Theme
Privacy policy
1. Purpose of this privacy policy
1.1. NNG Software Developing and Commercial LLC (registered seat: Szépvölgyi út 35–37., H-1037 Budapest, Hungary; hereinafter referred to as “NNG” or “Company”) maintains a database for the purpose of workforce recruitment and selection for itself and its subsidiary companies (hereinafter referred to as “Subsidiaries”) specified in section 2 herein. The database (hereinafter referred to as “NNG Career System”) contains, among other things, the personal data of the applicants who submit their applications for a position advertised by NNG or any of its Subsidiaries through the career page of www.careers.nng.com (hereinafter referred to as “Website”). This privacy policy (hereinafter referred to as “Policy”) governs the terms and conditions of how the applicant’s (hereinafter referred to as “Applicant” or “you”) personal data are collected, stored, and used in the NNG Career System.
1.2. The data contained in the NNG Career System are processed in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive no. 95/46/EC (“General Data Protection Regulation”) (hereinafter referred to as the “GDPR”) and all relevant national laws and regulations.
1.3. Please note that the Website contains links to third-party websites. The use of these third-party websites is governed by their respective privacy policies, therefore, once you click on an external link or the given button, NNG will no longer have any influence over the collection, storage, or processing of your personal data transmitted by the click on the link to the third-party website; and the collection, storage, or processing of your personal data is no longer governed by this Policy.
Please read this Policy carefully!
2. Data Controller(s)
2.1. The controller of your personal data provided in the NNG Career System is:
Name: NNG Software Developing and Commercial LLC
Registered seat: H-1037 Szépvölgyi út 35–37, Budapest, Hungary
Company registration number: 01-09-891838
Website: https://nng.com/
E-mail: privacy@nng.com
2.2. In the case of a vacant position at any of the Subsidiaries, the controllers of your personal data are NNG and the Subsidiary concerned.
These Subsidiaries may be the following:
NNG Software GmbH (registered seat: Mauerstraße 17, 73430 Aalen, Germany; Tax number: 9241/133/50500, Trade reg. Nr.: HRB 779681; hereinafter referred to as „NNG Germany”), only of the personal data provided by a person applying for a position advertised by NNG Germany and stored in the NNG Career System.
NNG (Shanghai) Information Technology Co. Ltd. (registered seat: 2507, Guosheng Center, Building-2, ZhongJiang Road, Lane 388, Putuo District, Shanghai, China; hereinafter referred to as „NNG China”), only of the personal data provided by a person applying for a position advertised by NNG China and stored in the NNG Career System.
Sheelds Cyber Ltd. (registered seat: Sapir Tower, 40 Tuval St., Ramat Gan 5252247, Israel; registration number: 514757079; hereinafter referred to as „Sheelds”), only of the personal data provided by a person applying for a position advertised by Sheelds and stored in the NNG Career System.
2.3. Persons having access to the personal data
The following persons have access to the data uploaded into the NNG Career System:
NNG’s employees and leaders taking part in the accomplishment of NNG’s purpose of processing;
In the case of a vacant position at a Subsidiary, in addition to the aforementioned persons, the employees and leaders of the given Subsidiary who take part in the accomplishment of the purpose of processing. In such case they will have access only to those personal data provided for a position advertised by the given Subsidiary.
3. Data processing activities
During the application you provide us with information that is considered personal data under the provisions of the GDPR. Please note that providing your data is voluntary and NNG only requests data that are necessary for the accomplishment of the purpose of processing specified in this Policy. Please note that you are responsible for the accuracy, completeness, and up-to-date status of the data that you provide, or that are included in your job application. You can update or delete them at any time by logging into your account.
3.1. Applying and selection for a specific job
You may apply for a specific position advertised by NNG or its Subsidiary as follows:
You register in the NNG Career System and upload your personal data, or
A recruitment agency submits your personal data to the NNG Career System on your behalf.
In both cases, by accepting this Policy, you consent to the processing of your personal data.
Please note that by registering in the NNG Career System, you create a so-called HR Felhő user account, which may be used solely for applying to positions advertised by NNG or by the Subsidiaries and for participating in the related recruitment process.
Type of processed personal data: First name, last name, e-mail address, mobile number, city, country, requested gross salary, resume/CV, mother language, spoken language, expected start date, additional information uploaded during the selection process (e.g. homework, test results, notes, other evaluation data added by NNG employees participating in the selection process).
Purpose of processing: Conducting a selection process for the specific position at issue, making and maintaining contact with the Applicant, evaluation.
Legal basis of processing: Your consent given pursuant to Article 6(1)(a) of the GDPR.
Duration of processing: 90 days after the selection process is closed for the specific job, unless you consent to the processing described in section 3.2.
3.2. Keeping your data for future job opportunities
During your application – or at any time throughout the selection process – you have the option to give your consent for NNG to keep your personal data even after the selection process for the specific job has ended. If you tick the appropriate checkbox, you allow NNG to retain your data so NNG may contact you about future job opportunities that match your profile.
Type of processed personal data: First name, last name, e-mail address, mobile number, city, country, requested gross salary, resume/CV, mother language, spoken language, expected start date, additional information uploaded during the selection process, additional information uploaded during the selection process (e.g. homework, test results, notes, other evaluation data added by NNG employees participating in the selection process).
Purpose of processing: Workforce recruitment and selection, conducting a selection process for one or more advertised positions, making and maintaining contact in connection with the above, evaluation.
Legal basis of processing: Your consent given pursuant to Article 6(1)(a) of the GDPR.
Duration of processing: 2 years following granting your consent.
If you become employed by NNG or a Subsidiary, your personal data provided during the application and selection process will be processed in compliance with the employer’s privacy policy.
3.3. Data processing related to cooperation with headhunters
In case your application is submitted by a headhunter, your e-mail address may be retained by NNG for a limited period after the selection process ends, even if you request the deletion of your personal data or do not consent to retain your data as specified in section 3.2 of this Policy, to fulfil contractual obligations between NNG and the headhunter.
Type of processed personal data: E-mail address
Purpose of processing: Fulfilling contractual obligations and accounting with the headhunter in connection with the specific position and person referred by the headhunter.
Legal basis of processing: Legitimate interest of NNG pursuant to Article 6(1)(f) of the GDPR. NNG has completed the relevant interest balancing test, and NNG will provide the results to you upon request
Duration of processing: 1 year after the submission by the headhunter.
4. Employment of a processor, data security
4.1. To operate the NNG Career System, NNG employs the following data processors:
Processor: hrfelho.hu Kft. registered seat: Bártfai utca 15-17.; H-1119 Budapest, Hungary, tax number: 26296465-2-43)
Activities performed by data processor: server services, operation and maintenance of a web interface and the HR Felhő software, which is the software operated for the NNG Career System.
Sub processor: ATS-Soft Kft. registered seat: Bártfai utca 15-17.; H-1119 Budapest, Hungary; tax number: 26296472-2-43)
Activities performed by data processor: Software development, maintenance, support.
Sub processor: Techfield Kft. Fraknó utca 24. B. ép. VII. em. 24., H-1115 Budapest, Hungary; tax number: 12882320-2-43.
Activities performed by data processor: Software development, maintenance, support.
4.2. Please note that your personal data uploaded into the NNG Career System are stored on the Processor’s Hungary based servers. Please note, that the processors and sub-processors detailed above have access to all data uploaded in the NNG Career System.
4.3. NNG observes all laws and regulations set forth to protect your personal data, and NNG and its authorized processors implement all appropriate technical and organizational measures and establish adequate procedural rules to enforce the provisions of the GDPR and any relevant international law or regulation governing data security. NNG has taken appropriate IT, technical, and personal measures to prevent, among other things, unauthorized access to or unauthorized change of the personal data processed by NNG.
5. Rights and remedies
5.1. Right of access:
Pursuant to Article 15 of the GDPR, you have the right to request information at any time as to whether your personal data is being processed by the NNG and, if so, how, including the purposes of the processing, the recipients to whom your data has been disclosed or the source from which NNG obtained the data, the retention period, any rights you have in relation to the processing, and, in the case of transfer to a third country or international organization, information on the safeguards in place.
When exercising your right of access, you are also entitled to request a copy of the data as follows:
The right to request a copy shall not adversely affect the rights and freedoms of others.
If your request is excessive or manifestly unfounded, NNG may charge a reasonable fee in accordance with Article 12(5)(a) of the General Data Protection Regulation or refuse to take action on the request (Article 12(5)(b) of the GDPR).
NNG will provide the requested information in writing, within one (1) month after receipt of your request.
5.2. Right to rectification:
Pursuant to Article 16 of the GDPR, NNG shall rectify or supplement personal data concerning you at your request.
Please note that you are responsible for the accuracy, completeness, and up-to-date status of the data that you provide, or that are included in your job application. You can update them at any time by logging into your account.
5.3. Right to erasure (“right to be forgotten”)
Pursuant to Article 17 of the GDPR, if you request the erasure of your personal data, NNG shall erase it without undue delay:
If it is no longer necessary for the purpose for which it was originally stored, or if the data processing is unlawful,
If you withdraw your consent and there is no other legal basis for the processing.
The data cannot be erased if the processing is necessary:
for the purpose of exercising the right to freedom of expression and information;
for the purpose of complying with a legal obligation which requires the processing of personal data by NNG under Union or Member State law;
for the establishment, exercise or defence of legal claims.
Please note that you can delete your user account or any personal data you have uploaded by logging in to your account.
5.4. Right to restriction of processing
You may request restriction of the processing of your personal data under Article 18 of the GDPR in the following cases:
The processing is unlawful, but you oppose the erasure of the data and request the restriction of their use instead;
NNG no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
5.5. Right to data portability
Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to NNG and to have that data transferred directly to another data controller, provided that the legal basis for the data processing is your consent.
5.6. Right to object
Pursuant to Article 21 of the GDPR, if the legal basis for the processing of your data is the legitimate interest of NNG or a third party (Article 6(1)(f) of the GDPR), you have the right to object to the processing of your data.
NNG is not obliged to comply with the objection if they prove that the data processing is justified by compelling legitimate grounds which override your interests, rights and freedoms; or the data processing is related to the Data Controllers' legal claims to be submitted, enforced or defended.
5.7. Right to remedy:
If you believe that the processing of your personal data by NNG violates the applicable data protection laws, in particular the provisions of the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority. In Hungary, complaints may be lodged with the National Data Protection and Freedom of Information Authority (“NAIH”). Contact details for the NAIH:
Address: Falk Miksa utca 9–11, H-1055 Budapest, Hungary;
Postal address: H-1363 Budapest, Pf. 9;
Phone: +36-1-391-1400;
Email: ugyfelszolgalat@naih.hu.
Furthermore, in accordance with the provisions of the GDPR and the Act CXII of 2011 on Informational Self-Determination and Freedom of Information of Hungary („Info Act”), you may seek redress through the courts.
Your detailed rights and remedies are set out in Chapters III and VIII of the GDPR and Section 23 of the Info Act.
5.8. Responding to requests of data subjects
If you wish to exercise any of your rights, or if you have any questions or comments, please contact NNG using the contact details provided in section 2.1 of this Policy.
NNG will ensure that if you exercise any of your rights in relation to the present data processing and contact NNG in this regard, NNG will respond to such requests without undue delay, but no later than within 30 days, and will take the necessary measures with the other data controller(s) to ensure the proper enforcement of the rights of the data subject, if the data processing is carried out jointly with another organization.
This Policy was published on and is effective from: 2026.01.20.
