Privacy policy
DATA PROTECTION AND DATA PROCESSING POLICY
PURPOSE AND SCOPE OF THE DATA PROTECTION AND DATA SECURITY POLICY
The purpose of the Data Protection and Data Security Policy is to define the lawful framework for data processing carried out at hungaroBLECH Kft. as Controller, to ensure that the constitutional principles of data protection and the right to informational self-determination are upheld, to facilitate compliance with data security requirements, and to prevent unauthorised data processing. The Data Protection and Data Security Policy establishes the duties and responsibilities relevant to data protection, with particular regard to the role of employees in data security.
hungaroBLECH Kft. (5000 Szolnok, Mester út 41., hereinafter referred to as the service provider or controller), as Controller, acknowledges the content of this legal notice as binding upon itself. It undertakes to ensure that all data processing related to its activities complies with the requirements set out in this Policy and in the legislation in force. The data protection guidelines relating to the data processing activities of hungaroBLECH Kft. are continuously available at www.hungaroblech.hu/Adatvédelmi Szabályzat.
The Controller endeavours to express the recommendations of the Nemzeti Adatvédelmi és Információ Hatóság, including its recommendation issued on 29 September 2015 concerning data protection requirements, as clearly as possible, where appropriate supported by examples, and to present its data processing activities in detail. hungaroBLECH Kft. reserves the right to amend this Policy at any time. It will notify its customers of any changes appropriately and in good time.
If you have any questions relating to the Privacy Policy, please write to us and the data protection officer will answer your question.
The company is committed to protecting the personal data of its customers and partners, and considers respect for its customers' right to informational self-determination to be particularly important. The company treats personal data confidentially and takes all security, technical and organisational measures that guarantee the security of the data.
This Policy applies to all data processing, data transfers and disclosures of information carried out at the registered office and site of hungaroBLECH Kft., and to activities related to treating and protecting the data subject to such processing or disclosure of information as trade secrets in accordance with this Policy.
As regards its temporal scope, this Policy is effective from 25 May 2018 until further provision or revocation. The personal scope of the Policy extends to all organisational units and all employees of the Controller, as well as persons who have a contractual or other relationship with it and process personal data.
The material scope of the Policy extends to all personal data processed by the Controller's organisational units and to the full range of processing operations performed on them, irrespective of where they are generated, handled or processed and of the form in which they appear.
The Controller sets out its data processing principles below and presents the requirements that it has established for itself as controller and with which it complies.
Its data processing principles are consistent with the legislation in force relating to data protection, in particular the following:
– Act CXII of 2011 – on the Right to Informational Self-Determination and Freedom of Information (Infotv.)
– Act V of 2013 – on the Civil Code (Ptk.)
– Act CLV of 1997 – on Consumer Protection (Fgytv.)
– Act XIX of 1998 – on Criminal Procedure (Be.)
– Act C of 2000 – on Accounting (Számv. tv.)
– Act CVIII of 2001 – on Certain Issues of Electronic Commerce Services and Information Society Services (Eker. tv.)
– Act C of 2003 – on Electronic Communications (Eht.)
– Act XLVIII of 2008 – on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (Grt.)
– The recommendation of the Nemzeti Adatvédelmi és Információszabadság Hatóság on the data protection requirements for prior information.
MANAGEMENT AND SUPERVISION
This Policy is approved by the Controller's managing director and kept at the company's registered office.
The Policy must be reviewed at least every six months. The Policy must be kept in a location accessible to all employees.
DEFINITIONS
Data subject: any specified natural person identified or identifiable, directly or indirectly, on the basis of personal data;
Personal data: data that can be associated with the data subject, in particular the data subject's name, identification code, and knowledge of one or more characteristics specific to their physical, physiological, mental, economic, cultural or social identity, as well as any conclusion concerning the data subject that can be drawn from the data;
Consent: a voluntary and definite expression of the data subject's wishes, based on appropriate information, by which they give their unambiguous agreement to the processing of personal data concerning them, either comprehensively or for particular operations;
Objection: a statement by the data subject in which they object to the processing of their personal data and request that the processing cease or that the data being processed be erased;
Controller: a natural or legal person, or an organisation without legal personality, that, alone or jointly with others, determines the purposes of data processing, makes and implements decisions concerning data processing, including the means used, or has those decisions implemented by a data processor;
Data processing: any operation or set of operations performed on data, irrespective of the procedure used, in particular collection, acquisition, recording, organisation, storage, alteration, use, retrieval, transfer, disclosure to the public, alignment or combination, blocking, erasure and destruction, as well as preventing further use of the data, taking photographs or making audio or video recordings, and recording physical characteristics capable of identifying a person, such as fingerprints or palm prints, DNA samples or iris images;
Data transfer: making data accessible to a specified third party;
Disclosure to the public: making data accessible to anyone;
Data erasure: rendering data unrecognisable in such a way that it can no longer be restored;
Data marking: assigning an identifying marker to data in order to distinguish it;
Data blocking: assigning an identifying marker to data in order to restrict its further processing permanently or for a specified period;
Data destruction: the complete physical destruction of a medium containing data;
Technical data processing: carrying out technical tasks related to data processing operations, irrespective of the method and means used to perform those operations and the place where they are performed, provided that the technical task is performed on the data;
Data processor: a natural or legal person, or an organisation without legal personality, that performs technical data processing under a contract, including a contract concluded pursuant to a statutory provision;
Third party: a natural or legal person, or an organisation without legal personality, other than the data subject, controller or data processor;
EEA State: a Member State of the European Union and any other state party to the Agreement on the European Economic Area, as well as a state whose nationals enjoy the same legal status as nationals of a state party to the Agreement on the European Economic Area under an international treaty concluded between the European Union and its Member States and a state that is not a party to that Agreement;
Third country: any state that is not an EEA State;
Trade secret: any fact, information, other data or compilation thereof relating to economic activity that is not generally known or readily accessible to persons engaged in the economic activity concerned, where its acquisition, use, communication to others or disclosure to the public by unauthorised persons would harm or jeopardise the entitled party's legitimate financial, economic or market interests, provided that the party lawfully entitled to control it is not at fault in preserving its secrecy; access, alteration, transfer, disclosure to the public, erasure or destruction, as well as accidental destruction and damage;
Data protection incident: unlawful processing or technical processing of personal data, in particular unauthorised.
CONTROLLER'S DETAILS
Name: hungaroBLECH Kft.
Registered office: 5000 Szolnok, Mester u. 41.
Tax number: 24238845-2-16
Legal representatives: Csajbók Dezső, managing director, and Matthias Kery, managing director
Telephone number: +36 56 210 001
E-mail: hungaroblech@hungaroblech.com
Social media: https://www.facebook.com/hungaroblech/
Website: [http://www.hungaroblech.com](http://www.hungaroblech.com)
CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND DURATION OF PROCESSING
Data processing in connection with the Controller's activities is based on voluntary consent.
In certain cases, however, legislation requires the processing, storage or transfer of some of the data supplied, of which we will notify our customers separately. Pursuant to Infotv. 5. § (1) a) and 20. § (2), the personal data of a person registering for events and affected by the processing (hereinafter: data subject) are used on the basis of their consent given after prior information, having regard to the provisions of 14. § of Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services and 6. § of Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities.
Persons supplying data to hungaroBLECH Kft. are reminded that, if they provide personal data other than their own, they are responsible for obtaining the data subject's consent.
REQUESTS FOR INFORMATION
Requests for information are based on voluntary consent.
Data subjects concerned: Every natural person who contacts the Controller and requests information from the Controller while providing their personal data.
Categories of data processed:
name — identification
telephone number — contact
e-mail address — contact
content of the question — providing an answer
Purpose of processing: Providing the data subject with appropriate information and maintaining contact.
Duration of processing: Until the purpose is achieved.
REQUESTS FOR QUOTATIONS
Requests for quotations are based on voluntary consent.
Data subjects concerned: Every natural person who requests a quotation from the Controller for a particular service and/or product while providing their personal data.
Categories of data processed:
name — identification
telephone number — contact
e-mail address — contact
content of the question and/or request — necessary for providing a quotation
identification of the selected product or service
name of the product or service ordered — necessary for providing a quotation
quantity of the product or service ordered — necessary for providing a quotation
requested delivery or performance deadline — necessary for providing a quotation
special requirements needed for providing a quotation — necessary for providing a quotation
Purpose of processing: Providing the data subject with an appropriate quotation and maintaining contact.
Duration of processing: Until the quotation's validity expires.
ORDERS
Requests for quotations are based on voluntary consent.
Data subjects concerned: Every natural person who orders a particular service and/or product from the Controller by providing their personal data.
Categories of data processed:
name — identification
telephone number — contact
e-mail address — contact
content of the question and/or request — identification of the selected product or service necessary for the order
name of the product or service ordered — necessary for the order
quantity of the product or service ordered — necessary for the order
requested delivery or performance deadline — necessary for the order
special requirements needed for the order — necessary for the order
Purpose of processing: Ordering requirements. Providing the data subject with an appropriate standard of order fulfilment and maintaining contact.
Duration of processing: Until the purpose is achieved.
INVOICING
Invoicing is based on voluntary consent.
Data subjects concerned: Every natural person who orders and invoices a particular service and/or product from the Controller by providing their personal data.
Categories of data processed:
name — identification
address — contact
e-mail address — contact
representative's name: contact
tax number — necessary for invoicing
bank account number — necessary for invoicing
service fee — necessary for invoicing
Purpose of processing: Invoicing requirements. Providing the data subject with an appropriate standard of order fulfilment and maintaining contact.
Duration of processing: The Controller keeps the data on record for the period specified by the Finance and Accounting Act.
WEBSITE VISITS
Visiting the website is based on voluntary consent.
Data subjects concerned: Visitors to the www.hungaroblech.hu website.
Categories of data processed: The hungaroblech.hu website uses cookies.
To provide a customised service, these place a data package on the user's computer and read it during a subsequent visit. If the browser returns a previously saved cookie, the service provider managing the cookie can link the user's current visit to previous visits, but only in relation to its own content. Cookies do not contain personal data such as a name, address, e-mail address, etc. Users can delete cookies from their own computers or disable their handling in their browsers.
By default, the collection and transmission of data by cookies is imperceptible to the user. However, browser settings can be changed to allow requests relating, among other things, to the storage of cookies or their deletion when the browser is closed to be approved or rejected.
DISABLING COOKIES:
Microsoft Internet Explorer
1. Select the 'Tools' menu, then the 'Internet Options' command
2. Click the 'Privacy' tab
3. Select a level to set the security level for cookies, from Block All Cookies, High, Medium High, Medium (recommended level), Low and Accept All Cookies.
4. For more detailed information, click one of the following links:
IE 9 -http://windows.microsoft.com/en-GB/windows7/How-to-manage-cookies-in-
Internet-Explorer-9
IE 7/8 -http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
Google Chrome
1. Click the Chrome menu and select 'Settings' on the browser toolbar
2. Click the 'Show advanced settings' link
3. In the 'Privacy' section, click the 'Content settings' button
4. Change 'Remove all cookies and site data' in the cookies settings section
5. Click the 'Ok' button
6. Click the 'Close' icon
Firefox
1. Select the 'Tools' menu, then the 'Options' option
2. Click the 'Privacy' panel
3. Under 'Cookies', clear the 'Accept cookies from sites' option
Opera
1. Select the 'Tools' menu, then the 'Preferences' option
2. Click the 'Advanced' panel, then 'Cookies'
3. Click the 'Never accept cookies' option
4. Click the 'OK' button
Safari
1. Click the Tools button on the menu bar, then 'Preferences'
2. Click the 'Security' panel
3. In the 'Accept cookies' section, click 'Never'
4. Click the X in the upper right-hand corner to close the menu
identification number — stored on the user's computer using a cookie
address of the page visited — stored on the user's computer using a cookie
date of the visit — stored on the user's computer using a cookie
time of the visit — stored on the user's computer using a cookie
The website places the following cookies:
Cookie name — Description
.hungaroblech.hu _ga
.hungaroblech.hu _gid
This cookie is set when the visitor interacts with the site.
It ensures that the same call does not appear again if it has already appeared .hungaroblech.hu _gat
This cookie is set when the visitor interacts with the site.
It ensures that the same call does not appear again if it has already appeared hungaroblech.hu PHPSESSID
Table of cookies used:
Cookie (cookies)
type
Legal basis for processing — Purpose of processing
Session cookies — The provision in 13/A.§(3) of Act CVIII of 2001 (Elkertv.) on Certain Issues of Electronic Commerce Services and Information Society Services
Ensuring the proper operation of the website
CloudFlare
Security
Your consent — Ensuring the proper operation of the website
Google Analytics — Your consent — Collecting information about
how visitors use the website
Facebook integration cookies
Your consent — Cookies necessary for the site's Facebook integration
The controller provides detailed information about the processing of measurement data at https://www.google.com/intl/hu/policies.
The website displays map information from the external service provider available at www.maps.google.com.
Purpose of processing: Understanding the user objectives of people visiting the website.
Duration of processing: 30 days. Cookies with a specified validity period (persistent cookies) are stored on the computer until they are deleted, but no later than the expiry of their validity period.
REGISTRATION DATABASE
Use of the registration database is based on voluntary consent.
Data subjects concerned: Every natural person who registers online in the website's database.
Categories of data processed:
name — identification
address — contact and delivery
telephone number — contact
e-mail address — contact
consent to data processing
Purpose of processing: Facilitating the order process.
Duration of processing: 6 months after the last login. Modification
and erasure of the data may be requested by e-mail at hungaroblech@hungaroblech.com, by post at
hungaroBLECH Kft., 5000 Szolnok, Mester u. 41., or by calling +36 56 210 001.
DATA PROCESSING RELATED TO POSTAL MAIL
Based on the provisions of the Records Management Policy, this is based on voluntary consent.
Data subjects concerned: Every natural person to whom the company sends a letter or consignment.
Categories of data processed:
name — identification
address — contact and delivery
post office box — contact
postcode — contact
Purpose of processing: Facilitating the order process.
Duration of processing: Two days from the date of posting. Modification and erasure of the data may be requested by e-mail at hungaroblech@hungaroblech.hu, by post at hungaroBLECH Kft., 5000 Szolnok, Mester út 41., or by calling +36 56 210 001.
SOCIAL MEDIA PRESENCE AND MARKETING
The Controller is available on the Facebook social networking platform.
Data subjects concerned: Every natural person who voluntarily follows, shares or likes the content appearing on the Controller's social media page at facebook.com.
Categories of data processed:
data subject's public name — identification
public photograph — identification
public e-mail address — contact
Purpose of processing: Sharing, publishing and marketing the content of the website on social media. The Controller publishes photographs/video recordings of various events and services on its facebook page. The Controller may link its facebook page to other social media pages in accordance with the community rules of facebook.com. The data subject can find information about the processing of data on the relevant social media platform at facebook.com.
Duration of processing: Until erasure at the data subject's request.
COMPLAINT HANDLING
The handling of complaints is based on voluntary consent, but processing of the data concerned is mandatory under legislation (Act CLV of 1997).
Data subjects concerned: Every natural person wishing to communicate, orally or in writing, a complaint relating to an ordered product or to the Controller's conduct, activities or omissions.
Categories of data processed:
complaint identifier — identification
name — identification
time the complaint was received — identification
telephone number — contact
time of the call — identification
personal data provided during the conversation — identification
billing/correspondence address — contact
product/service complained about — investigation of the complaint
attached documents — investigation of the complaint
reason for the complaint — investigation of the complaint
the complaint itself — investigation
Purpose of processing: Enabling complaints to be communicated, maintaining contact, identifying the data subject and the complaint, and collecting data that must be recorded by law.
Duration of processing: The Controller is required to process the record of the complaint and a copy of the response for 5 years from their creation pursuant to 17/A §, paragraph 7, of the applicable Act CLV of 1997 in force.
RECORDS OF EMPLOYEE DATA
Under the legislation in force, the Controller is required to collect data and transfer data to the tax authority when an employment relationship, simplified employment or a contract for services is established. Establishing the legal relationship is based on voluntary consent, but the data processing is mandatory under 16§, paragraph 4, of Act XCII of 2003 on the Rules of Taxation and 3. and 11§ of Act LXXV of 2010 on Simplified Employment.
Data subjects concerned: Every natural person who establishes an employment or other legal relationship with the Controller in connection with which the Controller has a reporting obligation.
Categories of data processed:
family name and given name — identification
place of birth — identification
date of birth — identification
mother's name — identification
home address — identification
tax identification code — identification
TAJ number — identification
start of the person's insurance relationship,
its code and termination
period of suspension of insurance
weekly working hours
gross personal wage
net personal wage
bank account number
identity card number — identification
telephone number — contact
e-mail address — contact
Purpose of processing: Collecting data that must be recorded by law.
Duration of processing: The Controller keeps the data on record for 5 years from the end of the calendar year in which the employee leaves, with the proviso that employment, wage and social security records must not be disposed of.
WORKING TIME RECORDS
Based on the recording of daily hours worked, this is based on voluntary consent.
Data subjects concerned: Every natural person who is an employee of the company.
Categories of data processed:
name — identification
tax number (simplified employment) — identification
TAJ number (simplified employment) — identification
Purpose of processing: Facilitating the payroll process.
Duration of processing: The Controller keeps the data on record for the period specified by the Labour Code.
LEAVE AUTHORISATION
Based on the recording of leave, this is based on voluntary consent.
Data subjects concerned: Every natural person who is an employee of the company.
Categories of data processed:
name — identification
date of birth — identification
home address — identification
Purpose of processing: Facilitating the payroll process.
Duration of processing: The Controller keeps the data on record for the period specified by the Labour Code.
DATA TRANSFER
Transfer of data by the Controller to the carrier.
Data subjects concerned: Every natural person who requests shipping or delivery from the Controller.
Categories of data processed:
delivery name — identification
delivery address — identification
telephone number — contact
Purpose of processing: Shipping or delivery of the ordered product.
Duration of processing: Until delivery has been completed. The data subject may ask the controller to erase their personal data as soon as possible.
DATA TRANSFER – ACCOUNTING
Transfer of data by the Controller to the accounting office.
Data subjects concerned: Every natural person who establishes an employment or other legal relationship with the Controller in connection with which the Controller has a reporting obligation.
Categories of data processed:
family name and given name — identification
place of birth — identification
date of birth — identification
mother's name — identification
home address — identification
tax identification code — identification
TAJ number — identification
start of the person's insurance relationship,
its code and termination
period of suspension of insurance
weekly working hours
gross personal wage
net personal wage
bank account number
identity card number — identification
telephone number — contact
e-mail address — contact
Purpose of processing: Collecting the data that must be recorded for accounting and payroll.
Duration of processing: The Controller keeps the data on record for 5 years from the end of the calendar year in which the employee leaves, with the proviso that employment, wage and social security records must not be disposed of.
Legal basis for the data transfer: The User's consent, Infotv. 5. § (1), and 13/A. § (3) of Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.
AVAILABLE REMEDIES
The data subject may request information about the processing of their personal data, as well as rectification of their personal data or, except in cases of mandatory processing, their erasure or blocking, in the manner indicated when the data were collected or through the controller's customer service. For the data processing concerned, hungaroBLECH Kft. is the controller.
The Controller draws data subjects' attention to the fact that they may request information and exercise their other rights, unless excluded by law, by sending a statement to the e-mail address or another contact address of the Controller. The Controller will examine and respond to the statement as soon as possible, but within a maximum of 15 days of its receipt, and will take the necessary steps on the basis of the statement, the Policy and the legislation.
PROCEDURAL RULES
The controller has 25 days to erase, block or rectify personal data. If the controller does not fulfil the data subject's request for rectification, blocking or erasure, it will communicate the reasons for refusal within 25 days, in writing or, with the data subject's consent, electronically.
hungaroBLECH Kft. will notify the data subject of rectification, blocking, marking and erasure, together with everyone to whom it previously transferred the data for processing. It will omit notification if, having regard to the purpose of processing, this does not harm the data subject's legitimate interests.
RIGHTS OF THE DATA SUBJECT
Under Info tv. and Regulation (EU) 2016/679 of the European Parliament and of the Council, the data subject has the following rights: the right to information, the right to rectification, the right to erasure, the right to be forgotten, the right to have data blocked or processing restricted, the right to object, the right to bring court proceedings and the right to apply to an authority.
RIGHT TO INFORMATION
At the data subject's request, hungaroBLECH Kft., as controller, provides information about the data it processes or that are processed by a processor engaged by it, their source, the purpose, legal basis and duration of processing, the data processor's name, address and activities related to processing, the circumstances and effects of a data protection incident and the measures taken to remedy it, and, in the case of a data transfer, its legal basis and recipient. The controller provides the information as soon as possible after submission of the request, but no later than within 25 days, in an intelligible form and, if the data subject so requests, in writing. This information is free of charge if the person requesting it has not yet submitted a request to the controller in the current year for information concerning the same category of data. In other cases, the Controller sets a charge to cover costs.
RIGHT TO RECTIFICATION
hungaroBLECH Kft. rectifies personal data if they do not correspond to reality and the correct personal data are available to it.
BLOCKING AND MARKING
hungaroBLECH Kft. blocks personal data if the data subject requests it or if, on the basis of the information available, it may be presumed that erasure would harm the data subject's legitimate interests. Blocked personal data may be processed only for as long as the purpose of processing that precluded their erasure continues to exist.
hungaroBLECH Kft. marks the personal data it processes if the data subject contests their correctness or accuracy but it cannot be clearly established that the disputed personal data are incorrect or inaccurate.
RIGHT TO ERASURE
hungaroBLECH Kft. erases personal data if their processing is unlawful; the data subject requests it; the data processed are incomplete or incorrect and this situation cannot lawfully be remedied, provided that erasure is not precluded by law; the purpose of processing has ceased or the statutory retention period has expired; or erasure has been ordered by a court or the Nemzeti Adatvédelmi és Információszabadság Hatóság.
RIGHT TO OBJECT
The data subject may object to the processing of their personal data if the processing or transfer of the personal data is necessary solely to fulfil a legal obligation applicable to the controller or to pursue the legitimate interests of the controller, data recipient or a third party, unless the processing has been ordered by law; if the personal data are used or transferred for direct marketing, opinion polling or scientific research; or in other cases specified by law.
hungaroBLECH Kft. examines the objection as soon as possible after submission of the request, but within a maximum of 15 days, decides whether it is justified and informs the applicant of its decision in writing. If the controller finds the data subject's objection justified, it ceases processing, including further collection and transfer of data, and blocks the data. It also notifies everyone to whom it previously transferred the personal data concerned of the objection and the measures taken on its basis; those persons are required to take steps to give effect to the right to object.
If the data subject disagrees with the controller's decision, they may challenge it in court within 25 days of its communication.
hungaroBLECH Kft. may not erase the data subject's data if the processing has been ordered by law. However, the data may not be transferred to the recipient if the controller has accepted the objection or the court has found the objection justified.
COMPENSATION AND DAMAGES FOR INFRINGEMENT OF PERSONALITY RIGHTS
hungaroBLECH Kft. compensates others for damage caused by unlawful processing of the data subject's data or by a breach of data security requirements. If the data subject's personality rights are infringed, the data subject may claim damages for that infringement (Ptk. 2:52. §).
The controller is also liable to the data subject for damage caused by the data processor.
The controller is exempt from liability if the damage was caused by an unavoidable event outside the scope of data processing. The controller does not compensate damage, and damages for infringement of personality rights cannot be claimed, to the extent that the damage or the infringement of personality rights resulted from intentional or grossly negligent conduct by the injured party or data subject, respectively.
COMPLAINT TO THE DATA PROTECTION OFFICER
If you have a problem concerning the data processing activities of hungaroBLECH Kft., please contact our data protection officer.
RIGHT TO BRING COURT PROCEEDINGS
If their rights are infringed, the data subject may bring proceedings against the controller before a court. The court will give the case priority.
PROCEEDINGS BEFORE THE DATA PROTECTION AUTHORITY
A complaint may be lodged with the Nemzeti Adatvédelmi és Információszabadság Hatóság:
Name: Nemzeti Adatvédelmi és Információszabadság Hatóság
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, Pf.: 5.
Telephone: (06 1) 391 1400
Fax: (06 1) 391 1410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
For rights relating to content harmful to minors, inciting hatred or exclusion, corrections, the rights of deceased persons or damage to reputation
Name: Nemzeti Média- és Hírközlési Hatóság
Registered office: 1015 Budapest, Ostrom u. 23-25.
Telephone: (06 1) 457 7100
Fax: (06 1) 356 5520
E-mail: info@nmhh.hu
Website: http://www.nmhh.hu
If their rights are infringed, the data subject may bring court proceedings. The court will give the case priority. The Controller must prove that the processing complies with the provisions of the law. If the Controller infringes the data subject's personality rights by unlawfully processing their data or breaching data security requirements, the data subject may claim damages for infringement of personality rights from the Controller.
THE CONTROLLER'S PROVISIONS ON DATA SECURITY
The Controller ensures the security of the data. To this end, it takes the technical and organisational measures and establishes the procedural rules necessary to enforce the applicable legislation and the rules on data protection and confidentiality.
The Controller protects the data by appropriate measures against unauthorised access, alteration, transfer, disclosure to the public, erasure or destruction, accidental destruction and damage, and loss of accessibility resulting from changes in the technology used. The Controller also ensures the application of data security rules through internal policies, instructions and procedures that are separate in content and form from the Data Protection and Data Security Policy and this Notice. In determining and applying measures to ensure data security, the Controller takes account of the current state of technology and, from among several possible data processing solutions, selects the one that provides a higher level of protection for personal data, unless this would entail disproportionate difficulty.
As part of its IT protection duties, the Controller ensures in particular: – Measures to protect against unauthorised access, including protection of software and hardware and physical protection (access protection, network protection); – Measures to ensure that data files can be restored, including regular backups and the separate, secure management of copies DATA PROCESSING AGREEMENT Page 2 / 3 (mirroring, backups); – Protection of data files against viruses (virus protection); – Physical protection of data files and the devices on which they are stored, including protection against fire, water damage, lightning strikes and other natural hazards, and the possibility of recovery from damage caused by such events (archiving, fire protection). Measures to protect against unauthorised access, including protection of software and hardware and physical protection (access protection, network protection); – Measures to ensure that data files can be restored, including regular backups and the separate, secure management of copies.