Home/Privacy Policy

Note to the client (to be deleted before finalisation): this is an editable base document that requires legal review. The parts highlighted in yellow require completion or confirmation, while the "To review" boxes contain questions to be decided. It is recommended that the final text be approved by a data protection expert / lawyer before going live.

Date of entry into force / last modification: [TO BE COMPLETED – date]

This Privacy Policy describes how FASTRON Hungária Kft. (hereinafter: the "Data Controller" or the "Company") processes the personal data of data subjects in the course of operating the fastron.hu website and its related activities, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR") and Act CXII of 2011 on the Right to Informational Self-Determination and on Freedom of Information ("Infotv.").

1. Details of the data controller

Name: FASTRON Hungária Elektronikai és Finommechanikai Kft.
Registered office: Gém u. 1., 7130 Tolna, Hungary
Tax number: 10805985-2-42
Company registration number: [TO BE COMPLETED – company registration number]
Representative: [TO BE COMPLETED – name(s) of managing director(s)]
E-mail: hungary@fastrongroup.hu
Phone: +36 20 610 6558
Website: fastron.hu

To review – data protection officer (DPO): is a data protection officer required to be appointed? For a manufacturing company this is typically not mandatory (the conditions of Article 37 of the GDPR generally do not apply), but it is worth clarifying. If there is or will be a DPO, their contact details should be added here.

2. Purpose and scope of the policy

The purpose of this policy is for the Data Controller to inform data subjects in a transparent manner about the processing of their personal data. The scope of the policy extends to visitors of the website, those initiating contact, and those submitting job applications.

3. The individual data processing operations

3.1. Contact (e-mail, phone)

Data processed: name, e-mail address, phone number, the content of the message and any other data voluntarily provided by the data subject. Purpose of the processing: responding to the enquiry, keeping in contact. Legal basis: the consent of the data subject, and the legitimate interest of the Data Controller in maintaining business contacts (Article 6(1)(a) and (f) of the GDPR). Duration of the processing: [TO BE COMPLETED – e.g. … months/years following the closure of the enquiry].

To review – contact form: the current Contact page contains an e-mail address and a map, but there is no online form. If a contact form is added to the website in the future, the fields it collects must be listed here precisely.

3.2. Job applications, submissions

Data processed: the CV and application material provided by the applicant (name, contact details, qualifications, previous jobs, etc.). Purpose: conducting the selection process. Legal basis: the consent of the data subject, and steps prior to entering into a contract (Article 6(1)(a) and (b) of the GDPR). Duration: [TO BE COMPLETED – e.g. … months following the closure of the selection; for future positions with separate consent … ].

To review – HR system: job offers are available through the hrmaster.hu system. Its operator must be indicated as a data processor (see point 4), and it must be clarified where and for how long applicant data is stored.

To review – newsletter / marketing: does the Company plan to send a newsletter or other marketing communications? If so, a separate, consent-based data processing point must be added here (subscription, method of unsubscribing). If not, this section can be omitted.

3.3. Cookies and traffic analysis

The website may use cookies. Detailed information on the handling of cookies is provided in the Cookie Policy.

4. Data processors

In the course of its activities, the Data Controller may make use of the following data processors:

Hosting provider: [TO BE COMPLETED – name, registered office and contact details of the actual hosting provider]
Website development / maintenance: [TO BE COMPLETED – if the maintainer has access to personal data, it must be indicated]
Traffic analysis: [TO BE COMPLETED – e.g. Google Analytics / Google Ireland Ltd., if used]
Operator of the job application (HR) system: [TO BE COMPLETED – details of the operator of hrmaster.hu]

5. Data transfer, transfer to a third country

To review: does any transfer of personal data take place to other member companies of the FASTRON Group, or outside the European Economic Area (e.g. in the case of the US-based infrastructure of certain service providers)? If so, the recipients and the safeguards for the transfer must be indicated (e.g. adequacy decision, standard contractual clauses). If not, it is worth recording this.

6. Rights of the data subject

Under the GDPR, the data subject is entitled to the following rights: the right to be informed and the right of access; the right to rectification; the right to erasure ("the right to be forgotten"); the right to restriction of processing; the right to data portability; the right to object; and the right to withdraw consent at any time (the withdrawal does not affect the lawfulness of prior processing).

The data subject may exercise their rights via the Data Controller's contact details above. The Data Controller shall fulfil the request without undue delay, but no later than within one month of receipt of the request.

7. Remedies

The data subject may, in the first instance, address any complaint related to the data processing to the Data Controller. In addition, the data subject is entitled to lodge a complaint with the supervisory authority or to turn to the courts.

Supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Registered office: Falk Miksa utca 9-11., 1055 Budapest
Postal address: 1363 Budapest, Pf.: 9.
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Website: naih.hu

In the context of judicial enforcement, the data subject may turn to the regional court competent for their place of residence or place of stay.

8. Data security

The Data Controller ensures the confidentiality, integrity and availability of the personal data processed by means of technical and organisational measures appropriate to the level of risk, and protects it against unauthorised access, alteration, transfer, disclosure, erasure or destruction.

9. Amendment of the policy

The Data Controller reserves the right to unilaterally amend this policy. The policy in force at any given time is available on the website.