Recruitment Privacy Notice

1. Controller and privacy contact

Controller: Meló-Diák Universitas Iskolaszövetkezet · 2724 Újlengyel, Kossuth utca 138. · company registration number 13-02-051119 · tax number 11915214-2-13 · +36 1 444 7536 · adatkezeles.univ@melodiak.hu.

Data Protection Officer: dr. Szigeti Balázs · +36 88 422 033 · adatvedelem@melodiak.hu.

2. Why we use your data and the legal basis

• To register and manage your PowerPak and/or Veresi application, check basic eligibility, contact you, and offer suitable work opportunities. The official notice identifies your consent as the legal basis (GDPR Article 6(1)(a)).
• To verify your contact details, prevent abuse, keep an audit trail, and operate the service securely. These technical safeguards are limited to what is necessary for the service and security.
• To send other suitable Universitas job opportunities only if you separately select the optional talent-pool and notification choice. You may withdraw that choice at any time by emailing adatkezeles.univ@melodiak.hu.

3. Data used in this form

• Required: full legal name, date of birth, primary email address, mobile number, current student status, city of departure, selected job and availability. Without these fields, the form cannot check the published eligibility rules, contact you, or submit the application.
• Optional: preferred name and the separate talent-pool choice.
• Technical evidence: verification and session identifiers, consent and status history, timestamps, and pseudonymised security/rate-limit metadata. Raw passwords and raw one-time codes are not stored.
• Tax ID, TAJ number, bank account and identity documents are not requested by this public recruitment form. If later required for membership or payroll, they are collected in an authenticated onboarding process.

4. Who may receive the data

• Authorised Meló-Diák staff and contracted processors who need the data to operate recruitment, communication, hosting, security, or onboarding.
• The relevant workplace partner receives only the information necessary for selection, scheduling, access, or work performance.
• The service is configured to use Amazon Web Services for EU-region hosting and transactional email. Public processing is blocked unless the Controller records the required processor/DPA and processing-chain review for the exact published notice version.
• Data is not sold. Any transfer outside the EEA must use a lawful transfer mechanism and the safeguards described by the Controller and the relevant processor documentation.

5. Retention

Under the official Meló-Diák notice, processing based on consent lasts until withdrawal. A deletion request is handled within 30 working days unless law requires continued retention. If a registered applicant does not become a member, the official notice currently provides for retention until the end of the sixth year following registration, with an email review before expiry. Consent and audit evidence may be retained where necessary to comply with law or establish, exercise, or defend legal claims.

6. Automation and human review

The form deterministically calculates age from the date of birth and blocks submission when the calculated age is under 18, because both advertised jobs require applicants to be at least 18. This validation does not use AI and does not assess suitability beyond the published age rule. If the entered date or calculated result is wrong, correct the field before submission or request human correction at adatkezeles.univ@melodiak.hu.

7. Your rights

• You may request access, correction, erasure, restriction, portability, and—where applicable—object to processing.
• You may withdraw consent at any time by emailing adatkezeles.univ@melodiak.hu, without affecting processing already carried out lawfully before withdrawal. If required application data can no longer be used, the application cannot continue and no new work opportunity can be offered through this application.
• You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or seek a judicial remedy.

8. Which text controls

This notice is a project-specific, plain-language supplement and does not replace the full official Meló-Diák network Privacy Notice, which contains the complete controller, processor, retention, rights, and remedy information. If the two texts appear inconsistent, contact adatkezeles.univ@melodiak.hu before submitting.