PRIVACY NOTICE

1. Preamble

The Budapest Public Foundation for the Development of Entrepreneurship (hereinafter referred to as the “Controller” or the “Public Foundation”) informs its clients and contractual partners in this Privacy notice about the scope of personal data it processes in relation to the given partner, its practices in the processing of personal data, the organizational and technical measures it takes to protect personal data, as well as the rights of the data subjects, the ways and means of exercising them.

We would like to draw your attention to the fact that the Public Foundation processes the personal data provided to it in compliance with the applicable Hungarian and European legislation and ethical standards, and in all cases takes the technical and organizational measures necessary for the proper and secure processing of the data.

By providing your personal data, you accept the terms and conditions of this privacy notice. Please read this Privacy notice regularly, as any changes to it will automatically apply to the processing of the personal data you provide, even if a previous Privacy notice was in force when you provided your personal data.

This Privacy Notice applies only to personal data of natural persons, with the understanding that data of legal persons and other entities that are not legal persons are not considered personal data.
2. Data controller and data protection officer data

2.1 Public Foundation

Name: Budapest Public Foundation for the Development of Entrepreneurship
Headquarters: 1072 Budapest, Rákóczi út 18.
Statistical number sign: 18052851-9499-561-01
VAT-Number: 18052851-2-42

2.2 The data protection officer

Name: Dr. Miklós Péter
Mailing address: 1117 Budapest, Völgycsillag utca 4., 6th floor 02. a.
E-mail address: info@doboskohidi.eu

3. Purpose, scope, legal basis and duration of the data processed

3.1 Data processing related to cooperation with business partners

Purpose of the data processing The purpose of processing the data is to establish a business relationship, to ensure the proper performance of contracts.

Scope of the data processing The Public Foundation processes the name, e-mail address, telephone number and job title of the designated contact person of the business partner or the business partner himself or herself.

Legal basis of the data processing The Public Foundation processes the personal data of the designated contact person on the basis of the legitimate interest of the Public Foundation or the legal person business partner [Article 6(1)(f) GDPR].

It is in the legitimate interest of both the Public Foundation and the business partner that the representative of the Public Foundation is able to contact the business partner or its designated employee in order to conclude a contract or other business relationship or to perform a contract. This necessarily requires the processing of certain personal data.

Where the business partner is an individual (including self-employed persons), the processing is necessary for the performance of the contract between the Public Foundation and the business partner [Article 6(1)(b) GDPR].

Duration of the data processing Personal data of business partners and their contacts will be processed by the Public Foundation for as long as necessary for the purposes of communication and as long as permitted by the relevant legal provisions (5 years from the performance or termination of the contract under Act V of 2013, and 8 years from the issue of the invoice under Act C of 2000).

3.2. Data processing related to the organization, management and accounting of events

Purpose of the data processing The purpose of processing the data is to identify and record visitors when registering for events and workshops (events) organized by the Public Foundation, to document the events by making images and videos, to promote the event (publicly sharing images and videos of the event) and to fulfil the accounting obligations related to the organization of the event.

Scope of the data processing The Public Foundation processes the name and signature of persons attending the events, their e-mail addresses of invited persons, and in case of making photo and video recordings, the identifiable image of the visitors in the recordings.

Legal basis of the data processing The Public Foundation processes the personal data related to the organization and management of events on the basis of the consent of the visitors [Article 6(1)(a) GDPR]. The accounting obligations related to the events are based on law, and the processing of data by the Public Foundation is therefore necessary to comply with legal obligations (Article 6(1)(c) GDPR, including Act C of 2000 on Accounting, Act CL of 2017 on the Rules of Taxation, and specific legislation applicable to the projects). In the case of mass recordings, the legal basis for processing is the legitimate interest of the Public Foundation of documenting the events (Article 6(1)(f) GDPR).

Duration of the data processing In the case of data processing based on consent, the Public Foundation processes personal data until the visitor’s consent is withdrawn, and data processed on the basis of legitimate interest until the visitor objects. In order to fulfil its accounting obligations, the Public Foundation processes the relevant personal data for the period specified in the legislation (including Act C of 2000 on Accounting, Act CL of 2017 on the Rules of Taxation, and the specific legislation applicable to the projects).

4. Data processing related to visits to the Public Foundation’s website

The website www.bvk.hu (hereinafter: Website) operated by the Public Foundation uses cookies, which are files that provide information about the user’s browsing habits, but do not store any personal information. Cookies enable the Public Foundation to improve its services and enhance the user experience. By studying the data provided by the cookies, the Public Foundation can provide a more varied user experience, tailored to the needs of its visitors.

You can delete the use of cookies from your own computer or prevent their use in your browser. The information collected by the cookies will not be sold, rented or otherwise distributed by the Public Foundation to third parties, except to the extent necessary to provide the services for which you have previously and voluntarily provided this information.

A list of cookies used on the Website can be found in a separate annex.

The Website may contain links to independent sites controlled and maintained by third parties. Since the Public Foundation does not control the use of information by such third parties, in all such cases the provisions of the third party’s privacy notice shall govern, for which the Public Foundation assumes no responsibility and cannot be held legally liable.

The Public Foundation reserves the right, at its sole discretion, to modify any part of these rules at any time. Please check the Website regularly for any changes. Your continued use of the Website following the posting of changes to this Privacy notice will constitute your acceptance of those changes and the current policy.

5. The use of a data processor

The Public Foundation is entitled to use contracted partners to carry out tasks related to data management operations, which can be summarized as follows:

• Tárhely.Eu Kft.
o service: hosting service
o contact details: www.tarhely.eu
• Achron Informatika Kft.
o service: IT service provider
o contact details: www.achron.hu
• Zoom Video Communications, Inc.
o service: video conferencing service
o contact details: www.zoom.us
• MiniCRM Zrt.
o service: customer service management system
o contact details: https://www.minicrm.hu/
• Trello, Inc.
o service: customer service management system
o contact details: https://trello.com/
• Eventbrite
o service: registration to events
o contact details: https://eventbrite.com/
• Google LLC
o service: registration to events
o contact details: https://support.google.com/policies/answer/9581826?hl=en&visit_id=638201003841458598-1713779135&rd=1

These contractors process personal data on behalf of the Public Foundation and are only authorized to act on its instructions. The Public Foundation monitors the work of the contractors. The Public Foundation may only use data processors that offer adequate guarantees, in particular as regards their expertise, reliability and resources, to implement technical and organizational measures to ensure compliance with the requirements of the GDPR, including the security of data processing.

6. Data transmission

The Public Foundation uses Eventbrite as a data processor for the registration to events, which may transfer personal data to a data controller established in the USA. Eventbrite declares that with respect to Personal Data transferred from the European Economic Area, it has incorporated the New EU SCCs that shall apply and form part of its Data Processing Abbendum, available under https://www.eventbrite.com/support/articles/en_US/Troubleshooting/data-processing-addendum-for-organizers?lg=en_US.

7. Persons entitled to access the data

The employees of the Public Foundation process data solely for the performance of their duties as defined in their employment contracts and job descriptions.

8. Basic data security measures

The Public Foundation will process personal data with the utmost care, in strict confidence, only to the extent necessary and, where consent is given, in accordance with any provisions of the person giving it.

The Public Foundation takes great care to ensure the secure management of personal data and has therefore taken the technical and organizational measures and established the procedural rules necessary to enforce data management and data protection legislation. The Public Foundation regularly reviews these measures and rules and modifies them where necessary.

9. Your rights and the rules governing the exercise of your rights

Right to request information You can request information about the personal data processed by the Public Foundation. In this case, the Public Foundation will inform you about the personal data processed, the purposes for which the data are processed, the duration of the processing, your rights in relation to the processing and your right to lodge a complaint with the National Authority for Data Protection and Freedom of Information.

Right to make a copy You may request a copy of the personal data processed by the Public Foundation. In such a case, the Public Foundation will send a copy of the personal data processed about you to the contact details (e-mail address, postal address) you have provided.

Right to modify The requested Public Foundation will, upon your request, amend or clarify your personal data or continue to store the new personal data provided by you.

Withdrawal of consent
If the processing was based on your consent, you have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of the processing based on consent prior to the withdrawal.

Right to erasure You can request the deletion of your personal data by sending a letter to the contact details of the Public Foundation. The Public Foundation may refuse your request only in the cases specified by the GDPR.

Right to be forgotten
If the Public Foundation has disclosed your personal data and the personal data must be deleted, the Public Foundation will take all reasonable steps to inform the data controllers receiving the disclosed data that you have requested the Public Foundation to delete the personal data.

Right to restriction
You may request the blocking of your personal data if
– the processing is unlawful, and you oppose the erasure of your personal data and instead request the restriction of their use;
– the Public Foundation no longer needs the personal data, but you request the blocking of the data for the establishment, exercise or defense of legal claims.

In the case of a right to restriction, you must indicate the reason for the restriction. The Public Foundation’s request for restriction of processing will be met by storing the personal data separately from any other personal data. For example, in the case of electronic files, they are stored on an external storage medium and paper files are stored in a separate folder.

Right to data portability You have the right to receive your personal data in a commonly used format (in particular .pdf, .doc) and to transfer it to another controller. You may request that the Public Foundation transfer your personal data directly to another controller.

Right to protest
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of a legitimate interest. The Public Foundation will then examine your legitimate interests and may process the personal data primarily where the processing relates to the establishment, exercise or defense of legal claims.

The Foundation will comply with your request within one month, which may be extended by up to two months.

If the application is refused, the Foundation will inform you within one month of receipt of the application of the reasons for the refusal and of the right to lodge a complaint with the authority and to seek judicial redress.

If the Public Foundation has reasonable doubts about the identity of the person making the request, it may request the information necessary to confirm the identity of the person concerned. This may be the case, in particular, where the data subject exercises his or her right to request a copy, in which case it is reasonable for the Public Foundation to satisfy itself that the request originates from the person entitled.

10. Your enforcement options

To exercise your rights in relation to data processing, you can contact the Data Protection Officer of the Public Foundation using the contact details provided above. You may submit your claims or complaints in writing, electronically or in person, with a record, to the Data Protection Officer. The Data Protection Officer will consider the request or complaint on its merits within 30 days and will investigate it.

In order to enforce your rights, you may initiate an official procedure with the National Authority for Data Protection and Freedom of Information (Postal address: 1363 Budapest, Pf. 9., e-mail address: ugyfelszolgalat@naih.hu) to verify the lawfulness of the actions of the Public Foundation, or if you consider that the data processing of the Public Foundation does not comply with the legal requirements.

You can also take your case directly to court if you believe that the Public Foundation is infringing the law in its processing or is causing you harm in its unlawful practices.

11. Amendments to the privacy notice

The Public Foundation reserves the right to amend this policy at any time by unilateral decision.

Budapest, May 2023

List of cookies used on this website

Annex: List of cookies used on the website

Name of the cookie Name of service provider Data storage time Cookie function
__sharethis_cookie_test__ bvk.hu session Necessary
CookieConsent bvk.hu 1 year Necessary
csrftoken mixcloud.com 1 year Necessary
JSESSIONID nr-data.net session Necessary
rc::a google.com persistent Necessary
_ga bvk.hu 2 years Statistics
_ga mixcloud.com 2 years Statistics
_gat mixcloud.com 1 day Statistics
_gid bvk.hu 1 day Statistics
_gid mixcloud.com 1 day Statistics
chid mixcloud.com session Statistics
collect google-analytics.com session Statistics
mx_t mixcloud.com 10 years Statistics
previmpr mixcloud.com session Statistics
ads/ga-audiences google.com session Marketing
GPS youtube.com 1 day Marketing
IDE doubleclick.net 1 year Marketing
p2 scorecardresearch.com session Marketing
st_samesite consensu.org session Marketing
test_cookie doubleclick.net 1 day Marketing
UID scorecardresearch.com 2 years Marketing
UIDR scorecardresearch.com 2 years Marketing
VISITOR_INFO1_LIVE youtube.com 179 days Marketing
YSC youtube.com session Marketing
yt-remote-cast-installed youtube.com session Marketing
yt-remote-connected-devices youtube.com persistent Marketing
yt-remote-device-id youtube.com persistent Marketing
yt-remote-fast-check-period youtube.com session Marketing
yt-remote-session-app youtube.com session Marketing
yt-remote-session-name youtube.com session Marketing