1. Data Controller Information

Company name: CNB Group Kft.
Registered office: 33 Borostyán Street, H-2440 Százhalombatta, Hungary
Company registration number: 13-09-139651
Tax number: 22794576-2-13
E-mail: info@cnbgroup.hu
Website: https://www.cnbgroup.hu

The Data Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the applicable Hungarian legislation.

2. Legal Basis for Data Processing

• • the data subject’s consent
  • performance of a contract
  • compliance with a legal obligation
  • legitimate interest (e.g. ensuring website security, statistical analysis)

The Data Controller strives to process only the personal data that are necessary and relevant for the intended purposes.

3. Cases of Data Processing

3.1 Contact Form

Processed data:

• name
• e-mail address
• phone number
• subject and content of the message

Purpose: establishing contact and responding to inquiries

Retention period: maximum 1 year

3.2 Job Application

Processed data:

• name
• e-mail address
• phone number
• position applied for
• message
• CV (submitted by e-mail)

Purpose: recruitment and selection process

Retention period: up to 1 year

3.3 Newsletter Subscription

Processed data:

• name (if provided)
• e-mail address

Purpose: sending marketing and informational e-mails

Legal basis: consent

Unsubscription: at any time via the link provided in the newsletter

Retention period: until unsubscription

The subscriber has the right to withdraw their consent at any time

3.4 Display of Employees’ Information

The Data Controller may present its employees on the website.

Processed data:

• name
• photograph
• phone number
• e-mail address
• area of responsibility

Purpose: facilitating contact and presenting services

Legal basis: consent of the data subject

The publication of personal data is based on the prior consent of the data subject, which may be withdrawn at any time.

4. Data Processors

The Data Controller may use the services of the following providers:

• hosting service provider
• website management system (WordPress)
• newsletter service provider
• analytics service provider

Data processors act solely on the instructions of the Data Controller. They handle personal data confidentially and do not disclose it to third parties.

5. Data Security

The Data Controller protects personal data through appropriate technical and organizational measures. These measures ensure the confidentiality, integrity and availability of personal data.

6. Rights of Data Subjects

The data subject has the right to:

• request access to their personal data
• request correction of inaccurate personal data
• request the deletion of personal data
• request restriction of processing
• request data portability
• object to the processing of personal data
• withdraw consent at any time

The Data Controller will respond to requests within a maximum of 30 days.

7. Legal Remedies

Complaints may be submitted to:

National Authority for Data Protection and Freedom of Information (NAIH)

Address: Falk Miksa Street 9–11, H-1055 Budapest, Hungary
E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu

The data subject may also submit their request in writing using the contact details of the Data Controller.

8. Amendments

The Data Controller reserves the right to amend this Privacy Policy at any time.