This document contains the information of the Hungarian Vegan Association, the operator of the http://novenyikonferencia.hu/ site (hereinafter: the Data Controller) regarding the handling of the personal data provided to the persons providing personal data on the site (hereinafter: the Data Subject).
Our contact:
E-mail address: info@novenyikonferencia.hu
The data management prospectus has been prepared in accordance with the rules of General Data Protection Decree No. 2016/679 (hereinafter: the Decree).
1. Contact form
Description of the data management case, the purpose of the data management and the scope of the managed data
On the Website, we provide you with the opportunity to contact us directly by completing and submitting a contact form. You must provide your name, email address, the name of the company you represent, and your message on the form.
We process the data related to your interest in order to manage your interest.
Legal basis for data management
The legal basis for data processing under Article 6 (1) (a) of the Regulation is your consent.
Duration of data management
We process the data as long as we process your contact request.
2. Data processors
When handling data, we use as a data processor:
EZIT Kft. (H-1132 – Budapest – Victor Hugo utca. 18-22; info@ezit.hu) who provides hosting services.
3. Your rights in relation to data management
Within the period of data processing, you have the following rights in accordance with the provisions of the Decree:
- access to personal data and data management information,
- the right to rectification,
- restrictions on data management,
- right of cancellation,
- the right to portability,
- the right to protest,
- right to withdraw consent.
If you wish to exercise your rights, it will involve your identification and we must communicate with you. Therefore, you will be required to provide personal information for identification purposes (but identification may only be based on information we handle about you anyway) and your privacy complaint will be available in our email account within the time period specified in this information regarding complaints.
Complaints about data management will be answered within 30 days at the latest.
3.1. Right to withdraw consent
You have the right to withdraw your consent to data management at any time, in which case the data provided will be deleted from our systems.
3.2. A személyes adatokhoz és információkhoz való hozzáférés
You have the right to receive feedback on whether your personal data is being processed and, if data is being processed, you are entitled to:
- have access to the personal data processed and
- provide the following information:
- the purposes of data management;
- categories of personal data processed about you;
- information on the recipients or categories of recipients to whom or with whom the personal data have been or will be communicated;
- the intended period for which the personal data will be stored or, if that is not possible, the criteria for determining that period;
- your right to request the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data in the event of a processing of data based on a legitimate interest;
- the right to lodge a complaint with the supervisory authority;
- if the data was not collected from you, all available information about their source;
- the fact of automated decision-making (if such a procedure has been used), including profiling, and, at least in these cases, understandable information about the logic used and the significance of such data processing and the expected consequences for you.
The purpose of exercising the right may be to establish and verify the lawfulness of the data processing, therefore, in case of repeated requests for information, we may charge a fair fee in return for the provision of the information.
We provide access to personal data by sending you the personal data and information we process after you have been identified.
Please indicate in your request whether you are requesting access to personal data or requesting data management information.
3.3. Right to rectification
You have the right to have inaccurate personal data about you corrected without delay upon request.
3.4. Right to restrict data management
You have the right to restrict the processing of your data if you request one of the following:
- You dispute the accuracy of your personal information, in which case the restriction applies to the period of time that allows us to verify the accuracy of your personal information, if verification is not required, we will not apply a restriction;
- the processing is unlawful and you oppose the deletion of the data and instead ask for a restriction on its use;
- we no longer need your personal data for the purposes of the designated data processing, but you require it to make, enforce or protect legal claims; obsession
- You have objected to the data processing, but our legitimate interest may also justify the data processing, in which case, until it is determined whether our legitimate reasons take precedence over your legitimate reasons, the data processing must be restricted.
If the processing is subject to restrictions, such personal data may be processed, with the exception of storage, only with your consent or for the purpose of bringing, enforcing or protecting legal claims or protecting the rights of another natural or legal person or in the important public interest of the Union or a Member State.
We will inform you in advance about the lifting of the data management restriction (at least 3 working days before the lifting of the restriction).
3.5. Right to delete – right to forget
You have the right to delete personal data about you without undue delay if any of the following reasons exist:
- personal data are no longer required for the purpose for which they were collected or processed;
- You withdraw your consent and there is no other legal basis for the processing;
- You object to the processing of data on the basis of a legitimate interest and there is no overriding legitimate reason (ie a legitimate interest) in the processing of the data,
- the personal data were processed unlawfully and this was established on the basis of the complaint,
- personal data must be deleted in order to comply with a legal obligation under Union or Member State law applicable to us.
If we disclose personal information processed about you for any legitimate reason and are required to delete it for any of the reasons set out above, we will take reasonable steps, including technical measures, to inform other data controllers, taking into account available technology and implementation costs. data controllers that you have requested the deletion of the links to the personal data in question or of a copy or duplicate of this personal data. As a general rule, we do not disclose your personal information.
Deletion does not apply if data processing is required:
- for the purpose of exercising the right to freedom of expression and information;
- to fulfill an obligation to process personal data under applicable EU or Member State law (such as data processing in the context of invoicing, as the retention of the account is required by law) or in the public interest or in the exercise of a public authority conferred on the controller;
- to submit, enforce or defend legal claims (eg if we have a claim against you and has not yet fulfilled it, or a consumer or data processing complaint is being processed).
3.6. Right to protest
You have the right to object at any time to the processing of your personal data on the basis of a legitimate interest for reasons related to your own situation. In this case, we may not further process your personal data unless we can prove that the processing is justified by overriding legitimate reasons which take precedence over your interests, rights and freedoms or which relate to the submission, enforcement or defense of legal claims.
3.7. Right to portability
If the data processing is necessary for the performance of the contract or the data processing is based on your voluntary consent, you have the right to request that the data you provide to us be received in a machine-readable form, which we provide you in xml, JSON or csv format, if this is technically feasible, you may request that the data be transferred in this form to another data controller.
3.8. Remedies
If you believe that we have violated any legal provision on data processing or have not complied with any of your requests, you may initiate an investigation by the National Data Protection and Freedom of Information Authority (mailing address: 1530 Budapest, Pf .: 5., e-mail: ugyfelszolgalat@naih.hu).
We also inform you that you can file a civil lawsuit in court.
4. Data security
During the operation of the IT systems, we ensure the necessary rights management, internal organization and technical solutions to ensure that your data cannot become the property of unauthorized persons, and that the data cannot be deleted, deleted from the system or modified by unauthorized persons. We also enforce data protection and data security requirements against our data processors.
We keep a record of any privacy incidents and, if necessary, keep you informed of any incidents.
5. Other provisions
We reserve the right to amend this data management information in a way that does not affect the purpose and legal basis of the data management.
However, if we wish to carry out further data processing in connection with the collected data for a purpose other than the purpose for which they were collected, we will inform you about the purpose of the data processing and the following information before further data processing:
- the duration of the storage of personal data or, if that is not possible, the criteria for determining the duration;
- the right to request access to, rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of personal data in the case of data processing based on a legitimate interest and to request the right to data portability in the case of data processing based on consent or contractual relationship ;
- in the case of data processing based on consent, that you may withdraw your consent at any time,
- the right to lodge a complaint with the supervisory authority;
- whether the provision of personal data is based on a law or a contractual obligation or a precondition for concluding a contract, and whether you are obliged to provide personal data and the possible consequences of not providing the data;
- the fact of automated decision-making (if such a procedure has been used), including profiling, and, at least in these cases, understandable information about the logic used and the significance of such data processing and the expected consequences for you.
The data processing can only be started after that, if the legal basis of the data processing is consent, in addition to the information, you must also consent to the data processing.
This Data Management Information is valid from 08.02.2021.