Last updated: 24 September 2026
This policy explains how we process personal data in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.). Job seekers should also read our Candidate Privacy Notice.
1. Who is responsible (data controller)
Tech Source EU Jobs Kft., Fecske utca 3, 4th floor, 1084 Budapest, Hungary (company reg. no. 01-09-428068). Email: info@techsourceworldwide.com. Phone: +36 70 555 9849.
Our group company Tech Source World Wide, Chennai, India, supports sourcing, screening and trade testing of candidates. [Confirm the role of the Indian company: joint controller under Art. 26 GDPR (then summarise the arrangement here) or processor under Art. 28 GDPR.]
Data protection contact: info@techsourceworldwide.com (subject line “Data protection”). [If you appoint a Data Protection Officer under Art. 37 GDPR – for example because you process candidate data on a large scale – add their name and contact details here.]
2. Processing at a glance
| Purpose | Personal data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Answering enquiries and preparing offers | Name, company, email, phone, message | Art. 6(1)(b) pre-contractual steps; Art. 6(1)(f) legitimate interest in answering business enquiries | [2 years] after last contact |
| Recruitment and placement of candidates | See Candidate Privacy Notice | Art. 6(1)(b), (c), (a); Art. 9(2)(b) | See candidate notice |
| Client contract management and invoicing | Business contact details, contract and billing data | Art. 6(1)(b) contract; Art. 6(1)(c) accounting obligations | 8 years under Hungarian Accounting Act (Act C of 2000, s.169) |
| Website operation and security | IP address, date/time, pages requested, browser data (server logs) | Art. 6(1)(f) legitimate interest in a secure website | [30 days] |
| Cookie consent record | Consent ID, choices, date/time | Art. 6(1)(c) obligation to prove consent (Art. 7(1)) | [12 months] |
| Analytics (only with consent) | Pseudonymous usage data, cookie IDs | Art. 6(1)(a) consent; s.155(4) Hungarian Electronic Communications Act | As stated in the Cookie Policy |
3. Visiting our website
Server logs. When you visit the site, our hosting provider automatically records technical data (IP address, date and time, page requested, referrer, browser and operating system). We use it only to deliver the site and to detect and prevent attacks.
Cookies. We only use strictly necessary cookies without consent. Analytics, marketing and embedded third-party content (such as Google Maps) load only after you agree in the cookie banner. Details are in our Cookie Policy. You can change your choice at any time via “Cookie settings”.
Fonts. Web fonts are hosted on our own server. No connection to Google Fonts is made when you visit the site.
Maps. Our contact page can show a Google Map (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). The map loads only after you consent; Google then receives your IP address and may transfer data to Google LLC in the USA under the EU-US Data Privacy Framework.
Spam and security protection. Our security plugin (Imunify Security) analyses requests, including IP addresses, to block malicious traffic (Art. 6(1)(f)).
4. Contact and CV forms
When you use our contact or CV form, we process the data you enter, plus the time of submission, to answer you or to consider you for vacancies. Fields marked * are required; without them we cannot handle your request. Submissions are sent by email to our team. Form data is not used for advertising.
5. Clients and business partners
We process contact details of employees of our clients, suppliers and sub-contractors to prepare and perform contracts and to maintain the business relationship (Art. 6(1)(b) and (f)). We may send existing clients information about similar services; you can object at any time.
6. Recipients and processors
- Prospective employers (clients) – candidate profiles, only for vacancies you are being considered for.
- Public authorities – immigration, labour and tax authorities where required by law (e.g. work-permit and guest-worker procedures).
- Processors under Art. 28 GDPR: website hosting [provider name, country]; email and form delivery [e.g. Elementor Site Mailer / Microsoft 365 / Google Workspace – confirm]; IT support; our group company in India where it acts as processor.
- Professional advisers – lawyers, accountants and auditors bound by confidentiality.
We do not sell personal data.
7. International transfers
Because we recruit internationally, personal data may be transferred to countries outside the European Economic Area, in particular India (our sourcing and testing centre) and the country of a prospective employer (e.g. Singapore, the United Arab Emirates, Canada). Where the European Commission has not issued an adequacy decision (Canada has one for commercial organisations), we use the Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR) with supplementary measures, or – for a specific placement you applied for – the transfer is necessary for a contract in your interest (Art. 49(1)(b)–(c)). You can request a copy of the safeguards from info@techsourceworldwide.com.
8. Security
We use appropriate technical and organisational measures (Art. 32 GDPR), including HTTPS encryption, access control on a need-to-know basis, strong passwords and multi-factor authentication for admin accounts, regular software updates and backups. If a personal data breach occurs, we notify the NAIH within 72 hours where required (Art. 33) and inform affected people where there is a high risk (Art. 34).
9. Your rights
- Access to your data and a copy of it (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (“right to be forgotten”) (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interests, and to direct marketing at any time (Art. 21)
- Withdrawal of consent at any time, without affecting earlier lawful processing (Art. 7(3))
Email info@techsourceworldwide.com. We reply within one month (extendable by two months for complex requests, Art. 12(3)). We may ask you to confirm your identity. Requests are free of charge.
10. Complaints and remedies
You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; naih.hu; ugyfelszolgalat@naih.hu – or with the supervisory authority in the EU country where you live or work. You also have the right to go to court (Art. 79 GDPR); in Hungary, the regional court (törvényszék) of your place of residence has jurisdiction.
11. Automated decision-making
We do not make decisions about candidates or clients based solely on automated processing, including profiling, that have legal or similarly significant effects (Art. 22 GDPR). A recruiter always reviews applications. [If you ever introduce AI-supported CV screening, update this section and assess obligations under the EU AI Act (Regulation (EU) 2024/1689), which classes recruitment AI as high-risk.]
12. Children
Our services are intended for adults. We do not knowingly process data of people under 18 for placement.
13. Changes
We update this policy when our processing changes or the law requires it. The date at the top shows the latest version.