Immigration questionnaire

Additional Consent to the processing of special categories of personal data (sensitive data)

You hereby grant your consent for the purpose of archiving documents that contain your sensitive personal data as defined by the applicable Data Protection Legislation such as information on your religion or data revealing racial or ethnic origin included in the document issued by a foreign state authority for the purpose of applying for visas or working permit.

Personal data controller:     Deloitte Advisory and Management Consulting Private Limited Company (“Deloitte”)

Personal data processors (IT or administration services providers)

Deloitte CE Business Service Sp. z o.o., Al. Jana Pawla II 22, 00-133 Warsaw, Poland
Deloitte Central Europe Service Centre s.r.o., Karolinská 654/2, 186 00, Prague 8, Czech Republic
Deloitte CZ Services s.r.o., Karolinská 654/2, 186 00 Prague 8, Czech Republic
Deloitte Touche Tohmatsu Services, Inc., 30 Rockefeller Plaza, New York, 10112 – 0015, USA
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA

The processors based in the USA have concluded the EU approved Standard Contractual Clauses with Deloitte entity providing the services under the Engagement to ensure an adequate level of Personal Data protection as required by the Data Protection Legislation.

The personal data will be made accessible to the employees of the personal data processors. The personal data may be also disclosed to the competent authorities as authorized by the applicable laws.

The period for which the personal data will be stored is 10 years or as required by the applicable laws and statutory requirements. After this period expires your personal data will be permanently deleted.

The archiving of your sensitive personal data is voluntary. As a data subject you are therefore not obliged to grant this consent. If this consent is not granted or is withdrawn later on or in case, you will request to rectify or erase your data at a later date it will mean that your sensitive data shall be removed from the archived documentation. You acknowledge that in case such documents will need to be renewed for the immigration process purposes the respective documents cannot be re-used.  

Your rights:

  • Withdrawal of consent: you have the right to withdraw your consent anytime.
  • Right to information and access: the data subject may request information about the processing of his/her personal data at any time. When requested by the data subject in writing, the controller provides information about the categories of personal data concerned, the purpose and duration of processing, the recipients, the rights of the data subject and the possibility to file complaints to the authority. The data subject may access to his/her personal data, also request copy of the personal data.
  • Right to rectification: the data subject has the right to request the clarification or supplementation of his/her processed data at any time.
  • Right to erasure: a data subject may request their data to be erased when
    · processing is no longer required, or
    · the data subject’s data are processed unlawfully
  • Right to restriction: the data subject has the right to request the restriction of the processing of their data
    - if the accuracy of the data is disputed (the restriction applies until it is established whether it is indeed or it is not necessary to clarify the data),
    - if the data processing is unlawful, and the data subject objects to their deletion and requests their restriction instead,
    - if the Data Controller has no longer any use of the data for the defined purpose, but the data subject needs them for filing, asserting or protecting legal claims.
  • Right to object: the data subject has the right to object on grounds relating to his/her particular situation at any time to processing of personal data concerning him/her.
  • Right to data portability: upon request, the data subject is entitled to receive his/her personal data provided to the Data Controller in a machine readable format and/or request that the Data Controller transfer these data to another data controller assigned by the data subject.
  • Right to legal remedy: In case their rights are violated, data subjects have the right to turn to the competent court according to their place of permanent or temporary residence, and anyone may request the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf. 9., e-mail:, website: to conduct an investigation due to the fact that an infringement of right occurred or there is an imminent threat thereof. The court shall proceed in relation to the subject of the request immediately.

Deloitte Co. Ltd. shall answer your request in 30 (thirty) days from the receipt. You may send your questions or remarks in writing to the address 1068 Budapest, Dózsa György út 84/C by post or to e-mail address via electronic communication. Please indicate ’Immigration – data process’ as subject of your communication.

“Controller” means a controller or data controller (as defined in the Data Protection Legislation).

“Processor” means a data processor or processor (as defined in the Data Protection Legislation).

“Data Protection Legislation” means the following legislation to the extent applicable from time to time: (a) national laws implementing the Directive on Privacy and Electronic Communications (2002/58/EC); (b) the GDPR; and (c) any other similar national privacy law.

“GDPR” means the General Data Protection Regulation (EU) (2016/679).

“Personal Data” means any personal data (as defined in the Data Protection Legislation) processed in connection with or as part of the Services.

“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed (as further defined in the Data Protection Legislation).