Privacy Policy
Cookie Settings
What are cookies?
When you visit a website, it may store or collect certain information through your browser—most commonly through the use of cookies. This information may relate to your device, your preferences, or functions necessary for the operation of the website. While the data collected typically does not identify you directly, it can help provide a more personalized online experience.
You can choose which categories of cookies you allow us to use. To view or change the detailed settings, click on the title of each category. Please note that disabling certain cookies may affect the functioning of the website and the quality of available services.
Privacy Policy
Introduction
The purpose of this notice (hereinafter: Notice) is to set out the data protection and data management principles applied by Westwood Group Limited Liability Company (hereinafter: Westwood Group Kft.) (registered office: 1093 Budapest, Közraktár utca 12/A; company registration number: 01 09 330644), as the owner and operator of the website www.westwoodgroup.hu (hereinafter: Website), as well as the data protection and management policy of the Website, which Westwood Group Kft., as data controller, acknowledges as binding upon itself.
This Notice contains the principles governing the processing of personal data provided by users on the Website, and also provides information to data subjects regarding the handling of their personal data.
The provisions of this Notice have been established by Westwood Group Kft. with particular regard to Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR), Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter: Infotv.), Act V of 2013 on the Civil Code (hereinafter: Civil Code), Act CVIII of 2001 on Electronic Commerce Services (hereinafter: E-Commerce Act), as well as Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (hereinafter: Advertising Act).
Data Controller Information
With regard to the processing of your personal data, the data controller is Westwood Group Kft., meaning Westwood Group Kft. is responsible for the lawful handling of your personal data.
You can contact them at the following addresses:
Company: Westwood Group Limited Liability Company
Postal address: 1093 Budapest, Közraktár utca 12/A 4/1.
Company registration number: 01 09 330644
E-mail address: info@wdi.hu
Website: www.westwoodgroup.hu
Brief Overview of Data Processing at the Level of Individual Data Processing Activities
Newsletter
To provide the newsletter service, Westwood Group Kft. collects personal data from you. The personal data is recorded electronically by the user filling out the designated panels and clicking the subscription confirmation button.
Cookies
To provide a personalized service, Westwood Group Kft. places small data packages (so-called “cookies”) on the user’s computer. The purpose of cookies is to ensure the highest possible quality of the website’s operation, to provide personalized services, and to enhance the user experience. Users can delete cookies from their own computer or configure their browser to disable the use of cookies. By disabling cookies, the user acknowledges that the operation of the website may not be fully functional without them.
Based on their function, cookies can be the following:
-
- Session cookies are necessary for browsing the Website and using its functions, including remembering actions taken by the visitor on a given page, function, or service. Without session cookies, smooth use of the Website cannot be guaranteed.
- Functionality cookies allow the Website to remember the mode of operation selected by the user. This ensures that the user does not have to re-enter their preferences during their next visit.
- Advertising cookies aim to enable Westwood Group Kft. to display advertisements on the Website that are most relevant or of interest to our visitors
- Performance cookies help us collect information about how our visitors use the Website (e.g., which of our pages they viewed, how many pages they visited, where on the page they clicked, the duration of each session, what error messages they received, etc.). This allows us to further develop the Website (services, functions, etc.) to better meet the needs of our visitors and to provide them with a high-quality, user-friendly experience.
The Website uses the Google Analytics web analytics service. Google Analytics uses performance cookies to help analyze how users interact with the website.
What Personal Data Do We Collect
Newsletter
When subscribing to the Westwood Group Kft. newsletter, we collect the following data:
- Name (for the purpose of identifying you);
- Email address (for the purpose of delivering the newsletter).
The above data qualify as personal data under both the GDPR and the Infotv.
Cookies
The Website runs analytics software that receives automatically generated information about visitors; this includes:
The visitor’s Internet Protocol address (IP address);
-
- The time of the visit;
- Details of the pages viewed;
- The name of the browser used;
- The visitor’s preferences.
The Website records this visit-related data. According to the provisions of the GDPR, a visitor’s IP address qualifies as personal data.
Purpose of Collecting Personal Data
Newsletter
In connection with the provision of the newsletter service, the purpose of processing personal data is to provide you with periodic updates about current news at Westwood Group Kft., as well as information relevant to partners concerning Westwood Group Kft.
Cookies
The purposes of using cookies are as follows:
- To support the customization of services used by Website users and advertisements, and to enable convenience features;
- To compile statistics and analyses regarding Website traffic and visitor preferences.
The provider of the Google Analytics service uses the above information to evaluate and analyze the use of the Website by you and other users, to compile reports on activities carried out on the Website, and to provide other services related to website activities and internet usage.
Legal Basis for Data Processing
The legal basis for processing the personal data defined in Section 4—both in the case of the newsletter service and the use of cookies—is your consent as the data subject, in accordance with Article 6(1)(a) of the GDPR. Data processing is always voluntary. You may withdraw your consent at any time.
Consent to the processing of personal data is given:
- for the newsletter, by subscribing electronically and ticking the checkbox required to confirm subscription (providing consent in accordance with the Privacy Notice);
- for cookies, by visiting the Website and using its content. This implied conduct constitutes consent, which can be withdrawn at any time by deleting the cookies from your computer or by setting your browser to block the use of cookies.
Duration of Data Processing
Newsletter
Westwood Group Kft. will process your personal data for the purpose of sending promotional newsletters until you unsubscribe from the newsletter, request the deletion or restriction of your personal data, or otherwise prohibit us from processing it.
Cookies
In the case of session cookies, the cookies are automatically deleted when the browser is closed. In all other cases, Westwood Group Kft. processes your personal data until the purpose of using the specific type of cookie has been fulfilled.
Data Security Measures
Newsletter
The personal data recorded during newsletter subscription is stored by Westwood Group Kft. in the MailChimp newsletter and database management service provided by Rocket Science Group, LLC, through which Westwood Group Kft. sends newsletters to you.
Within the organization of Westwood Group Kft., your personal data is accessible only to those employees of Westwood Group Kft. who are involved in the company’s promotional and marketing activities. Westwood Group Kft. treats personal data as confidential information; it does not disclose such data or provide access to third parties—excluding the data transfer to Rocket Science Group, LLC—or to any employee of Westwood Group Kft. who is not involved in promotional and marketing activities.
In both of the above cases, the recorded personal data is stored on a password-protected server in a database accessible only to specific individuals. This database is secured by state-of-the-art firewalls and antivirus software. The database is accessible exclusively by authorized employees.
Data Processor
Newsletter
Westwood Group Kft. conducts its newsletter-related marketing activities through the MailChimp newsletter and database management service provided by Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000; Atlanta, GA 30308 USA). The personal data recorded in MailChimp is transferred to and stored on servers located in the United States, operated by Rocket Science Group, LLC. Accordingly, Westwood Group Kft. explicitly draws your attention to the fact that by using the MailChimp service, your personal data is transferred to a third country (USA) as defined under the GDPR.
Rocket Science Group, LLC operates the MailChimp newsletter system for the entire duration of the data processing and does not process data on its own behalf. Since Rocket Science Group, LLC does not process any data for its own purposes, it qualifies as a data processor.
Rocket Science Group, LLC participates in the Privacy Shield framework governing the transatlantic exchange of personal data for commercial purposes and has completed its certification of compliance with the Privacy Shield (certification date: November 21, 2016). Accordingly, Westwood Group Kft. declares that Rocket Science Group, LLC, as a data processor, provides appropriate and adequate safeguards for the processing of your personal data.
Cookie
Westwood Group Kft. analyzes website traffic data through the Google Analytics service provided by Google LLC (Google Privacy Center: 1600 Amphitheatre Pkwy, Mountain View, California 94043). The information generated by the cookies regarding the use of the Website (including the website visitor’s IP address) is transferred to and stored on servers located in the United States, operated by Google LLC. Accordingly, Westwood Group Kft. expressly informs you that by using the Google Analytics service, your personal data is transferred to a third country (USA) as defined under the GDPR. Since Google LLC does not process any data for its own benefit, it qualifies as a data processor.
Google LLC participates in the Privacy Shield framework regulating the transatlantic exchange of personal data for commercial purposes and has completed its certification of compliance with the Privacy Shield (certification date: September 25, 2017). Accordingly, Westwood Group Kft. declares that Google LLC, as a data processor, provides appropriate and adequate safeguards for the processing of your personal data.
Privacy Notice for Job Applications
Purpose of Data Processing
At Westwood, we take the protection of applicants’ and candidates’ personal data very seriously.
When you submit or inquire about a job application, the information you provide may include personal data.
This notice summarizes how we collect, use, and protect the personal data you provide during the recruitment process, and what options you have to protect your privacy.
The purpose of processing your personal data is to recruit for open positions, manage the selection process, and evaluate applications.
Legal Basis for Data Processing
The processing of your personal data is based on your consent (Article 6(1)(a) of the GDPR), as well as on the necessity of taking steps prior to entering into an employment contract (Article 6(1)(b) of the GDPR).
Scope of Processed Data
For recruitment and candidate evaluation purposes, we may process the following data that you provide to us:
-
Identification data (e.g. name, date of birth, gender);
-
Contact details (e-mail address, phone number, home address, social media profile);
-
Application data (information contained in your CV, such as professional experience, employment history, skills, education, language proficiency, etc.);
-
Data relating to skills and competencies (qualifications, test results, assessments);
-
Background check data, such as proof of identity or previous employer references;
-
In some cases, additional data required for specific job positions.
We do not specifically request special categories of personal data (e.g. health information). Such data will only be processed with your written consent and in compliance with applicable laws.
Data Retention Period
Your data will be retained until the completion of the selection process.
If we wish to contact you regarding future job opportunities, we will ask for your separate consent, and store your data for a maximum of 1 year.
Your personal data will be kept only as long as necessary to fulfill the above purposes, unless a longer retention period is required or permitted by law.
In some cases – for example, to maintain our candidate database – we may retain data for up to 2 years, based on your consent.
Additionally, in the case of legal claims, proceedings, or regulatory investigations, we may retain data for a longer period based on legitimate interest.
Data Transfer and Processing
Westwood Group Korlátolt Felelősségű Társaság
(Registered office: 1093 Budapest, Közraktár utca 12/A; Company registration number: 01 09 330644)
is the data controller responsible for data processing related to job applications and recruitment processes.
Access to your data is restricted to authorized personnel within the company (e.g. HR staff, hiring managers).
External service providers (e.g. job portals, recruitment agencies, IT service providers) may only access data to the extent necessary and based on a data processing agreement.
Your personal data will never be sold to third parties.
However, in certain cases, we may share your data with our subsidiaries or trusted partners, strictly within the framework of applicable laws and this privacy notice.
Data may be transferred in the following cases:
-
Legal obligations: if required by law, regulatory or court orders (e.g. crime prevention, legal proceedings);
-
Use of service providers: in certain cases, we may engage external service providers (e.g. recruitment software providers, background screening systems). Such providers may only process data as necessary to perform their services;
-
Business transactions: in the event of a corporate restructuring, merger, or acquisition, personal data may be transferred to the relevant parties based on legitimate business interest.
Data Subject Rights
You have the right to:
-
request access to your personal data,
-
request rectification or erasure of your data,
-
request restriction of processing,
-
object to the processing of your data, and
-
withdraw your consent at any time.
You may exercise your rights through the contact details provided by the data controller.
Your Rights and Legal Remedies
What rights do you have as a Data Subject concerning your data
Right to Information and Access
You have the right to request confirmation from Westwood Group Kft. as to whether your personal data is being processed, and if such processing is taking place, you have the right to access your personal data and the following information:
- the purposes of data processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed (in particular, data processors);
- the intended period of storage of the personal data;
- your rights in relation to the processing of personal data;
- the source of the data, if it was not collected directly from you;
- information on automated decision-making.
Under the applicable laws, information about your personal data is provided to you free of charge. We will respond to your request in writing within one month. However, if the request is clearly unfounded or—particularly due to its repetitive nature—excessive, Westwood Group Kft., taking into account the administrative costs of providing the requested information or taking the requested action, may:
- charge you a reasonable fee, or
- refuse to act on the request.
If you have already paid a fee, but it turns out that the data processing was unlawful, or we are required to correct your data as a result of your request, we will refund the fee.
If, despite our advanced data security measures, any unauthorized person accesses, alters, transmits, discloses, deletes, or destroys your personal data—or causes accidental destruction or damage, or otherwise unlawfully processes your data—we will, upon your request, inform you of the circumstances of such an incident. This includes when it occurred, what effects it may have, and what we have done to prevent or mitigate the consequences.
Right to Rectification
If the personal data we process is inaccurate, we will correct it without undue delay at your request. You also have the right to request the completion of incomplete personal data by submitting an appropriate declaration.
Right to Erasure
Westwood Group Kft. will delete your personal data without undue delay if:
- the personal data is no longer needed for the purpose of sending marketing newsletters;
- the processing of the personal data is unlawful;
- the deletion of the personal data is necessary to comply with a legal obligation applicable to Westwood Group Kft.;
- consent was not given or authorized by the person holding parental responsibility in the case of personal data of a child under the age of 16;
- Westwood Group Kft. has made the personal data public.
You may also request the deletion of your personal data by withdrawing your previously given consent to data processing. In this case, however, we may refuse to continue providing the service, and certain services may no longer be available to you.
Instead of deletion, we will block (restrict) your personal data if you request this or if it is assumed that deletion would affect your legitimate interests. Blocked data is not processed for the above purposes. Such data is only processed for the reason that prevented its deletion.
Right to Restriction of Processing
Data processing may be restricted in the following cases:
- You contest the accuracy of your data; in this case, Westwood Group Kft. will restrict the processing of your personal data for the period necessary to verify the accuracy of the data;
- The processing is unlawful;
- Instead of deletion, you request the restriction of data use;
- Westwood Group Kft. no longer needs the data, but you require it for the establishment, exercise, or defense of legal claims;
- You have objected to the processing of your personal data, and the restriction is applied for the duration of the assessment of whether the legitimate grounds of Westwood Group Kft. override your objection.
For the duration of the assessment of your objection to the processing of personal data—no longer than 5 days—Westwood Group Kft. will suspend data processing, examine the validity of the objection, and make a decision, which you will be informed of without delay.
If the objection is justified, Westwood Group Kft. will restrict the data, meaning that only storage of the data will be permitted as a form of processing until:
- You give consent for the processing;
- The data is required for the enforcement of legal claims;
- The processing is necessary to protect the rights of another natural or legal person; or
- Processing is ordered by law in the public interest.
If you have requested a restriction of processing, Westwood Group Kft. will inform you in advance before lifting the restriction.
What Happens and What You Can Do If Your Request Is Denied
If Westwood Group Kft. denies your request for rectification, restriction, or deletion, we will inform you in writing within one month of receiving the request, explaining the reasons why we were unable to fulfill it. We will also inform you of your right to seek judicial remedy and your right to lodge a complaint with the National Authority for Data Protection and Freedom of Information.
Our response will be sent via email if you have consented to this.
What Rights Do You Have If You Believe the Data Processing Is Unlawful
If you have concerns about the lawfulness of data processing, you are entitled to object to the processing. Your objection must include a request to cease the processing of your data and to have your data deleted.
If you object to the processing of your personal data, Westwood Group Kft. will review the grounds for your objection, make a substantive decision within one month, and notify you of the decision in writing.
If we find that your objection is justified, we will cease all data processing activities, block the affected data, and notify all those to whom the personal data in question was previously disclosed about the objection and the resulting actions. These recipients are also required to take steps to ensure your objection is upheld.
If you disagree with our decision, or if Westwood Group Kft. fails to meet the one-month deadline, you may bring the matter before a court within 30 days of being notified of our decision or from the last day of the deadline.
What Remedies Are Available to You
If you believe that the processing of your personal data by Westwood Group Kft. violates the provisions of the GDPR, you, as a data subject, have the right to lodge a complaint with a supervisory authority (i.e., a public authority established by any EU Member State under Article 51 of the GDPR)—in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. In Hungary, the supervisory authority established in accordance with the criteria set out in Article 51 of the GDPR is the National Authority for Data Protection and Freedom of Information (hereinafter: “NAIH” or “Authority”).
According to the GDPR, the relevant supervisory authority is the one affected by the processing of personal data for one of the following reasons:
- The data controller or processor has an establishment in the territory of the Member State of that supervisory authority;
- The processing substantially affects or is likely to substantially affect data subjects residing in that Member State; or
- A complaint has been lodged with that supervisory authority.
With regard to the data processing activities carried out by Westwood Group Kft., the relevant supervisory authority under points 1.) and 2.) above is the NAIH, as Westwood Group Kft. has an establishment in Hungary, and the data processing primarily affects data subjects residing in Hungary. Accordingly, the following section provides information on how to submit a complaint to NAIH.
However, please note that you are not limited to filing a complaint with the Authority; you are entitled to lodge a complaint with any supervisory authority established in an EU Member State, as outlined above.
Report to the National Authority for Data Protection and Freedom of Information
Compliance with data protection laws is overseen by the National Authority for Data Protection and Freedom of Information. If you believe that our data processing does not comply with the applicable laws, or if you believe there is an imminent risk of non-compliance, you may file a report with the Authority using the contact details below:
Authority name: National Authority for Data Protection and Freedom of Information
Postal address: H-1125 Budapest, Szilágyi Erzsébet fasor 22/C
Email address: ugyfelszolgalat@naih.hu
Phone number: +36 1 391 1400
Fax number: +36 1 391 1410
For more information on data protection matters, visit the Authority’s website: http://naih.hu/
Please also note that Westwood Group Kft. is required to report any data protection incident related to the Website (i.e., the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data) to the Authority without undue delay, and, if possible, no later than 72 hours after becoming aware of the incident. If the data protection incident is likely to result in a high risk to the rights and freedoms of data subjects, Westwood Group Kft. will notify you, as the data subject, without undue delay.
Judicial Remedies
If you believe that your right to privacy has been violated, or that our decision regarding your objection was incorrect or unanswered, you may bring the matter before a court. You may choose to initiate the lawsuit before the court having jurisdiction over your place of residence or habitual residence.
Furthermore, under the conditions specified by law, if we cause you damage as a result of unlawful data processing or violation of data security requirements, you may claim compensation against Westwood Group Kft. before a court. If your personal rights have been violated, you may also be entitled to non-pecuniary damages, which can likewise be enforced through judicial proceedings.
