Data management policy

Equilibrium Institute Nonprofit Ltd.

May 14, 2020

1. Purpose of the data management information

The Equilibrium Institute Nonprofit Ltd. (1026 Budapest,Szilágyi Erzsébet fasor 73) hereinafter, the Equilibrium Institute, service provider, data controller), as a data controller, acknowledges the content of this legal notice as binding on it. It undertakes that all data processing related to its activities shall comply with the requirements set out in these regulations and in the applicable national legislation, as well as in the legal acts of the European Union.

The data protection guidelines arising in connection with the data management of the Equilibrium Institute are continuously available at www.egyensulyintezet.hu/hu/impresszum/adatvedelem.

The Equilibrium Institute reserves the right to change this prospectus at any time. Of course, you will notify your audience in good time of any changes.

If you have any questions regarding this post, please write to us and our colleague will answer your question.

The Equilibrium Institute is committed to the protection of the personal data of its customers and partners, and it is of the utmost importance to respect the right of its customers to self-determination of information. The Equilibrium Institute treats personal data confidentially and takes all security, technical and organizational measures that guarantee the security of the data.

The Equilibrium Institute describes its data management practices below.

2. Data of the data controller

If you would like to contact our Company, you can contact the data controller at egyensulyintezet@egyensulyintezet.hu.

Name: Equilibrium Institute Nonprofit Ltd.
Headquarters: 1026 Budapest,Szilágyi Erzsébet fasor 73
Company registration number: 01-09-329616
Name of the court of registration:
Metropolitan Court as Court of Registration Tax number: 14475937-2-42
Phone number: +36 1 474 8748
E-mail: eib@eib.hu

2.1 Data Protection Officer

Name: Tamás Boros
E-mail: eib@eib.hu
Phone: +36 1 249 5238

3. Scope of personal data processed 3.1. Technical data

TheEquilibrium Institut . selects and operates the IT equipment used to process personal data during the provision of the service in such a way that the processed data:

• accessible to those entitled to it (availability);
• authenticity and authentication are ensured (authenticity of data management);
• its invariability can be verified (data integrity);
• be protected against unauthorized access (data confidentiality).

The Equilibrium Institute shall take appropriate measures to protect the data against unauthorized access, alteration, transmission, disclosure, deletion or destruction, and accidental destruction.

The Equilibrium Institute ensures that the security of data processing is protected by technical, organizational and organizational measures that provide a level of protection appropriate to the risks associated with data processing.

The Equilibrium Institute maintains confidentiality in the processing of data: it protects the information that only those who have access to it have access to it; integrity: protects the accuracy and completeness of the information and the method of processing; available: ensures that when an authorized user needs it, they can actually access the information they need and have the tools to do so.

3.2. Cookies

3.2.1 The role of cookies

They gather information about visitors and their devices; note the individual setting of visitors to use the use of the website; provide a quality user experience.

In order to provide customized service, a small data packet, called instead of a cookie (cookie) and read back during a later visit. If the browser returns a previously saved cookie, the cookie provider has the option to link the user’s current visit to the previous ones, but only for their own content.

3.2.2 Absolutely necessary, session cookies

The purpose of these cookies is for visitors to fully and seamlessly browse the website of www.egyensulyintezet.hu, use its functions and the services available there. These types of cookies last until the end of the session (browsing), and when you close the browser, these types of cookies are automatically deleted from your computer or other device used for browsing.

3.2.3 Third-party cookies (analytics)

You also use Google Analytics as a third-party cookie on the www.egyensulyintezet.hu website. Using Google Analytics for statistical purposes, theEquilibrium Institute collects information about how visitors use your web pages. Use the data to improve the website and improve the user experience. These cookies also remain on the visitor’s computer or other browsing device, its browser, or until the visitor deletes them until they expire.

3.3. Newsletter related information

It is possible to subscribe to the newsletter at www.egyensulyintezet.hu. It is possible to unsubscribe by sending an e-mail to egyensulyintezet@egyensulyintezet.hu.

 

4. Intended use and retention period of the data processed

Newsletter for service and event registration: name, e-mail address. Shelf life: 8 years.

5. Purpose, method and legal basis of data processing

5.1 General data management guidelines

The data management of the activities of the Equilibrium Institute is based on voluntary consent and legal authorization. In the case of data processing based on voluntary consent, data subjects may withdraw their consent at any stage of the data processing.

In some cases, the handling, storage and transmission of a set of provided data is required by law, of which we will notify our customers separately.

We would like to draw the attention of whistleblowers to the Equilibrium Institute that if they do not provide their own personal data, the whistleblower is obliged to obtain the consent of the data subject.

Its data management principles are in line with existing data protection legislation, in particular:

• 2011 CXII. Act on the Right to Self-Determination of Information and Freedom of Information (Infotv.);
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46 (General Data Protection Regulation, GDPR);
• Act V of 2013 – on the Civil Code (Civil Code);
• Act C of 2000 – on Accounting (Act on Accounting);
• 2017 LIII. Act on the Prevention of Money Laundering and Terrorist Financing and
prevention (Pmt.);

• CCXXXVII of 2013. Act on Credit Institutions and Financial Undertakings (Hpt.).

6. Physical storage locations for data

Your personal data (ie data that can be contacted with you) may be processed in our way as follows: on the other hand, you may also provide your name, contact information or other details if you wish to contact us personally while using the Website.

Data to be technically recorded during the operation of the system: the data to be recorded automatically will be logged automatically upon entry or exit without a separate statement or action by the data subject. This data may not be linked to other personal user data, except as required by law. Only the Equilibrium Institute has access to the data.

7. Data transmission, data processing, the scope of getting to know the data

In addition to the Equilibrium Institute, only Ferling Kft. (7621 Pécs, Mária utca 8.), which operates the website and related databases, can get acquainted with the data of those who subscribe to the newsletter.

 

8. Rights of the data subject and possibilities of enforcement

The data subject may request information on the processing of his / her personal data, as well as request the correction or deletion or revocation of his / her personal data, except for mandatory data processing, exercise his / her right to data and protest at the data contact

8.1 Right to information

The Equilibrium Institute shall take appropriate measures to provide data subjects with all information on the processing of personal data referred to in Articles 13 and 14 of the GDPR and Articles 15 to 22. and Article 34 shall be provided in a concise, transparent, comprehensible and easily accessible form, in a clear and comprehensible manner.

8.2 Right of access to the data subject

The data subject shall have the right to receive feedback from the controller as to whether the processing of his or her personal data is in progress and, if such processing is in progress, shall have access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be communicated, including in particular third country recipients or international organizations; the intended period for which the personal data will be stored; the right to rectify, erase or restrict the processing of data and to protest; the right to lodge a complaint with the supervisory authority; information on data sources; the fact of automated decision-making, including profiling, and understandable information about the logic used and the significance of such data processing for the data subject. The controller shall provide the information no later than one month after the submission of the request.

8.3 Right of rectification

The data subject may request the correction of inaccurate personal data processed by the Institute for Balance and the addition of incomplete data.

8.4 Right of cancellation

The data subject shall have the right to have his or her personal data deleted by the Balance Institution without undue delay upon request for any of the following reasons:

• personal data are no longer required for the purpose for which they were collected or otherwise processed;
• the data subject withdraws the consent on which the data processing is based and there is no other legal basis for the data processing;
• the data subject objects to the processing and there is no overriding legitimate reason for the processing;
• personal data has been processed unlawfully;
• personal data must be deleted in order to fulfill a legal obligation under EU or Member State law applicable to the controller;
• personal data have been collected in connection with the provision of information society services.
Deletion of data may not be initiated if the processing is necessary: ​​for the purpose of exercising the right to freedom of expression and information; for the purpose of fulfilling an obligation under Union or Member State law governing the processing of personal data or performing a task carried out in the public interest or in the exercise of official authority vested in the controller; in the field of public health or for archival, scientific and historical research or statistical purposes, in the public interest; or to bring, assert or defend legal claims.

 

8.5 Right to Restrict Data Processing

At the request of the data subject, the vEquilibrium Institute shall restrict the processing of data if one of the following conditions is met:

• the data subject disputes the accuracy of the personal data, in which case the restriction applies to the period of time that allows the accuracy of the personal data to be verified;
• the processing is unlawful and the data subject opposes the deletion of the data and instead requests that their use be restricted;
• the data controller no longer needs the personal data for the purpose of data processing, but the data subject requests them in order to submit, enforce or protect legal claims; obsession
• the data subject has objected to the data processing; in that case, the restriction shall apply for as long as it is established whether the legitimate reasons of the controller take precedence over the legitimate reasons of the data subject.
Where the processing is restricted, personal data may be processed, with the exception of storage, only with the consent of the data subject or for the purpose of bringing, enforcing or defending legal claims or protecting the rights of another natural or legal person or in the important public interest of the Union or a Member State. .

 

8.6. Right to carry data

The data subject shall have the right to obtain the personal data concerning him or her made available to the controller in a structured, widely used machine-readable format and to transmit such data to another controller.

8.7. Right to protest

The data subject shall have the right to object at any time, for reasons relating to his or her situation, to the processing of his or her personal data in the public interest or in the exercise of a public authority, or to profiling based on those provisions. is. In the event of an objection, the controller may not further process the personal data, unless justified by compelling legitimate reasons which take precedence over the interests, rights and freedoms of the data subject or which relate to the submission, enforcement or protection of legal claims.

8.8. Automated decision making in individual cases, including profiling

The data subject shall have the right not to be covered by a decision based solely on automated data processing, including profiling, which would have a legal effect on him or her or a significant effect on him or her.

 

8.9 Right of withdrawal

The data subject has the right to withdraw his or her consent at any time.

8.10 Right to apply to the courts

If the data subject’s rights are violated, he or she may take legal action against the data controller. The court is acting out of turn in the case.

8.11 Data Protection Authority Procedure

Complaints can be lodged with the National Data Protection and Freedom of Information Authority: Name: National Data Protection and Freedom of Information Authority
Headquarters: 1125 Budapest, Szilágyi Erzsébet avenue 22 / C.
Mailing address: 1530 Budapest, Pf .: 5.

Phone: 0613911400
Fax: 0613911410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu

9. Other provisions

Information on data processing not listed in this prospectus will be provided at the time of data collection.

We inform our clients that the court, the prosecutor, the investigating authority, the infringement authority, the administrative authority, the National Data Protection and Freedom of Information Authority, the Magyar Nemzeti Bank, or other bodies are authorized to provide information, disclose data and transfer documents. they may contact the controller to make them available.

The Equilibrium Institute shall provide personal data to the authorities only if and to the extent strictly necessary to achieve the purpose of the request, provided that the authority has indicated the exact purpose and scope of the data.