on processing of personal data by the Controller at an Internet website

CONTROLLER

COMPANY NAME: BL NONPROFIT KORLÁTOLT FELELŐSSÉGŰ TÁRSASÁG
REGISTERED SEAT: 1067 BUDAPEST, EÖTVÖS U. 24. I. EM. 16.
COMPANY REGISTRATION NR.: 01-09-947934
TAXATION ID: 22990600-2-42
REPRESENTED BY: ARANY BENCE, MANAGING DIRECTOR
TELEPHONE NUMBER: +36 1 332-5305
E-MAIL: [email protected]

1. Legal regulation regarding the processing of personal data

• REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as: Regulation, or GDPR) , and
• Act CXII. of 2011 on the Freedom of Information (hereinafter referred to as: Infotv.)

2. The purpose of this Policy

2.1. This Policy refers to the processing of personal data provided by or collected from the natural persons (hereinafter referred to as: users) when using the website hungarianconservative.com (hereinafter referred to as: website); please read through thoroughly.

2.2. This Policy is applicable together with the General Privacy Policy that is attached to this Policy as an annex and aims to fulfil the respective privacy-related legal regulation and to keep the users of the website as fully informed as possible.

2.3. ‘Processing‘ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

2.4. ‘Personal data‘ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

3. Acknowledgement of this Policy and the General Privacy Policy

3.1. By using the website – either with or without registration – the users acknowledge and grant their consent to the content of this Policy and the General Privacy Policy. The users’ privacy-related rights are included in detail in the General Privacy Policy.

3.2. Users are entitled to withdraw their consent anytime. Withdrawal of consent shall not affect the legality of the consent-based data processing prior to the withdrawal. Users may withdraw their consent either by sending a relative statement to the abovementioned email address of the Controller or by ticking the respective checkbox or by deleting their registration. Data regarding and proving the withdrawal of consent shall be recorded and stored in order to fulfil the lawful interests and legal obligations of the Controller for the necessary term.

3.3. In case the personal data is obtained upon the consent of the data subject then, unless regulated otherwise by the competent law, the Controller is entitled to process this data in order to fulfil the legal obligations of the controller even without further consent of the data subject or after such consent is withdrawn.

4. Granting consent by the user

4.1. We hereby draw the attention of the users that the following acts / activities shall qualify as granting their consent to the data processing by the user with regard to the data processing according to article 6 of this Policy:

• a) if the user uses the website without registration: the use of the website
• b) if the user uses the website with registration: registration to the website
• c) if the user subscribes to the newsletter: ticking the respective checkbox at the website
• d) in all other cases: giving explicit consent – in writing, by ticking a checkbox or by other method which is verifiable afterwards.

4.2. We hereby draw the attention of the users that processing the personal data of minor users under 16 years is only legal if the consent to the data processing is granted or confirmed by the legal representative of the minor. The confirming statement of the legal representative of minors must be sent to the abovementioned email address of the controller.

5. Legal basis for the data processing

5.1. The processing of the personal data is legal only if at least one of the following conditions apply:

• a) Regulation Article 6. a): the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• b) Regulation Article 6. b): processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• c) Regulation Article 6. c): processing is necessary for compliance with a legal obligation to which the controller is subject;
• d) Regulation Article 6. d): processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• e) Regulation Article 6. e): processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• f) Regulation Article 6. f): processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

6. User activities giving reason for processing personal data

(A) Using the website (with or without registration)

(B) Registration at the website

(C) Subscription to the newsletter  (condition precedent: registration and granting consent)

(D) Subscription through the website (condition precedent: registration)

(E) Registration for prize competition, drawing lots (condition precedent: registration)

(F) Communication

(G) Management of complaints

We hereby draw the attention of our users that some of our activities may result in data procession for more than one purposes which is in compliance with the Regulation because the separate consent of the users regarding the multi-purpose data processing is secured.

7. Data processors

Detailed data of the data processors mentioned in article 6 (a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller)are the following:

• Hosting service provider: ININET Kft. (1063 Budapest, Szinyei Merse utca 10.; company reg.nr.: 01-09-970252; taxation ID: 23537646-2-42.; https://www.ininet.hu/; [email protected]; scope of transferred data:
  • IP address of the user;
  • time of visiting the website;
  • all data filled in at the website and forms is archived on a central data storage (name, password, email address, postal address, telephone number)
• making visit-based statistics: Google Inc. Google Analytics (18 Lower Leeson Street, Dublin 2, DO2 HE97, Rep. of Ireland) (http://analytics.google.com):
  • IP address of the user;
  • time of visiting the website
• Stripe payment system: Stripe Inc. (510 Townsend Street, San Francisco, CA 94103 USA; [email protected]; [email protected]; https://stripe.com/en-hu/privacy#contact-us) scope of transferred data:
  • gross cumulated fee of the services;
  • user’s name
  • user’s address (postal code, city, street name, street number);
  • user’s email address;
  • user’s telephone number (in case the user provided this data during or prior to the purchase);
• delivery: WEBSHIPPY Magyarország Kft. (1044 Budapest, Ezred utca 2. B2 ép. 13.; company reg.nr: 01-09-282775; taxation ID: 25569421-2-41; https://webshippy.com) scope of transferred data:
  • user’s name;
  • user’s address (postal code, city, street name, street number);
• accounting software KBOSS.hu Kft., (1031 Budapest, Záhony utca 7/C.; company reg.nr.: 01-09-303201; taxation ID: 13421739-2-41., https://www.szamlazz.hu/) Scope of transferred data:
  • user’s name;
  • user’s address (postal code, city, street name, street number);
  • e-mail address.

Annex: General Privacy Policy