Data protection

The Partners for Democratic Change Hungary Partners Hungary Foundation (hereinafter referred to as the Foundation or Partners Hungary) has established the following Privacy Policy to record its internal data management processes and to ensure the rights of data subjects.

Name of data controller: Partners for Democratic Change Hungary Partners Hungary Foundation

Controller registration number: 01-01-0005385

Data Controller's registered office: 1062 Budapest, Délibáb u. 19.

Representative of the Data Controller: Sándor Richter, Chairman of the Board of Trustees

 

  1. Introduction

 

This leaflet ("Factsheet") aims to fix the Partners Hungary Foundation (registered office: 1072 Budapest, Rákóczi út 22. 4./24.; registration number: 01-01-0005385; the "Foundation"), such as the website www.partnershungary.hu ("Website"), and the Foundation's Privacy and Data Protection Policy, which the Foundation, as data controller, acknowledges as binding on itself.

 

This Notice sets out the principles for the processing of personal data provided by users on the Website and provides information to data subjects about the processing of their personal data.

 

In drafting the provisions of the Prospectus, the Foundation has taken particular account of the provisions of Regulation 2016/679 of the European Parliament and of the Council ("GDPR"), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information ("Infotv."), Act V of 2013 on the Civil Code ("Ptk."), and Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities ("Grtv.").

 

  1. Data of the controller

 

The Foundation is the controller of your personal data, which means that the Foundation is responsible for the lawful processing of your personal data.

 

You can contact us using the contact details below:

 

Name of data controller: Partners for Democratic Change Hungary Partners Hungary Foundation

Postal address: 1062 Budapest, Délibáb u. 19.

Registration number: 01-01-0005385

E-mail address: irodavezeto@partnershungary.hu

Website: www.partnershungary.hu

 

  1. Brief description of data management at the level of each data management process

 

  • Register for a training course

 

The Foundation's main activity is that of a training organiser; it organises various training courses, training and integration programmes and provides related services. We collect personal data from you for the purposes of registering for these, for any necessary contact, for invoicing and, in the case of certain training courses, for fulfilling our legal obligations (e.g. issuing certificates). The Foundation collects this information from you via the website www.online-kerdoiv.com.

 

 

  • Recruiting volunteers and workers

 

The Foundation is constantly recruiting volunteers, for which it welcomes applications via the Website by sending an e-mail address or via its Facebook page (www.facebook.com/PartnersHungary/).

 

  • Newsletter

 

In order to provide the newsletter service, the Foundation collects personal data from you. Personal data is collected electronically by filling in the relevant fields and clicking on the button to confirm the subscription.

 

  • Contacting us, requesting information

 

In order to contact users in general and to answer any questions they may have about the training courses, the Foundation provides a messaging option for users under the "Contact" menu on the Website, where the data subject is required to provide the personal data necessary for contacting the Foundation.

 

  1. Legal basis for processing

 

The legal basis for the processing of personal data collected and published via the Website is always your consent as the data subject, as defined in Article 6(1)(a) of the GDPR. The processing is in any case voluntary. You may withdraw your consent at any time by sending a request to this effect to partners@partnershungary.hu.

 

  1. The personal data we collect, indicating the legal basis and purpose

 

Personal data Purpose of data processing Legal basis for processing

 
Name, bank account number

 

 Granting and recording of financial support According to Article 6(1)(a) of the GDPR, the legal basis for processing is your consent.
Name, email address or any personal information that the volunteer/employee shares about him/herself (e.g. CV details) Recruiting volunteers and workers, assessing applications According to Article 6(1)(a) of the GDPR, the legal basis for processing is your consent.
Name, e-mail address Subscription to newsletter service, delivery of newsletter According to Article 6(1)(a) of the GDPR, the legal basis for processing is your consent.
Name, e-mail address Messaging, contacting According to Article 6(1)(a) of the GDPR, the legal basis for processing is your consent.
A According to the amendment of Act LXXVII of 2013 on Adult Education  (billing data)

Name*, name at birth*, place and date of birth*, mother's name*, qualification*, highest level of education*, address for notifications*, telephone number* and e-mail address*, current place of work, name of employer, details of cost bearer*

The data marked with * are mandatory for the application

 Registering for training courses, maintaining contacts as necessary, issuing invoices and fulfilling other statutory obligations According to Article 6(1)(a) of the GDPR, the legal basis for processing is your consent.

 

Mediation

We ask our clients requesting mediation to provide information by e-mail for a mediation request form and a consent form. Purpose of processing: to record participation in mediation, to record the agreement. Data processed: name, e-mail address, telephone number, signature Legal basis for processing: data subject's consent pursuant to Article 6(1)(a) GDPR Data retention period: maximum 10 years after mediation Data retention method: paper-based.

 

  1. Duration of processing

 

  • Register for a training course

 Our Foundation will process your personal data in this context for a maximum of 8 years after the end of the training.

 

  • Financial support
  1. In this context, our Foundation will process your personal data for a maximum of 8 years from the date of receipt of the grant, in accordance with Article 169 (2) of Act C of 2000 on Accounting.

 

  • Recruiting volunteers, workers

Our Foundation will delete your personal data within 3 months of the date of the application, unless you explicitly consent to the further storage of your personal data.

  • Newsletter

Our Foundation will process your personal data in this regard until your consent is withdrawn (i.e. until you unsubscribe from the newsletter) or until we receive your request to delete your data or until we stop providing the newsletter.

 

  • Contacting us, requesting information

 Our Foundation will process your personal data in this regard until your consent is withdrawn or until we receive your request to delete your data, but no later than 8 years after the end of the communication.

 

  1. Data Processor

 

  • IT tasks related to the website

 The Foundation, as the owner of the Website, has entrusted sysVOL Informatikai és Szolgáltató Kft., Társaság (2337 Délegyháza, Fűzfa u 11., info@sysvol.hu, http://sysvol.hu) with the IT tasks related to the www.partnershungary.hu website, including the maintenance and development of the website; accordingly, it is a data processor and has access to your personal data.

 

  • Newsletter

The Foundation conducts its newsletter marketing activities through the MailChimp newsletter and database management service provided by Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000; Atlanta, GA 30308 USA). The personal data recorded in MailChimp is transmitted to and stored on the servers of Rocket Science Group, LLC in the USA. Accordingly, the Foundation explicitly draws your attention to the fact that when using the MailChimp service, your personal data will be transferred to a third country (USA) within the meaning of the GDPR.

 

The Rocket Science Group, LLC operates the MailChimp mailing system for the entire duration of the data processing and does not process the data on its own behalf. As Rocket Science Group, LLC does not process any data on its own behalf, it is considered a data processor.

 

Rocket Science Group, LLC participates in the Privacy Shield, the framework governing the transatlantic exchange of personal data for commercial purposes, and has completed its Privacy Shield compliance (certification date: 21 November 2016). Accordingly, the Foundation declares that Rocket Science Group, LLC, as a data processor, has adequate and appropriate safeguards in place to process your personal data.

 

  • Online-kerdoiv.com

Registration for the Foundation's training courses is possible through the website www.online-kerdoiv.com, owned and operated by Sándor Bíró, a sole proprietor (tax number: 74450655-1-29; EV registration number: 22374322). its data processing policy shall prevail.

 

8. Data transmission

If you register for a Foundation event that is organised, targeted and aimed at competence building or development (training, workshop, conference, further education, etc.), you agree that the Pursuant to Section 2(7) of Act LXXVII of 2013 on Adult Education the personal data detailed in the table in point 5 of our privacy notice will be transmitted by the Foundation to Adult Education Data System(responsible body: Pest County Government Office).

 

9. Your rights and remedies

 

What rights do you have as a Data Subject in relation to your data?

 

  • Right to information and access

 

You have the right to receive feedback from the Foundation, upon request, on whether your personal data is being processed and, if such processing is ongoing, the right to access your personal data and the following information:

 

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients to whom the personal data are or will be disclosed (including in particular data processors);
  • the intended duration of the storage of the personal data;
  • your rights in the processing of your personal data;
  • the source of the data, if not collected from you;
  • information on automated decision-making.

 

We will provide you with information about your personal data free of charge in accordance with applicable law. We will respond to your request in writing within one month. However, if the request is manifestly unfounded or excessive, in particular because of its repetitive nature, the Foundation will, subject to the administrative costs of providing the information or information requested or of taking the action requested:

 

  • charge you a reasonable fee, or
  • may refuse to act on the request.

 

If you have already paid a fee but the processing of your data was unlawful or we need to correct your data as a result of your request, we will refund this fee to you.

 

If, despite our efforts to protect your personal data through our advanced data security measures, any unauthorised access, alteration, disclosure, disclosure, deletion or destruction, accidental destruction or damage, or other unauthorised processing of your data occurs, we will, upon your request, inform you of the circumstances of such an incident, including when it occurred, what the effects may be, and what we have done to prevent or mitigate the consequences.

 

  • The right to rectification

 If the personal data we process is inaccurate, we will correct it without undue delay at your request. You also have the right to ask us to complete your incomplete personal data by means of a declaration to that effect.

 

  • Right to erasure

The Foundation will delete your personal data without delay if:

  • the personal data are no longer necessary for the purposes of the specific processing operations;
  • the processing of personal data is unlawful;
  • The deletion of the data is necessary to comply with a legal obligation to which our Foundation is subject;
  • where the consent to the processing of the data of a child under the age of 16 has not been given or authorised by the person having parental authority over the child;
  • if the Foundation has disclosed the personal data.

 

You can also ask us to delete your personal data by withdrawing the consent you have previously given to us. In this case, however, we may refuse to continue to provide our services to you or certain services may no longer be available to you.

 

We will block personal data instead of deleting it if you request it or if it is likely to affect your legitimate interests.

 

  • Right to restriction

 

Restrictions on processing may be imposed if:

 

  • You dispute the accuracy of your data; in this case, the Foundation will restrict the processing of your personal data until the accuracy of the data is verified;
  • the processing is unlawful you request restriction of use instead of erasure;
  • the Foundation no longer needs the data, but you need it to make a legal claim;
  • You have objected to the processing of your personal data, pending the outcome of the consideration of your objection.

 

The Foundation will suspend the processing of your personal data for the duration of its objection to the processing of your personal data, but for a maximum of 5 days, and will examine the validity of the objection and take a decision, which it will inform you of without delay.

 

If the objection is justified, the data will be restricted by the Foundation, i.e. only storage as data management can take place as long as

 

  • You consent to the processing of your data;
  • the processing of your personal data is necessary for the exercise of legal claims;
  • the processing of personal data becomes necessary in order to protect the rights of another natural or legal person; or
  • the processing is required by law in the public interest.

 

If you have requested a restriction of processing, the Foundation will inform you in advance of the lifting of the restriction.

 

  • Right to data portability

 

You have the right to receive personal data about you that the Foundation has provided to you in a structured, commonly used, machine-readable format (e.g. .doc or .pdf) and the right to transfer this data to another controller without the Foundation's hindrance.

 

  • What happens and what can you do if your application is rejected?

 

If the Foundation refuses your request for rectification, restriction or erasure, we will inform you in writing within one month of receiving your request why we have been unable to comply with your request, and inform you of your legal remedies and the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information. Our response will be sent by email if you agree to this.

 

  • What are your rights if you consider that the processing is unlawful?

 

If you have concerns about the lawfulness of the processing, you have the right to object to the processing. The objection must include a request that we stop processing your data and delete your data.

 

If you object to the processing of your personal data, the Foundation will examine the grounds for your objection within one month, take a decision on the merits and notify you in writing of its decision.

 

  • What remedies are available to you?

 

If you believe that our Foundation is processing your personal data in breach of the GDPR, you as the data subject have the right to lodge a complaint with a supervisory authority (i.e. a public authority established by any EU Member State under Article 51 of the GDPR) - in particular in the Member State where you are habitually resident, employed or where the alleged breach occurred. In Hungary, the supervisory body established in accordance with the criteria set out in Article 51 of the GDPR is the National Authority for Data Protection and Freedom of Information (hereinafter referred to as the "NAIH" or "Authority"). Accordingly, the details of the possibility to lodge a complaint with the NAIH are set out in the section below. Please note, however, that you are still entitled to lodge a complaint not only with the Authority, but also with any supervisory authority established in an EU Member State, as set out above.

 

  • Notification to the National Authority for Data Protection and Freedom of Information

 

Compliance with data protection legislation is monitored by the National Authority for Data Protection and Freedom of Information. If you consider that our data processing does not comply with the relevant legislation, or if you consider that there is an imminent risk of non-compliance, you can notify the Authority using the following contact details.

 

Name of authority: National Authority for Data Protection and Freedom of Information

Postal address: H-1125 Budapest, Szilágyi Erzsébet fasor 22/C.

E-mail address: ugyfelszolgalat@naih.hu

Phone number: +36 1 391 1400

Fax number: +36 1 391 1410

 

More information on data protection issues can be found on the Authority's website: http://naih.hu/

 

Please also note that our Foundation is obliged to notify the Authority of any data breach (i.e. accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data) relating to the Website without undue delay and, if possible, no later than 72 hours after becoming aware of the data breach. If the personal data breach is likely to result in a high risk to the rights and freedoms of data subjects, our Foundation will inform you, as the data subject, of the personal data breach without undue delay.

 

  • Judicial enforcement

 

If you believe that we have violated your right to privacy or that our decision to object or not to respond to your objection was wrong, you can take us to court. You can also choose to bring your case in the courts in the place where you live or where you are resident.

 

In addition, under the conditions set out in the law, if we cause you damage as a result of unlawful processing or a breach of data security requirements, you may bring a claim for damages against the Foundation in court. If your privacy rights have been violated, you may be entitled to damages, which you can also claim in court.

 

PRIVACY POLICY FOR OUR ONLINE EVENTS:

PARTNERS HUNGARY ONLINE EVENTS PRIVACY POLICY