Privacy Policy

Last updated: 07 October 2026

AGPEX – Agricultural Professional Experience ("AGPEX", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how AGPEX collects, uses, stores and protects personal data when you visit our website, contact us, submit an application, participate in an AGPEX programme, or otherwise interact with our services.

AGPEX processes personal data in accordance with applicable data protection laws, including Regulation (EU) 2016/679 ("GDPR") and applicable Hungarian data protection legislation.

1. Who is responsible for your personal data?

The data controller responsible for your personal data is:

Legal name: AGPEX (Agricultural Professional Experience)
Registered office: Csanak u. 4, Godollo 2100, Hungary
Email: agpex@agpex.eu
Website: agpex.eu

For privacy-related questions or requests, please contact us using the email address above.

Data Protection Officer: Gergo Kolesza (AGPEX)

2. What personal data do we collect?

Depending on how you interact with AGPEX, we may collect different categories of personal data.

Website visitors

When you use our website, technical information may be collected, such as:

  • IP address

  • browser type and version

  • device information

  • operating system

  • pages visited

  • approximate location derived from technical information

  • date and time of access

  • information relating to website usage and security

Some of this information may be collected through cookies and similar technologies. Please see our Cookie Policy for further information.

Applicants

When you apply for an AGPEX programme, we may collect:

  • full name

  • date of birth

  • nationality

  • country of residence

  • contact details

  • education and academic background

  • university or educational institution

  • graduation information

  • employment and professional experience

  • agricultural experience

  • professional interests

  • preferred countries and agricultural sectors

  • language skills

  • technical and professional skills

  • driving licence information where relevant to a placement

  • CV and motivation letter

  • information you provide during interviews and communications

  • other information you voluntarily provide as part of the application process

Participants

If you are accepted for an AGPEX programme, we may additionally process information necessary to arrange and administer your placement, such as:

  • passport or identity-document information where required

  • visa, residence or work-authorisation information

  • travel details

  • accommodation-related information

  • emergency contact details

  • information required for insurance or placement administration

  • contractual and payment information

  • communications relating to your placement

We will only request information that is necessary for the relevant purpose.

Sensitive personal data

AGPEX does not normally require special-category personal data as part of the initial application process.

Where information concerning health, medical needs, disability, dietary requirements or another special category of personal data becomes necessary for arranging or safely administering a placement, AGPEX will only process such information where a lawful basis and, where required, an applicable condition under Article 9 of the GDPR exists.

Where appropriate, we will request separate consent or provide a separate privacy notice for such processing.

Applicants should not provide medical or other sensitive information unless AGPEX specifically requests it or it is necessary for a stated purpose.

3. How do we collect your personal data?

We may collect personal data:

  • directly from you through application forms

  • when you contact us by email, telephone or other communication channels

  • during AGPEX interviews

  • through contracts and programme administration

  • from documents you voluntarily provide

  • from host organisations involved in your placement

  • from references or other third parties where relevant and lawful

  • automatically through website technologies such as cookies

Where we receive personal data from a third party rather than directly from you, we will provide any information required by applicable data protection law, subject to any relevant legal exception.

4. Why do we use your personal data?

AGPEX may process personal data for the following purposes:

A. Managing applications and evaluating candidates

We use applicant information to assess applications, understand your educational and professional background, and determine whether an AGPEX programme may be suitable for you.

Legal basis: taking steps at your request prior to entering into a contract and, where applicable, performance of a contract under Article 6(1)(b) GDPR.

B. Placement matching

We use relevant information about your background, interests, qualifications, experience and preferences to identify potential host organisations and arrange suitable placement opportunities.

Where appropriate, relevant applicant information may be shared with potential host organisations for the purpose of evaluating a possible placement.

Legal basis: taking steps at your request prior to entering into a contract and/or performance of the AGPEX service under Article 6(1)(b) GDPR.

C. Programme administration

We process information necessary to arrange and administer your placement, including contracts, communication with host organisations, travel and accommodation coordination, and programme support.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract.

D. Immigration and work-authorisation support

Where relevant, we may process information required to provide administrative guidance concerning visas, residence permits or work authorisations and to coordinate with the relevant host organisation or professional adviser.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract.

AGPEX does not make immigration decisions and does not guarantee the granting of any visa, residence permit or work authorisation.

E. Payments, accounting and legal obligations

We may process information required for invoicing, payment administration, accounting, tax, record keeping and compliance with legal obligations.

Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR and, where appropriate, performance of a contract.

F. Communication and customer support

We may use your contact information to communicate with you regarding applications, placements, contracts, payments, programme administration and support.

Legal basis: performance of a contract, taking steps prior to entering into a contract, or our legitimate interests in managing communications relating to our services.

G. Website operation, security and improvement

We may process technical information to operate, secure and improve our website and protect it against misuse, fraud and unauthorised activity.

Legal basis: legitimate interests under Article 6(1)(f) GDPR where applicable.

H. Marketing communications

Where you separately opt in to receive newsletters or marketing communications from AGPEX, we may use your contact information to send such communications.

Legal basis: your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time.

5. Legal bases for processing

Depending on the activity, AGPEX may rely on one or more of the following legal bases:

  • Consent – where you have voluntarily given consent for a specific purpose.

  • Contract / pre-contractual steps – where processing is necessary to provide our services or to take steps at your request before entering into an agreement.

  • Legal obligation – where processing is necessary to comply with applicable laws.

  • Legitimate interests – where processing is necessary for legitimate business purposes and those interests are not overridden by your rights and freedoms.

Where we rely on legitimate interests, those interests may include operating and securing our business and website, maintaining business records, communicating with existing applicants or participants, preventing fraud and defending legal claims.

6. Who may receive your personal data?

AGPEX may share personal data with third parties where this is necessary for the purposes described in this Privacy Policy.

Depending on the circumstances, recipients may include:

Host organisations

Where relevant to a potential or confirmed placement, we may provide a host organisation with information necessary to assess your suitability and arrange your placement.

We will limit the information shared to what is reasonably necessary for the placement process.

Professional advisers

We may share information with lawyers, accountants, immigration advisers, insurance providers or other professional advisers where necessary to provide services or comply with legal obligations.

Technology and service providers

We may use service providers for hosting, website operation, email, file storage, customer relationship management, payment processing, scheduling, electronic signatures and other business functions.

Such providers may process personal data on our behalf where applicable and will be subject to appropriate contractual and data-protection requirements.

Public authorities

We may disclose personal data where required by law, court order, regulatory requirement or lawful request from a competent authority.

Other recipients

We may disclose information where necessary to establish, exercise or defend legal claims, protect the rights or safety of AGPEX, applicants, participants or other persons, or comply with applicable law.

AGPEX does not sell applicant personal data.

7. International transfers of personal data

AGPEX is based in Hungary, but our programmes involve host organisations and service providers outside the European Economic Area.

As part of the placement process, personal data may therefore be transferred to countries in South America, including Argentina, Brazil and Chile.

Transfers outside the European Economic Area are subject to the requirements of Chapter V of the GDPR.

Where the European Commission has recognised an adequate level of protection for the relevant country or recipient, the transfer may be made on the basis of the applicable adequacy decision.

Where an adequacy decision does not apply, AGPEX will use an appropriate safeguard permitted under applicable law, which may include the European Commission's Standard Contractual Clauses, together with any additional measures that may be required.

You may request further information about the safeguards applicable to a particular transfer and, where required by law, obtain a copy of the relevant safeguards.

8. How long do we keep your personal data?

AGPEX does not keep personal data for longer than necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Our retention periods generally follow these principles:

General enquiries

Information relating to general enquiries may normally be retained for up to 12 months after the last meaningful communication, unless a longer period is justified.

Unsuccessful applications

Applicant information may normally be retained for up to 12 months after the application process has ended so that we can manage follow-up matters and respond to legitimate enquiries or claims.

Where you separately consent to AGPEX retaining your profile for consideration for future opportunities, your information may be retained for the period specified when that consent is obtained.

Successful applicants and participants

Where you enter into an agreement with AGPEX, relevant information will normally be retained for the duration of the contractual relationship and afterwards for as long as necessary to comply with legal, tax, accounting, insurance or dispute-resolution requirements.

Accounting and legal records

Certain records may need to be retained for a longer period because of mandatory legal, tax or accounting requirements.

When personal data is no longer required, AGPEX will delete it or anonymise it where reasonably possible.

9. Your data protection rights

Subject to the conditions and limitations established by applicable law, you have the right to:

  • request access to your personal data

  • request correction of inaccurate or incomplete data

  • request deletion of your personal data

  • request restriction of processing

  • object to certain processing

  • receive personal data in a structured, commonly used and machine-readable format where applicable

  • withdraw consent where processing is based on consent

  • object to direct marketing

  • request information about international transfers and applicable safeguards

  • lodge a complaint with a competent supervisory authority

Where processing is based on your consent, withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Some rights are subject to legal conditions and exceptions.

10. How can you exercise your rights?

To exercise your rights, please contact:

Email: agpex@agpex.eu

Please provide enough information for us to identify your request and, where reasonably necessary, verify your identity.

We will respond within the period required by applicable data protection law.

Under the GDPR, requests concerning data-subject rights are generally answered without undue delay and, in applicable cases, within one month, subject to the permitted extensions for complex requests.

11. Right to lodge a complaint

You have the right to lodge a complaint with the Hungarian supervisory authority responsible for data protection:

National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11, Hungary
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu

You may also contact another competent supervisory authority where permitted by applicable law.

12. Cookies and similar technologies

AGPEX uses cookies and similar technologies on its website.

Some cookies may be necessary for the website to function properly. Other cookies, such as analytics or marketing cookies, may only be used where the necessary legal requirements and consent conditions are satisfied.

Our use of cookies is described in our separate Cookie Policy.

Because AGPEX uses Squarespace as its website platform, certain cookies and technical data may also be processed through Squarespace's services. Squarespace distinguishes between information processed on behalf of a website owner and certain technical information it processes for its own purposes.

AGPEX will update its Cookie Policy and consent mechanism when additional services or tracking technologies are added to the website.

13. Data security

AGPEX takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Depending on the nature and sensitivity of the information, these measures may include:

  • access controls

  • restricted access to applicant information

  • secure passwords and authentication

  • encrypted connections where available

  • secure cloud and hosting services

  • appropriate contractual arrangements with service providers

  • backup and recovery procedures

  • organisational controls and confidentiality requirements

No method of transmitting or storing information can be guaranteed to be completely secure. AGPEX will nevertheless take reasonable measures appropriate to the risks involved.

14. Children

AGPEX programmes are intended for adults and are not directed at children.

We do not knowingly collect personal data from children for programme applications.

If you believe that a child has provided personal data to AGPEX, please contact us so that we can assess and take appropriate action.

15. Automated decision-making and profiling

AGPEX does not make decisions producing legal or similarly significant effects concerning applicants solely by automated means.

Applications and placement decisions are reviewed by people.

AGPEX may use structured information provided by applicants to support placement matching and administrative decision-making, but this does not replace human assessment.

16. Links to other websites

Our website may contain links to external websites operated by third parties.

AGPEX is not responsible for the privacy practices or content of those websites.

We recommend reviewing the privacy policy of any external website before providing personal information.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing activities.

The updated version will be published on this page with a revised "Last updated" date.

Where required by law, we will provide additional notice or obtain consent for material changes.

18. Contact

For any questions about this Privacy Policy or the way AGPEX processes personal data, please contact:

AGPEX
agpex@agpex.eu
+36205049999

We take privacy seriously and will make reasonable efforts to address your concerns promptly and transparently.