The Policy also informs about laws and rights the users of this website have, and what rights they have.
Information about the data controller („Association”)
Headquarters and postal address:
2015 Szigetmonostor, Táncsics utca 1.
Budapest District Court
Company registration number:
Name of data protection manager:
The data controller does not perform a public task, so it is not an obligation to appoint a data protection manager
The purpose of the data management is to create the membership list in the appropriate format, so that the data stored in it complies with the member list template published in the 4/2017. (IV.3.) IM decree. The legal title of data management is the Association’s legitimate interest in meeting the requirements of the Hungarian legislations. (Regulation of the European Parliament (EU) 2016/679 (27. April 2016) on the protection of natural persons in regards to the processing of personal data and on the free flow of these data, and also of the overruled Regulation 95/46/EC (General Data Protection Regulation), hereinafter: “GDPR” Article 6. (1) Paragraph f) point.
Data managed by the Association: Name, address. The association manages this data for 6 years after the termination of the membership. (The statue of limitations for any legal disputes related to memberships is 5 years, the duration of data management exceeds this period by one year subject to § 6:24 (2) of Act V of 2013 on the Civil Code).
If, during the retention period, the Association becomes aware that the limitation period has been interrupted during the retention period, or that the limitation period has expired beyond this period, and that a legal dispute is in progress in relation to the processed data or in relation to the data subject of the processed data at the end of the retention period , in which you need the processed data in order to protect the interests of the Association,
Data processed: Name, address, place of birth, date of birth, mother’s name, ID number, phone number, e-mail address, data related to the language tests. The Association manages the data for a period of 2 years after the end of the activity carried out by the Association.
The purpose of the data management activity is to record the data subjects in the Association’s internal system in a way that they can be clearly distinguished from one another, and this way the internal system can further support the work and activities of the Association. Recording an e-mail address and phone number is necessary in order to facilitate contact. The processing of the data thus serves a legitimate interest related to the fulfilment of the purpose of the Association (GDPR Article 6 (1) point (f)). In addition, any subsequent claims can only be asserted in possession of these data. It is necessary to manage the language test data of the persons concerned, because the Association carries out its activities in close cooperation with foreign universities, with whom they communicate in English.
Data processed: Name, address, place of birth, date of birth, mother’s name, ID number, telephone number, e-mail address. The Association manages the data for a period of 2 years after the end of the activity performed by the Data Subject.
The purpose of the data management activity is to facilitate the logging of pro bono educational organization activities through the Association’s internal system. Recording an e-mail address and phone number is necessary to facilitate contact with the Association and the participants in the educational activities. The data management activity thus serves a legitimate interest related to the fulfilment of the purpose of the Association (GDPR Article 6 (1) point (f)). In addition, any subsequent claims can only be asserted in possession of these data.
6 d) The Association signs a contract with certain data subjects for the purpose of the Association’s educational activities. In connection with the organization of education, the association manages the following personal data of the natural persons with whom it has a contractual legal relationship (GDPR Article 6 (1) point b). The purpose of the data management is to establish and maintain the contractual relationship, as well as to log educational organisation activities through the Association’s internal system.
Data processed: Name, address, place of birth, date of birth, mother’s name, ID number, birth name, telephone number, e-mail address. The association manages the data for a period of 6 years after the termination of the contractual relationship, subject to the conditions contained in point a) above, and with the possibility of extension as described in point a).
Recording an e-mail address and phone number is necessary to facilitate contact with the Association and the participants in educational organization activities.
The Association enters into contracts with various data subjects for the performance of administrative activities related to the operation of the Association and for the performance of other activities (e.g. cleaning, maintenance work, etc.). The personal data of these data subjects is managed by the Association for the purpose of establishing and maintaining the contractual relationship (GDPR Article 6 (1) point b).
Managed data: Name, residential address, ID number, place of birth, date of birth, birth name. The association manages the data for a period of 6 years after the termination of the contractual relationship, subject to the conditions contained in point 1. a), and with the possibility of extension as described in point a).
The association maintains a newsletter that anyone can subscribe to on a voluntary basis. In the newsletter, subscribers are regularly informed about the latest news about the Association, scholarships announced by the Association, online or personal events organized by the Association and other events related to the life of the Association. In order to subscribe to the newsletter, the person concerned must provide his e-mail address and consent to it being managed by the Association (GDPR Article 6 (1) point a)).
The association manages the e-mail addresses provided in this way until the day of unsubscribing from the newsletter. If someone wishes to unsubscribe from the newsletter, they can do so by sending an e-mail to the e-mail address email@example.com, which unsubscribe e-mail address is also included in all e-mails sent by the Association.
The range of data managed by the Association: shopping habits, place of residence, interests, age, gender, marital status, professional occupation. The Association manages the above data as long as it is available through the Facebook common data controller, the duration of which is fixed by the above Facebook conditions, currently for the maximum duration of cookies, which is a maximum of 2 years.
The Association can be supported through the Patreon website, and through bank transfer to the Association’s bank account.
Patreon Ireland Limited (Suite 3, One Earlsfort Centre, Lower Hatch Street, Dublin 2L, Ireland) as a data controller shares personal data with the Association (as the Creator registered on its site) as a data processor in order to enable the fulfilment of the levels of support on the website, for example Patreon will only share the supporter’s address with the Creator if there is a service the Creator would like to send to the supporter through postal service. The association manages this data in order to provide the services described on the Patreon website.
All universities with their registered offices outside of the territory of Hungary that have a contractual relationship with the Association (hereinafter: “University”) is considered to be a common data manager in relation to its members who have a student status there. The purpose of joint data management is for the Association to support the University in monitoring the university studies of association members. The Association manages the members’ personal data in order to fulfil the members contractual obligations towards the University and to monitor the fulfilment of these obligations. Considering that there is no contractual agreement between the Association and the member regarding this activity, the legal title of the data management is the fulfilment of the contract existing between the University and the Association, which regulates their cooperation, which, from the point of view of the member’s personal data, is considered data management based on the Association’s legitimate interest (GDPR. 6 Article (1) point (f)).
Scope of processed data: Name, e-mail address, seminar and lecture attendance catalog, grades, written evaluations. Joint data controllers manage the data until the member’s student status is terminated, with the University providing the member with information on the terms of the University’s data management.
In order to pre-estimate the number of participants at an event organized by the Association and to plan the organization and conduct of the event in advance, the Association may make participation in events subject to prior registration. The Association manages the personal data of pre-registered persons. During registration, the data subjects give their consent to the processing of their personal data (GDPR Article 6 (1) point a)).
Range of processed data: Name, e-mail address. The data manager manages the data until the day after the event.
The association provides separate data management information for the participants about the data recorded during the event. The association may only process the personal data of the data subject for purposes related to support activities if it has informed the data subjects beforehand.
The Association does not collect data in any way on its website.
The court, the prosecutor, the investigative authority, the infringement authority, the public administrative authority, the data protection commissioner or, based on the authorization of the law, other bodies may contact the Association for the purpose of providing information, communicating and handing over data, or making documents available. The Association will only release personal data to the authorities – if the authority has specified the exact purpose and the scope of the data – to the extent that is absolutely necessary to achieve the purpose of the request.
The Association does not check the personal data provided to it. If the User does not provide his own personal data, he is obliged to obtain the consent of the person concerned.
The employees of the Association who are employed or under contract, the employees of the courier service involved in the delivery of the products (if the delivery was requested by the customer), and the Data Processors are entitled to access the personal data.
The Association is committed to the protection of the personal data of the data subjects, and considers it of utmost importance to respect the data subject’s right to self-determination of information. The Association treats personal data confidentially and takes all security, technical and organizational measures that guarantee data security.
The data management principles of the Association are in accordance with the applicable legislation related to data protection, in particular with the following:
The Association agrees to publish a clear, attention-grabbing and unequivocal statement, informing them of the method, purpose and principles of the data collection, before collecting, recording, and processing any personal data of the data subjects. In addition to all of this, in all cases where the collection, handling and recording of data is not required by law, the Association draws the attention of the data subject to the voluntary nature of data provision. In the case of mandatory data provision, the legislation ordering Data Management must also be indicated. The data subject must be informed about the purpose of Data Management and who will handle and process the Personal Data.
In all cases, if the Association intends to use the provided Personal Data for a purpose other than the purpose of the original data collection, it will inform the person concerned about this and obtain their prior express consent, or provide them with the opportunity to prohibit the use.
The Association complies with the restrictions set by law in all cases when recording and handling data, and informs the data subject of its activities by e-mail according to his/her request. The Association will not enforce any sanctions against the person concerned who refuses to provide non-mandatory data.