Privacy policy

1. Name of the Data Controller:

Széchenyi István University (hereinafter referred to as “the Controller”)

address: 9026 Győr, Egyetem tér 1.

email: nextgenlearn@sze.hu

telefon: +36 96 503 400

website: nextgenlearn.sze.hu

2. Legislation on data management:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC
  • Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information

3. Subject matter and data subjects of the processing:

  • Subject of processing: contact, information or request for a quote
  • Data subjects of data processing: the natural person who is identified or can be identified, directly or indirectly, on the basis of data provided or received in any way through the nextgenlearn.sze.hu website.

The personal scope of the information notice therefore covers natural persons who enquire, apply or send a message via the nextgenlearn.sze.hu website, as well as representatives and contact persons of non-natural persons.

4. Scope of the data processed, purpose, duration, legal basis and source of the data:

  • Scope of data processed
    Kapcsolattartói adatok (név, telefonszám, e-mail cím), a kapcsolatfelvétel során az érintett által esetlegesen megadott további     adatok, IP cím, user agent
  • Purpose of data processing
    to provide the data subject with adequate information and contact.
  • Legal basis for processing
    Processing is based on the data subject’s voluntary consent (Article 6(1)(a) GDPR)
  • Duration of data processing
    until the end of the one-off request for information or offer. If the Data Controller enters into a business relationship with the data subject, the processing of personal data will be governed by the Privacy Notice applicable to contracts. Where the request for information and/or the provision of information has legal effect or similarly significantly affects the data subject, data controllers, the Data Controller will process the data until the expiry of the applicable limitation period. The IP address and user agent will be stored for 30 days.

5. Data security measures:

The controller shall ensure adequate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by implementing appropriate technical or organisational measures.

6. Your rights regarding data processing:

Your data protection rights and remedies and their limitations are set out in detail in the GDPR (in particular Articles 15, 16, 17, 18, 19, 21, 22, 77, 78, 79 and 82 of the GDPR). You may request information about your data at any time, request the rectification, erasure or restriction of processing of your data, and object to processing based on legitimate interests.

You can exercise your rights by contacting:

email: nextgenlearn@sze.hu

email: adatvedelem@sze.hu

tel.: +36 30 503 400

in person: 9026 Győr, Egyetem tér 1.

Name of Data Protection Officer: Dr. Pőcze Péter

Data Protection Officer contact details: adatvedelem@sze.hu

-Right to information

You may at any time request in writing information about the processing of your personal data, such as:

  • what personal data we process
  • on what legal basis we process your personal data
  • the purposes for which we process your personal data –
  • the source from which we process your personal data
  • how long we process your personal data
  • what your rights are in relation to data processing
  • whether we transfer your personal data, and if so, to whom

-Right to relief:

You have the right to have inaccurate personal data concerning you corrected by the controller at your request.

-Right to erasure:

You may request in writing that the controller erase your personal data. This provision shall not apply to the extent that the processing is necessary: for compliance with an obligation under Union or Member State law to which the controller is subject to which the processing of personal data is subject, or for the establishment, exercise or defence of legal claims.

-Right to restriction:

The controller shall restrict processing at the written request of the data subject where one of the following conditions applies:

  1. the data subject contests the accuracy of the personal data, in which case the restriction applies for the period of time necessary to allow the controller to verify the accuracy of the personal data;
  2. the data processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use;
  3. the controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defence of legal claims

In the case of a request for restriction of processing, you must also indicate the grounds for the restriction.

-Right to object:

You have the right to object, on grounds relating to your particular situation, to processing based on a legitimate interest. In this case, the controller will examine the processing of your data on the basis of the legal ground of legitimate interest and, if the controller considers your request to be justified, we will delete your personal data. In any event, you will be informed of the outcome of the investigation.

-Right to withdraw voluntary consent:

You may withdraw your consent to data processing at any time, and if you withdraw your consent, you may also request the deletion of your uploaded data. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

-Common rules on the exercise of rights:

The controller shall, without undue delay, within one month of receipt of the request, provide information in writing in an accessible form on the action taken on the request or on the refusal and the reasons for such refusal. If necessary, taking into account the complexity of the request and the number of requests, this time limit may be extended by a further two months.

7. Your enforcement options

If you believe that the processing is unlawful, you may refer the matter to the National Authority for Data Protection and Freedom of Information (NAIH) or a court as follows:

-Council announcement:

If you believe that there has been or is an imminent threat of a breach of rights in relation to the processing of your personal data or the exercise of your rights of access to data of public interest or data in the public interest, you may submit an inquiry to the supervisory authority:

NAIH contact details

-Court remedies

If you find that your personal data is unlawfully processed, you can bring a civil action against the controller. Such a lawsuit is subject to the jurisdiction of the courts in Hungary. For information on the jurisdiction and contact details of the courts, please visit the following website: www.birosag.hu