1. Purpose and Legal Basis of Data Processing, Scope of Data Processed, Duration of Data Processing, Access to Data, Data Transfers
1.1 Newsletter
Our Company sends a weekly newsletter to members and interested parties. Subscription to the newsletter is voluntary, and subscribing is considered acceptance of our data processing policy. Based on your voluntary consent, our Company processes the following data related to the newsletter distribution:
In this case, the legal basis for data processing is your consent under Article 6(1)(a) of the GDPR. Your consent can be withdrawn at any time, free of charge, via the following contacts: titkarsag@njszt.hu, rakosi.szilvia@njszt.hu. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
We will process your data under this point until your consent is withdrawn.
Access to your data under this point is granted to the Company's designated employees and legal entities providing IT support services to the Company.
1.2 Conference Organization
If you participate in a conference organized by the Company from time to time, the Company will process the following data in this context:
- Title / Name / Email address
In this case, the legal basis for data processing is the performance of a contract (Article 6(1)(b) of the GDPR), as participating in the conference creates a contract between you and the Company. You are not obligated to provide the above data; however, if you do not provide your name and email address, we will not be able to inform you about details related to the conference.
We will process your data under this point until the conclusion of the given conference.
Access to your data under this point is granted to the Company's designated employees and legal entities providing IT support services to the Company.
1.3 Data Processing Related to Free Downloadable Materials
If you download free materials available on the Company's website (www.njszt.hu), you consent to the Company processing the following data based on your voluntary consent in this context:
- Occupation (optional)
- Whether you hold an ICDL certificate (optional)
- Email address
- Name
In this case, the legal basis for data processing is your consent under Article 6(1)(a) of the GDPR. Without your consent, we cannot send the materials to your email address. Your consent can be withdrawn at any time, free of charge, via the following contacts: titkarsag@njszt.hu, ecdl@njszt.hu. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We will process your name and email address until your consent is withdrawn, after which they will be permanently deleted. If you have provided the optional data mentioned above, we will continue to process these anonymized data for statistical purposes after deleting your email address.
Access to your data under this point is granted to the Company's designated employees and legal entities providing IT support services to the Company.
1.4 Data Processing Related to ICDL Exam Candidates
If you have taken an ICDL exam supervised by the Company, the Company processes and transfers the following data to Sophia Testing GmbH and Cytotrade s.r.o., which operate the sophiatesting.com system, for storage and processing. The data processors handle the data according to GDPR requirements and do not transfer them to third parties. The processed data include:
- Name / Previous name
- Mother’s name
- Place of birth
- Date of birth
- Country / City / Postal code
- Address
- Phone / Mobile phone
- Email address
- Student status
- Data related to ICDL exams
In this case, the legal basis for data processing is the Company's legitimate interest in operating and supervising the ICDL exam system (Article 6(1)(f) of the GDPR). We process the above data until you object to the processing.
Access to your data under this point is granted to the Company's designated employees, legal entities providing IT support services to the data controller, and ICDL exam centers for the individuals they have registered.
1.5 Data Processing Related to the Historical IT Database
If you consent, the Company will process the following data based on your voluntary consent in the historical IT database:
- Name
- Date of birth
- Place of birth
- Education, qualifications
- Academic degree
- Professional CV
- Links
- Other information (optional)
In this case, the legal basis for data processing is your consent under Article 6(1)(a) of the GDPR. Your consent can be withdrawn at any time, free of charge, via the following contacts: [.] Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
We will process your data under this point until your consent is withdrawn.
Your data under this point are publicly available on the Company's website (http://itf2.njszt.hu/az-adattarrol).
1.6 Membership Registration System
The Company, as the data controller, transfers personal data stored in its system for storage and processing to Proking Hungária Kft., which operates the egyesuletonline.hu system. The data processor handles the data according to GDPR requirements and does not transfer them to third parties. The processed data include:
- Name
- Date of birth
- Place of birth
- Education, qualifications
- Academic degree
- Professional CV
- Links
- Address
- Mother’s name
- Email address
- Payments, membership fees
- Other information (optional)
The nature and purpose of the data processing activities performed by the data processor can be found in Proking Hungária Kft.'s data protection notice, available at: https://egyesuletonline.hu/adatkezelesi-tajekoztato.
In this case, the legal basis for data processing is your consent under Article 6(1)(a) of the GDPR, realized by entering the membership registration system. Your consent can be withdrawn at any time, free of charge. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
We will process your data under this point until your consent is withdrawn.
1.7 Neumann 120 Art Competition for Students
The legal basis for data processing is your consent under Article 6(1)(a) of the GDPR, realized by accepting the competition conditions. Your consent under this point can be withdrawn at any time, free of charge. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
By accepting the competition call conditions and filling out the application form, you consent to the Company, as the organizer and data controller of the student competition, processing your voluntarily provided data according to the relevant GDPR provisions, and transferring them to Deák 17 Gallery as a secondary data controller. The data protection notice of Deák 17 Gallery is available at: https://www.deak17galeria.hu/adatkezelesi-tajekoztato/
The processed data include:
- Name of legal representative and applicant
- Email address of the legal representative
- Applicant’s phone number
- Applicant’s date of birth, address
- Educational institution and class
- Legal representative’s statement
- Title and description of the artwork
We will process your data under this point until your consent is withdrawn.
1.8 Other Student Competitions
The legal basis for data processing is your consent under Article 6(1)(a) of the GDPR, realized by accepting the competition conditions. Your consent under this point can be withdrawn at any time, free of charge. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. By accepting the competition call conditions and filling out the application form, you consent to the Company, as the organizer and data controller of the competition, processing your voluntarily provided data according to the relevant GDPR provisions.
The processed data include:
- Applicant’s name, date of birth, address, educational institution and class, email address, phone number (for applicants over 18 years old), and:
- Title and description of the artwork
- For minor applicants (under 18 years old), the legal representative’s data: name, email, phone number, and a statement from the legal representative consenting to the data processing.
We will process your data under this point until your consent is withdrawn.
1.9 Competitions
The Company processes the data of applicants for IT-related competitions and related events it organizes.
The purpose of data processing: to identify applicants for competitions and related events, to ensure the legality of prize receipt, to promote competitions, and to facilitate media appearances.
The legal basis for data processing: the legitimate interests of competitors and competition organizers.
Application, Preparation
By registering for the competition, applicants accept, or in the case of minors under 18, their parent's consent statement, that the Company will process the following data in connection with registering for and participating in the competitions:
- Name
- Email address
- School
- Class
In the parental consent statement, the parent consents to the processing of the following data:
- Name
- Address
- Phone number
Receiving Awards, Prizes
For the receipt of taxable prizes, such as purchase vouchers or other taxable rewards, the processed data include:
- Name
- Birth name
- Place and date of birth
- Mother's birth name
- Address
- Email address
- Type and number of identification document
- Tax identification number
Public Announcement of Results, Award Ceremony
By registering for the competition, participants accept that photos and videos may be taken of them at public events. The competition committee may place photos and videos on its website and in media publications for documentation and promotion purposes.
2. Cookie Management and Storage
This section explains what cookies are and summarizes the various types of cookies that we use or may use on the website www.njszt.hu ("Website"), their purposes, and their lifespan (i.e., how long a cookie remains on your device).
2.1 What are cookies?
Cookies are files or pieces of information that are stored on your computer (or other internet-enabled devices, such as a smartphone or tablet) when you visit the Website. A cookie generally contains the name of the website it came from, the cookie’s lifetime (i.e., how long it will remain on your device), and a value, which is usually a randomly generated unique number.
2.2 What do we use cookies for?
We use cookies to make the Website easier to use and to better tailor the Website and our products to your interests and needs. Cookies can also help speed up your future activities and user experiences on the Website. We also use cookies to compile anonymous, aggregated statistics that allow us to understand how people use the Website and help us improve its structure and content. We cannot identify you personally from this information.
2.3 What types of cookies do we use?
- Session Cookies: These are temporary cookies that remain on your device until you leave the Website.
- Persistent Cookies: These remain on your device much longer or until you manually delete them (how long the cookie remains on your device will depend on the duration or "lifetime" of the specific cookie and your browser settings).
- First-party Cookies: These are set by the Website itself and can only be read by the Website. These are commonly used for storing information such as your preferences.
- Third-party Cookies: These are set by third parties other than the Website.
2.4 Disabling Cookies
Most internet browsers are initially set to accept cookies. You can change the settings to block cookies or to alert you when cookies are being set on your device. There are various ways to manage cookies. Please refer to your browser’s information or help page if you want to learn more about browser settings and how to modify them.
If you disable the cookies we use, it may affect your user experience while visiting the Website.
If you use different devices to view and access the Website (e.g., computer, smartphone, tablet, etc.), make sure that each browser on those devices is set according to your cookie preferences.
You can find information on setting cookies at the following links:
[Internet Explorer](http://support.microsoft.com/kb/278835 )
[Chrome](http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=95647 )
[Safari](https://support.apple.com/?path=Safari/5.0/en/9277.html), (http://support.apple.com/kb/HT1677)
[Firefox](https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website )
[Opera](http://www.opera.com/help/tutorials/security/privacy/ )
[Android](https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DAndroid )
[Edge](https://privacy.microsoft.com/en-US/windows-10-microsoft-edge-and-privacy)
2.5 Consent
By using the Website, you consent to our use of cookies as described above. If you do not agree with the use of cookies in this manner, please adjust your browser settings accordingly, or do not use the Website. Disabling the cookies we use may affect your user experience on the Website.
3. The Data Controller
The controller of your personal data as defined above is the Company.
The Company’s Data Protection Officer and contact details: Szilvia Rákosi, rakosi.szilvia@njszt.hu
4. Description of Technical and Organizational Measures for Data Storage and Security
Your personal data is stored at the Company’s headquarters (1054 Budapest, Báthory u. 16).
The Company takes all reasonably expected technical precautions to securely store the recorded data and prevent unauthorized access by third parties.
The IT security description of personal data storage and the technical and organizational measures taken for data security: your personal data is stored on paper in a secured room and in a local Intranet system protected by a username and password.
5. Your Rights Regarding Data Processing (Data Subject Rights)
You have the following rights regarding the processing of your personal data:
a) Right of Access (GDPR Article 15): You have the right to obtain information from the Company regarding whether your personal data is being processed, and if such processing is taking place, you are entitled to access the personal data and the information contained in this notice.
The Company will provide you with a copy of the personal data subject to processing upon request. For additional copies requested by you, the Company may charge a reasonable fee based on administrative costs. If the request is submitted electronically, the information will be provided in a commonly used electronic format unless otherwise requested.
b) Right to Rectification (GDPR Article 16): You have the right to request the Company to correct any inaccurate personal data concerning you without undue delay. You are also entitled to request the completion of incomplete personal data.
c) Right to Erasure (GDPR Article 17): You have the right to request the Company to erase personal data concerning you without undue delay, and the Company is obliged to erase your personal data without undue delay if any of the following reasons apply:
- The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- If the processing is based on your consent and you withdraw that consent and there is no other legal basis for the processing;
- You object to the processing and there are no overriding legitimate grounds for the processing;
- The personal data has been processed unlawfully;
- The personal data must be erased to comply with a legal obligation in Union or Member State law applicable to the Company.
The provisions under point (c) above do not apply if (i) the processing is necessary for compliance with a legal obligation in Union or Member State law applicable to the Company, or (ii) the processing is necessary for the establishment, exercise, or defense of legal claims.
d) Right to Restriction of Processing (GDPR Article 18): You have the right to request the Company to restrict processing of your personal data if any of the following apply:
- You contest the accuracy of the personal data, in which case the restriction applies for a period that allows the Company to verify the accuracy of the personal data;
- The processing is unlawful, and you oppose the erasure of the data and instead request the restriction of its use;
- The Company no longer needs the personal data for processing, but you need it for the establishment, exercise, or defense of legal claims; or
- You have objected to the processing; in this case, the restriction applies for the period necessary to determine whether the Company’s legitimate grounds override your legitimate interests.
e) Right to Object (GDPR Article 21): You have the right to object at any time to the processing of your personal data on grounds related to your particular situation. In this case, the Company may no longer process the personal data unless the Company demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is related to the establishment, exercise, or defense of legal claims. If the processing is carried out for compliance with a legal obligation, exercising the right to object will not result in the termination of the data processing described in this notice.
f) Right to Information Regarding the Above Rights (GDPR Article 12): The Company will inform you without delay and in any case within one month of receiving your request regarding the circumstances of the data processing in a concise, transparent, intelligible, and easily accessible form. If necessary, considering the complexity of the request and the number of requests, this deadline may be extended by an additional two months. The Company will inform you of the extension and the reasons for the delay within one month of receiving the request.
The information will be provided free of charge. If your request is clearly unfounded or excessive, particularly due to its repetitive nature, the Company may: i) charge a reasonable fee based on the administrative costs of providing the requested information or taking the requested action, or ii) refuse to act on the request. The burden of proving the request’s clearly unfounded or excessive nature lies with the Company.
The Company will inform all recipients to whom the personal data was disclosed about the actions taken under points b) to d) above (i.e., all rectifications, erasures, or restrictions of processing), except where this proves impossible or involves disproportionate effort. The Company will provide you with information about these recipients upon request.
g) Right to Lodge a Complaint (GDPR Article 77): You have the right to lodge a complaint with a supervisory authority – particularly in your usual place of residence, place of work, or the place of the alleged infringement – if you believe that the processing of your personal data violates the GDPR. Complaints can be made to the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C; phone: +36 1 391 1400; fax: +36 1 391 1410; www.naih.hu; ugyfelszolgalat@naih.hu).
h) Right to Seek Judicial Remedy (GDPR Article 79): You have the right to a judicial remedy if you believe that your rights under the GDPR have been violated as a result of the processing of your personal data that is not in compliance with the GDPR. Legal proceedings against the Company must be initiated before the courts of the Member State where the Company has its place of business. Such proceedings may also be initiated before the courts of the Member State of your habitual residence.
i) Right to Data Portability (GDPR Article 20): You are entitled to the right to data portability if the processing is based on Article 6(1)(a) or (b) of the GDPR, which is your consent or the performance of a contract with you. In this case, you have the right to receive the personal data concerning you that you have provided to the Company in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another data controller without hindrance from the Company. You are also entitled to request the direct transfer of your personal data from the Company to another data controller, where technically feasible.
6. How to Obtain Information Regarding the Processing of Your Personal Data
You can request further information about the processing of your personal data from the Company’s Data Protection Officer, Szilvia Rákosi, either by post (1054 Budapest, Báthory u. 16.) or by email (rakosi.szilvia@njszt.hu). You may also request verbal information, which will be documented. If you request verbal information (e.g., by phone), you will need to verify your identity to the Company. For exercising the rights mentioned above, you should also contact the Company’s Data Protection Officer.
Effective: From May 25, 2018