Privacy policy

The purpose of data processing: giving a substantive response to your electronic request.

The legal basis for data processing: consent of the data subject (Art. 6 (1) (a) GDPR) -The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The categories of personal data concerned: contact data, message.

The duration of data processing: for the period necessary to maintain contact or until the consent is withdrawn.

The source of personal data: user initiating the connection.

Consequences of failure to provide data: it is not possible to contact us via the online application form.

The method of data processing: electronic.

The existence of automated decision-making, including profiling: –

The purpose of data processing: followers may have the opportunity to learn about the latest professional and marketing content of our organization.

The legal basis for data processing: consent of the data subject (Art. 6 (1) (a) GDPR) -The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The categories of personal data concerned: depending on profile settings, follower’s public name, profile picture, comment, any data, information, image, video, etc. shared or published via social media.

The duration of data processing: until the withdrawal of the consent or no later than the termination of our social page or the deletion of the user profile.

The source of personal data: follower (social media user).

Consequences of failure to provide data: you will not be immediately notified of content shared on social pages.

The method of data processing: electronic.

The existence of automated decision-making, including profiling: –

Social networks generally have the ability to comprehensively analyze your user behavior when you visit their websites or sites with integrated social media content (e.g. like buttons or banner advertisements). Visiting our social media presences will trigger a number of processes which are relevant to data privacy. In details:

When you log in to your social media account and visit us on this social media platform, the operator of this social media portal has the ability to associate this visit with your user account. However, your personal data can also under certain circumstances be detected even if you are not logged in or do not possess an account with the social media portal in question. In such cases these data can be acquired for example via cookies which are stored on your terminal device, or by acquiring your IP address.

With the aid of data acquired in this way, the social media portal operator can create user profiles in which your preferences and interests are stored. In this way, advertising tailored to your interests can be displayed to you both within and outside of the respective social media presence. If you have an account with the social network in question, advertisements tailored to your interests can be displayed on all devices to which you are or have been logged in.

Please note that despite sharing joint responsibility with the social media portal operator, we have no comprehensive influence over the data processing activities conducted by social media portals. The opportunities open to us are essentially dependent on the corporate policy of the respective provider. Please also note that we are unable to replicate all data processing activities on social media portals. Dependent on the provider, it may be that other processes are performed by social media portal operators. For details, please refer to the data privacy policies of the respective social media portals.

• Facebook
• Twitter
• Youtube
• Linkedin
• Instagram

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

Cookies are small text files that can be used by websites to make a user’s experience more efficient. Cookies are typically categorized as “session” cookies or “persistent” cookies. Session cookies help you navigate through the website efficiently, keeping track of your progression from page to page so that you are not asked for information you have already provided during the current visit, or information needed to be able to complete a transaction. Session cookies are stored in temporary memory and erased when the web browser is closed. Persistent cookies on the other hand, store user preferences for current and successive visits. They are written on your device’s hard disk, and are still valid when you restart your browser. We use persistent cookies, for example, to record your choice of language and country location. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

Performance Cookies are used for the following purposes:

• to help us route traffic between servers
• to understand how quickly features load for users
• to identify and resolve user experience issues and improve website operations
• to resolve member inquiries and help ensure compliance with our member rules and
• to count the number of users of our site.

Preference Cookies are used for the following purposes:

• to enable the website to provide enhanced functionality and personality
• to allow Sites to remember information that changes the way the site behaves or looks
• to carry information across pages and avoid having to re-enter information and
• to allow you to access stored information within session.

Analytics Cookies are used for the following purposes:

• to compile aggregated statistics that allow us to improve the structure of our website
• to help us better understand how people interact with properties of the website and applications and
• to help us to determine what product ads are most relevant.

Security and Authentication Cookies are used for the following purposes:

• to authenticate users and prevent fraudulent use of credentials
• to protect user data from unauthorized parties
• to provide security within shopping baskets or transactions and
• to prevent activity that violates our policies.

Targeting and Advertising Cookies are used for the following purposes:

• to allow us to tailor content or advertisements to match your preferred interests or to avoid showing the same advertisements repeatedly
• to help measure the performance of marketing campaigns and
• to get insight into how people use our products.

The law states that we can store cookies on your device according to our legitimate interest (Art. 6 (1) (f) GDPR) if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission (Art. 6 (1) (a) GDPR). You can at any time change or withdraw your consent from the pop-up cookie banner on our website. If you do not want Controller to place cookies on your device, you can also refuse the use of cookies through your browser´s settings. You need to separately adjust the settings for each browser and each computer. The links below will take you directly to your browser´s user guide. Please note that, if you adjust the cookie settings, you may not be able to correctly use some parts of this website afterwards.

• Chrome
• Firefox
• Internet Explorer
• Safari

The data subject may request the Controller to provide him or her access to the personal data concerning him or her, including a copy of the personal data which are the subject of the data processing. The data subject has the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, has the right to access the personal data and the following information:

1. the purposes of the processing,
2. the categories of personal data concerned,
3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations,
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
5. the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing,
6. the right to lodge a complaint with a supervisory authority,
7. where the personal data are not collected from the data subject, any available information as to their source,
8. the existence of automated decision-making, including profiling, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The data subject shall have the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The personal data shall be erased if:

1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
2. the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing,
3. the data subject objects to the processing and there are no overriding legitimate grounds for the processing,
4. the personal data have been unlawfully processed,
5. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Controller is subject,
6. the personal data have been collected in relation to the offer of information society services.

Upon request of the data subject, the Controller will restrict data processing where one of the following applies:

1. the accuracy of the personal data is contested by the data subject, for a period enabling the Controller to verify the accuracy of the personal data,
2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
3. the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims,
4. the data subject has objected to processing pending the verification whether the legitimate grounds of the Controller override those of the data subject.

A data subject who has obtained restriction of processing shall be informed by the Controller before the restriction of processing is lifted. The Controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Controller shall inform the data subject about those recipients if the data subject requests it.

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

In exercising his or her right to data portability as stated above, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of this right shall be without prejudice to the right to erasure.

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her unless the processing is carried out for a legitimate interest pursued by the Controller or by a third party or the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, including profiling based on those provisions. The Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or if the processing is conducted for the establishment, exercise or defence of legal claims.

The data subject shall have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning him or her, or similarly significantly affects him or her. This provision shall not apply if the decision:

1. is necessary for entering into, or performing a contract between the data subject and the data controller,
2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms, and legitimate interests, or
3. is based on the data subject’s explicit consent.

In this case, the Controller shall implement suitable measures to safeguard the data subject’s rights and freedoms, and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view, and to contest the decision.

It is possible for anyone (not only for the data subject) to initiate an investigation or a data protection authority procedure with the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) on the grounds that a breach of law has occurred or is imminent in connection with the processing of personal data. It is important that the notification shall not be anonymous, otherwise the authority may reject the notification without a substantive examination. The investigation by the authority is free of charge, and the costs of the investigation are advanced and borne by the authority.

Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság

Seat: 1055 Budapest, Falk Miksa utca 9-11.

Address: 1363 Budapest, Pf. 9.

Phone: +36 1 391 1400

Fax: +36 1 391 1410

Email: ugyfelszolgalat@naih.hu

Website: http://www.naih.hu

Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority, each data subject has the right to an effective judicial remedy where he or she considers that his or her rights under GDPR have been infringed as a result of the processing of his or her personal data in non-compliance with GDPR. The Controller and the processor shall be obliged to prove that the processing is in accordance with the provisions on data protection determined in legislation or legally binding act of the European Union. In Hungary regional courts have jurisdiction over these actions. The action may also be brought before the court of the domicile or place of residence of the data subject (www.birosag.hu/torvenyszekek). Any person who otherwise do not have legal capacity may be a party in the lawsuit. The authority may join to the data subject in the lawsuit.