Privacy Policy

Data management information for website users and photo purchasers

Introduction

The service provider / data manager during the operation of the website, manages the data of persons registered on the site for that purpose, to provide them with appropriate service.

The service provider intends to fully comply with the legal requirements for the management of personal data, especially the European Parliament and the Council (EU) 2016/679 as contained in its decree.

This data management information on the protection of personal data of natural persons and the free flow of data is the European Parliament and the Council (EU) 2016/679 made on the basis of its decree, with regard to 2011. year CXII. on the content of the law, which is about the right to information self-determination and freedom of information.

Service provider, name of data controller

Name / company name: Hungarian Endre e.v.
Headquarters: 1225 Budapest, Pintyőke street 10.
Tax number: 76157530-2-43

Availability of the data management information: https://magyarimre.hu/

Contact details of the data controller

Name / company name: Endre Magyar e.v.
Headquarters: 1225 Budapest, Pintyőke street 10.
Mailing address: 1225 Budapest, Pintyőke street 10.
E-mail: [email protected]

Telephone: +36 20 318 1614

Definitions

• a GDPR (General Data Protection Regulation) the new Data Protection Regulation of the European Union;

• data handling: any operation or set of operations performed on personal data or data files in an automated or non-automated manner, thus the collection, recording, systematization, segmentation, storage, conversion or alteration, query, insight, use, communication, forwarding, by distribution or otherwise making it available, alignment or linking, restriction, deletion, or destruction;

• data processor: that natural or legal person, public authority, agency or any other body, which manages personal data on behalf of the data controller;

• personal data: to an identified or identifiable natural person (affected) any information regarding; that natural person can be identified, who directly or indirectly, especially some identifier, for example name, song, location data, online identifier or physical of the natural person, physiological, genetic, intellectual, economic, can be identified based on one or more factors related to their cultural or social identity;

• data controller: that natural or legal person, public authority, agency or any other body, which determines the purposes and means of handling personal data independently or together with others; if the purposes and means of data management are determined by EU or member state law, the data controller or special aspects regarding the designation of the data controller may also be determined by EU or member state law;

• consent of the data subject: voluntary of the will of the person concerned, specific and clear declaration based on adequate information, with which the concerned statement or confirmation is indicated by means of an unmistakably expressive act, to give his consent to the processing of his personal data;

• data protection incident: such a breach of security, which is transmitted, accidental or illegal destruction of stored or otherwise managed personal data, loss, changing it, results in unauthorized disclosure or unauthorized access to them.

• addressee: that natural or legal person, public authority, agency or any other body, with whom or with which the personal data is communicated, regardless, whether it is a third party. Those public authorities, which may access personal data in accordance with EU or Member State law in the context of an individual investigation, are not considered recipients; the said data must be managed by these public authorities, to comply with the applicable data protection rules in accordance with the purposes of data management;

• third party: that natural or legal person, public authority, agency or any other body, which is not the same as the data subject, with the data controller, with the data processor or those persons, who have been authorized to handle personal data under the direct control of the data manager or data processor.

Data management guidelines

The data controller declares, that it processes personal data in accordance with the provisions of the data management information sheet and complies with the provisions of the relevant legislation, with particular attention to the following:

Handling personal data legally and fairly, and it must be carried out in a transparent manner for the person concerned.

The collection of personal data is limited, it can be done for a clear and legitimate purpose.

The purpose of processing personal data must be appropriate and relevant, and it can only be as much as necessary.

Personal data must be accurate and up-to-date. Inaccurate personal data must be deleted immediately.

Personal data must be stored in such a form, to enable the identification of the data subjects only for the necessary time. Personal data may only be stored for a longer period of time, if the storage is for the purpose of archiving in the public interest, it is done for scientific and historical research purposes or for statistical purposes.

The handling of personal data must be carried out in such a way, to ensure adequate security of personal data by applying appropriate technical or organizational measures, by unauthorized or illegal processing of data, by accidental loss, including protection against its destruction or damage.

The principles of data protection shall be applied to all information relating to identified or identifiable natural persons.

Important data management information

Purpose of data management, that the service provider / Data controller may provide appropriate additional services to persons registered on the website during the operation of the website.

The legal basis for data management is the consent of the person concerned.

The persons involved in data management are registered users of the website.

Duration of data management and deletion of data. The duration of data management always depends on the specific user purpose, but the data must be deleted immediately, if the originally set goal has already been achieved. The person concerned can withdraw their consent to data management at any time by sending a letter to the contact e-mail address. If there is no legal obstacle to the deletion, in this case your data will be deleted.

The data controller and its employees are entitled to access the data.

The person concerned may request access to the personal data concerning him from the data controller, their correction, deletion or restriction of processing, and you can object to the processing of such personal data, as well as the data subject's right to data portability.

The person concerned can withdraw his consent to data management at any time, but this does not affect the legality of the data processing carried out on the basis of consent before the withdrawal.

The person concerned may use the right to submit a complaint to the supervisory authority.

If the person concerned wants to use the benefits provided by the registration, that is, you want to use the website's service in this direction, it is necessary to enter the requested personal data. The person concerned is not obliged to provide personal data, failure to provide data does not have any adverse consequences. However, it is not possible to use certain functions of the website without registration.

The person concerned is entitled to it, that, upon request, the data controller corrects or completes inaccurate personal data relating to him without undue delay.

The person concerned is entitled to it, that upon request, the data controller deletes inaccurate personal data relating to him without undue delay, and the data controller is obliged to do so, to delete the personal data concerning the data subject without undue delay, if there is no other legal basis for data processing.

Modification or deletion of personal data can be initiated by e-mail, by phone or by letter using the contact options provided above.

Website registration

The purpose of data management is to provide additional services and contact.

The legal basis for registration data management is your consent.
The persons involved in data management are registered users of the website.

Duration of data management. Data management takes place until consent is withdrawn. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.

Data is deleted when consent to data management is revoked. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.

The data controller and its employees are entitled to access the data.
Data storage method: electronic.

Modification or deletion of personal data can be initiated by e-mail, by phone or by letter using the contact options provided above.

The provision of personal data is absolutely necessary for identification in databases and for maintaining contact. The exact company name and address are required for invoicing, which is a legal obligation.

Scope of managed data Specific purpose of data management data
Name Identification, contact, invoicing.
Company name
Identification, contact, invoicing.
Title
Identification, contact, invoicing.
E-mail
Identification, contact.
Telephone
Identification, contact.
Date of registration
Technical information operation.
IP address
Technical information operation.

The user's data management consent can be given by intentionally ticking the empty checkbox on the website that is specifically for this purpose.

Front, as a data subject, you can object to the processing of your personal data, in this regard, the data management information detailed above and this information sheet, and is entitled to the procedure according to the legislation described in the information sheet.

Placing an order

The purpose of data management is to provide additional services, contact, sending a confirmation email. We can only fulfill your order then, if you provide your contact and billing information, which are absolutely necessary for contact and invoicing.

The legal basis for data management is your consent. In the case of invoicing, data management is based on legal requirements.

The persons involved in data management are registered users of the website.

Duration of data management. Data management is a legal requirement, or until the consent is withdrawn. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.

Data is deleted when consent to data management is revoked. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address. Invoicing data can be deleted in accordance with legal regulations.

The data controller and its employees are entitled to access the data.

Data storage method: electronic.

Modification or deletion of personal data can be initiated by e-mail, by phone or by letter using the contact options provided above.

Scope of processed data
The specific purpose of the data management data
Name
Identification, contact, invoicing.
Company name
Identification, contact, invoicing.
Title
Identification, contact, invoicing.
E-mail
Identification, contact.
Telephone
Identification, contact.
Ordered product data
Product identification.
Date of registration
Technical information operation.
IP address
Technical information operation.

The user's data management consent can be given by intentionally ticking the empty checkbox on the website that is specifically for this purpose.

The person concerned may object to the processing of his personal data, in this regard, the data management information detailed above and this information sheet, and is entitled to the procedure according to the legislation described in the information sheet.

Invoicing

The purpose of data management is to issue and send an electronic invoice as an e-mail attachment.
The legal basis for data management is mandatory data management based on legislation.

Those involved in data management are the customer partners of the service provider.

The data controller and its employees are entitled to access the data.
Data storage method: electronic.
Modification or deletion of account data can be initiated by e-mail, by phone or by letter using the contact options provided above.

Scope of processed data
The specific purpose of the data management data
Name
Identification, contact, invoicing.
Company name
Identification, contact, invoicing.
Title
Identification, contact, invoicing.
E-mail
Identification, contact.
Telephone
Identification, contact.
Tax number / tax ID
Customer identification.
Account data
Account identification.
Date of issue of invoice
Technical information operation.

The user's data management consent can be given by intentionally ticking the empty checkbox on the website that is specifically for this purpose.

Cookies (cookie-k)

Cookies are placed on the user's computer by the visited websites and contain such information, such as page settings or login status.

Cookies are therefore small files created by visited websites. By saving browsing data, they improve the user experience. With the help of cookies, the website remembers the website settings, and offers locally relevant content.

The provider's website sends a small file to the computer of website visitors (cookie) sends in order to, so that the fact and time of the visit can be established. The service provider informs the website visitor about this.

The group of persons involved in data management are website visitors.
The purpose of data management is additional service, identification, tracking visitors.

Legal basis for data management. User consent is not required, if the service provider absolutely needs to use cookies.

Scope of data: unique identification number, date, setting data.

The user has the option to, to delete cookies from your browsers at any time in the Settings menu.

Data controllers are entitled to access the data. The data controller does not process personal data using cookies.

Data storage method: electronic.

Community sites

A social media site is a media tool, where the message is spread through social users. Social media uses the Internet and online exposure opportunities to do so, to turn users from content receivers to content editors.
Social media is an interface of Internet applications, which contains user-generated content, for example Facebook stb.
Social media can be public speaking, presentations, presentations, or products services description.

Forms of information published on social media can be forums, blog posts, picture, video, and audio materials, message boards, email messages, stb.

In accordance with the above, the range of processed data may include the user's public profile picture in addition to personal data.

The range of stakeholders: all registered users.

The purpose of data collection is to promote the website or its related website.

The legal basis for data management is the voluntary consent of the data subject.

Duration of data management: according to the regulations that can be viewed on the given social media page.

Data deletion deadline: according to the regulations that can be viewed on the given social media page.

They are entitled to access the data: according to the regulations that can be viewed on the given social media page.

Rights related to data management: according to the regulations that can be viewed on the given social media page.

Data storage method: electronic.

It is important to consider, that when the user uploads or submits some personal data, gives the operator of the social site a worldwide license to do so, to store and use such content.
That's why it's very important to make sure, whether the user has full authorization to communicate the published information.

Google Analytics

Our website uses Google Analytics.

When using Google Analytics:

Google Analytics internal cookies (cookies) compiles a report for its customers on the habits of website users.

Google uses the information on behalf of the website operator, that
evaluate it, how users use the website. As an additional service, it prepares reports related to website activity for the website operator, to perform additional services.

The data is stored on Google's servers in an encoded format, to make it difficult and prevent misuse of data.

You can disable Google Analytics as follows. Quote from the site:
Those website users, who don't want to, for Google Analytics JavaScript to report on your data, they can install a Google Analytics blocker browser extension. The plugin disables Google Analytics JavaScript (ga.js, analytics.js, it is dc.js) for, to send information to Google Analytics. The browser extension can be used in most recent browsers. The Google Analytics opt-out browser add-on does not prevent the website itself and other web analytics from being sent services for.
https://support.google.com/analytics/answer/6004245?hl=hu

Google Privacy Policy: https://policies.google.com/privacy?hl=hu

Detailed information on the use and protection of data is available at the links above.

Data protection in detail:
https://static.googleusercontent.com/media/www.google.com/en//intl/hu/policies/privacy/google_privacy_policy_hu.pdf

Photos and their storage

The data manager of the unordered photos, not stored, deletes it.

The ordered pictures, to their follow-up works, it is stored until the images are retrieved and then deleted. After that, the images cannot be restored.

Data processors

Hosting provider:

Company name: Intec Online Kft

Headquarters address:2161 Csomád Akácos Street 4

Mailing address: 3508 Szűcs Sándor Street, Miskolc 16

Company registration number:13-09-162525

Tax number: 23107816-2-13

The phone number of the hosting service provider: +36703117594

The data you provide is stored on the server operated by the hosting provider. Only our employees have access to the data, and employees operating the server can access it, but they are all responsible for handling data securely.

The name of the activity: hosting service, server service.

Purpose of data management: ensuring the operation of the website.

The processed data: personal data provided by the data subject

The duration of data management and the deadline for data deletion. Data management until the end of the website's operation, or according to the contractual agreement between the operator of the website and the hosting provider. If necessary, the affected person can contact the hosting provider and request the deletion of their data.

The legal basis for data management is the consent of the person concerned, and data management based on legislation.

Rights related to data management

The right to request information
You can request information from us via the contact details provided, what data of our company, on what legal basis, for what data management purpose, from what source, how long you treat it. At your request immediately, but at most 30 within days, we will send information to the e-mail address you provided.

Right to rectification
You can ask us to change any of your data via the contact details provided;. About this at your request immediately, but at most 30 we will deal with it within a day, we will send information to the e-mail address you provided.

The right to erasure
You can request us to delete your data using the contact details provided. At your request, this will be done immediately, but at most 30 we will do it within a day, we will send information to the e-mail address you provided.

Right to block
You can request us to block your data via the contact details provided. Locking lasts until, until the reason indicated by you makes it necessary to store the data. At your request, this will be done immediately, but at most 30 we will do it within a day, we will send information to the e-mail address you provided.

The right to protest
You can object to data processing via the contact details provided. The objection shall be lodged as soon as possible from the date of submission of the application, but at most 15 we will examine it within a day, we make a decision on the issue of its validity, and you will be informed of your decision by e-mail.

The possibility of legal enforcement related to data management
In case of illegal data processing you have experienced, notify our company, so it becomes possible, to restore the legal status within a short period of time. We will do everything for you, to solve the outlined problem.

If, in your opinion, the legal status cannot be restored, notify the authority at the contact details below:

National Data Protection and Freedom of Information Authority
Mailing address: 1530 Budapest, Pf.: 5.
Title: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Telephone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: customer service (an insect) naih.hu
URL https://naih.hu
coordinates: It's 47°30'56”; K 18°59’57”

Legislation on which data management is based

• THE EUROPEAN PARLIAMENT AND THE COUNCIL (EU) 2016/679 ORDER (2016. April 27.) on the protection of natural persons regarding the management of personal data and the free flow of such data, and repealing Regulation 95/46/EC (general data protection regulation).

• 2011. year CXII. Act on the right to self-determination of information and freedom of information.

• About public documents, on public archives and the protection of private archive material 1995. year LXVI. law.

• On the general requirements for document management of bodies performing public duties 335/2005. (XII. 29.) Govt. decree.

• 2001. year CVIII. Act on Electronic Commerce Services, as well as some issues of services related to the information society.

• 2003. C per year. Act on Electronic Communications.

Hungarian Endre