B. Job Applicants and CV Submissions

If you apply for an open position or send us a spontaneous application (via email or website forms), we collect and process your personal information to manage our recruitment process.

• ‍
• Data Collected: Full name, contact details (email, phone number, location), CV/Resume, cover letter, portfolio, work experience, education, and any other details you voluntarily provide.
• ‍
• Purpose: Evaluating candidate qualifications, conducting interviews, and assessing suitability for employment at Spice Communication Kft.
• ‍
• Legal Basis:

• Pre-contractual measures (Article 6(1)(b) GDPR) for evaluating your active job application.
• Consent (Article 6(1)(a) GDPR) if we keep your CV in our talent pool for future job opportunities.

• ‍
• Retention Period:

• If your application is unsuccessful, your CV and related personal data will be kept for a period of 6 months after the recruitment process ends, after which it will be permanently deleted unless you provide explicit consent to store it for a longer duration.

3. Cookies and Tracking Technologies

Our website uses cookies (small text files stored on your device) to enable analytics tools (Google Analytics and Hotjar).

• Managing Consent: You can accept, reject, or customize your cookie preferences at any time using the Cookie Settings banner on our website.
• Browser Settings: You can also block or delete cookies directly through your web browser settings. Please note that disabling cookies may affect certain website features.

‍

4. Data Sharing and Data Processors

We do not sell, trade, or rent your personal data to third parties. We only share data with trusted service providers acting as Data Processors under strict confidentiality agreements and legal safeguards:

‍

• Webflow, Inc. (Website hosting and Content Delivery Network – 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA)
• Google Ireland Ltd. (Website Analytics)
• Hotjar Ltd. (Behavioral Analytics & Heatmaps)

International Data Transfers: Since Webflow, Inc. is based in the United States, your technical browsing data (such as IP address and system logs) may be processed on servers in the US. Webflow complies with the EU-U.S. Data Privacy Framework (DPF) and utilizes Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection in accordance with Article 46 of the GDPR.

5. Data Security

Spice Communication Kft. implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to job applicant CVs is strictly limited to authorized personnel and internal hiring managers.

6. Your Rights Under the GDPR

As a data subject, you have the following rights regarding your personal information:

1. Right of Access: Request a copy of the personal data we hold about you.
2. Right to Rectification: Request correction of inaccurate or incomplete data.
3. Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data when it is no longer needed or if consent is withdrawn.
4. Right to Restrict Processing: Request limited processing under certain conditions.
5. Right to Data Portability: Receive your data in a structured, commonly used format.
6. Right to Object / Withdraw Consent: Withdraw your consent for cookies or CV retention at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at info@spicecommunication.com.

7. Legal Remedies & Supervisory Authority

If you believe your data privacy rights have been violated, we encourage you to contact us directly first so we can resolve the issue.

You also have the right to lodge a complaint with the Hungarian Data Protection Authority:

• Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
• Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
• Mailing Address: 1363 Budapest, Pf. 9.
• Phone: +36 (1) 391-1400
• Email: ugyfelszolgalat@naih.hu
• Website: https://naih.hu

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or our operational practices. Any updates will be posted on this page with an updated "Last updated" date.

‍