This privacy policy applies to the storage and processing of data provided by visitors to the bendeconsulting.hu website with their voluntary consent, in connection with the contact form and the sending of newsletters.
Name of data controller
Name: MailerLite
Address: Paupio st. 46, LT-11341 Vilnius, Lithuania
Email: info@mailerlite.com
Website: www.mailerlite.com
Data processor's privacy statement: https://www.mailerlite.com/legal/privacy-policy
(Access to subscriber name, email address.)
The data will not be disclosed to any third party and will be used only for contacting you and for sending you regular newsletters and for maintaining written communication with you in this regard.
RELEVANT LEGISLATION
The controller undertakes to conduct its activities in accordance with the legislation in force at the time. These are the following at the time of publication of this document:
- Act CVIII of 2001 on certain aspects of electronic commerce services and information society services (hereinafter referred to as the "Electronic Commerce Act").
-
Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities (hereinafter referred to as the "Economic Advertising Act").
-
Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information. The latest version of the legislation is available on net.jogtar.hu by clicking here.
DEFINITIONS
Based on § 3 of Act CXII of 2011
1.data subject: any natural person who is identified or can be identified, directly or indirectly, on the basis of personal data;
2.personal data: data which can be associated with the data subject, in particular the name, the identification mark and one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of the data subject, and the inference which can be drawn from the data concerning the data subject;
3.special data:
personal data revealing racial or ethnic origin, membership of a national or ethnic minority, political opinions or political parties, religious or philosophical beliefs, membership of an interest group or membership of a representative body, sex life,
personal data concerning health, pathological addiction and personal data concerning criminal offences;
4.criminal personal data: personal data relating to the criminal offence or the criminal proceedings, generated during or prior to the criminal proceedings, by the authorities competent to prosecute or investigate criminal offences, by the law enforcement authorities, which can be linked to the data subject, and personal data relating to criminal history;
5.data of public interest: information or knowledge, in whatever form or by whatever means, which is held by a body or person performing a State or local government task or other public task defined by law and which relates to its activities or is generated in the course of the performance of its public task, and which does not fall within the concept of personal data, irrespective of the way in which it is handled, whether or not it is of a specific or collective nature, in particular data concerning the powers, competences, organisation, structure, professional activities, including an assessment of their effectiveness, the types of data held and the legislation governing their operation, as well as data concerning management and contracts concluded;
6.public data: any data not covered by the concept of public data, the disclosure, knowledge or access to which is required by law in the public interest;
7.consent: a voluntary and explicit indication of the data subject's wishes, based on adequate information, by which he or she gives his or her unambiguous agreement to the processing of personal data concerning him or her, whether in full or in part;
8.objection: a statement by the data subject objecting to the processing of his or her personal data and requesting the cessation of the processing or the erasure of the processed data;
9.controller: the natural or legal person or unincorporated body which, alone or jointly with others, determines the purposes for which the data are processed, takes and executes decisions regarding the processing (including the means used) or has them executed by a processor on its behalf;
10.processing: any operation or set of operations which is performed upon the data, whatever the procedure used, in particular any collection, recording, organisation, storage, alteration, use, retrieval, disclosure, transmission, alignment or combination, blocking, erasure or destruction of data or any prevention of their further use, taking of photographs, sound recordings or images and any other physical means of identification of a person (e.g. fingerprints, palm prints, DNA samples, iris scans);
11.transfer: making data available to a specified third party;
12.disclosure: making the data available to any person;
13.erasure: rendering data unrecognisable in such a way that it is no longer possible to retrieve it;
14.data marking: marking of data with an identification mark to distinguish it;
15.data blocking: the marking of data with an identification mark for the purpose of limiting their further processing permanently or for a limited period of time;
16.data destruction: the total physical destruction of a data medium containing data;
17.data processing: the performance of technical tasks related to data processing operations, irrespective of the method and means used to perform the operations and the place of application, provided that the technical task is performed on the data;
18.data processor: a natural or legal person or an unincorporated body which, under a contract with a controller, including a contract entered into pursuant to a legal provision, carries out processing of data;
19.data controller: the public authority which has produced the data of public interest which must be made public by electronic means or in the course of whose activities the data were generated;
20.data communicator: a public sector body which, if the data controller does not publish the data itself, publishes on a website the data communicated to it by the data controller;
21.dataset: the set of data managed in a single register;
22.third party: a natural or legal person or unincorporated body other than the data subject, the controller or the processor;
23.EEA State: a Member State of the European Union and another State party to the Agreement on the European Economic Area, as well as a State whose nationals enjoy the same status as nationals of a State party to the Agreement on the European Economic Area under an international treaty concluded between the European Union and its Member States and a State not party to the Agreement on the European Economic Area;
24.third country: any State which is not an EEA State.
DATA MANAGEMENT PRINCIPLES IN THE DATA MANAGEMENT OF BENDE MANAGEMENT CONSULTING KFT.
Personal data may be processed if
- the data subject consents, or
- it is required by law or - on the basis of a statutory authorisation and within the scope specified therein - by a local government decree.
By providing us with personal data on the website (e.g. when contacting us or subscribing to our newsletter service), at the moment of sending them, the user declares that he/she has read and understood this information and, on the basis of it, gives his/her voluntary consent to Bende Management Consulting Ltd. to process his/her personal data to the extent necessary until the consent is withdrawn. With regard to the processing of personal data provided by the user during registration and otherwise received by the operator, the operator shall fully comply with the provisions of Act LXIII of 1992 on the protection of personal data and the disclosure of data of public interest and Act XLVIII of 2008 on the basic conditions and certain restrictions of economic advertising. Accordingly, the Operator shall process and store the User's data only to the extent to which the User has given their express consent. Personal data will be destroyed by the Operator upon termination of the purpose of use or upon the User's request. In addition, the Operator is ready at any time to provide the User with information about the personal data processed by the Operator or to modify them upon request. In the event of deletion, your data will be permanently deleted and cannot be restored after deletion without the user's consent or without the user's personal data being provided again.
The declaration by an incapacitated person or a minor with limited capacity to act requires the consent of his or her legal representative, except for those parts of the service where the declaration is intended for registration on a mass basis in everyday life and does not require any special consideration.
Personal data may be processed only for specified purposes, for the exercise of rights and the performance of obligations. The processing must comply with this purpose at all stages.
Only personal data which is necessary for the purpose of the processing, which is adequate for the purpose, to the extent and for the duration necessary for the purposes of the processing, may be processed.
Personal data may only be processed with informed consent.
The data subject must be informed, in a clear, plain and detailed manner, of all the facts relating to the processing of his or her data, in particular the purposes and legal basis of the processing, the identity of the controller and processor, the duration of the processing and the persons who may access the data. The information shall also cover the rights and remedies of the data subject with regard to the processing.
The personal data processed must comply with the following requirements:
- their recording and handling is fair and lawful;
- accurate, complete and, where necessary, timely;
- they are stored in a way that ensures that the data subject can be identified only for the time necessary for the purpose for which they are stored.
The unrestricted use of a general and uniform identity mark is prohibited.
Personal data may be transferred and different processing operations may be combined only if the data subject has given his or her consent or if permitted by law and if the conditions for processing are fulfilled for each individual personal data.
Personal data (including sensitive data) may be transferred from the country to a controller or processor in a third country, irrespective of the data medium or the means of transmission, if the data subject has given his or her explicit consent or if the law so permits and the third country ensures an adequate level of protection for the personal data concerned in the processing of the data transferred. Transfers to EEA States shall be deemed to be transfers within the territory of the Republic of Hungary.
CONSENT MAY BE WITHDRAWN AS FOLLOWS
- i) By clicking on the unsubscribe link at the bottom of each newsletter and entering your email address.
- ii) By requesting it using any of our contact details in the “contact us” section.
The following personal data provided by you will be processed at the time of processing:
- i) name;
- ii) email address;
The Service Provider will take all reasonable measures to keep the data secure, but will not be liable for any damage, destruction or loss of the data in the event of technical failure, natural disaster, terrorist or criminal offence.
If you have any questions or comments about how Bende Management Consulting Ltd. handles or processes your data, you can contact us at any time by e-mail at office@bendeconsulting.hu.
Personal data processed on bendeconsulting.hu, purpose and duration of processing
- The name of the data controller is Bende Management Consulting Kft.
- Name of the processing: contact or newsletter subscriber list
- Purpose of the processing: contacting or keeping in touch with newsletter subscribers, sending new articles via e-mail
- Legal basis for processing: voluntary consent of the data subject (Act CXII of 2011, § 5 (1) a))
- Actual place of processing.
- 2112 Veresegyház, 21 2121 Szent Korona utca 19.,
- Deadline for erasure of data: based on voluntary erasure request
- Data subjects: contact form senders and newsletter subscribers
Data controller's data, contact details
Name: Bende Management Consulting Kft.
Address: 2112 Veresegyház Szent Korona utca 19.
Company registration number: 13-09-159108
Tax number: 24114815-2-13
Phone: +36 70 238 5161
Email: office@bendeconsulting.hu
LEGAL REMEDY
The data subject may request information about the processing of his or her personal data and may request the rectification or, except for processing required by law, the erasure of his or her personal data by the means indicated when the data were collected or by contacting the controller's customer service.
At the request of the data subject, the controller shall provide information on the data processed by the controller, the purposes, legal basis and duration of the processing, the name, address (registered office) and activities of the data processor in relation to the processing, as well as the persons who receive or have received the data and the purposes for which the data are processed. The controller shall provide the information in writing in an intelligible form within the shortest possible time from the date of the request, but not later than 30 days. Such information shall be provided free of charge if the person requesting the information has not already submitted a request for information to the controller in the current year in the same field. In other cases, the controller may charge a fee.
The controller shall erase personal data if the processing is unlawful, the data subject requests it, the purpose of the processing has ceased, or the statutory time limit for storing the data has expired, or the court or the Data Protection Commissioner has ordered it.
The controller shall inform the data subject of the rectification and erasure and all those to whom the data were previously disclosed for processing. It shall refrain from such notification if this does not harm the legitimate interests of the data subject having regard to the purposes of the processing.
The data subject may object to the processing of his or her personal data if
- the processing (transfer) of personal data is necessary solely for the purposes of the exercise of a right or legitimate interest pursued by the controller or the recipient, unless the processing is required by law;
- the personal data are used or further processed for direct marketing, public opinion polling or scientific research purposes;
- the exercise of the right to object is otherwise permitted by law.
The data controller shall examine the objection, with simultaneous suspension of processing, within the shortest possible period of time from the date of the request, but not later than 15 days, and shall inform the applicant in writing of the outcome. Where the objection is justified, the controller shall terminate the processing, including further collection and further transmission, and block the data and notify the objection and the action taken on the basis of the objection to all those to whom the personal data concerned by the objection have been previously disclosed and who are obliged to take measures to enforce the right to object.
If the data subject disagrees with the controller's decision, he or she may challenge it in court within 30 days of the notification.
The controller may not erase the data of the data subject if the processing is required by law. However, the data may not be transferred to the data recipient if the controller has consented to the objection or if the court has ruled that the objection is justified.
The data subject may take legal action against the controller in the event of a breach of his or her rights. The court shall rule on the case out of turn.
Applications for legal remedy, complaints may be lodged with the National Authority for Data Protection and Information:
Name: National Authority for Data Protection and Information Headquarters.
Postal address: 1530 Budapest, PO Box 5.
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Website: http://naih.hu
GOOGLE ANALYTICS PRIVACY POLICY
This website uses Google Analytics, a web analytics service provided by Google Inc ('Google'). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The cookie information generated by your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States of America. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this data to third parties where required to do so by law, or where such third parties process the data on Google's behalf. Google will not associate your IP address with any other data held by Google. You can prevent the use of cookies by selecting the appropriate browser settings. However, we would like to point out that in this case you may not be able to access all the functions of the website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.