Information on Data Processing, Declarations, Consents in relation to Novathon
Who controls your personal data?
The data controller is Recovery Zrt. (1027 Budapest, Medve utca 4–14.)
Telephone: (+36 1) 423 1000 Fax: (+36 1) 489 6500
The data processor is:
- CIB Bank Zrt. (1027 Budapest, Medve utca 4–14., Telephone: (+36 1) 423 1000 Fax: (+36 1) 489 6500
- Progressive Bex Kft.(1066 Budapest, Nyugati tér 1., Telephone (+36 1) 205 3794 Fax: (+36 1) 205 3795)
For what purpose, on what legal basis and for what period will your personal data be processed?
The purpose of, the legal basis for, and the period of personal data processing are summarised in the following table.
Processed personal data
The purpose of data processing
Legal grounds for data processing
Duration of data processing
Name, position, phone number, e-mail address, country of origin, name of employer
|Organizing the Novathon event
||the data processing is necessary for the execution of the contract entered into by the data subject and Recovery Zrt. (By contract we refer to the registration to the event.)
Recovery Zrt. processes the data until the end of the limitation period of the claims arising from the legal relationship
What rights do you have?
Pursuant to Regulation (EU) 2016/679 of the European Parliament and the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), you
(i) have the right to request access to personal data relating to you, requesting information on the data processing by Recovery Zrt. Provision of information or of copies of the processed data is free of charge. If you request additional copies, you may be charged a fee of reasonable extent, based on the administrative cost,
(ii) have the right to request the rectification or the deletion of personal data relating to you or the restriction of its processing,
(iv) you may request from Recovery Zrt. information on the recipients who have been informed of the rectification or erasure of the personal data or the restriction of its processing,
(iv) if the legal basis for the data processing is your consent, then you have the right to withdraw your consent at any time, although the withdrawal of consent shall not affect the lawfulness of data processing based on the consent prior to its withdrawal. After the consent has been withdrawn, Recovery Zrt. is still entitled to process personal data in order to fulfill its legal obligations or to enforce its legitimate interests, provided that the enforcement of the interest is commensurate with the restriction on the right to personal data protection,
(v) if the legal basis for the data processing is your consent or the performance of the contract, then you may exercise your right to data portability: in respect of any personal data relating to you, that you have made available to Recovery Zrt. and which is automatically processed, you may request that such data be delivered to you in a structured, extensively used and machine-readable format, or to transfer this data to another data contoller. You may also request – if it is technically feasible – that your personal data be transferred directly by Recovery Zrt. to another data controller.
Who are the recipients of your personal data?
Recipients of the personal data are the data controller’s data processors listed above.
What options are available to you for legal recourse?
Regarding the lawfulness of data processing, you can initiate a procedure with the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c., postal address: 1530 Budapest, Pf.: 5, website: www.naih.hu
, tel.: +36 (1) 391-1400, fax: +36 (1) 391-1410, central e-mail address: email@example.com
) or you may take the matter to court. We recommend that you contact our data protection officer before turning to the National Authority for Data Protection and Freedom of Information or to a court of law.
How to contact the data protection officer?
The contact details of Recovery Zrt.’s data protection officer: Recovery Zrt./Adatvédelem, 1027 Budapest, Medve u. 4-14., telephone: +36 (1) 423-1112, central e-mail address: firstname.lastname@example.org
Declarations and Consents
Confirmation of receipt of information on data processing
I represent that prior to the start of the data processing, I received clear and detailed information regarding the processing of my personal data, which I have understood and accepted.
I represent that Personal and professional data provided during the application stage are truthful, current and accurate, and the data subject is responsible for any damage that may occur due to wrong, inaccurate, incomplete or false data that he/she provided.
The data subject unconditionally accepts all decisions related to the Event made discretionally by Recovery Zrt.
Based on the principles of freedom of contracting and regulating obligatory relations, as well as legal obligations of Recovery Zrt. and members of the group to which Recovery Zrt. belongs, Recovery Zrt. retains the right to reject application if the signatory of the application refuses providing data necessary for the performance of the contract or for other objective reasons.
Decision related to consents
I represent that I have made my decisions regarding my consent below or refusal of consent to data processing based on clear and detailed information regarding the processing of my personal data, i.e. the Information on Data Processing.
If I have given my consent, I declare that the consent given by me regarding the processing of my personal data is a voluntary, specific, informed and unambiguous declaration.
I am aware that I have the right to withdraw my consent for data processing at any time, although the withdrawal of consent shall not affect the lawfulness of data processing based on consent prior to its withdrawal. After the consent has been withdrawn, Recovery Zrt. is still entitled to manage personal data in order to fulfil its legal obligations or to enforce its legitimate interests, provided that the enforcement of the interest is commensurate with the restriction on the right to personal data protection.