Privacy Notice
This Privacy Notice (hereinafter: Notice) contains information for data subjects on the data management activities of the Profadul website (hereinafter: Controller) in relation to the operation of its website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR Regulation) and the provisions of the GDPR Regulation (EU) 2011 on the right to information and freedom of information. CXII of 2011 (hereinafter referred to as the “Infotv.”).
1. Data Controller
name: Progress Consult Ltd.
seat: 1046 Budapest, Munkácsy M. st. 21.
email: info@profadul.com
2. Purpose of processing, scope of personal data processed, legal basis and duration of processing
2.1. Processing of data provided in the registration form
Activities carried out by the Data Controller:
The Data Controller manages the registration data necessary to view the hidden content available on the website and provides the user with access to the hidden content.
Purpose of the processing:
To identify users and provide access to hidden content, and to create and maintain user accounts.
Legal basis for processing:
The data subject’s consent (Article 6(1)(a) GDPR).
Stakeholders:
Persons who register to view hidden content by filling in the registration form on the website.
Scope of personal data processed:
- Username
- E-mail address
- Password
Duration of processing:
The Data Controller stores the data until the user account is active. If the user deletes his account or withdraws his consent, the data will be permanently deleted from the system.
Note: The Data Controller uses the personal data provided solely to access hidden content and to maintain the user account. Personal data will only be disclosed to third parties or public authorities with the prior, informed and explicit consent of the data subject.
2.2. Processing of data provided on the event registration form
Activity carried out by the Data Controller:
processing and recording of personal data required by the Data Controller for registration for the conference.
Purpose of data processing:
to keep in contact with the applicants, to provide the registration necessary for the organisation of the conference and to provide information on participation.
Legal basis for processing:
consent of the data subject (Article 6(1)(a) GDPR).
Data subjects:
persons who provide personal data for the purpose of registering for the conference via the registration form available on the website.
Scope of personal data processed:
- Name
- Organisation
- Position
- E-mail address
- Phone number
- Comment
Duration of data processing:
the Data Controller will keep the data for 1 year after the end of the
conference or until the purpose of the registration for the conference has been fulfilled. If the data subject requests to withdraw his/her consent, his/her data will be deleted immediately.
Note: The Controller shall not use the personal data provided for purposes other than those set out above. The disclosure of personal data to third parties or public authorities is only possible with the prior, informed and explicit consent of the data subject.
2.3. Processing of data provided in the contact form
Activity carried out by the Data Controller:
The Data Controller processes the personal data provided for contacting you under the “Contact” section of the website.
Purpose of processing:
to contact and maintain contact with the user in order to respond to his/her request.
Legal basis for processing:
consent of the data subject (Article 6(1)(a) GDPR).
Data subjects:
persons who send a message to the Data Controller via the contact form on the website.
Scope of personal data processed:
- Name
- E-mail address
- Message to
Duration of processing:
The Data Controller will store the data for 6 months from the date of the reply to the request. The data will be deleted immediately upon request of the data subject or in case of withdrawal of consent.
Note: The Data Controller uses the personal data provided solely for the purpose of contacting you. Any transfer to a third party or authority will only take place with the prior, informed and explicit consent of the data subject.
2.4. Processing of data provided when filling in the questionnaire
Activity of the Data Controller:
The Data Controller collects and processes
information obtained by filling in anonymous and voluntary questionnaires in order to improve the service.
Purpose of processing:
to collect relevant data to improve the service and better understand the needs of users, and to further develop the platform and professional events.
Legal basis for processing:
the data subject’s consent given during his/her voluntary and anonymous response (Article 6(1)(a) GDPR).
Stakeholders:
persons who voluntarily and anonymously fill in the questionnaire and those who optionally indicate their interest in the events by providing their e-mail address.
Scope of personal data processed:
- Questionnaire responses (education, professional experience, status, sources of information, professional opinions)
- Optional e-mail address (if the user requests to be notified of events)
Duration of data processing:
questionnaire responses are kept by the Data Controller in an anonymised form, which cannot be traced back to any user. The optionally provided e-mail address will be stored until the user’s request or the withdrawal of his/her consent, to which the user is entitled at any time.
Note: The Data Controller uses the data collected in the questionnaire solely for statistical analysis and service improvement purposes. The e-mail addresses will not be disclosed to third parties and will be used only for information related to events.
The Controller shall not use the personal data provided for purposes other than those set out above. Disclosure of personal data to third parties or public authorities is possible with the prior, informed and explicit consent of the data subject.
3. Cookie information
The website uses Google Analytics to automatically collect non-personal information about visitors by sending and saving cookies on visitors’ computers, which are then sent back to the website on subsequent visits. However, no personal data can be obtained from this data.
For more information about Google Analytics: http://google.com/analytics.
Cookies can be disabled in the browser used by the person concerned.
The cookies used by the Data Controller may record, for example, IP address, browser type, language, date and time of access, the subpages visited and the time spent on them, etc.
The data generated automatically in this way is used by the Data Controller solely for the purposes of increasing the security of the website and improving the website.
The data collected in this way is not publicly available and does not in itself allow visitors to the website to be individually identified. Individual identification can only take place if the data subjects voluntarily provide the necessary data through the website.
4. Data processor
The Data Controller uses the following data processor for the hosting of the Website:
Name: Tárhely.eu
Registered office: 1538, Budapest, Pb.: 510
Tax number: 14571332-2-42
E-mail: support@tarhely.eu
5. Rights of the data subjects
Right of access: the data subject may request information about what data the Data Controller processes, for what purpose, for how long, to whom it is disclosed, and the origin of the data processed by the Data Controller.
Right to rectification: if the data of the person concerned change or are incorrectly recorded, he or she may request the rectification, correction or specification of his or her data.
Right to erasure: in the cases provided for by law, the data subject may request the erasure of the data processed by the Data Controller.
Right to restriction of processing: in the cases specified by law, the data subject may request that the Controller restrict processing.
Right to data portability: the data subject may request, by submitting a data portability request, that the data recorded by the Data Controller be disclosed to him or her by the Data Controller or to a controller designated by the data subject.
The right to withdraw consent: the data subject may withdraw his or her consent to the processing of his or her data at any time, without giving reasons, without prejudice to the lawfulness of our processing prior to the withdrawal of consent.
Right to redress: the data subject may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) or with the competent court of competent jurisdiction.
6. Remedies
The data subject’s main complaint regarding the processing of personal data may be addressed to the controller. You can send your complaint to the e-mail address info@profadul.com or by post to the Data Controller’s headquarters.
If the data subject has suffered a violation of his or her rights in connection with the processing of his or her personal data, he or she may lodge a complaint with the National Authority for Data Protection and Freedom of Information (naih.hu, mailing address: 1530 Budapest, Pb. 5., e-mail: ugyfelszolgalat@naih.hu), and in case of a violation of his or her rights in connection with the processing of his or her personal data, he or she may also apply to the court of his or her place of residence or domicile (www.birosag.hu/torvenyszekek).