Last updated: 08 February 2020
In order to provide our service, we must collect and use certain essential personal data (any information that can be used to identify you);
otherwise we are unable to provide the service to you.
Your personal data are important to us, therefore we strive to make the collection, use and disclosure of your data as transparent as possible.
This privacy statement has been prepared in accordance with the requirements of the EU General Data Protection Regulation (GDPR).
Through this privacy information, we inform you about the key aspects of data processing within the framework of our website.
This privacy policy provides information on how we collect and use information about you when you use our products or services,
or otherwise interact with Mediacity Kft. You always have the right to object to the use of your data.
Data Controller:
Mediacity Magyarország Kft. (hereinafter: Data Controller)
1053 Budapest, Kecskeméti utca 5.
Email: adatkezelo@mediacity.hu
Tax number: 12792607-2-41
Company registration number: 01-09-713859
By using the Service, you accept the Data Controller’s General Terms and Conditions (GTC) and, having been properly informed, you expressly and voluntarily consent to the processing and storage of the data you provide for the purposes of communication related to the Service, as well as for other purposes related to subscriber/customer offers. The Subscriber also expressly consents to the Data Controller using the provided data to send direct marketing messages regarding its current offers and promotions to the contact details provided by the Subscriber. Providing data is voluntary; you may request the rectification or deletion of your data, and you may withdraw your consent to processing for marketing purposes, at any time, free of charge, without justification or restriction, using the Data Controller’s contact details. The Data Controller undertakes to treat your personal data confidentially at all times and in accordance with applicable data protection laws.
Data Controller: a natural or legal person, or an organization without legal personality, which alone or jointly with others determines the purposes of the processing of data, makes and implements decisions regarding data processing (including the means used), or has such decisions implemented by a data processor.
Data Processing (Processing): any operation or set of operations performed on data, regardless of the procedure applied, including in particular collection, recording, organization, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, restriction, deletion and destruction of data, as well as preventing further use of the data, making photo, audio or video recordings, and any physical recording suitable for identifying a person.
Personal Data: any data relating to an identified or identifiable person – in particular the person’s name, identification mark, and one or more factors specific to their physical, physiological, mental, economic, cultural or social identity – as well as any conclusion that can be drawn from such data relating to the person.
Consent: the freely given and specific indication of the data subject’s wishes, based on appropriate information, by which the data subject unambiguously signifies agreement to the processing of personal data relating to them – either fully or for specific operations.
Data Protection: the normative regulation of the processing of personal data in order to enforce the data subject’s right to informational self-determination.
Data Processing Activities: the performance of technical tasks related to data processing operations, regardless of the method and means used to carry out the operations and the place of application, provided that the technical task is performed on the data.
Data Processor: a natural or legal person, or an organization without legal personality, which processes data on the basis of a contract – including a contract concluded pursuant to a legal provision.
Data Subject: any identified or identifiable natural person, directly or indirectly, on the basis of personal data.
You may exercise the following rights in relation to data processing:
a) Information: the data subject is entitled to request information about the processing of their personal data;
b) Right of access: the data subject is entitled to access all personal data held by the Data Controller about them;
c) Right to erasure: the data subject is entitled to request the deletion of their processed personal data; the Data Controller is entitled to assess the request and is obliged to inform the data subject thereof;
d) Rectification: the data subject is entitled to request the correction of inaccurate data from the Data Controller;
e) Right to be forgotten: if the Data Controller has made the data subject’s personal data public and is obliged to erase it, then the Data Controller must take all reasonably expected steps to ensure that all recipients are notified of the erasure request;
f) Right to data portability: the Data Controller must provide the personal data supplied by the data subject to the data subject in a commonly used, machine-readable format, if requested by the data subject;
g) Objection: the data subject may object to the processing of their personal data and may request the termination of processing and/or the deletion of the processed data;
h) Restriction of processing: the data subject may request the restriction of the processing of their personal data; in this case the Data Controller marks the data with an identifier in order to restrict further processing permanently or for a specified period.
1) Information provided by you voluntarily and with your explicit consent. We collect essential and strictly necessary data for the use of our Service, which you provide voluntarily. Only the person providing the data is responsible for the accuracy of the data.
Data collected to provide the Service:
Name, Email address, Password (stored in encrypted form).
Other data that may be provided voluntarily and used for statistical purposes:
Gender, Year of birth
Data that must be provided for invoicing:
Email address, Phone, Tax number, Postal code, City, Street, House number, Floor, Door
In this case, the purpose of processing is to provide the Service. Without these data, we cannot provide the Service to you.
The duration of processing lasts until deletion initiated by the User, except where an invoice has been issued to the User, in which case the retention period is 8 years with respect to personal data required by accounting or tax laws.
2) We may also collect personal information about you when you contact us in any other way, for example by email, phone, via social media messages or comments, when you request information or assistance, provide feedback, participate in surveys, or during other interaction or communication.
In this case, the purpose of processing is to use information related to all aspects of our Service for product development, bug fixing, and improving user comfort, experience and service.
The duration of processing lasts until the data provider requests deletion of their data.
3) Certain data related to your use of our Service may be recorded automatically (for example: which publications you read, how much time you spent reading, which publications or articles you marked as favorites or bookmarked). These data are predominantly non-personal.
In this case, the purpose of processing is to use information related to all aspects of our Service for product development, bug fixing, and improving user comfort, experience and service.
The duration of processing lasts until deletion initiated by the User.
4) Data provided by external service providers.
Facebook: Within our Service we offer registration and login via a Facebook account for your convenience. You do not need to remember login details (email address, password); you can register and log in with one click to use the Service. Through this we receive your Name, Email address and Profile picture data. You can configure the sharing of these data through Facebook.
In this case, the purpose of processing is to provide a convenience service.
The duration of processing lasts until deletion initiated by the User.
Google Analytics: The service provider collects anonymous and aggregated information (not personal data!) about online behavior for statistical purposes. We use the information received through Google Analytics to develop and improve our Website in line with visitors’ habits.
The purpose of this processing is to improve the appearance and functions of the Website.
The duration of processing is determined by Google.
To provide the Service, we need to use external service providers who ensure the operation of the system (hosting provider, web developers). No data are transferred to them; however, during system modification, repair or development they may have access to the data. In addition, we need to use financial, accounting and tax service providers, to whom data transfers (e.g. invoices) do occur.
These service providers are:
Web and application development:
APPSOLUTION KFT.
Address: 1071 Budapest, Dózsa György út 40. 1st floor
Email: info@app-arak.hu
Scope of accessed data: application and database content
Invoicing:
Számlázz.hu – KBOSS.hu Kft.
Address: 1031 Budapest, Záhony utca 7/C.
Email: info@szamlazz.hu
Scope of accessed data: issued invoices
For data processing activities not listed in this notice, we provide information at the time the data are collected. We inform our customers that the court, the prosecutor, the investigating authority, the misdemeanor authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, and other bodies authorized by law may contact the Data Controller for the purpose of providing information, communicating or transferring data, or making documents available. The Data Controller shall provide personal data to the authorities only to the extent and in the scope that is strictly necessary to achieve the purpose of the request, provided that the authority has specified the exact purpose and scope of the data requested.