Privacy Statement

Translated by google translator

Data protection information of Resultator Ltd.

Resultator Kft. (Registered office: 1162 Budapest, Bodnár St. 52., company registration number: 01-09-883310, tax number: 13986142-2-42, telephone number: 30 / 919-9644, e-mail: info@resultator.com , represented by: Zsófia Aszódi, Managing Director), as Data Controller, considers it important to respect and enforce the data processing rights of its customers and all other natural persons concerned (hereinafter: Stakeholders), therefore informs data subjects that they Acting in accordance with the substantive and procedural rules of Hungarian law in force, the Data Protection and Data Management Regulations in force at any time, and other internal regulations.

This short Data Protection Information is a short summary of the Data Controller’s Data Protection and Data Management Regulations (hereinafter: the Regulations), which has been created with the aim of briefing the data subjects about the most important data protection rules of the Data Controller. This Prospectus shall be deemed to be an appendix to the Regulations, and in respect of issues and topics not discussed in the Prospectus, the provisions of the Regulations and the relevant legal acts shall prevail and shall be interpreted together with them. The full prospectus is continuously available on the website www.resultator.com, as well as on paper at the actual location of data management, 1162 Budapest, Bodnár St. Under number 52.

Who is involved?

The Data Subject is any natural person identified or identifiable, directly or indirectly, on the basis of any specific personal data, whose data is managed by the Data Controller. Thus, the data subjects are primarily those who request the services of the Data Controller, the Employees, the Data Controller and / or those interested in its services, the Data Controller’s natural person Partners, representatives of non-natural person Partners, contacts, possibly other employees, entrants and residents.

What data management activities does the Data Controller perform and for what purpose, for how long does it manage my data?

Request one-time information

The request for information is based on voluntary consent.

Stakeholders: all natural persons who contact the Data Controller and request information from the Data Controller in addition to providing their personal data.

Scope and purpose of data processed:

Name	identification
Phone number	for contact
Email address	for contact
Question content	answer

The purpose of data management is to provide the data subject with appropriate information and to keep in touch.

Duration of data management: until the goal is achieved.

 

Book an appointment through the website

The provision of personal data during the time booking is based on voluntary consent.

Stakeholders: all natural persons who book an appointment on the Data Controller’s website (www.resultator.com) for which they provide their personal data.

Scope and purpose of data processed:

Name	identification
Phone number	for contact
Email address	for contact

The purpose of data management is to provide the data subject with an appointment for a personal meeting.

Duration of data management: until deleted.

 

Request for

The call for proposals is based on voluntary contributions.

Stakeholders: all natural persons who request an offer from the Data Controller in connection with a given service, in addition to providing their personal data.

Scope and purpose of data processed:

Name	identification
Phone number	for contact
Email address	for contact
Question / request content	answer
Selection of the selected service	is required for bidding

The purpose of data management is to provide the data subject with an appropriate offer and to keep in touch.

Duration of data management: until the expiry of the offer.

 

Complaint handling

The complaint is based on voluntary consent, but in relation to the processed data, the data processing is obligatory according to the law (Act CLV of 1997).

Stakeholders: any natural person who wishes to communicate orally or in writing a complaint about a ordered service or the conduct, activity or omission of the Data Controller.

The purpose of data processing is to identify the data subject and the complaint, as well as to record mandatory data from the law.

Scope and purpose of the data processed:

Complaint ID identification	identification
Name	identification
Complaint receipt date	identification
Phone number	contact
Call time	identification
Identification of personal information provided during the conversation	identification
Billing / mailing address	contact
Complained product / service	investigation of a complaint
Attached documents	investigation of a complaint
Reason for complaint	investigation of a complaint
The complaint itself	investigation of a complaint

The purpose of data management is to enable the complaint to be communicated and to keep in touch.

Duration of data processing: The data controller shall keep a record of the complaint and a copy of the response for a period of 5 years from the date of their collection in accordance with the relevant and valid CLV of 1997. Act 17 / A § 7. on a mandatory basis.

 

Invoicing

The request for the data necessary for invoicing is in accordance with Act C. of 2000. (Sztv.) 165§-166. §, § 169.

Stakeholders: all natural persons and sole proprietors using the services of the Data Controller for whom the Data Controller issues an invoice.

Scope and purpose of the data processed:

Name	fulfillment of the obligation to issue an invoice
Address	fulfillment of the obligation to issue an invoice
Tax identification number	fulfillment of the obligation to issue an invoice

The purpose of data management related to invoicing is in accordance with Szvt. fulfillment of the obligation to issue an invoice prescribed by law. The invoice will be transferred to the NAV system.

Duration of data management: up to 8 years.

 

Data management related to the preparation of cash receipts

The request for the data necessary for invoicing is in accordance with Act C. of 2000. (Sztv.) 165§-166. §, § 169.

Stakeholders: individuals and sole proprietors who deposit and pay into the Data Controller’s fund.

Scope and purpose of the data processed:

Name	fulfillment of the obligation to issue a certificate
Address	fulfillment of the obligation to issue a certificate
Tax identification number	fulfillment of the obligation to issue a certificate

The purpose of data management related to the preparation of cash receipts is the Szvt. fulfillment of the obligation to issue a document prescribed by law.

Duration of data management: 8 years.

 

Resume management

The management of CVs is based on voluntary contributions.

Stakeholders: all natural persons who apply for jobs advertised by the Data Controller.

Scope and purpose of the data processed:

Name	identification
Phone	for contact
Email address	for contact
Address	for contact
Professional experience	to evaluate the application
Qualifications	to assess the application

The purpose of resume management is to select and hire employees with the appropriate qualifications or experience for open positions.

Duration of data processing: 1 year or cancellation at the request of the data subject.

 

Management of personal data of participants in training

The processing of personal data of participants in training is based on a legal obligation.

Stakeholders: all natural persons who participate in the trainings and trainings held by the Data Controller.

Scope and purpose of the data processed:

Name	data provision
Telephone	data provision
Electronic address	data provision
Address	data provision
Mailing address	data provision
Gender	data provision
Citizenship	data provision
Social security number	data provision
Tax identification number	data provision
Data related to training	data provision

The purpose of data management is to fulfill the data provision obligation set out in the relevant legislation.

Duration of data management: from the conclusion of the adult education contract until the last day of the eighth year.

 

Send newsletter and DM letter

Data management related to the sending of a newsletter or DM letter is based on voluntary consent.

Stakeholders: all natural persons who subscribe to the service at the Data Controller.

Scope and purpose of data processed:

Name	identification
Telephone	for contact
Email address	for contact

The purpose of data management is to deliver newsletters and DM messages to the data subject.

Duration of data management: until withdrawal of consent (unsubscription).

Who handles my data?

The Data may be processed by the Data Controller’s Employees only to the extent strictly necessary for the performance of their duties, if the Data Controller is employed. If you do not employ an Employee, the Data Controller’s representative will handle the data.

Do you transfer data to another part of the Data Controller?

The processing of personal data is basically performed by the Data Controller or, if the task is outsourced, in the case it is performed by a specific data processor (s). In this case, the Data Controller transfers data to the data processors and is responsible for the activities of the data processors.

The Data Controller may transfer the data specified by the data subject to its contractual Partners if the Data Controller has named the Partner to the data subject prior to the data transfer, has determined the expected data processing time and purpose and the data subject has consented to the data transfer. The Data Controller may also name the Partners by means of an announcement or information, if it makes it available to the data subjects. In the case of a data request from an official authority, it may transfer data to the requesting authority on the basis of the authorization of law.

If required by the data processing activity performed by the Data Controller for its Partners, the Data Controller may transfer data to authorities, persons specified by law or a data processing contract. In this case, the data subject must be informed by the Partner as data controller.

What rights do I have?

The 2011 CXII. Act on the right to information self-determination and freedom of information (abbreviated as Info tv) and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (abbreviated as GDPR ), the data subject’s rights are as follows:

• the right to information,
• right of rectification,
• the right of cancellation,
• the “right  to have forget”,
• the right to block / restrict data,
• the right to protest,
• the right to go to court,
• right to apply to an authority.

The detailed definitions and limits of each right are defined in the Regulations.

Where and how can I request detailed information on the handling and transfer of data and where and how can I exercise my rights?

The Data Controller draws the attention of the data subjects to the fact that the data subjects may make their request for information and the exercise of their other rights, unless this is excluded by law, by sending a statement to the e-mail address info@resultator.com or the Data Controller. The Data Controller shall examine and respond to the statement as soon as possible after receipt, but not later than within 15 days, and shall take the necessary steps in accordance with the provisions of the statement, the Regulations and the law.

Where can I go if my right to self-determination is violated?

National Data Protection and Freedom of Information Authority
Address: 1125 Budapest, Szilágyi Erzsébet avenue 22 / c
Mailing address: 1374 Budapest, PO. 603.
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Web: http://www.naih.hu
E-mail: ugyfelszolgalat@naih.hu

In the event of a violation of the rights of minors, hate speech, exclusionary content, reparation, the rights of the deceased, the violation of reputation:

National Media and Communications Authority 1015 Budapest, Ostrom u. 23-25.
Mailing address: 1525. Pf. 75
Tel: (06 1) 457 7100
Fax: (06 1) 356 5520
E-mail: info@nmhh.hu

The person concerned can go to court if his or her rights are violated. The court is acting out of turn in the case. The Data Controller is obliged to prove that the data management complies with the provisions of the law.

In the event that the Data Controller violates the data subject’s right to privacy by illegally processing the data subject’s data or violating the data security requirements, the Data Controller may claim damages from the Data Controller.

How does the Data Controller ensure the security of my data?

The data controller ensures the security of the data. To this end, it shall take the technical and organizational measures and establish the procedural rules necessary to enforce the applicable legislation, data protection and confidentiality rules.

The controller shall take appropriate measures to protect the data against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction and damage, as well as becoming inaccessible due to changes in the technology used.

The Data Controller (also) ensures the enforcement of the data security rules by means of internal regulations, instructions and procedures separate from the Data Protection and Data Management Regulations and this Prospectus.

When defining and applying data security measures, the controller shall take into account the state of the art and shall choose from several possible data management solutions which ensure a higher level of protection of personal data, unless this would be a disproportionate burden.

Within the scope of its tasks related to IT protection, the Data Controller shall in particular ensure:

• Measures to protect against unauthorized access, including protection of software and hardware devices and physical protection (access protection, network protection);
• Measures to ensure the possibility of restoring data files, including regular backups and separate, secure management of copies (mirroring, backup);
• Protection of data files against viruses (virus protection);
• On the physical protection of data files and the devices carrying them, including protection against fire damage, water damage, lightning, other elemental damage, and on the recoverability of damage resulting from such events (archiving, fire protection).

Other informations

The data controller declares that

handles personal data in accordance with the relevant legislation and the Data Protection and Data Management Regulations,
reserves the right to change the Prospectus due to its harmonization with the legal background to be amended in the meantime, the Data Protection and Data Management Regulations and other internal regulations.

September 17, 2020