Privacy Notice for Candidates
(“Privacy Notice”)
We are committed to protecting
the privacy and security of your personal data. This Privacy Notice describes
how Wizz Air and its subsidiaries, affiliates, and related entities collect and
process personal data about you during the application and recruitment process.
This Privacy Notice applies to job applicants only.
This Privacy Notice applies to
all personal data you provide to us and also to all personal data which we
collect on you, either about how you use our website or mobile application (using
"cookies") or about your candidate profile if you apply for vacancies
at us. To see the cookie policy go to: https://wizzair.com/en-gb/legal/cookie-policy#/.
This Privacy Notice describes the
categories of personal data that we collect, how we use your personal data, how
we secure your personal data, when we may disclose your personal data to third
parties, and when we may transfer your personal data outside of your home
jurisdiction. This Privacy Notice also describes your rights regarding the
personal data that we hold about you including how you can access, correct, and
request erasure of your personal data.
We will only process your
personal data in accordance with this Privacy Notice unless otherwise required
by applicable law. We take steps to ensure that the personal data that we
collect about you is adequate, relevant, not excessive, and processed for
limited purposes.
1. Who we are?
If you apply for a vacancy, Wizz
Air Hungary Ltd. (registered seat: Lechner Ödön fasor 6., H-1095, Budapest, Hungary; company registration number: 01-10-140174, registering
court: Metropolitan Tribunal as Court of Registration), Wizz Air UK Limited
(registered seat at The St Botolph Building, 138 Houndsditch, London, EC3A
7ARUnited; company registration number: 10982241), or Wizz Tours Ltd. (registered
seat: Lechner Ödön fasor 6., H-1095, Budapest, Hungary;
company registration number: 01-09-205337, registering court: Metropolitan
Tribunal as Court of Registration) (as the case may be) (“Wizz Air” or “we” or “us”) acts as a data controller. This
means Wizz Air decides how your personal data is processed and for what
purposes.
If you apply for a position
with Wizz Air UK Limited or Wizz Tours Ltd. than Wizz Air Hungary Ltd. acts as joint data
controller or data processor in respect of the processing of your personal
data. When Wizz Air UK Limited or Wizz Tours Ltd. and Wizz Air Hungary Ltd. act
as joint data controllers, they will in a transparent manner determine their
respective responsibilities for compliance with the obligations under mandatory
data protection laws, in particular as regards the exercising of your rights
and their respective duties to provide the information required by such laws,
by means of an arrangement between them. Irrespective of the terms of such
arrangement you may exercise your rights under mandatory data protection laws
in respect of and against each of the controllers.
2. How to contact us
2.1. Contact
details of Wizz Air
In respect of data protection
related questions, to exercise your rights or file a complaint, or claim,
please contact the Data Protection Officer by sending an email to the email
address set forth below. You may alternatively
contact us by sending a postal mail to the following address.
2.2. Contact
details of Wizz Air’s Data Protection Officer
Wizz Air appointed a Data
Protection Officer (“DPO”) to whom
you can turn with your questions or concerns. Contact details of the DPO:
Email: data.protection@wizzair.com
Postal address: attn.: DPO; Wizz Air Hungary Ltd., Lechner Ödön fasor 6., H-1095, Budapest, Hungary
3. Your personal data – what is it?
Personal data relates to a living
individual who can clearly be identified from that data, in particular your
name, address, phone number, e-mail address, credit or bank card number,
information on special care. Identification can be made by the information
alone or in conjunction with any other information. Otherwise in the data
controller’s possession or likely to come into such possession.
4. Categories and sources of your
personal data
We collect the below described categories of your personal data from the
below indicated sources.
4.1. The
following categories of your personal data may
be collected by us
a) personal data
included in resumes, CVs, motivation letters and other written materials you submit to us (e.g. contact
data, education data, work history data, personal preferences);
b) personal data
generated by interviewers and recruiters, based on their interactions with you
or basic Internet searches;
c) personal data
provided by third-party placement firms, recruiters, or job-search websites in case your application arrived
through such channel;
d) personal data
included in recommendations provided on your behalf by
others;
e) personal data
as to your prior employment, education, and where
applicable, credit history, or other personal data revealed during
background screenings;
f) information on whether the certificate of good conduct
contains any data on criminal conviction or offence (in respect of positions
where the applicable law does not require the candidate to have a clean
certificate of good conduct, but in such cases no criminal records will be
processed, only information whether the candidate meets the requirement in this
respect or not);
g) criminal records;
h) in case when
it is relevant to your ability to perform the work required by the position, personal
data regarding your health conditions.
By applying for a vacancy, you provide us with your unequivocal consent
to process your personal data concerning health.
4.2. We obtain your personal data from the following sources
a) we obtain personal data from you, when you submit your
resume or provide us with other information via the Wizz Air career portal,
website (www.wizzair.com),
e-mail, post or in person;
b) from conversations with recruiters, interviewers,
hiring managers and other Wizz Air personnel or representatives on recruitment
events, job fairs or other relevant events, as well as from general Internet
searches that these individuals may perform;
c) from third-party recruiters, staffing companies, or
websites through which you are introduced to Wizz Air;
d) from background screenings, as applicable. Many of our
roles require security clearance and it must be understood by applicants that
we may need to fully search your background history in conjunction with your
application. By applying for a role you are accepting that such searches will
be necessary and you give permission for Wizz Air to contact certain third
parties to perform a pre-employment background screening and in order to
ascertain your suitability for a career with us. For the background check you
will be asked to provide the employment dates, company names and addresses of
all your previous employers, education, career gaps (if any). You may need to
include a reason and documentary evidence. The content of background check
information may include information gathered from publicly available sources,
your former employers or colleagues, schools you have attended, and in respect
of positions where the applicable law requires the candidate to have a clean
certificate of good conduct. We may also ask you to present your certificate of
good conduct or in respect of positions where the applicable law requires the
candidate to have a clean certificate of good conduct to provide Wizz Air with
it before concluding the employment agreement. We will also contact any
referees that you provide us in order to complete necessary background checks.
Background checks are performed by third party service providers as outlined in
Section 12 of this Privacy Notice based on a written contract between Wizz Air
and the provider).
5. Why do we collect personal data?
(Data processing purposes)
We collect and use your personal data
for the following purposes:
In order
to assess your application for a vacancy.
- To communicate with you.
- Keeping records related to our
hiring processes, for only as
long as appropriate under the circumstances.
- Verifying your information and
carrying out employment, background, and reference checks, where applicable, subject to your
consent where required by applicable law.
To send you newsletters as to vacancies based
on your preferences.
In addition to using your personal data for the position for which you
have applied, we may retain and use your personal data to inform you about and
consider you for other positions that may be appropriate for you with your
consent. If you want us to consider you for other positions, you may contact us
and we will retain your personal data for that purpose.
We will only process your personal data for the purposes we collected it
for or for compatible purposes. If we need to process your personal data for an
incompatible purpose, we will provide notice to you and, if required by law,
seek your consent. We may process your personal data without your knowledge or
consent only where required by applicable law or regulation.
6. Processing sensitive personal data
In certain cases we also need to
process special
categories of personal data (sensitive personal data) when you
provide us with information about your health conditions (for instance if you
have disability, or allergy information).
To process your sensitive
personal data we will need to obtain your specific consent, otherwise, we may
not be able to accept any application from you. We may also use your sensitive
personal data where necessary in order to establish, exercise or defend legal
claims, and comply with mandatory legal requirements. The transfer of your
sensitive personal data to third parties may also be required during the application
process.
We may collect and process the
following special categories of personal data when you voluntarily provide them
or we receive them from a third party with your consent, when relevant for a
particular position to carry out our obligations under employment law, or as
applicable law otherwise permits:
- Physical or mental health condition, previous surgery
and serious illness or disability status to determine appropriate workplace
accommodations and evaluate fitness for a particular position.
- Previous criminal charges or convictions where
relevant for the position.
Where we have a legitimate need
to process special categories of personal data about you for purposes not
identified above, we will only do so only after providing you with notice and,
if required by law, obtaining your prior, express consent.
7. Legal basis of data processing
The processing of your personal
data is based on your consent.
Your criminal records will be
processed only in case when the applicable law requires and provides for
appropriate safeguards for the rights and freedoms of data subjects authorizes
the processing.
8. Consequences of refusal/failure
of providing personal data
Please be aware that we need the
personal data listed in Section 4.1 in order to proceed with the application
procedure. If you do not provide us with the requested personal data, we will
not be able to evaluate your application and proceed with it.
If you withdraw your consent or
do not provide the consent for the use of your sensitive data mentioned in
Section 6, we may not be able to proceed with your application.
9. How long do we keep your personal
data?
We process your personal data for
the time required for the performance of the purposes set out in this Privacy
Notice or for the period of limitation prescribed in the relevant laws.
If you receive and accept an
offer of employment by Wizz Air, personal data collected during your
pre-employment (recruitment and hiring) period will become part of your Wizz Air
personnel records, to be retained throughout and for a period after your
employment by Wizz Air based on the applicable legal requirements.
If Wizz Air does not employ you, we
will keep recruitment information (including interview notes) for no longer than
is reasonable, taking into account the limitation periods for potential claims
such as race or sex discrimination (as extended to take account of early
conciliation), after which they will be destroyed. If there is a clear business
reason for keeping recruitment records for longer than the recruitment period,
we may do so but will first consider whether the records can be pseudonymised,
and the longer period for which they will be kept. Pursuant
to the foregoing, we may keep such information for a period of up to 3 years in
respect of pilot positions (taking into account the specialties of this
position) and up to 1 year in respect of other positions from the end of the
recruitment period.
We store internet search data
collected concerning you for 1 year.
We do not store the certificate
of good conduct in respect of positions where the applicable law does not
require the candidate to have a clean certificate of good conduct.
If a court or disciplinary procedure
is initiated, then the personal data will be retained until the termination of
the proceedings, including the duration of any possible remedy, which data
thereafter, in the case of civil claims, will be deleted after the civil law
statute of limitation runs.
10. Your personal data protection rights
Pursuant to the applicable data
protection law you may have the right
- to
request access to your personal data,
- to
request rectification of your personal data,
- to
request erasure of your personal data,
- to
request restriction of processing of your personal data,
- to
request data portability,
- to
object to the processing of your personal data (including objection to
profiling; also other rights in connection with automated decision-making),
- to
withdraw your consent, and
- to
lodge a complaint with the supervisory authority.
10.1. Right
to access
You may have the right to obtain
from us confirmation as to whether or not personal data concerning you is
processed, and where that is the case, to request access to the personal data.
The access information include – inter alia – the purposes of the processing,
the categories of personal data concerned, retention period of personal data,
the right to lodge a complaint with the supervisory authority, and the
recipients or categories of recipient to whom the personal data have been or
will be disclosed.
You may have the right to obtain
a copy of the personal data undergoing processing. For further copies requested
by you, we may charge a reasonable fee based on administrative costs.
10.2. Right
to rectification
You may have the right to obtain
from us the rectification of inaccurate personal data concerning you. Depending
on the purposes of the processing, you may have the right to have incomplete
personal data completed, including by means of providing a supplementary
statement.
10.3. Right
to erasure (right to be forgotten)
Under certain circumstances you
may have the right to request from us the erasure of your personal data and we
may be obliged to erase such personal data.
10.4. Right
to restrict processing
Under certain circumstances you
may have the right to request from us the restriction of processing your
personal data. In this case the respective data will be marked and may only be processed
by us for certain purposes.
10.5. Right
to object and rights relating to automated decision-making
Under certain circumstances you
may have the right to object, on grounds relating to your particular situation,
at any time to the processing of your personal data, including profiling, by us
and we can be required to no longer process your personal data.
Moreover, if your personal data
is processed based on our legitimate interest, you have the right to object at
any time to the processing of personal data concerning you for such purpose.
Furthermore, under certain
circumstances in case of automated individual decision-making, you have the
right to obtain human intervention, to express your point of view and to
contest the decision. We inform you that Wizz Air does not apply automated
decision-making mechanism in its hiring process.
10.6. Right
to data portability
Under certain circumstances you
may have the right to receive your personal data, which you have provided to
us, in a structured, commonly used and machine-readable format (i.e. in digital
form) and you may have the right to request the transmission of those data to
another entity without hindrance from us, if such transmission is technically
feasible.
10.7. Right
to withdraw consent
When the processing of your
personal data is based on your consent, you can withdraw your consent at any
time without giving any reason to us, free of charge by sending an email to the email address or sending a postal
mail to the address set forth in Clause 2 of this Privacy Notice. You
may alternatively withdraw your consent with respect to the newsletter also by
clicking the link provided in each newsletter, or via changing preferences in
your Wizz Air account, or by sending letter to Kőér street 2/A, Building B,
Budapest, 1103, Hungary. The withdrawal of consent does not affect the
lawfulness of processing based on consent before its withdrawal.
If you withdraw your consent to
our processing your personal data, we may not be able to proceed with your
application or provide you with new vacancy opportunities.
10.8. Right
to lodge a complaint with the supervisory authority
If you feel that your personal
data rights have been breached, you can also contact and lodge a complaint with
the local data protection authority, in particular in the Member State of your
habitual residence, place of work or place of the alleged infringement.
You can also contact the Hungarian
Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi
és Információszabadság Hatóság, H-1055 Budapest, Falk Miksa u. 9-11.; telephone: +36-1 391-1400; telefax: +36-1 391-1410; e-mail: ugyfelszolgalat@naih.hu),
or, if you apply for a position with Wizz Air UK Limited, the Information
Commissioner's Office (Wycliffe House, Water Lane Wilmslow Cheshire, SK9 5AF;
telephone: 0303 123 1113 (local rate) or 01625 545 745 (national rate);
telefax: 01625 524 510; e-mail: casework@ico.org.uk).
11. How do we protect your personal
data?
Wizz Air complies with its
obligations under the applicable data protection laws by
- keeping
personal data up to date;
- by
storing and destroying it securely;
- by
not collecting or retaining excessive amounts of data;
- by protecting personal data
from loss, misuse, unauthorised access and disclosure and by ensuring that
appropriate technical§measures
are in place to protect personal data.
We take appropriate technical and
organizational measures to ensure the protection of your personal data against
accidental or unlawful destruction or accidental loss, alteration, unauthorized
disclosure or access, in particular but not limited to where the processing
involves the transmission of data over a network, and against all other
unlawful forms of processing.
Wizz Air, in line with this,
among other things, applies different levels of access rights to the data,
which ensures that only the appropriate authorized person has accesses to the
data, whose knowledge of the data is necessary to fulfil his or her obligation
arising out of or in connection with the performance of his or her job.
12. Sharing your personal data
Wizz Air, in the course of its
operation, may utilize the services of various data processors and external
service providers to handle and process your personal data for specific
purposes, on behalf of and in accordance with the instructions of Wizz Air. In
addition, under the applicable aviation laws Wizz Air is required to share your
personal data with governmental bodies, authorities and other enforcement
bodies. The categories of recipients are listed in Clause 12.2 below.
The data processors may store
your personal data in protected centralized databases, with limited access, in
printed or in electronic form. Electronic databases may only be managed by
specially authorized administrators and said database is accessible only to
such authorized persons. The data processors shall process the personal data at
the most as long as the term of the data processing contract concluded with
them is valid and in force, or until they are require to keep your data under
the applicable data retention laws.
12.1. Wizz
Air Group
Your personal data may be shared
within the Wizz Air Group as far as such is necessary to proceed with your
application. For more information about Wizz Air Group, please visit: https://wizzair.com/en-gb/information-and-services/about-us/company-information#/.
12.2. Third
party service providers
When you apply for vacancies
through a third party service provider (e.g. recruiting firm) we may transfer your
personal data to the respective
service provider to facilitate the application.
The data processing of such third
parties may also be governed by their own privacy policies. Please review the
privacy policies on the website of such third parties directly for more
information about their data processing practices.Furthermore, we also receive information
about you from third parties, for instance when you apply for vacancies through
recruiting firms.
We may disclose your personal data to the following
categories of third parties (recipients) for the purposes described below:
- recruiting
firms who you apply for vacancies through;
- third
party service providers who support the recruitment process (such as screening
and background check service providers);
- other
third party service providers involved by us for data processing;
- third
parties, such as law firms and law courts, in order to enforce or apply any
contract with or any legally binding statement relating to you;
- government
authorities or enforcement bodies such as the police and regulatory
authorities, upon their request and only as required by the applicable law or
to protect our rights or the safety of our customers, staff and assets.
12.3. Government authorities and
enforcement bodies
We may transfer your personal
data to government authorities or enforcement bodies such as the police and
regulatory authorities, upon their request and only as required by applicable
law;
or to protect our rights or the safety of our customers, staff and assets.
13. Transfer of your personal data to
third countries
Where
permitted by applicable law, we may transfer the personal data we collect about
you to countries that may not be deemed to provide adequate level of data
protection under the GDPR for the purposes set out in this Privacy Notice. Therefore,
Wizz Air will, if necessary, take all measures which in relation to the
recipients of your personal data, is necessary to ensure an adequate level of
protection as defined by the applicable data protection law, in particular
through the application of the Standard Contractual Clauses issued by the
European Commission or by a decision of the European Commission which states
that the country in which the recipient of the transferred data is provides an
adequate level of data protection.
14. Cookies
When you use our website, cookies
are stored by your browser on your device. Read more about the cookies used by
Wizz Air and how you can block them by visiting: https://wizzair.com/en-gb/legal/cookie-policy#/.
Please note that if you disable cookies our website may not function properly
on your browser. Our aim is to ensure that our website offers visitors what
they are looking for and provides them with the most relevant communication. In
order to achieve this goal, we may store and use your data, building usage
profiles for market research, for quality improvements of our website and our
services, for service developments, to improve the performance of the website,
to measure the success of our advertising campaigns or to tailor services to
your needs.
Until you log in to your Wizz Air
Account, the use of such data for the purposes described in the preceding
sentence will only be in pseudonymized form. That means we will replace your
name and other features which may identify you with another identifier in order
to make it impossible or extremely difficult to identify you as a person and we
will not bundle such usage profiles with other data we store about you. You are
entitled to object against the use of your data for building usage profiles as
described above at any time. Once
you are logged in your Wizz Air account, the use of such data for the purposes
described in the preceding sentence will be personalized and connected to you.
We may also transfer your
non-personally identifiable data such as, but not limited to, anonymous
demographic information and online behavior to our contracted partners (e.g.
third party service providers) for the purpose of market research. “Non-personally
identifiable data” in this respect means we modify your personal data so that
the information concerning personal or material circumstances cannot be
attributed to you or that such attribution would require a disproportionate
amount of time, expense and effort. We store data sent by your browser and
device to our website during the application process. No such data will be
disclosed to third parties except in aggregate, non-personally identifiable
forms.
15. Changes to our Privacy Notice
If we change this Privacy Notice, we will
publish the updated version of it on our website, www.wizzair.com.
16. Third parties liability
Wizz Air is not responsible for third parties’ use of your data, where
such use is permitted for their own purposes. In such cases these third parties
also be considered data controllers, please consult their privacy policies for
further information.
This Privacy Policy is effective
from 25 July 2018.
Consent
Hereby, I
CANDIDATE’S NAME:………………………………………………….
state that I have carefully read
and reviewed this Privacy Notice. Based on my clear understanding as to the
processing activities described in this Privacy Notice, I provide Wizz Air with
my unequivocal consent to processing my personal data as set out in this
Privacy Notice.
In order
to assess my application for a vacancy.
- To communicate with me.
- Keeping records related to the
hiring processes, for only as
long as appropriate under the circumstances.
- Verifying my information and
carrying out employment, background, and reference checks, where applicable, subject to my
consent where required by applicable law.
To send me newsletters as to vacancies based
on my preferences.
Place
and date:
………………………………………………
...............................................
Signature
Consent
to processing of special categories of personal data
Hereby, I
CANDIDATE’S NAME:…………………………………………
state that I have carefully read
and reviewed this Privacy Notice. Based on my clear understanding of the processing
activities relating to special categories of my personal data (i.e. health
conditions data) as described in this Privacy Notice, I provide Wizz Air with
my unequivocal consent to processing special categories of my personal data as
set out in this Privacy Notice.
Place and date:…………………………………………
...............................................
Signature
