Privacy Notice

Privacy Notice

Name: Cecília Tarkovács EV​
Registered office and postal address: 8083. Csákvár, 26 Szabadság Street.
Tax number: 28797405-1-07
Email address: cecilia.tarkovacs@gmail.com
Telephone: +36 (20) 968 3039

1.1    This Privacy Policy sets out the data protection rules and data processing principles relating to the processing of personal data of users of the gyerekrehangolva.hu website. The data controller undertakes to ensure that its data processing complies with the requirements set out in this Privacy Policy and in the applicable legislation.

1.2    The data controller’s guiding principle is to ensure, in all areas of the services it provides and for every individual, that the constitutional fundamental rights of data subjects are respected during the automated processing of personal data (data protection).

1.3    The Data Controller respects the personal and confidential information and data of Data Subjects and guarantees in all cases that all data, facts and information relating to Data Subjects are treated as confidential and used exclusively for the data processing purposes set out in this Privacy Policy. The data controller shall not disclose the recorded data to third parties without authorisation. Data may only be disclosed to third parties for the purpose of providing the service or with the Data Subject’s express consent.

Data Protection Principles

2.1    When drawing up its data protection principles, the data controller took particular account of:
Act CXII of 2011 on the right to informational self-determination and freedom of information,
on the protection of individuals with regard to the automated processing of personal data, done at Strasbourg, Act VI of 1998 on the promulgation of the Convention, and Act XLVIII of 2008 on the fundamental conditions and certain restrictions on commercial advertising.

2.2    The Data Controller undertakes to process the personal data in its possession in accordance with the applicable legislation and the data protection principles set out in this Data Protection Policy, and not to disclose such data to third parties beyond the scope set out in this Policy. Exceptions to this include the use of data in a statistically aggregated form, which does not contain any data capable of identifying the Data Subject in any form, as well as the transfer of data that is necessary for the performance of the service and essential for the use of services provided by third parties.

2.3    When collecting, recording and processing data, the data controller shall in all cases comply with the restrictions laid down by the applicable legislation and shall, at the data subject’s request, inform them of its activities by email.

Terms

Data subject: any natural person who is identified or can be identified, directly or indirectly, on the basis of specific personal data;

Personal data: data that can be linked to the Data Subject – in particular, the Data Subject’s name, identification number, and one or more factors specific to their physical, physiological, mental, economic, cultural or social identity – as well as any conclusions drawn from such data relating to the Data Subject;

Consent: a voluntary and explicit expression of the Data Subject’s will, based on adequate information, by which they give their unambiguous consent to the processing of their personal data – whether in full or in relation to specific operations;

Objection: a statement by the data subject objecting to the processing of their personal data and requesting that the processing be discontinued or that the data being processed be erased;

Data controller: a natural or legal person, or an organisation without legal personality – in this case, the Service Provider – who or which, either alone or jointly with others, determines the purposes of data processing, makes and implements decisions relating to data processing (including the means used), or has such decisions implemented by a data processor appointed by it;

Data processing: any operation or set of operations performed on data, irrespective of the procedure used, including, in particular, the collection, recording, storage, organisation, storage, alteration, use, retrieval, disclosure, alignment or combination, blocking, erasure and destruction, as well as the prevention of further use of the data, taking photographs, audio or video recordings, and recording physical characteristics suitable for identifying a person (e.g. fingerprints or palm prints, DNA samples, iris scans);

Data processing: the performance of technical tasks relating to data processing operations, irrespective of the method or means used to carry out those operations and the location where they are carried out, provided that the technical task is performed on the data;

Data processor: a natural or legal person, or an organisation without legal personality, which processes data on the basis of a contract concluded with the data controller – including a contract concluded pursuant to a provision of law;

Data transfer: making data available to a specific third party;

Data erasure: rendering data unrecognisable in such a way that it can no longer be recovered;

Data blocking: the marking of data with an identifier for the purpose of restricting its further processing, either permanently or for a specified period;

Third party: a natural or legal person, or an organisation without legal personality, who or which is not the data subject, the data controller or the data processor,

The scope of personal data processed

4.1    Only data that is essential for the implementation of the data processing principles set out in this Data Protection Policy, that is suitable for achieving the purpose, and that is retained only to the extent and for the duration necessary to achieve that purpose may be processed.

4.2    During the operation of the system, certain data is recorded automatically for technical reasons. The data controller’s system may collect data on users’ activity; this data cannot be linked to any other data provided by data subjects, nor to data generated when using other websites or services.

4.3    Technical data refers to data on the Data Subject’s computer which is generated whilst using the service and which is recorded by the data controller’s system as an automatic result of technical processes. The system automatically logs the data recorded in this way upon login and logout, without any specific declaration or action on the part of the Data Subject. This data cannot be linked to other personal user data, except in cases required by law. Only the data controller has access to the data.

4.4    When processing personal data by automated means, the data controller and the data processor shall take further measures to ensure that

  • preventing unauthorised data entry;
  • preventing the use of automated data-processing systems by unauthorised persons via data transmission equipment;
  • the ability to verify and determine to which bodies personal data have been or may be transferred using data transmission equipment;
  • the ability to verify and determine which personal data was entered into automated data-processing systems, when and by whom;
  • the ability to restore the installed systems in the event of a failure, and
  • that a report be drawn up on errors occurring during automated processing.

4.5    Visitor data (IP address, time, page viewed), which is recorded by the data controller’s server, is used solely for the purpose of collecting statistical data.

4.6    Data processors:

4.6.1  Web hosting provider:

Websupport Hungary Ltd.
1132 Budapest, 18–22 Victor Hugo Street.
Contact details: https://websupport.hu

4.6.2  Social media page:

Facebook Ireland Ltd.
Registered office: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Online complaint: https://www.facebook.com/help/contact/540977946302970

4.6.3  Online marketing activities:

Zoltán Attila Demény EV
8000. Székesfehérvár, 24 Szeredi Street.
Contact details: https://demenyzo.hu

4.7    Despite the Data Controller’s express request, the data provided during the application process (for example, data included in your CV that goes beyond the scope of Section 4.6 of this Data Protection Policy) provided during the application process.

4.8    The Data Controller does not verify the personal data provided. The person providing the data is solely responsible for its accuracy and correctness.

The purpose of data processing

The purpose of data processing is to

  • to facilitate the establishment of an employment relationship for applicants for the post advertised on the gyerekrehangolva.hu website,
  • reveals the experience, qualifications, personality and requirements of the Data Subject applying for the post,
  • if the Data Subject applying for the post cannot find a suitable vacancy amongst those advertised, then the establishment of a subsequent employment relationship,
  • database development,
  • the data controller is exercising its rights or fulfilling its obligations towards data subjects, whether based on legislation or a contract,
  • identify the data subjects and distinguish them from one another,
  • to ensure the website gyerekrehangolva.hu remains available at all times,
  • It uses the data of data subjects for statistical purposes and for the purpose of developing the data controller’s IT system.

5.2    The data controller may not use the personal data provided for purposes other than those specified in this Data Protection Policy without the Data Subject’s express consent. In any instance where the data controller intends to use the data provided for a purpose other than that specified in this Data Protection Policy, it shall inform the Data Subject thereof and obtain their prior, explicit consent, or provide them with the opportunity to prohibit the use of their data.

The legal basis for data processing

Data processing may take place in accordance with the legislation in force, either on the basis of the Data Subject’s voluntary consent or in cases where data processing is mandatory. The Data Controller processes the personal data of Data Subjects solely on the basis of the Data Subject’s voluntary consent. With regard to data processing, the Data Subject’s consent is given through the use of the gyerekrehangolva.hu website and the voluntary provision of data.

By applying for the job vacancy, the Data Subject may, at the same time, tick the checkbox on the Gyerekrehangolva.By ticking the checkbox on the gyerekrehangolva.hu website, the Data Subject may give their consent for the Data Controller to record the data provided by the Data Subject in its database and to store, process and use such data in accordance with the rules set out in this Data Protection Policy.

The data controller shall only disclose the data it processes to third parties with the Data Subject’s express consent, or where such disclosure is required by law by public authorities or other state bodies. In the event of a mandatory disclosure, the Data Controller shall in all cases verify the lawfulness of the mandatory disclosure and shall only then disclose the Data Subject’s personal data, of which the Data Subject shall be informed. The data controller shall not be held liable for such disclosure of data or for any consequences arising therefrom.

Duration of data processing

Data processing shall continue for as long as is necessary to fulfil the purposes of data processing set out in this Privacy Policy. The Data Controller shall erase the personal data it processes if the processing is unlawful, if the Data Subject expressly requests erasure, or if the purpose of the data processing set out in this Data Protection Policy no longer applies.

Data security

8.1    The data controller undertakes to ensure the security of the personal data it processes, and shall also take such technical and organisational measures and establish such procedural rules as are necessary to ensure that the data collected, stored and processed are protected, and to prevent their destruction, unauthorised use and unauthorised alteration. The Data Controller also undertakes to ensure that any third parties to whom the data may be transferred or disclosed are likewise required to fulfil their obligations in this regard.

8.2    Access to personal data is strictly restricted in order to prevent unauthorised access, unauthorised alteration or unauthorised use of personal data.

Data processing

9.1    The Data Controller does not process any data not provided by the Data Subject; however, in order to better serve the needs of Data Subjects, it may place certain data, known as ‘cookies’, on the customer’s computer. The Data Subject may remove these from their computer or disable them in their browser. The data collected via cookies enables the Data Controller to gain a better understanding of how its website is used, which helps to assess whether the website is functioning optimally.

9.2    The data may be accessed by the data controller, Kidwingz Bt. as set out in Annex 1, are authorised to access the data; the data will not be disclosed or transferred to third parties and may only be used for the purposes specified in this Data Protection Policy.

9.3    The Data Controller may engage data processors (e.g. system operators, accountants) in connection with the operation of the underlying IT system, the fulfilment of orders and the settlement of accounts. The data controller assumes responsibility for the lawfulness of the instructions given to the data processor.

9.4    The data controller uses the following data processors in the course of its activities.

9.5    By making an explicit declaration when applying for a job vacancy, the Data Subject may give their consent for the Data Controller to record the data provided by the Data Subject in its database and to process, process and use them.

The rights of the data subject in relation to personal data processed by the data controller

10.1    Right to information
The Data Subject is entitled at any time to request information from the data controller regarding the personal data relating to the Data Subject that is processed by the data controller, and may also amend their data at any time in the manner specified in the Terms of Use. At the Data Subject’s request, the Data Controller shall provide information on the data relating to the Data Subject and processed by the Data Controller, the purpose, legal basis and duration of the data processing, the name and address of the data processor and their activities in connection with the data processing, the circumstances and effects of any data breach and the measures taken to address it, and – where the Data Subject’s personal data has been transferred – the legal basis for the transfer and the recipient of the data. The data controller shall provide the requested information in writing as soon as possible, but no later than 25 days from the date of submission of the request. The data controller may refuse to provide the information only in cases specified by law; in such cases, the data controller shall inform the data subject of the possibility of seeking judicial redress and of lodging a complaint with the Authority. Any questions or comments regarding data processing may be addressed to a member of the data controller’s staff using the contact details set out in this Data Protection Policy.

10.2    Deletion, rectification and blocking of data
The Data Subject is entitled at any time to request the rectification or erasure of any data recorded incorrectly by contacting us via the contact details set out in this Privacy Policy. The data controller shall delete the data within 3 working days of receiving the request; in such cases, the data cannot be recovered. Deletion does not apply to data processing required by law (e.g. accounting regulations); the data controller will retain such data for the period specified by law. The Data Subject may also request that their data be blocked. The data controller shall block personal data if the Data Subject so requests, or if, based on the information available to the data controller, it can be assumed that erasure would prejudice the Data Subject’s legitimate interests. Personal data blocked in this way may only be processed for as long as the purpose of data processing that precluded the erasure of the personal data remains valid. The data controller shall notify the Data Subject, as well as all those to whom the data has previously been transferred for the purposes of data processing (e.g. a courier service), of any rectification, blocking or erasure. Notification may be omitted if, having regard to the purpose of the data processing, this does not infringe the Data Subject’s legitimate interests. If the data controller does not comply with the Data Subject’s request for rectification, blocking or erasure, it shall, within 25 days of receiving the request, notify the Data Subject in writing of the factual and legal grounds for refusing the request for rectification, blocking or erasure.

10.3    Objection to the processing of personal data
The Data Subject may object to the processing of their personal data in the cases specified in the relevant legislation. The data controller shall examine the objection as soon as possible after the request is submitted, but within a maximum of 15 days, shall decide on its merits, and shall inform the data subject of its decision in writing.

The rights set out in this Privacy Policy may be exercised via the following contact details:
Name: Cecília Tarkovács, EV
Postal address: 8083. Csákvár, 26 Szabadság Street.
Email: cecilia.tarkovacs@gmail.com

Other provisions

11.1    The Data Controller may place links on the gyerekrehangolva.hu website through which other websites are made accessible. The Data Controller accepts no responsibility whatsoever for the content of websites accessible via the links provided. The data protection and data processing rules applicable to websites accessible via these links do not fall within the scope of this Privacy Policy. The Data Controller accepts no liability whatsoever for the use of these websites.

11.2    The Data Controller reserves the right to amend this Privacy Policy unilaterally at any time, whilst simultaneously notifying the Data Subjects. Upon the amendment coming into effect, continued use of the gyerekrehangolva.hu website shall constitute acceptance of the amended Privacy Policy by the Data Subject.

11.3    Should any provision of this Privacy Policy be found to be invalid, this shall not affect the validity of the remaining provisions of the Privacy Policy.

11.4    In the event of any legal dispute arising between the data controller and the data subject in connection with data processing, the court of the data subject’s place of residence or place of stay shall have exclusive jurisdiction, at the data subject’s discretion.

11.5    Should the Data Subject have any complaints regarding data processing, they may lodge them with the National Authority for Data Protection and Freedom of Information (postal address: 1530 Budapest, PO Box 5; registered office: 1125 Budapest, 22/c Szilágyi Erzsébet fasor, website: www.naih.hu, telephone: 06-1-391-1400, email address: ugyfelszolgalat@naih.hu).

This Privacy Policy is valid from 19 April 2022.