DATA PROTECTION INFORMATION

The Data Protection Information provided by Orienta Hungary (hereinafter: Company) is made available to you in order to protect your personal data, in accordance with the relevant legal regulations.

The following information will help you understand:

• who processes your data and how you can contact them;
• how and for what purpose your data is analyzed.

The Orienta Group is committed to protecting your personal data. Data processing and data security are guaranteed with the utmost care, in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR) 2016/679.

Data Controller and Data Protection Officer

Orienta Hungary is the controller of your data and is considered a data controller under applicable law. In this capacity, it is responsible for implementing the necessary and appropriate technical and organizational measures to protect your data from a data protection perspective. The Company's registered office is located at 1144 Budapest, Kőszeg str 23.

In addition, the Company has appointed a Data Protection Officer (DPO) who is responsible for compliance with data protection rules. The Data Protection Officer can be contacted at: Orienta Privacy Office [email protected]. For more information about your rights, see the section entitled "Your Rights."

Purposes of data processing

All personal data you provide will be processed in accordance with applicable data protection regulations. The Company undertakes to process data in accordance with the following principles: fairness, lawfulness, transparency, and to the extent necessary and appropriate for the purposes of data processing. Data is processed exclusively by authorized and trained personnel in order to ensure the confidentiality of the information you provide.

The purposes of data processing may include, in particular:

• Pre-contractual activities, management of contractual relationships and provision of services: Your personal data may be processed as part of recruitment and selection processes, including registration in the Orienta database and management of job advertisements.
• The data may also be used to fulfill labor law and financial obligations, such as the management of wages, taxes, social security contributions, and other obligations required by law.

The Company processes data solely for the specified purposes, in compliance with data processing principles, and ensures its secure storage and processing.

Purposes of data processing

The Company may use your data for the following purposes:

Purposes related to activities prior to entering into a contract, managing contractual relationships, and providing services:

Your personal data may be processed as follows: performing workforce research and selection activities in order to establish an employment relationship, including registration in the Orienta database. The data may also be processed in relation to positions that do not necessarily correspond to those specified in your voluntary application. Based on your registration request, we may periodically send you job advertisements by email that may be of interest to you.

In addition, your data may be processed for the following purposes:

• Updating job offers/Job Agent services that match your profile.
• Processing applications submitted for job advertisements, either on the Company's website or through other job portals.
• Establishing, managing, and terminating contractual and training relationships (e.g., fulfilling accounting, payroll, social security, and tax obligations).
• Managing labor law entitlements, absences, and other benefits.
• Compliance with legal and regulatory obligations (e.g., occupational health, tax audit, anti-terrorism purposes).
• Handling legal disputes.
• Providing, supporting, and updating services and providing information about the services and features offered by Orienta Group.
• Activation of online services (e.g., access to the private area of www.orienta.net, recording of attendance data).
• Activation of remote digital signature services where required or requested.
• Consulting, guidance, career management, professional development, and job placement support.

Data processing for these purposes is mandatory, and refusal to process data will make it impossible to establish a relationship. Data processing may be carried out via web applications or smartphone applications.

The Company is entitled to use automated systems/procedures or non-fully automated decision-making processes to provide the necessary services. For example, if our clients are looking for candidates to fill certain positions, we may perform an automated search in our database based on your contact details, professional competencies, salary requirements, and, in some cases, feedback from our clients. These procedures help us identify the most suitable candidates.

In particular, your data may be used to generate scores based on the information in your submitted resume, as well as to analyze and send you job offers that match your profile.

Purposes related to the processing of images and sound recordings

Images, photos, audio and video recordings voluntarily submitted by you may be processed for the following purposes:

• Sharing recordings and interviews with potential clients or interested organizations in connection with your application.
• Presenting you as a candidate or representative to our clients and potential clients of the Orienta Group.

Purposes related to marketing activities

Your data may only be processed for marketing purposes with your free, specific, informed, and unambiguous consent, including:

• Conducting market research, economic and statistical analyses.
• Social, cultural and solidarity initiatives.
• Sending commercial information, advertising, promotional and informational materials.
• Presentation of promotions or loyalty programs of third parties who are partners of Orienta.

Data processing for these purposes is not mandatory, and refusal to consent to data processing will not prevent the establishment of a relationship.

Means of communication

Communication regarding data processing may take place by traditional means (e.g., by mail, telephone) or by automated means (fax, e-mail, SMS, applications, etc.).

We continuously assess the adequacy and relevance of the data to avoid processing data that is unnecessary for the purposes of data processing.

We will not use your personal data for purposes other than those set out in this notice, unless we notify you in advance and, where necessary, obtain your consent.

Processing of special data

If you apply for a specific job offer and/or share special data with us, Orienta SpA will be required to process and collect such data, for which the law requires your consent. In some cases, this data may be essential for the selection process. In such cases, we inform you that the data will be used exclusively for "purposes related to the management of contractual/training relationships and the provision of services."

Security measures

Orienta SpA's primary objective is to protect the personal data you provide us with, and data processing is based on the principles of fairness, lawfulness and transparency. We inform you that your data will be processed using tools and procedures that guarantee maximum security and confidentiality, using paper and digital archives, as well as IT and telecommunications tools. Communication may also take place using traditional methods (e.g. by post, telephone) and automated tools (e.g. fax, e-mail, SMS, applications).

Data retention period and deletion

Your personal data will be retained for a maximum of 76 months from the date of receipt, last update, or last access to your profile for the purpose of managing job applications, unless a longer retention period is required by law. w. After that, the data will be deleted or irreversibly anonymized. In addition, the Company provides you with the option to delete your profile yourself on the website.

If you enter into an employment relationship with us, your personal data will be retained for the period specified above for the purposes described above, in accordance with applicable law and the legitimate interests of the Company, after which it will be deleted or anonymized.

The Company regularly checks the relevance, necessity, and indispensability of data in connection with terminated relationships, services, or assignments, including data provided voluntarily by the data subject.

Data is retained in accordance with EU Regulation 2016/679, which does not require separate consent.

The Company may retain your data for the following purposes in particular:

• Enforcement or protection of legal claims in court, administrative, arbitration, or conciliation proceedings, if required by law, EU regulations, or collective agreements.
• Fulfillment of tax or administrative obligations

Data transfer and access

Data may be transferred for the following purposes:

• Management of contractual/training relationships and provision of services: Data may be shared with the companies concerned for the sole purpose of verifying the suitability of your profile for the position they are seeking to fill.
• Management of images and audio recordings: Data may be shared with Orienta Group companies, third parties (e.g. customers, partners, experts, bilateral sectoral organizations), public institutions, supervisory or control bodies.

Your data may be shared with countries within and outside the European Union, with the appropriate protection required by applicable law.

Only Orienta Group employees who are properly trained and authorized are involved in the processing of data. Your personal data will not be disclosed to the public.

Your rights

We grant you the following rights in relation to the processing of the data you share with us:

• Information about the existence of your data and access to it.
• Correction, updating, or supplementation of data.
• Requesting the deletion or anonymization of data in accordance with applicable law.
• Partial or complete prohibition of data processing.
• Restriction of data processing in the event of a violation, correction request, or objection.
• Requesting the portability of data, if it is in electronic form and based on a contract or consent.
• Withdrawing consent to data processing at any time.

In order to enforce these rights, the Company ensures:

• The possibility of independent deletion of data if you have not established an employment relationship with the Company.
• Submission of an email request to the following address: [email protected].

The Company undertakes to respond to your request within one month at the latest, and in particularly complex cases within three months at the latest. All decisions will be communicated to you in writing or electronically.

The Company reserves the right to charge a proportionate fee for manifestly unfounded, excessive, or repetitive requests. We keep a record of such requests for follow-up purposes.