Privacy Policy

www.munkavedelembudapest.hu

Data Controller (Service Provider)

Service Provider Name: JOB'97 Trade and Service Limited Liability Company

Registered Office: 2161 Csomád, Kossuth Lajos út 79.

Postal Address: Budapest, Szántóföld u. 2/A, 1151

Registry Court: Registry Court of the Metropolitan Court

Company Registration Number: 13 09 125808

Tax Number: 13471703-2-13

Email Address: info@job97.hu

Website: www.munkavedelembudapest.hu

Telephone Number: 06-70-3838-167

Hosting Service Provider Name: Profitárhely Kft.

Hosting Service Provider Address: 6000 Kecskemét, Szolnoki út 23.

1. Principles of Data Management; Data Security

1.1. The Service Provider, as the Data Controller (hereinafter referred to as Data Controller), undertakes to handle personal data obtained in the course of its activities in accordance with the applicable legal provisions, as set out in this Privacy Policy.

The Data Controller processes personal data only for specified purposes, to exercise rights and fulfill obligations.

The processing and recording of data at all stages of data management comply with the requirements of fairness and legality.

The Data Controller processes only personal data that is essential and suitable for achieving the purpose of data processing. The Data Controller handles personal data only to the extent and for the duration necessary to achieve the purpose.

The Data Controller ensures at all stages of data processing that the data subject can learn at any time which data types the Data Controller handles for which purposes, and can prohibit data processing at any time – except for mandatory data processing.

The purpose of data processing and the range of processed data are contained in Section 2 of this Privacy Policy.

This Privacy Policy complies with and is in accordance with the following laws:

• Act CVIII of 2007 on Electronic Commerce Services and Information Society Services

• Act CXII of 2003 on the Right of Informational Self-Determination and Freedom of Information

1.2. The Data Controller designs and performs data processing operations to protect the privacy of the data subjects.

The Data Controller ensures the security of the data and takes the necessary technical and organizational measures and creates the procedural rules required to enforce the provisions of Act CXII of 2011 and other data and secrecy protection rules.

The Data Controller protects the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental destruction, damage, and becoming inaccessible due to changes in the technology used.

2. Legal Basis for Data Processing; Purpose; Processed Data

2.1. Personal data can be processed if the data subject consents or if it is ordered by law or - based on the authority of the law, within the scope defined therein - by a local government decree for public interest purposes.

2.2. A legal declaration of consent by a minor over the age of 16 does not require the consent or subsequent approval of their legal representative.

2.3. In case of registration on the www.munkavedelembudapest.hu website and for sending newsletters, the data processing is based on the data subject’s voluntary - and adequately informed - consent. The data subject’s statement is required for registration and, if separately consented, for sending newsletters.

The data subject provides consent to the Data Controller prior to registration by placing an “X” in the checkbox next to the Privacy Policy during registration. The Data Controller provides the opportunity to read and understand the contents of this Privacy Policy in detail before giving consent. By giving the above consent, the data subject accepts the contents of the Privacy Policy.

This Privacy Policy is continuously accessible in the footer of the www.munkavedelembudapest.hu website.

If the user wishes to receive newsletters, they can give separate consent during or after registration on the website by placing an “X” in the checkbox next to “Subscribe to Newsletter.”

2.4. The Data Controller processes the following data:

In case of registration: name (surname, first name); email address; county and city; indication of being over 16 years old.

In case of sending newsletters: name (surname, first name); email address; county and city.

2.5. Purpose of data processing: Registration on the www.munkavedelembudapest.hu website (first purpose) and sending newsletters (second purpose).

Legal basis for data processing: Voluntary consent of the data subject.

Duration of data processing:

In case of registration: Until the user account is deleted by the user. In case of sending newsletters: Until unsubscribing from the newsletter.

2.6. Persons authorized to data processing and data management: The current executive and employees of the Service Provider. The processed data is exclusively known by the current executive and employees.

2.7. The Data Controller does not transfer data related to the use of the service to third parties. The Data Controller does not transfer the processed data to data controllers or data processors located in third countries.

2.8. The Data Controller reserves the right to unilaterally amend this Privacy Policy to ensure compliance with the current legal requirements.

3. Rights of the Data Subject

3.1. The data subject can request information from the Data Controller about the processing of their personal data. Upon the data subject's request, the Data Controller provides information on the data processed or managed by it, the purpose, legal basis, and duration of data processing, the name, address, and activity related to data processing of the data processor.

The Data Controller provides the requested information in writing within the shortest time from the submission of the request, but no later than 25 days.

3.2. The data subject can request the correction of their personal data from the Data Controller.

If the personal data does not correspond to reality and the correct personal data is available to the Data Controller, the Data Controller corrects the personal data.

3.3. The data subject can request the deletion or blocking of their personal data from the Data Controller.

Personal data must be deleted if:

• it is processed unlawfully;

• the data subject requests it;

• it is incomplete or incorrect;

• the purpose of data processing has ceased, or the retention period has expired;

• it is ordered by court or the Authority.

The Data Controller may refuse to delete data only in cases of mandatory data processing. (e.g., retention obligation based on the Accounting Act)

Instead of deletion, the Data Controller blocks personal data if the data subject requests or if based on the available information it can be assumed that deletion would violate the data subject’s legitimate interests. Such blocked personal data can only be processed as long as the purpose of data processing that excluded the deletion of personal data exists. If the Data Controller does not fulfill the data subject’s request for correction, blocking, or deletion, it provides the factual and legal reasons for rejecting the request in writing within 25 days of receiving the request. In case of rejection of the correction, deletion, or blocking request, the Data Controller informs the data subject about the possibilities of judicial remedy and submitting a complaint to the Authority.

4. Judicial Enforcement; Compensation; Damages

4.1. The data subject can turn to the court if their rights are violated by the Data Controller.

If the Data Controller causes damage to others by unlawfully processing the data subject’s data or violating data security requirements, it is obliged to compensate for it.

If the Data Controller violates the data subject’s personal rights by unlawfully processing their data or violating data security requirements, the data subject may claim damages from the Data Controller.

4.2. Anyone can initiate an investigation by the National Authority for Data Protection and Freedom of Information (NAIH) by reporting that a violation of personal data processing has occurred or there is an imminent danger of such violation.

NAIH contact information:

Postal address: 1530 Budapest, Pf.: 5.

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

Email: ugyfelszolgalat@naih.hu

URL: http://naih.hu

5. Terms Used in this Privacy Policy

Data Subject: any identified or identifiable natural person based on any personal data

Personal Data: data related to the data subject – especially the data subject’s name, identification number, and one or more characteristics of their physical, physiological, mental, economic, cultural, or social identity – and conclusions that can be drawn regarding the data subject from the data

Consent: the voluntary and explicit expression of the data subject's will, based on adequate information, by which they give their unequivocal consent to the processing of personal data relating to them, whether fully or to a specific extent

Objection: the statement of the data subject objecting to the processing of their personal data and requesting the termination of data processing and the deletion of the processed data

Data Controller: the natural or legal person, or a legal entity without legal personality, who or which alone or jointly with others determines the purposes and means of the processing of personal data, makes and executes decisions regarding data processing (including the used means), or has them executed by the data processor

Data Processing: any operation or set of operations performed on data, regardless of the procedure applied, such as collecting, recording, organizing, storing, changing, using, querying, transmitting, disclosing, aligning or combining, blocking, deleting, and destroying data, and preventing further use of the data, making photos, audio, or video recordings, and recording physical characteristics suitable for personal identification (e.g., fingerprint or palm print, DNA sample, iris image)

Data Transfer: making data accessible to a specific third party

Data Deletion: making data unrecognizable in a way that it cannot be restored

Data Blocking: marking data with an identifier to permanently or temporarily restrict its further processing

Data Processing: performing technical tasks related to data processing operations, regardless of the method and means used to perform the operations and the place of application

Data Processor: the natural or legal person, or a legal entity without legal personality, who or which processes personal data on behalf of the Data Controller

Third Party: any natural or legal person, or legal entity without legal personality, who or which is not the same as the data subject, the data controller, or the data processor

Third Country: all states that are not EEA (European Economic Area) states

If you have any questions regarding our company's data management, please contact us at the following addresses:

Company Name: Job '97 Commercial and Service Limited Liability Company

Head Office: 2161 Csomád, Kossuth Lajos út 79.

Phone Number: 06-70-3838-167

Email: info@job97.hu

Managing Director:

Korbuly Márton