The purpose of this Policy is to record the data protection and data management principles applied by IMEDIA Ltd. (registered office: 12-26 Horvát street, Budapest 1027, Hungary; tax number: 12591547-2-41; company registration number: 01 09 693968; hereinafter: Service Provider) and the Service Provider's data protection and data management policy. The Service Provider processes the data of visitors to the www.imedia.hu website or users of the IMEDIA Application (hereinafter: Website, Application) during the operation of the Website and the IMEDIA Application. The purpose of this Policy is to ensure that in all areas of the services provided by the Service Provider, every natural person, representative, and contact person of a legal person is assured that their rights and fundamental freedoms are respected during the processing of their personal data (data protection).
3.1. Personal data - The personal data processed by our Company is the name and e-mail address of the Data Subject. Our Company does not automatically collect data; all data we store is provided by our clients themselves based on contracts concluded with our clients.
3.2. Our company uses cookies on the Website and the Application, but does not collect any personal data through their use. Furthermore, we do not collect any personal data on visitors to the Website or users of the Application on the Website and the Application. Our company only stores the data of those who contact our company on any subject. For these individuals, we only store their email address and name for the period defined in point 4.
4.1. Data processing takes place based on the voluntary provision of the Data Subject's personal data. The legal basis for data processing is the Data Subject's voluntary consent, in accordance with point (a) of Section 5(1) of Act CXII of 2011 on the right of informational self-determination and on freedom of information (Infotv.). The Data Subject gives consent in three respects of data processing by using the Website or the Application and by voluntarily providing the data in question. You may withdraw your consent to data processing at any time free of charge – by sending an email to office@imedia.hu stating "I withdraw my consent to the processing of my data". We undertake to register the withdrawal of consent within 5 working days due to technical reasons.
4.2. The Service Provider uses the stored data solely for communication with the Data Subject and for the performance of the service defined in the contract concluded between the Service Provider and the Data Subject.
4.3. The Service Provider does not and may not use the provided personal data for purposes other than those stated in these points. The disclosure of personal data to third parties or authorities - unless otherwise provided by law with binding force - is only possible with the prior, express consent of the Data Subject.
4.4. The Service Provider does not verify the personal data provided. The person providing the data is solely responsible for the accuracy of the data provided. Therefore, please pay close attention to the authenticity, correctness and accuracy of your data when providing it. Incorrect, inaccurate or incomplete data may hinder the use of our services. If you provide the personal data of another person instead of your own, we assume that you have the necessary authorisation to do so. In the case of the use of misleading personal data, or if any visitor commits a crime or attacks the Service Provider's system, the data of that visitor will be immediately deleted or - if necessary - retained for the duration of the establishment of civil liability or the conduct of criminal proceedings.
The Service Provider processes the data transparently and lawfully for the Data Subject. The Service Provider carries out data processing activities in such a way that the secure storage of data is always ensured, and no third party can access it under any circumstances. During data processing, the Service Provider adheres to the principles of integrity, confidentiality, accountability, and limited storability.
6.1. From the date of data provision until the deletion of the data in question upon request.
6.2. The above provisions do not affect the fulfilment of storage obligations defined by law, and data processing based on other forms of consent provided.
7.1. The data may be accessed by the Service Provider and the Service Provider's employees, but it will not be published or transferred to third parties.
7.2. The Service Provider processes the personal data of the Data Subjects in a traceable manner and in accordance with the law. In addition to the above, personal data will only be forwarded to third parties with the consent of the Data Subject and will only be disclosed in the case of official inquiries.
8.1. Rights and remedies of the Data Subject. The Data Subject may
- request information about data processing,
- request the correction, modification or supplementation of their personal data processed by us,
- object to data processing and request the deletion or blocking of their data (except for mandatory data processing),
- appeal to a court,
- lodge a complaint with or initiate proceedings before the supervisory authority (https://naih.hu/panaszuegyintezes-rendje.html).
Supervisory Authority: National Authority for Data Protection and Freedom of Information
Registered office: Szilágyi Erzsébet alley 22/c., Budapest 1125, Hungary.
Postal address: Mailbox 5., Budapest 1530, Hungary.
Telephone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu/
8.2 At the request of the Data Subject, we will provide information on the purpose and legal basis of the data processing carried out by us, its duration, and if this is not possible, the criteria for determining this duration. We will provide our information within one month of the submission of the request. The information is free of charge, except if the Data Subject has already submitted a request for information to us in the current year concerning the same data set. We will refund the processing fee already paid by the Data Subject if we have processed the data unlawfully or if the request for information has led to correction. We may only refuse to provide information in cases stipulated by law, with the indication of the legal basis, and by informing the Data Subject of the possibility of judicial recourse or appealing to the Authority. The Service Provider shall notify the Data Subject and all those to whom the data has previously been forwarded for the purpose of data processing of any correction, blocking, marking and deletion of personal data, except where such notification does not infringe the legitimate interests of the Data Subject. If we do not fulfil the Data Subject's request for correction, blocking or deletion, we shall inform the Data Subject in writing or - with the Data Subject's consent - electronically within one month of receipt of the request of the reasons for our refusal and inform the Data Subject of the possibility of judicial recourse and of appealing to the Authority. If the Data Subject objects to the processing of their personal data, we shall examine the objection within one month of the submission of the request and inform the Data Subject in writing of our decision. If we decide that the Data Subject's objection is justified, we shall cease data processing - including further data collection and transfer - and block the data, and we shall inform all those to whom the personal data concerned by the objection has previously been transferred, and who are obliged to take action to enforce the right of objection, of the objection and the measures taken on the basis thereof. We shall refuse to comply with the request if we prove that the data processing is justified by compelling legitimate grounds that override the interests, rights and freedoms of the Data Subject, or which relate to the assertion, exercise or defence of legal claims. If the Data Subject disagrees with our decision, or if we fail to meet the deadline, the Data Subject may apply to the court within 30 days of notification of the decision or the last day of the deadline. The hearing of data protection cases falls within the jurisdiction of the regional court; the proceedings may - at the choice of the Data Subject - also be initiated before the regional court of the Data Subject's place of residence or stay. Foreign nationals may also lodge a complaint with the supervisory authority competent for their place of residence. We request the Data Subject to contact the Service Provider before contacting the supervisory authority or court with their complaint - in order to coordinate and solve the problem as quickly as possible.
The Service Provider reserves the right to amend this Data Processing Information, of which the Data Subjects will be duly informed. Information relating to data processing is published on the www.imedia.hu website. We inform you that the Data Subject may visit the Website and familiarise themselves with the Service Provider's services without providing any personal data.
10.1 The Service Provider, as data controller, informs visitors to its website (Data Subjects) about the data processing and cookie processing relating to website visitors.
10.2 The Service Provider recognises the content of this data processing information as binding and undertakes that all data processing in connection with its activities shall comply with the requirements set out in this information and in the applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "Data Protection Regulation" or "GDPR"), and the provisions of Act CXII of 2011 on the right of informational self-determination and on freedom of information (hereinafter referred to as "Infotv.").