Please read this Notice carefully to understand how we process your personal data and to know your rights regarding data processing.
As a data controller, Geresdi Dávid E.V. respects the privacy of all persons to whom personal data is disclosed and is committed to protecting it. The General Data Protection Regulation of the European Union (Regulation (EC) No 679/2016 of the European Parliament and of the Council, hereinafter referred to as "the General Data Protection Regulation") applies to the protection of individuals with regard to the processing of personal data: Article 13 of the GDPR) based on provides the following information:
Data of the Data Controller:
Company name: Geresdi Dávid E.V.
Office: 2119 Pécel, Erdei utca 6.
Website: https://www.kovasztunder.hu
Telephone: 06 1 300 9596
E-mail: info@kovasztunder.hu
Data protection requests: if you have any requests or questions about data processing, you can send your request by post or electronically to the following addresses: info@kovasztunder.hu We will respond to your request without delay, but within 30 days at the latest.
1. Data management objectives
The controller processes data for the following purposes in accordance with the applicable law:
a) The provision of services on the website.
b) Contact by electronic, telephone, SMS, and postal means.
c) Information about the Company's products, services, terms and conditions, promotions.
d) Promotional mail may be sent electronically and by post.
e) Analysis of the use of the website
f) In connection with the provision of the Company's business activities, we also process the data of our service users for the purposes of fulfilling a legal obligation and maintaining a customer relationship;
g) Marketing to potential customers;
h) Processing data of employees and applicants;
i) Processing of contact details of partners;
j) Fulfilling orders from customers;
k) Organising a gift draw;
l) Facilitating internal administration
2. Our Company processes your personal data on the following legal bases
a) issuing invoices in accordance with accounting legislation: legal basis: Article 6(1)(c) GDPR
b) contact: legal basis: article 6(1)(f) GDPR. Legal basis for processing of data of employees of partners, employees of partners, balancing of interests. Legitimate interest of the controller: business continuity.
c) processing of employees' data: article 6(1)(b), (c) GDPR.
d) processing of data of contractual partners: legal basis Article 6(1)(b) GDPR
e) Marketing activities: legal basis: Article 6(1)(a) GDPR.
A Facebook page is also operated for marketing purposes, but no separate database or profile is created.
f) legal basis for on-line registration: article 6(1)(a) GDPR
g) Organising a prize draw: article 6(1)(a) GDPR.
3. Duration of processing
Invoices are kept for at least 8 years due to legal obligations (payer data management). The documents on which the invoices are based are also kept for 8 years.
Retention period of the documents on which the employment relationship is based: 3 years from the termination of the employment relationship.
The retention period for the data provided for the purpose of contacting you is 1 year after the contact has been established.
Retention period for data related to the performance of the contract: 5 years after the termination of the contract.
Retention period for data processed for marketing purposes: until consent for processing is withdrawn.
Retention period for data processed for the purposes of the prize draw: until the final settlement of the prize draw.
4. Who has access to personal data
Your personal data may be processed by, and may be accessed by, our employees in accordance with the applicable laws and principles. Our Company uses the following data processor for the processing of its data:
Name: Sendinblue
Paris 7, Rue de Madrid, Paris, Île-de-France 75008, FR
The Company does not transfer data abroad OR to the following countries: the United States
Where the Company transfers personal data to a country outside the Member States of the European Union, it will do so only if the recipient of the data to be transferred has provided adequate guarantees as to compliance with the Regulation.
5. You have the following rights in relation to the processing of your personal data
a) right of access
You have the right to receive feedback from our Company on whether your personal data are being processed and, if so, information about the personal data concerned by the processing, the purposes of the processing, the recipients to whom your data are disclosed, the envisaged duration of the processing and your other rights in relation to the processing.
Upon your request, our Company will provide you with a copy of the personal data concerned by the processing. For additional copies, our Company may charge a reasonable fee based on administrative costs.
b) the right to rectification
If the information we hold about you is out of date or otherwise inaccurate, you can request that we correct inaccurate personal data about you. Taking into account the purpose of the processing, you also have the right to request the completion of incomplete personal data.
c) the right to erasure
Our Company will delete personal data relating to you if it is no longer necessary for the purposes for which it was processed; if the processing is unlawful; if you have withdrawn your consent to the processing and there is no other legal basis for the processing; if you object to the processing and there are no overriding legitimate grounds for the processing; and if required by a legal obligation to which our Company is subject. You can indicate your wish to have your personal data deleted by info@kovasztunder.hu by sending an email to the following address.
d) the right to restriction of processing
You have the right to have your data processing restricted by our Company at your request if one of the following conditions is met:
a) You contest the accuracy of your personal data, in which case the restriction applies for the period of time that allows our Company to verify the accuracy of your personal data;
(b) The processing is unlawful, but you oppose the erasure of the data and instead request the restriction of their use;
(c) our Company no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or
(d) you have objected to the processing; in this case, the restriction applies for the period until it is established whether our legitimate grounds prevail over your legitimate grounds.
e) prohibit the use of your personal data for direct marketing purposes
You have the right to object at any time to the use of your personal data for direct marketing purposes, in which case our Company will no longer send you commercial advertising.
f) the right to data portability
Where the processing is based on your consent or on a contract with you and the processing is automated, you have the right to receive the personal data you provide to us in a structured, commonly used, machine-readable format and the right to transfer this data to another controller.
(g) the right to object
You have the right to object to the processing of your personal data if the processing of your personal data is necessary for the purposes of the legitimate interests pursued by the controller or a third party or if the personal data is used or disclosed for direct marketing, public opinion polling or scientific research purposes.
If the User chooses to link his/her Facebook account with the account created on the kovasztunder.hu website, the Data Controller may process the following Personal Data of the User in addition to the above: facebook public profile data, hometown entered in facebook, facebook friends list facebook profile name, facebook profile picture, facebook e-mail address, facebook address, facebook gender, birthday.
6. Purpose and legal basis of the processing
The purposes of the Processing carried out by the Data Controllers:
a) online content delivery;
b) To distribute the Company's printed publications to subscribers,
c) the identification of the User, the contact with the User;
d) Processing and storing CVs sent by the User for as long as it takes for the
CV holder no ad instructions to terminate the storage of the CV
e) User rights (the Services that the User can use)
Identification of;
f) Provision of services available through the Company's websites and application;
g) displaying personalised content and advertisements, statistics;
h) the customization of the Services used by the User and of the advertisements
facilitating the use of amenities;
i) handling individual user requests;
j) producing statistics and analyses;
k) direct marketing or sales enquiries (e.g. newsletter, eDM, etc.)
l) User-generated content (e.g. comments, chat, blog, forum, etc.)
hosting for publication;
m) in individual cases, organising and running prize draws, contacting the winners and providing them with prizes;
n) in the case of the distribution of newspapers and publications, the establishment of a contract between the parties, the content of the
determination, modification, monitoring of the performance of the ordered product
delivery of the goods or services ordered, invoicing of the purchase price, and
the enforcement of related claims, the adequacy of performance
documenting and meeting accounting obligations;
o) Keeping records of the Data Controller's employees as required by law,
sending declarations and reports,
p) Recruitment and selection of potential employees of the Data Controller,
q) technical development of the information system;
r) protect the rights of Users;
(s) the legitimate interests of the Data Controller
t) the conclusion and performance of contracts within the scope of the Data Controller's activities
to promote.
The data made available by Users when using the service may be used by the Company to form user groups and to display targeted content and/or advertising on the Company's websites to the user groups.
In order to achieve any of the processing purposes described above, the Data Controller may process.
Personal data.
The Data Controllers will not use the Personal Data provided for purposes other than those described in these points.
User's rights, how to exercise them, modification and deletion of data
1. The User may request that any Data Controller informs him/her whether it processes the User's Personal Data and, if so, provide access to the Personal Data processed by it.
The Personal Data provided by the User in connection with a particular Service can be viewed in the access control settings of the Services or on the profile pages for each Service.
Notwithstanding the above, the User may request information or make a statement about the processing of Personal Data and may decide to delete it at any time,
- by registered or certified mail sent to the Data Controller's address
- In addition, we will also delete the user's data after processing, but after 30 days at the latest, in the case of a request sent by e-mail to info@kovasztunder.hu.
A request for information sent by letter shall be considered authentic by the Data Controller if the User can be clearly identified on the basis of the request sent. A request for information sent by e-mail shall be considered authentic by the Data Controller only if it is sent from the registered e-mail address of the User, but this does not preclude the Data Controller from identifying the User in another way before providing the information. The request for information may cover the data of the User processed by the Data Controller, their source, the purposes, legal basis and duration of the processing, the names and addresses of any Data Processors, the activities related to the processing and, in case of transfer of Personal Data, who has received or is receiving the User's data and for what purposes.
2. The User may request the rectification or modification of their Personal Data processed by the Data Controllers. Taking into account the purpose of the processing, the User may request the completion of incomplete Personal Data. The Personal Data provided by the User in relation to a particular Service may be modified in the access control settings of the Services or on the profile pages of each Service. Once a request to modify Personal Data has been fulfilled, the previous (deleted) data can no longer be restored.
3. The User may request the erasure of his/her Personal Data processed by the Data Controllers.
The erasure may be refused (i) for the exercise of the right to freedom of expression and information, or (ii) where the processing of Personal Data is authorised by law. ad; and (iii) for the establishment, exercise or defence of legal claims. In any case, the Data Controller shall inform the User of the refusal of a request for erasure, indicating the reasons for the refusal. Once the request for erasure of personal data has been complied with, the previous (erased) data can no longer be restored.
The newsletters sent by the Data Controller can be unsubscribed through the unsubscribe link in the newsletter. In case of unsubscription, the Data Controller will delete the User's Personal Data in the newsletter database.
4. The User may request the Controller to restrict the processing of his/her Personal Data if the User contests the accuracy of the Personal Data processed. In this case, the restriction shall apply for the period of time necessary to allow the Data Controller to verify the accuracy of the Personal Data. The Data Controllers shall flag the Personal Data they process if the User contests its accuracy or correctness but the incorrectness or inaccuracy of the contested Personal Data cannot be clearly established. The User may request that the Controller restrict the processing of his Personal Data even if the processing is unlawful, but the User opposes the erasure of the processed Personal Data and instead requests the restriction of its use.
The User may also request the restriction of the processing of his/her Personal Data by the Controller if the purpose of the processing has been achieved but the User requires the processing of his/her Personal Data by the Controller for the establishment, exercise or defence of legal claims.
5. The User may request that Personal Data provided by the User and processed by the User in an automated way be transferred to the Data Controller in a structured, commonly used, machine-readable format and/or transferred to another Data Controller.
6. The User may object to the processing of his or her Personal Data (i) if the processing of the Personal Data is necessary solely for compliance with a legal obligation to which the Controller is subject or for the purposes of the legitimate interests pursued by the Controller or a third party; (ii) if the processing is for direct marketing, public opinion polling or scientific research; or(iii) if the processing is carried out for the performance of a task carried out in the public interest. The Data Controller shall examine the lawfulness of the User's objection and, if the objection is found to be justified, shall terminate the processing and block the Personal Data processed and notify the objection and the action taken in response to it to all those to whom the Personal Data to which the objection relates have been disclosed.
7. Information on legal remedies
If you have a complaint about the processing of your personal data, please contact our customer service/staff at info@kovasztunder.hu. Our Company will investigate your complaint and inform you of the results of its investigation and the action it has taken within thirty (30) days.
If you believe that the processing of your personal data infringes the applicable laws, you have the right to lodge a complaint with the data protection supervisory authority or to take legal action. In Hungary, the data protection supervisory authority is the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/C) ugyfelszolgalat@naih.hu.
The Tribunal has jurisdiction to hear data protection cases. The lawsuit may also be brought, at the option of the data subject, before the court of the place of residence or domicile of the data subject.
