Privacy policy

DATA MANAGEMENT INFORMATION ON WEBSITE-RELATED DATA MANAGEMENT

CSABAcast Ltd. (3032 Apc, Industrial Park 2., Cg.10-09-039207, info@csabacast.hu) (hereinafter referred to as the "Company" ) informs the natural person visiting the website www.csabacast.hu(hereinafter referred to as the "Website") that it processes personal data in connection with the use of the Website, as follows:

1. INTERPRETATIVE PROVISIONS

1.1. Data processor::

The natural or legal person who processes personal data on behalf of the Data Controller.

1.2. Data management::

Any operation, whether or not by automated means, such as collection, recording, organisation, storage, alteration, retrieval, use, disclosure, restriction or deletion of personal data or data files.

1.3. Data Controller::

The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.4 Recipient:

The natural or legal person, public authority, agency or any other body with whom or to which personal data are disclosed, whether or not a third party. Public authorities which may have access to personal data in the context of an individual investigation in accordance with Union or Member State law are not recipients; the processing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing.

1.5. Consent of the data subject

A voluntary, specific, adequately informed and unambiguous indication of the data subject's wishes by which they confirm, by a statement or by an act expressing their unambiguous consent, that they give their consent to the processing of personal data concerning them.

1.6 Personal Data::

Any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, for example by reference to a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. DATA MANAGEMENT

1. Information about visitors' data on the Website

During the visits to the Company's website, one or more cookies are sent to the computer of the person visiting the website, through which their browser(s) will be uniquely identified, provided that the person visiting the website has given their explicit (active) consent by ticking the relevant box, after being clearly and unambiguously informed.

Cookies are used solely to improve the user experience and to automate the login process. The cookies used on the website do not store any personally identifiable information and the Company does not process any personal data in this context.

1. Filling in the contract form

  Legal basis:                                the data subject's consent given by filling in and submitting the "contact" or "send message" section on the Company's Website

Purpose:                                       to make a contact in connection with the preparation of a contract or for information purposes

Data concerned:                name, e-mail address, subject and content of the message

Duration: until the consent is withdrawn, but for a maximum of 1 year

1. Application for a job offer

  Legal basis:                               consent of the data subject, given by filling in and sending the text "send application" on the Company's website

Purpose:                                       to make a contact in connection with the conclusion of a contract of employment, to carry out a selection process

Data concerned:                name, telephone number, e-mail address, profile, job title, CV

Duration: until consent is withdrawn, but for a maximum of 3 years

3. THE RIGHTS OF DATA SUBJECTS

The data subject may request information about the processing of their personal data, and may request the rectification, erasure or withdrawal of their personal data, except for mandatory data processing. They may also exercise their right to data portability and objection in the manner indicated when the data were collected, or by contacting the Company.

Right to information:

The Company shall take appropriate measures to provide data subjects with all the information on the processing of personal data referred to in Articles 13 and 14 of the GDPR and each of the notifications referred to in Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible and easily accessible form, in clear and plain language.

The right to information may be exercised in writing through the contact details of the Company as set out in this notice. The information may also be provided orally to the data subject upon request and after verification of their identity.

The data subject's right of access:

The data subject has the right to receive feedback from the Company as to whether or not their personal data are being processed and, if such processing is ongoing, the right to access the personal data and the following information:

• the purposes of the processing;
• the purposes for which the personal data are being processed; the categories of personal data concerned;
• the recipients or categories of recipients to whom or which the personal data have been or will be disclosed;
• the intended period of storage of the personal data;
• the right to rectification, erasure or restriction of processing and the right to object;
• the right to lodge a complaint with a supervisory authority;
• information on the data sources;
• the fact of automated decision-making, including profiling.

The Company shall provide the information within a maximum of one month from the date of the request.

Right to rectification::

The data subject may request the correction of inaccurate personal data relating to them processed by the Company and the completion of incomplete data.

Right to erasure:

The data subject shall have the right, upon request and without undue delay, to have personal data relating to them erased by the Company if one of the following grounds applies:

• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
• the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
• the personal data have been unlawfully processed;
• personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the Company;
• personal data are collected in connection with the provision of information society services.

The erasure of data cannot be initiated if the processing is necessary:

• to exercise the right to freedom of expression and information;
• for the purposes of complying with an obligation under Union or Member State law to which the Company is subject to which the processing of personal data is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company;
• for archiving, scientific and historical research purposes or for statistical purposes in the public interest in the field of public health; or
• to bring, enforce or defend legal claims.

Right to restriction of processing:

The Company will restrict processing at the request of the data subject if one of the following conditions is met:

• the data subject contests the accuracy of the personal data, in which case the restriction applies for the period of time necessary to allow the accuracy of the personal data to be verified;
• the data processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use;
• the Company no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
• the data subject has objected to the processing; in this case, the restriction applies for the period until it is established whether the legitimate grounds of the Company prevail over the legitimate grounds of the data subject.

Where processing is subject to restriction, personal data, other than storage, may be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or of an important public interest of the Union or of a Member State.

The Company shall inform the data subject of the lifting of the restriction on processing.

Right to data portability:

Where processing is carried out by automated means and the Company processes the data on the basis of the data subject's consent or on the basis of a contractual legal basis, the data subject has the right to receive the personal data relating to them which they have provided to the Company in a structured, commonly used, machine-readable format and to transmit these data to another controller.

Right to object:

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company, or necessary for the purposes of the legitimate interests pursued by the Company or a third party, including profiling based on the aforementioned provisions. In the event of an objection, the Company may no longer process the personal data, unless there are compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning them for such purposes, including profiling, where it is related to direct marketing. In the event of an objection to the processing of personal data for direct marketing purposes, the data shall not be processed for those purposes.

Automated decision-making in individual cases, including profiling:

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

The above right shall not apply where the processing

• necessary for the conclusion or performance of a contract between the data subject and the Company;
• is permitted by Union or Member State law applicable to the Company which also lays down appropriate measures to protect the rights and freedoms and legitimate interests of the data subject; or
• is based on the explicit consent of the data subject.

Right of withdrawal:

The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.

Right to legal remedies:

Right to apply to the courts:

The data subject may take legal action in the event of a breach of their rights. The court shall rule on the case out of turn.

Data protection authority procedure:

Complaints can be lodged with the National Authority for Data Protection and Freedom of Information at the contact details indicated on the website www.naih.hu.

The Company's Privacy and Data Protection Policy provides further information on the processing of personal data, in particular on the identity and activities of data processors and data security measures.