriction of their use;
– the Data Controller no longer needs the personal data, but you request the blocking of the data for the establishment, exercise or defense of legal claims.
In the case of the right to restriction, the reason for requesting the restriction must also be indicated. The Data Controller shall comply with the request for restriction of data processing by storing the personal data separately from all other personal data. For example, in the case of electronic data files, it shall be saved on an external data medium and paper documents shall be stored in a separate folder.
Right to data portability. You have the right to receive your personal data (such as your CV) in a commonly used format (pdf, doc) and to transfer it to another data controller. You may request that the Data Controller transmit your personal data directly to another data controller.
Common rules for exercising rights. The Data Controller shall comply with your request within a maximum of one month, which may be extended by a maximum of two months.
If the request is denied, the Data Controller will inform you of the reasons for the denial within one month of receipt of the request, as well as that you may file a complaint with the Authority and exercise your right to judicial remedy.
The Data Controller reserves the right to request the provision of information necessary to confirm the identity of the data subject if it has reasonable doubts as to the identity of the person submitting the request. This is particularly the case if the data subject exercises his/her right to request a copy, in which case it is justified for the Data Controller to verify that the request comes from the authorized person.
Your options for exercising your rights
If, in your opinion, the data processing of the Data Controller does not comply with the legal requirements, you may initiate proceedings with the National Authority for Data Protection and Freedom of Information (Postal Address: 1530 Budapest, P.O. Box: 5., e-mail address: ugyfelszolgalat@naih.hu) or go to court.