PRIVACY POLICY FOR DATA PROCESSING IN CONNECTION WITH THE WEBSITES OF NISSIN FOODS HUNGARY LIMITED LIABILITY COMPANY

Nissin Foods Hungary Limited Liability Company (Headquarters: 6000 Kecskemét, Momofuku utca 4. Hungary; Company registration number: 03-09-02447; Tax number: 11030946-2-03; Authorised representative: Kurata Aya, executive director), as the data controller and website operator (hereinafter referred to as the “Data Controller”), is committed to protection of the personal data of its customers and business partners and will take all organisational and technical measures necessary to guarantee the security of the personal data of its customers and business partners.

The Data Controller publishes its data processing notice below pertaining to the https://hu.nissin-foods.eu/vallalatok/en/ website and its subpages.

This privacy policy includes the practices related to the processing of the personal data of visitors to the website, the scope of the processed data, the measures carried out for the purpose of personal data protection, and the manner and means of exercising the rights of the natural persons concerned. The natural persons concerned may also access this privacy policy electronically on the website of the Data Controller.

Data processing in relation to web contact

1.1 The data subjects are natural persons completing and submitting the contact form found on https://hu.nissin-foods.eu/vallalatok/en/contact/ webpage with their personal data to the Data Controller.

1.2 The legal basis for personal data processing is the consent of the natural persons concerned to the data processing in accordance with Article 6 (1) (a) of the General Data Protection Regulation.

1.3 The scope of processed data includes the greeting, name, e-mail address, the product reviewed by the data subject, the text of the message, and optionally, the telephone number of the data subject, the taste of the product, and the subject of the message. The data subject has the right to provide additional data as free text in the message field, which may include personal data.

1.4 The duration of data processing: the Data Controller handles the personal data of the subject until the consent of the data subject is withdrawn. The withdrawal of consent does not impact the legality of the data processing prior to the withdrawal of consent.

1.5 The purpose of data processing is to provide information about the products and services available in the portfolio of the Data Controller and to inform the data subject on individual issues that may arise.

1.6 The Data Controller does not use data management services for data processing related to the web contact form. The Data Controller retains the right to involve an additional data processor in the data processing process in the future, of which it shall inform the data subjects by amending this privacy policy.

Data processing in relation to job applications

2.1 On the basis of the consent of job applicants, the Data Controller processes the personal data found in CVs and attached documents (cover letters, references, and other documents) received directly or through a recruitment partner contracted for the selection process. In such cases, consent shall be given by submitting an application for the position. For the purpose of prior notification of data subjects, the Data Controller shall provide an electronic link to this privacy policy in every job advertisement.

2.2 The data subjects are natural persons submitting their job applications to the toborzas@nissin.com e-mail address.

2.3 The legal basis for personal data processing is the consent of the natural persons concerned to the data processing in accordance with Article 6 (1) (a) of the General Data Protection Regulation.

2.4 The scope of data processing includes the e-mail address of the subject, the subject of the message, and any attachments (CV and cover letter). The data subject has the right to provide additional data as free text in the message field, which may include personal data.

2.5 The duration of data processing: the Data Controller handles the personal data of the subject until the consent of the data subject is withdrawn or for a maximum of 6 months from the date of submission of the job application. The withdrawal of consent does not impact the legality of the data processing prior to the withdrawal of consent.

2.6 The purpose of data processing is to carry out the recruitment process, and to inform job applicants of the results of the selection processes.

2.7 The Data Controller does not use data management services in data processing related to job applications. The Data Controller retains the right to involve an additional data processor in the data processing process in the future, of which it shall inform the data subjects by amending this privacy policy.

Data processing in relation to the enforcement of legal claims

3.1 The data subjects are the natural persons who have a legal relationship with the Data Controller.

3.2 The legal basis of personal data processing are the legal interests of the Data Controller in accordance with Article 6 (1) (f) of the General Data Protection Regulation.

3.3 The scope of data processing includes personal data necessary for the establishment and enforcement of legal claims, in particular, but not limited to, official communications (by e-mail and post).

3.4 The duration of data processing: the Data Controller shall process data until the end of the period of claim enforcement as per Act V of 2013 on the Civil Code, at the latest until the end of the 5th calendar year following the termination of the legal relationship between the parties.

3.5 The purpose of data processing is the enforcement of legal claims and to ensure a successful defence in a dispute or any administrative procedure.

3.6 The Data Controller uses the data management services of the Kalászi Law Firm as its legal advisor in the data processing process related to the enforcement of legal claims. The Data Controller retains the right to involve an additional data processor – primarily an individual lawyer or law firm – in the data processing process in the future, of which it shall inform the data subjects by amending this privacy policy.

Rights in relation to data processing

4.1 The data subject is entitled to exercise its rights provided for by Article 15-22 of the General Data Protection Regulation, in particular, but not limited to, the right to information, rectification, deletion, and restriction of and objection to data processing through the Data Protection Officer in accordance with Clause 5.2 of this privacy policy.

4.2 The Data Protection Officer shall consider the request for information or enforcement received from the data subject within one month and shall inform it of the decision or the activities carried out on the basis of his request. The Data Protection Officer is Black Cell Magyarország Kft. (Postal address: 1064 Budapest, Vörösmarty utca 67. IV. em. 2., Hungary, e-mail: dpo@blackcell.io).

4.3 The natural person concerned may file a complaint on the activities of the Data Controller regarding data processing pursuant to Section 51/A of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information, and Article 57 (1) of the General Data Protection Regulation with the designated supervising authority. The supervising authority in Hungary is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Headquarters: 1055 Budapest, Falk Miksa u. 9-11. Hungary; Postal address: 1363 Budapest, Pf.: 9. Hungary; Tel.: +36 (30) 683-5969 and +36 (30) 549-6838; e-mail: ugyfelszolgalat@naih.hu).

4.4 The data subject may take legal action against the Data Controller in the event of an alleged infringement of rights. The lawsuit falls within the competence of the tribunal court.

Handling of cookies

5.1 The Data Controller applies cookies on its websites specified in this privacy policy. Cookies are files that store identifying information on the devices of the natural persons downloading the websites. In accordance with the provisions of Directive 2002/58/EC of the European Parliament and of the Council Concerning the Processing of Personal Data and the Protection of Privacy in the Electronic Communications Sector, users must be informed in advance of the purposes for which cookies are used. The use of cookies is dependent on the consent of the user, and it should therefore be possible for the user to refuse the installation of cookies on their device.

5.2 The purpose of the use of Cookies is to identify and differentiate between visitors, i.e. users, to identify sessions, to store data provided in sessions, to prevent the loss of stored data, and allow the tracking of visitors and web analytics measures in order for the Data Controller to provide a personalised service to visitors.

5.3 The legal basis for data processing is in the legitimate interests of the data subjects in the processing of their data for statistical and marketing purposes to provide a better user experience and to ensure the functioning of the websites. Moreover, the data subjects consent to the processing of their data. The processed personal data is the IP address.

5.4 During the use of the websites, the user has the opportunity to select which cookies it allows. The user is able to withdraw this consent at any time and may delete the cookies downloaded onto its device. The device of the user may be a desktop computer, laptop, smartphone or tablet used to access the website.

5.5 First and third-party cookies can be distinguished on the basis of the user of the cookies. Persistent cookies remain stored on the device for a limited period of time or until deleted by the user. Session cookies, which are temporarily transferred to the device, will be deleted from the device when the session ends, or the browser is closed.

5.6 The Data Controller employs the following types of cookies on its websites:

5.6.1 Cookies required to ensure the functioning of the websites, in particular those used for navigation and for the use of functions. By using the site, the visitor acknowledges their use.

5.6.2 Functional cookies are used to make the website more convenient to use, including the possibility for the website to remember user preferences (e.g. language settings) and the data previously provided by the user on the website.

5.6.3 With statistical cookies, the website collects information on the users of the website, including how long the duration of a session was or which parts of the websites were clicked on by visitors. The Data Controller processes this data for the purpose of improving its services and websites. Visitors cannot be personally identified with these statistical data.

5.7 Insofar as the natural person concerned does not consent to the installation of cookies on its device by the Data Controller, it is entitled to deactivate the use of cookies in part or as a whole in the device settings.

5.8 Information on cookies applied regarding the the https://hu.nissin-foods.eu/vallalatok/en/ web page is available at https://hu.nissin-foods.eu/vallalatok/en/cookies-information/