Right to Information

The Data subject shall have the right to request information about personal data processed by the Data controller. Upon the request of the Data subject, the Data controller shall provide information about the purposes of the processing, the recipients to whom the personal data have been or will be disclosed and where possible the envisaged period for which the personal data will be stored.

The Data controller shall provide the requested information in written form within 30 days from the date of submission of the request.

Data subject may raise its questions and comments towards the Data controller via the contact information provided in the 2. sections of this policy.

Rectification and erasure

The Data subject shall have the right to obtain from the Data controller without undue delay the rectification of inaccurate personal data or the erasure of personal data concerning him or her via the contact information provided in the 2. sections of this policy.

The Data controller shall correct or delete the information within 5 working days from receiving the request, where data will not be recoverable in the latter case. The deletion does not apply to data processing required under the law (e.g. accounting regulations) and is retained by the Data controller for the necessary period.

If the Data controller does not comply with the request for rectification or erasure, it will communicate the factual and legal grounds for rejecting the request for rectification or erasure in writing within 30 days from receiving the request.

Restriction of processing

The Data subject shall have the right to obtain from the Data controller restriction of processing where one of the following applies:

the accuracy of the personal data is contested by the Data subject, for a period enabling the Data controller to verify the accuracy of the personal data;
the processing is unlawful, and the Data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the Data controller no longer needs the personal data for the purposes of the processing, but they are required by the Data subject for the establishment, exercise or defense of legal claims
the Data subject has objected to processing pending the verification whether the legitimate grounds of the Data controller override those of the Data subject.

Notification

The Data controller shall communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed unless this proves impossible or involves a disproportionate effort. The Data controller shall inform the Data subject about those recipients if the Data subject requests it.

The notification may be omitted if it does not prejudice the legitimate interest of the Data subject in the purpose of the processing.

Object against data processing

The Data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The Data controller shall no longer process the personal data unless the Data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the Data subject or for the establishment, exercise or defense of legal claims.

Where the Data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

The possibility of law enforcement against data processing

In case of any unlawful processing please inform the Data controller via the contact information provided in section 2, making it possible to restore the appropriate legal status within a short period of time. The Data controller will do its utmost to solve the problem outlined.

If the Data subject considers that the legal status cannot be recovered, please inform the authority on the following contact details:

National Authority for Data Protection and Freedom of Information

Postal address: 1530 Budapest, Pf.: 5.

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Phone: + 36 (1) 391-1400

Fax: + 36 (1) 391-1410

E-mail: ugyfelszolgalat@naih.hu

URL: https://naih.hu

Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory, each Data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation.

Proceedings against a Data controller or a Data processor shall be brought before the courts of the Member State where the Data controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the Data subject has his or her habitual residence unless the Data controller or processor is a public authority of a Member State acting in the exercise of its public powers.

Work with us!

Fill in the form and our colleagues will contact you shortly!