Privacy policy

DATA MANAGEMENT INFORMATION ON WEBSITE-RELATED DATA MANAGEMENT

CSABAcast Ltd. (3032 Apc, Industrial Park 2., Cg.10-09-039207, info@csabacast.hu) (hereinafter referred to as the "Company" ) informs the natural person visiting the website www.csabacast.hu(hereinafter referred to as the "Website") that it processes personal data in connection with the use of the Website, as follows:

1. INTERPRETATIVE PROVISIONS

1.1. Data processor::

The natural or legal person who processes personal data on behalf of the Data Controller.

1.2. Data management::

Any operation, whether or not by automated means, such as collection, recording, organisation, storage, alteration, retrieval, use, disclosure, restriction or deletion of personal data or data files.

1.3. Data Controller::

The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.4 Recipient:

The natural or legal person, public authority, agency or any other body with whom or to which personal data are disclosed, whether or not a third party. Public authorities which may have access to personal data in the context of an individual investigation in accordance with Union or Member State law are not recipients; the processing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing.

1.5. Consent of the data subject

A voluntary, specific, adequately informed and unambiguous indication of the data subject's wishes by which they confirm, by a statement or by an act expressing their unambiguous consent, that they give their consent to the processing of personal data concerning them.

1.6 Personal Data::

Any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, for example by reference to a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. DATA MANAGEMENT

1. Information about visitors' data on the Website

During the visits to the Company's website, one or more cookies are sent to the computer of the person visiting the website, through which their browser(s) will be uniquely identified, provided that the person visiting the website has given their explicit (active) consent by ticking the relevant box, after being clearly and unambiguously informed.

Cookies are used solely to improve the user experience and to automate the login process. The cookies used on the website do not store any personally identifiable information and the Company does not process any personal data in this context.

1. Filling in the contract form

  Legal basis:                                the data subject's consent given by filling in and submitting the "contact" or "send message" section on the Company's Website

Purpose:                                       to make a contact in connection with the preparation of a contract or for information purposes

Data concerned:                name, e-mail address, subject and content of the message

Duration: until the consent is withdrawn, but for a maximum of 1 year

1. Application for a job offer

  Legal basis:                               consent of the data subject, given by filling in and sending the text "send application" on the Company's website

Purpose:                                       to make a contact in connection with the conclusion of a contract of employment, to carry out a selection process

Data concerned:                name, telephone number, e-mail address, profile, job title, CV

Duration: until consent is withdrawn, but for a maximum of 3 years

3. RIGHTS OF DATA SUBJECTS

The data subject may request information about the processing of their personal data, as well as request the correction, deletion (except for mandatory data processing), withdrawal of their data, and exercise their rights to data portability and objection in the manner indicated at the time of data collection or through the Company's contact details.

Right to information:

The Company takes appropriate measures to provide the data subjects with all information related to the processing of personal data, as mentioned in Articles 13 and 14 of the GDPR, and ensures that all notifications specified in Articles 15-22 and 34 are provided in a concise, transparent, intelligible, and easily accessible format, using clear and plain language.

Requests for information can be submitted in writing via the contact details provided in this notice. Upon request, after verifying the identity of the data subject, information may also be provided verbally.

Right of Access:

The data subject has the right to receive confirmation from the Company as to whether their personal data is being processed, and if so, to access the following information:

• The purposes of processing;
• The categories of personal data concerned;
• The recipients or categories of recipients with whom the personal data has been or will be shared;
• The planned storage period of personal data;
• The rights to rectification, erasure, restriction of processing, and objection;
• The right to lodge a complaint with a supervisory authority;
• Information about data sources;
• The existence of automated decision-making, including profiling.

The Company will provide the requested information within one month of receiving the request.

Right to Rectification::

The data subject may request the correction of inaccurate personal data concerning them and the completion of incomplete data processed by the Company.

Right to Erasure:

The data subject has the right to request the deletion of their personal data without undue delay if one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected or processed;
• The data subject withdraws their consent, and there is no other legal basis for processing;
• The data subject objects to the processing, and there are no overriding legitimate grounds for processing;
• The personal data has been unlawfully processed;
• The personal data must be deleted to comply with a legal obligation under EU or Member State law;
• The personal data was collected in relation to the offer of information society services.

Data deletion cannot be requested if processing is necessary for:

• Exercising the right to freedom of expression and information;
• Compliance with a legal obligation that requires processing under EU or Member State law, or for the performance of a task carried out in the public interest or the exercise of official authority;
• Public health interests or for archival, scientific, or historical research purposes, or statistical purposes in the public interest;
• The establishment, exercise, or defense of legal claims.

Right to Restriction of Processing:

The Company will restrict processing at the request of the data subject if:

• The data subject contests the accuracy of the personal data, for the period necessary to verify its accuracy;
• The processing is unlawful, but the data subject opposes erasure and requests restriction instead;
• The Company no longer needs the data for processing, but the data subject requires it for legal claims;
• The data subject has objected to processing, pending verification of whether the Company’s legitimate grounds override theirs.

If processing is restricted, personal data may only be processed with the data subject’s consent or for legal claims, for the protection of another person’s rights, or for reasons of public interest.

The Company will inform the data subject before lifting the restriction.

Right to Data Portability:

If processing is carried out by automated means and based on consent or contract, the data subject has the right to receive their personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller.

Right to Object:

The data subject may object to processing based on public interest, the exercise of official authority, or the legitimate interests of the Company or a third party, including profiling. In such cases, the Company will cease processing unless it demonstrates compelling legitimate grounds that override the data subject’s interests or if processing is necessary for legal claims.

If personal data is processed for direct marketing purposes, the data subject may object at any time, including profiling related to direct marketing. In such cases, processing will cease immediately.

Automated Decision-Making and Profiling:

The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, if these produce legal or similarly significant effects.

This does not apply if:

• The decision is necessary for a contract with the Company;
• It is authorized by applicable law, with safeguards for data subject rights;
• The data subject has explicitly consented.

Right to Withdraw Consent:

The data subject may withdraw their consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Right to Legal Remedies:

Right to Court Action:

If the data subject’s rights are violated, they may take legal action. The court will act promptly.

Data Protection Authority Procedure:

Complaints may be submitted to the National Authority for Data Protection and Freedom of Information at www.naih.hu.

The Company's Privacy and Data Protection Policy provides further information on the processing of personal data, in particular on the identity and activities of data processors and data security measures.