COMPANY OPERATION MANAGEMENT KFT.
PRIVACY POLICY
1. Name of data controller
Data controller: Company Operation Management Limited (hereinafter: Company)
Representative of the data controller: Márton György Király managing director
Headquarters: 2724 Újlengyel, Határ út 12.
E-mail: info@companyoperationmanagement.hu
Website contact: https://companyoperationmanagement.hu
2. Legislation underlying data management
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC hereinafter referred to as "GDPR").
3. Individual data management
3.1. Data management relating to electronic contact and newsletter sending
3.1.1. Scope of data processed and purpose of data management
| Personal data | The purpose of data management |
| Surname and first name | The name serves the purpose of communication between the Company and the applicant, as well as the personalizability of the service. |
| E-mail address | The e-mail address is used for communication between the Company and the applicant. |
3.1.2. Legal basis for data management
The legal basis for data processing is the consent of the data subject to the above data provided during the sending of the message (Article 6 (1) (a) GDPR).
3.1.3. Duration of data management
The Company will process the contact information provided during the sending of the message until the user's consent is revoked.
3.2. Other personal information logged by the system
3.2.1. The scope of the managed data and the purpose of the data management
| Personal data | The purpose of data management |
| IP address | The identification number assigned by the ISP to the user's device that logs on to the system. The Company manages the system to ensure its IT security. |
| Login Time | The time the user logs in to the system. The Company manages the system in order to ensure its IT security. |
3.2.2. Legal basis for data management
The legal basis for data management is the legitimate interest of the Company in safeguarding the security of the data processed in the system and the IT infrastructure ensuring the operation of the system (Article 6 (1) (f) GDPR). In order to prevent possible malicious or abusive use, to take appropriate data and information security measures (eg vulnerability and load testing), it is essential to log the above data in the system. The legitimate interest in ensuring the secure operation of the system is proportionate to the handling of the above personal data logged in connection with logins. The Interest Balance Test proving this finding is set out in Section 1 of this Privacy Notice is attached.
3.2.3. Duration of data management
The system stores the data indicated here to the extent necessary and proportionate to achieve the goal, for 3 (three) months from their creation, and then deletes them automatically.
4. Data access and data security measures
4.1. Access to and transfer of data
4.1.1. The identity of the potential data controllers entitled to access the data
Employees of the Data Controller, for the time and to the extent necessary to perform their duties.
4.1.2. Data processors
Data processors not mentioned for each data processing:
Name of data processor: Fehér Rendszerház Informatikai Kft.
Headquarters: 2040 Budaörs, Ősz utca 21.
Purpose of data processing: Website creator and maintainer
Name of data processor: Profitárhely KFT.
Headquarters: 6000 Kecskemét, Szolnoki út 23.
Purpose of data processing: The provider of the hosting
4.2. Data security measures
The Company stores the personal data provided in the notification on the Company's own or leased servers. The Company shall take appropriate IT, technical and personal measures to protect the personal data it manages against, inter alia, unauthorized access or alteration. The Company treats personal data with the utmost care and in strict confidence.
5. Rights related to data management
5.1. Right to request information
The data subject may request written information from the Company through the contact details provided in point 1 on what personal data, on what legal basis, for what data processing purpose, from what source, for how long, the Company to whom, when, on what legal basis, which personal data access to your personal data or to whom you have transferred your personal data. The Company shall comply with the request of the data subject within a maximum of one month, by letter or e-mail sent to the contact details provided by him.
5.2. Right to rectification
The data subject may request in writing that the Company change any of his / her personal data (for example, at any time by changing his / her e-mail address or postal contact details) through the contact details provided in point 1. The Company will comply with the request within a maximum of one month and will notify you by letter or e-mail to the contact details provided by the Company.
5.3. Right of cancellation
The data subject may request the deletion of his / her personal data in writing through the contact details provided in point 1. The request for cancellation will be rejected by the Company if the Company is required by law to further store personal data (Article 6 (1) (c) GDPR). However, if there is no such obligation, the Company will comply with the request within a maximum of one month and will notify the person concerned by letter or e-mail to the contact details provided for this purpose.
5.4. Right to block (restrict data processing)
The data subject may request in writing, through the contact details provided in point 1, that his or her personal data be blocked by the Company (by clearly indicating the limited nature of the data processing and ensuring separate handling from other data). The blocking lasts as long as the reason given by the data subject necessitates the storage of the data. The data subject may request the blocking of the data, for example, if he or she believes that his or her application has been handled unlawfully by the Company, but it is necessary for the official or court proceedings initiated by the Company not to delete the application. In this case, the Company will continue to store the personal data (such as the particular submission) until requested to do so by the authority or the court, after which the data will be deleted.
5.5. Right to protest
The data subject may object in writing to the data processing through the contact details provided in point 1, if the Company processes the personal data e.g. for public opinion or scientific research.
6. Possibility of enforcement related to data management
6.1. Initiation of legal proceedings
If the data subject finds that the processing of his or her personal data is unlawful, he or she may initiate a civil lawsuit against the Company. The trial falls within the jurisdiction of the tribunal. The lawsuit - at the option of the person concerned - can also be initiated before the court of the person's place of residence (you can view the list and contact details of the courts through the following link: http://birosag.hu/torvenyszekek).
6.2. NAIH procedure
If the data subject finds that the processing of his or her personal data is unlawful, he or she can lodge an online complaint with the National Data Protection and Freedom of Information Authority. The available link: https://www.naih.hu/online-uegyinditas.html.
Personal appointment by following the link: https://www.naih.hu/uegyfelszolgalat,--kapcsolat.html
Please note that the Authority will only investigate complaints if the data subject has already contacted the data controller (our Company) regarding his / her complaint prior to his / her notification to the Authority and this has not led to a result.
Annex:
Budapest 2020, October 27
