Privacy notice on data management on website operation

Dr. Sándor Békés attorney-at-law (hereinafter: the „Controller”) provides the following information regarding the operation of the website https://drbekes.hu according to articles 13 and 14 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

Identity and the contact details of the Controller

Source of the personal data processed by the Controller: The Controller records personal data during the use of the website (if the inquiry is sent to the Controller). The data subject gives his or her consent by providing the data and then by contacting the Contoller directly. Consent may be withdrawn at any time by using the contact details provided in this information sheet. The withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal.

The Controller shall transmit the personal data processed to the competent authorities in cases specified by law, upon request by public authorities.

RIGHTS OF DATA SUBJECTS

The natural persons concerned by the data processing have the following rights related to the data processing.

1. Right of access:

Data subjects have the right to obtain confirmation using the given contacts as to whether or not personal data concerning them are being processed and, where that is the case, access to the personal data and the following information:

• the purposes of the processing,
• the categories of personal data concerned,
• the recipients or categories of recipient to whom the personal data have been or will be disclosed,
• the envisaged period for which the personal data will be stored,
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing,
• the right to lodge a complaint,
• the existence of automated decision-making, including profiling, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Information shall be provided without undue delay, in one month from receiving your request. Primarily, Controller provides information in the same form as the request is received.

Controller provides information free for the first time in each calendar year. For requests filed repeatedly for the same scope of data, Controller may charge administrational fees, provided that no infringement found and no rectification was necessary.

Gross administrational fee shall be 1,000 HUF per personal data

2.    Rectification

In case personal data processed by the Controller is inaccurate, and accurate data is available or sent them, the Controller will rectify such personal data.

3.    Erasure of personal data

Controller erase processed personal data if:

• it has been unlawfully processed;

• you withdraw your consent and there is no other legal ground for the processing;

• you object to the processing

• it is no longer necessary in relation to the purposes for which they were collected or otherwise processed;

• it has to be erased for compliance with a legal obligation.

4.    Right to restriction

Restriction of the data processing shall take place in the following cases:

• if the data subject contests the accuracy of the personal data (for the period of verifying accuracy)
• if the processing is unlawful and the data subject do not request erasure,
• if the Controller does not need the personal data for the purposes of the processing any more, but they are required by you for the establishment, exercise or defence of legal claims;
• if the data subject objects to processing (for the period of studying the objection assessing whether legitimate interests of the Controller or the data subjects shall prevail)

In case of restriction of processing, the Controller will not process the concerned personal data (except from storage). Controller will send prior notification before lifting restrictions.

5.    Objection

Given that no data processing is carried out in the context of the operation of this website on the basis of exercising public authority or for the purpose of asserting a legitimate interest, the data subjects have no right to object. 

6.    Lodging a complaint

In case the data subject believes that the data processing is detrimental, he/she may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)

7. Data portability

On request, Controller will send the personal data concerning the data subjects, in a structured, commonly used and machine-readable format.

8. Compensation for damages, restitution

If the Controller causes the data subjects or others any damage by unlawful or unsafe processing of personal data, the person suffered damage is entitled to claim compensation for damages. In case the harm affects rights relating to personality, the affected person shall be entitled to claim for restitution. Controller shall not bear liability if the damages are the result of an unavoidable cause beyond the course of processing or caused by the data subject’s intentional or grossly negligent behavior

Exercising claims

1.    Contacting the Controller

If the data subjects believe that the Controller does not act lawfully processing the personal data, they first should share their comment with the Controller first to deal with it the fastest and most effective way.

2.    Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)

In case of unlawful processing, data subjects may lodge a complaint with NAIH.

Contacts of NAIH:

webpage: http://www.naih.hu/

address: 1055 Budapest Falk Miksa u. 9-11.

postal address: 1363 Budapest, Pf.: 9.

e-mail: ugyfelszolgalat@naih.hu

3.    Going to court

Data subjects are entitled to exercise their claims in front of court. General courts shall have competence of the procedure. Data subjects may initiate trial on the general court that has jurisdiction either in their residential address or the Controller’s registered seat.