Vincze Dorina sole proprietor (8372 Cserszegtomaj, Sümegi út 35., hereinafter: service provider, data controller), as the data controller, acknowledges the contents of this legal notice as binding upon itself. It undertakes that all data processing related to its activities shall comply with the requirements set out in this policy, in the applicable national legislation, and in the legal acts of the European Union.
The data protection guidelines related to the data processing activities of the data controller are continuously available at nigma.hu/adatkezeles.
The data controller reserves the right to amend this notice at any time. Naturally, it will inform its audience of any changes in due time. If you have any questions regarding this notice, please write to us and one of our colleagues will answer them. The data controller is committed to protecting the personal data of its customers and partners, and considers it of utmost importance to respect the right of its customers to informational self-determination. The data controller treats personal data confidentially and takes all security, technical, and organizational measures necessary to guarantee the safety of the data. The data controller describes its data processing practices below.
Last name, first name, e-mail address, phone number (mandatory data).
The data controller selects and operates the IT tools used during the provision of the service for processing personal data in such a way that the processed data:
- is accessible to those authorized to do so (availability);
- its authenticity and authentication are ensured
(authenticity of data processing);
- its integrity can be verified (data integrity);
- it is protected against unauthorized access (confidentiality of data).
The data controller protects the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction. The data controller ensures the protection of the security of data processing by technical, organizational, and institutional measures that provide a level of protection appropriate to the risks associated with the data processing.
During data processing, the data controller preserves:
- confidentiality: it protects the information so that only those authorized may access it;
- integrity: it protects the accuracy and completeness of the information and the method of processing;
- availability: it ensures that when the authorized user needs it, the desired information is actually accessible,
and that the related tools are available.
- collect information about visitors and their devices;
- remember visitors’ individual settings, which may be used for example during online transactions,
so they do not need to be re-entered;
- make the website easier to use;
- provide a quality user experience.
In order to provide customized service, the website places a small data file, a so-called cookie,
on the user’s computer and reads it back during a later visit. If the browser sends back a previously saved
cookie, the service provider managing the cookie has the opportunity to link the user’s current visit to
previous ones, but only with regard to its own content.
The purpose of these cookies is to enable visitors to browse the nigma.hu website fully and smoothly, to use its functions and the services available there. The validity period of this type of cookie lasts until the end of the session (browsing), and when the browser is closed these cookies are automatically deleted from the computer or any other device used for browsing.
The nigma.hu website also uses Google Analytics as a third-party cookie provider. By using Google Analytics for statistical purposes, nigma.hu collects information about how visitors use the websites. The data is used to improve the website and enhance the user experience. These cookies also remain on the visitor’s computer or other browsing device, in its browser, until they expire or until the visitor deletes them.
Last name, first name, e-mail address, phone number (mandatory data).
Last name, first name, e-mail address, phone number (mandatory data).
The data processing activities of the data controller are based on voluntary consent and/or statutory authorization.
In the case of data processing based on voluntary consent, data subjects may withdraw their consent at any stage
of the processing.
In certain cases, the processing, storage, and transfer of a set of provided data is mandatory by law,
of which we will inform our customers separately.
We draw the attention of those providing data to the data controller that if they do not provide their own personal data,
it is their responsibility to obtain the consent of the data subject.
The data processing principles of the data controller are in accordance with the applicable legislation on data protection,
in particular the following:
- Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.);
- Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons
with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC
(General Data Protection Regulation, GDPR);
- Act V of 2013 on the Civil Code; Act C of 2000 on Accounting;
- Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing;
- Act CCXXXVII of 2013 on Credit Institutions and Financial Enterprises.
Your personal data, meaning data that can be associated with your person, may come into our processing in the following ways:
on the one hand, technical data related to the maintenance of the internet connection automatically arise in our computer system
in connection with the computer, browser program, internet address, and visited pages used by you; on the other hand,
you may also provide your name, contact details, or other data if you wish to contact us personally while using the website.
The data technically recorded during system operation are the data of the data subject’s computer used to log in,
which are generated during booking and recorded by the nigma.hu system as the automatic result of technical processes.
The automatically recorded data are logged automatically by the system upon entry and exit without any separate declaration
or action by the data subject. These data cannot be linked to any other personal user data, except in cases required by law.
Only nigma.hu has access to these data.
The data subject may request information about the processing of their personal data and may request the correction of their personal data, or, except for mandatory data processing, may request the deletion or withdrawal of their personal data, and may exercise the right to data portability and the right to object in the manner indicated when the data were collected or via the contact details of the data controller provided above.
The data controller shall take appropriate measures in order to provide the data subjects with all information referred to in Articles 13 and 14 of the GDPR and all communication under Articles 15 to 22 and 34 relating to processing in a concise, transparent, intelligible and easily accessible form, using clear and plain language.
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; the envisaged period for which the personal data will be stored; the right to request rectification, erasure, or restriction of processing and to object; the right to lodge a complaint with a supervisory authority; information about the source of the data; the existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and the envisaged consequences of such processing for the data subject. The data controller shall provide the information no later than one month from the submission of the request.
The data subject may request the correction of inaccurate personal data relating to them processed by the data controller and the completion of incomplete data.
The data subject shall have the right to obtain from the data controller the erasure of personal data concerning them without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the data subject withdraws consent on which the processing is based, and where there is no other legal ground for the processing;
- the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
- the personal data have been unlawfully processed;
- the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject;
- the personal data have been collected in relation to the offer of information society services.
Data may not be erased where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation under Union or Member State law applicable to the data controller, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes; or for the establishment, exercise, or defense of legal claims.
At the request of the data subject, the data controller shall restrict processing if one of the following applies:
- the data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of their use instead;
- the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or
- the data subject has objected to processing; in this case, the restriction applies for a period pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The data subject shall have the right to receive the personal data concerning them, which they have provided to the data controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.
The data subject shall have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of objection, the data controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
The data subject shall have the right to withdraw their consent at any time.
In the event of a violation of their rights, the data subject may bring the matter before a court against the data controller. The court shall act in the case as a matter of priority.
Complaints may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information:
Name: National Authority for Data Protection and Freedom of Information
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Phone: +36 1 391 1400
Fax: +36 1 391 1410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
Information about data processing not listed in this notice will be provided at the time the data are collected. We inform our customers that the court, the prosecutor, the investigating authority, the authority for minor offences, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, or other bodies authorized by law may contact the data controller for the provision of information, disclosure or transfer of data, or for making documents available. The data controller shall disclose personal data to authorities only to the extent and in such scope as is indispensable for the realization of the purpose of the request, provided that the authority has specified the exact purpose and scope of the requested data.