Data Processing Information

Data Processing Information

The purpose of this Data Processing Information is to inform the visitors of websites www.capture.hu and www.capture.eu, as well as the employees that use the services offered by the Capture company group, the applicants for job announcements, expert tasks and marketing events (data subjects) about the practice that is used concerning the controlling of personal data, the related organisational and technical steps that have been taken, and the related rights of the visitors and the possibilities available for enforcing these rights.

In view of the fact that the purpose of the specific data processing activities that are defined in this information document, and the method of data processing jointly determined by the Data Controllers, defined below, the Capture Informatikai és Tanácsadó Zrt, the Capture IT Service Kft, the Capture Consulting und IT Services GmbH, the Tricise GmbH, as well as the Capture IT Services and Consulting UK Limited (hereinafter collectively referred to as Data Controllers or Companies) are classified as joint data controllers according to REGULATION 2016/679 of the EUROPEAN PARLIAMENT AND COUNCIL (EU).

1. Our companies manage personal data by observing the following principles:

1. The management of the data subjects is lawful exclusively if at least one of the following conditions is met

• the data subject has given his consent to the management of his data for one or more specific purposes;
• controlling the data is needed for performing a contract in which the data subject is one of the parties or it is needed for performing certain steps upon the request of the data subject prior to signing the contract;
• managing the data is needed for performing a legal obligation that refers to the data controller;
• managing the data is needed for the protection of the vital interests of either the data subject or another natural person;
• processing the data is needed for enforcing the legitimate interests of the data controller or a third person, except, if those interests or essential rights and freedoms of the data subject enjoy priority compared to these interests, which makes the protection of the personal data necessary;

1. The data processing has to meet the purpose of data processing in each of its phases. The recording, storing and further controlling of personal data must be fair and lawful.
2. Capturing personal data may be done only for a clearly defined purpose. Only those personal data may be captured, which are indispensable, and essential for achieving the purpose of data processing. These personal data may not be processed by the Data Controllers for any other incompatible purpose.
3. The personal data may be controlled with appropriate security up to the extent and period needed for achieving its purpose, in such a manner that excludes unauthorised persons from having access to them.
4. The accuracy, completeness and timeliness of the personal data have to be ensured in the course of data processing, jointly with allowing the identification of the involved person only for the period that is necessary for the purpose of data 

2. Data of the Data controllers:

Capture Informatikai és Tanácsadó Zrt.

Registered Seat: 1113 Budapest, Bocskai út 134-146. E ép. (Dorottya Udvar E. épület I. emelet)

Company Registry Number: 01-10-046742

E-mail:  dataprotection@capture.eu

Phone: +36 1 240 1946

Capture IT Services Kft.

Registered Seat: 1113 Budapest, Bocskai út 134-146. E ép. (Dorottya Udvar E. épület I. emelet)

Company Registry Number: 01-09-281475

E-mail: dataprotection@capture.eu

Phone: +36 1 240 1946

Capture Consulting und IT Services GmbH

Address: Gusshausstrasse 15/10, Vienna, 1040

VAT number: ATU68861145

E-mail: dataprotection@capture.eu

Phone: +43 (1) 6009436

Capture (Switzerland) AG 

Address: Einsiedlerstrasse 23, CH-8834 Schindellegi SZ;  

Company Registration number: CHE-384.118.382 

E-mail: dataprotection@capture.eu

Tricise GmbH 

Address: Dornhofstrasse 34, Neu-Isenburg, Frankfurt Hessen 63263, Germany;  

VAT registration number: DE326037602 

E-mail: dataprotection@capture.eu

3. The legal basis of data processing:

Based on Section 6 a) of REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU), the data subject gives his consent for the management of his personal data for the purpose of one or more specific purposes defined below. Processing the data may be implemented on the basis of Sections 6 b), c), d) and f) of REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) (“GDPR”) AS WELL.

4. The data subjects of data processing:

Persons contacted for establishing a future employment or other contractual relationship appearing at the Data Controllers – participation in a selection process or a marketing event.

5. The purpose of data processing:

1. Facilitating engagement for expert tasks and implementation of the selection process:

• To facilitate the engagement of experts (future or contracted employees or subcontractors, contracted partners)
• for picking up and keeping contact with the involved parties
• for conducting the selection procedure,
• for the purpose of establishing and sustaining a contractual legal relationship
• for education and offering personalized training modules

in the following manner

• the data subject applies to the tasks, and projects that are announced on the website of the companies or on other advertising interfaces or based on internal recommendations or
• by making available his personal data to a third person through its own website or other websites, or through community networks (e.g. Linkedin).

In the case of application, concerning the data given by the data subject, the purpose of data processing is to allow the Data Controllers to notify the data subject at the given accessibility points about the task or project opportunities that may be interesting for the data subject and which correspond to his education and professional career, and its legal basis is the consent of the data subject, therefore as a prerequisite of applying for a position, task or project opportunity announcement, the applicant data subject has to give his prior, voluntary consent to the processing of his personal data.

1. Organising marketing events:

Organising professional and other events for partners, prospective partners and people interested, sending notices in connection with these events, and keeping contact with them.

6. Scope of personal data controlled

1. Facilitating engagement for expert tasks, and executing the selection process:

Data requested by the data controllers about the data subject for the purpose of selecting the person, who is the most appropriate for the given position/task:

Name (forename and surname), address, phone number, e-mail address, name of current workplace, period of professional experience, list of professional skills, in case the handed over curriculum vita is uploaded, the data given in the CV, and in the case of registration through community networks (e.g. Linkedin ID), employment sector classification.

The Data Controllers, in the interest of the future employment of the data subject, forwards the personal data (his curriculum vita) as a part of his application, based on the voluntary consent included in the application to the partners, initiators that have a contractual legal relationship with the Data Controllers, as the future customer, after having examined the possibility of employing the data subject for the positions/tasks given by the customer and provided according to their judgement the data subject, based on the expectations of the customer may be eligible for taking the position/carrying out the tasks.

1. Organising marketing events:

Data given by the data subject:

Name (forename and surname), name of employer, position, address, phone number, email address, in the case of registration through a community network the related identifiers (e.g. Linkedin ID).

7. Data forwarding:

Data Processors forward the personal data processed to the customers/contractual partners classified as data controllers, who have a data processing contractual legal relationship with them or are classified as joint data controllers together with them, and to the members of the data controller company group (the Capture company group).

8. Duration of data processing:

In the lack of any other legislative obligation, the Data Processors retain and process the personal data for three (3) years. This period may be extended exclusively with the consent of the data subject. The purpose of retaining the data is to allow the Data Controllers to notify the data subject in the future, in the interest of the data subject, about the job opportunities, expert tasks, projects and marketing events that correspond to his experiences, and education.

The data subject is liable for the correctness of the data given. The data subject may request from the Data Controllers the correction of its personal data at any time, in case they are changed. Data Controllers shall correct the untrue data upon the request of the beneficiary, and they shall delete the wrong data. The request for correction has to be indicated at any of the above-given accessibility points of the Data Controllers.

The personal data, simultaneously with the termination of the purpose of data processing and/or upon the request of the data subjects shall be deleted immediately, except those data, which Data Controllers have to retain for the period defined in the legislation that ordered mandatory data processing, based on the legislative obligation of the Data Controllers, meaning that Data Controllers have to retain the personal data processed in the course of establishing, performing and termination of an employment relationship existing at any of the Data Controllers until the lapsing of the labour law requirement arising from the employment relationship, that is based on Section 286 (1) of Act I of the year 2012 (hereinafter referred to as (“Labour Code”), for three (3) years after the termination of the employment relationship.

9. Rights of the data subjects:

The data subject may ask to be informed about the processing of his personal data, he may request the correction, blocking or deletion of his personal data at the access points of the Data Controllers given below.

Upon the request of the data subject, Data Controllers shall provide information on the data that are processed by them, about their sources, the purpose of data processing, its legal basis, its duration, and the circumstances of any data protection incidents if they occur, as well as their impacts and the measures that were introduced for preventing the incident, moreover – in case the personal data of the data subject are forwarded – the legal basis of data forwarding and its addressee.

Data Controllers – if they have a data protection officer, through the data protection officer – for the purpose of checking the measures that are connected to data protection incidents, and for informing the data subject, do record a register, which register has to contain the scope of the personal data of the data subject, the range and number of those, who are involved in the data protection incident, the time of the data protection incident, its circumstances, its impact and the measures that were introduced for preventing it, and the other data that are defined in the legislation that stipulated the processing of the data. The Data Controllers have to report any data protection incident that involves the personal data they control to the competent data protection authority within 72 hours of learning about it.

Data Controllers shall react to requests concerning the providing of information concerning the data without any unjustified delay after receiving them but in each case at the latest within 25 days.  

If the data subject has any concerns concerning the controlling of his data, first he should contact the Data Controllers at dataprotection@capture.eu in order to have his concern settled the soonest. If this would not be successful, he may ask the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi Információszabadság Hatóság) (1125 Budapest, Szilágyi Erzsébet fasor 22/c, +36 (1) 391-1400,  ugyfelszolgalat@naih.hu, www.naih.hu) to investigate the case and he may also turn to the court, because of unlawful data processing. The detailed legal provisions concerning this and the obligations of the data controller are included in REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU), and Act CXII of the year 2011 on information self-determination and freedom of information, as supplementary legislation.

10. Underage people

Data Controllers do not recommend using the services for underaged people, of age that is less than eighteen (18) years, and they do not capture information consciously about persons of this kind.

11. Data security

Data Controllers apply appropriate data protection and technical measures for protecting the personal data of the data subject from incidental data loss and unauthorised access, utilisation, modification and/or publication, and in order to fulfil the effective data protection legislation.

12. Deleting of personal data:

The data subject may initiate at any time the deleting of his personal data controlled by the Data Controllers. The deleting request has to be sent in an email to the email address dataprotection@capture.eu. The Data Controllers shall delete the data requested to be deleted within 5 working days after receiving the deletion request. (In the case of deleting, the data displayed cannot be restored.)

13. Controlling Cookies

Your reading the websites www.capture.hu and www.capture.eu  may involve your using cookies or similar technologies for identifying your browser or device accessing the website. A cookie is a small file, that is transmitted to the computer that visits the website when you visit a website. When you again visit the given website, thanks to the cookies, the website will be able to recognise the browser of the visitor. The cookies may also store user settings and other information. They use on other platforms – where cookies are not available or may not be used – other technologies as well, the purpose of which is similar to that of the cookies: e.g. the advertising identifier on Android mobile devices. You may reset the settings of your browser either to refuse all the cookies or to indicate whenever the system just sends a cookie. However, it is possible that certain website functions or services will not operate properly without cookies.

The cookies that are used by Google Analytics are operated at the website www.capture.hu, the operation of which is regulated by the data protection principles of Google (https://support.google.com/analytics/answer/6004245?hl=en)

14. Options for modifying this data processing information document

Data Controllers retain the right to unilaterally modify this Data Processing Information Document by notifying the users of the website in advance. The user of the website by using the service after the effective date of the modification accepts the modified data processing rules.

15. Contact data

If the data subjects or users have any questions or concerns concerning this Data Protection Information document, they should contact the Data Controllers at dataprotection@capture.eu .