Data Processing Policy
1. Name and Contact Details of the Data Controller
2. Legal Background, Legal Basis, Purpose, Scope of Processed Personal Data, and Duration of Data Processing on the Website
2.1. Data processing associated with contacting us
Legal background and basis of data processing:
The background of the data processing is provided by the provisions of Act CXII of 2011 on the Right to Informational Self-Determination and on Freedom of Information (Info Act). The legal basis of data processing is your consent, in accordance with Section 5 (1) a) of the Info Act.
Purpose of data processing:
The purpose of processing the data is to enable us to answer your questions.
Scope of processed data:
When contacting us, providing your name, company name, and contact details (email address and phone number) is required.
Duration of data processing:
Messages sent during contact are stored for an indefinite period, but you have the right to request the deletion of your personal data provided during contact at any time.
2.2. Further data processing operations
If the Data Controller wishes to carry out further data processing, it shall provide prior information on the essential circumstances of the data processing (legal background and basis, purpose, scope of processed data, duration of data processing).
Please note that the Data Controller must comply with written data requests from authorities based on legal authorization. In accordance with Section 15 (2)-(3) of the Info Act, the Data Controller keeps a record of data transfers (which authority, what personal data, on what legal basis, and when it was transferred by the Data Controller), the content of which the Data Controller shall provide information upon request, unless such information is excluded by law.
3. Use of Data Processors and Their Activities Related to Data Processing
3.1. Data processing aimed at storing personal data
The Data Processor is not authorized to access the personal data.
4. Data Security Measures
The Data Controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transfer, disclosure, deletion, or destruction, as well as accidental destruction and damage, and inaccessibility resulting from changes in the technology used.
5. Your Rights During Data Processing
Within the duration of data processing, you have the right to:
- right to information,
- right to rectification of data,
- right to erasure of data,
- right to blocking of data,
- right to object.
Within the duration of data processing, you may request information from the Data Controller about the processing of your personal data. The Data Controller shall inform you in writing, in an intelligible form, about the processed data, the purpose, legal basis, and duration of the data processing, and – if the data has also been transferred – about who and for what purpose received or will receive the data, within the shortest possible time from the submission of the request, but no later than 30 days.
Within the duration of data processing, you may request the Data Controller to rectify your personal data. The Data Controller shall comply with your request within 15 days at the latest.
You have the opportunity to request the deletion of your personal data, which the Data Controller shall comply with within 15 days at the latest. The right to deletion does not apply if the Data Controller is obliged by law to store the data further, nor if the Data Controller is entitled to further process the personal data in accordance with Section 6 (5) of the Info Act (such as in connection with billing).
You may request the Data Controller to block personal data if the permanent deletion of the data would violate the legitimate interests of the data subject. Personal data blocked in this way may only be processed as long as the purpose that excluded the deletion of the personal data exists.
You may object to the processing of your personal data:
- if the processing or transfer of personal data is necessary solely for the fulfillment of a legal obligation applicable to the Data Controller or for the enforcement of a legitimate interest of the Data Controller, data recipient, or a third party, except in the case of mandatory data processing and in the case specified in Section 6 (5) of the Info Act;
- if the personal data is used or transferred – without your consent – for the purpose of direct marketing, public opinion polling, or scientific research.
The Data Controller shall examine the objection within the shortest possible time from the submission of the request, but no later than 15 days, make a decision on its validity, and inform you of its decision in writing.
6. Legal Remedies
If you believe that the Data Controller has violated any legal provisions applicable to data processing or has not complied with your request, you may initiate an investigation by the National Authority for Data Protection and Freedom of Information (mailing address: 1530 Budapest, Pf.: 5, email: ugyfelszolgalat@naih.hu) to terminate the presumed unlawful data processing.
You are also informed that in the event of a violation of the legal provisions applicable to data processing, or if the Data Controller has failed to comply with any of your requests, you may take legal action against the Data Controller in court.
7. Which Companies are Involved in Data Processing?
During its activities, the Owner involves the following companies in data processing:
Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), additional contact info, email system, data and file storage in the cloud, and online document management (Google Privacy and Terms) and the specific services within:
- Gmail for business
- Google Drive
- Google Docs
- Google Cloud Platform
- Google Analytics
- Chrome browser
8. Amendments to the Privacy Policy
The Data Controller reserves the right to amend this privacy policy. By using the website after the amendment takes effect, you accept the amended privacy policy. In the event of an amendment, the Data Controller shall ensure that the previous text version remains accessible on the website.
