1 Purpose of this Pricacy Policy

AFMTEC Services Kft. — registered office: 2040 Budaörs, Fodros utca 60/B, Hungary; hereinafter referred to as the Service Provider or Data Controller — as the data controller, acknowledges the content of this legal notice as binding upon itself. The Data Controller undertakes to ensure that all data processing activities related to its operations comply with the requirements set out in this policy, the applicable national legislation, and the legal acts of the European Union. The privacy principles relating to the data processing activities of AFMTEC Services Kft. are continuously available at: www.afmtec.hu/privacy-policy/. AFMTEC Services Kft. reserves the right to amend this Privacy Policy at any time. Naturally, the public will be informed of any changes in due course. Should you have any questions regarding this notice, please contact us, and one of our colleagues will respond to your enquiry.

AFMTEC Services Kft. is committed to protecting the personal data of its clients and partners, and places particular importance on respecting their right to informational self-determination. The Data Controller treats personal data confidentially and implements all security, technical and organisational measures necessary to guarantee the protection of such data.

2 Details of the Data Controller

Should you wish to contact our company, you may reach the Data Controller at info@afmtec.hu. AFMTEC Services Kft. deletes all emails received by it, together with the personal data contained therein, no later than 5 years from the date on which the data was provided.Name: AFMTEC Services Kft.

Registered office: 2040 Budaörs, Fodros utca 60/B

Company registration number: 13-09-198139

Tax number: 26657437-2-13

Telephone number: +36 70 360 5979

E-mail: info@afmtec.hu

2.1 Data Protection Officer

Name: Attila Németh

Telephone number: +36703170170

3 Scope of Personal Data Processed

3.1 Technical Data

When processing personal data, AFMTEC Services Kft. selects and operates the IT tools used for the provision of its services in such a way that the data processed:

• is accessible to authorised persons — availability;
• has its authenticity and authentication ensured — authenticity of data processing;
• remains verifiably unchanged — data integrity;
• is protected against unauthorised access — data confidentiality.

AFMTEC Services Kft. protects the data by appropriate measures against unauthorised access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction.

•  

3.2 Cookies

3.2.1 Purpose of Cookies

Cookies perform the following functions:

• • they collect information about visitors and their devices;
  • they remember visitors’ individual settings, which may be used, for example, when carrying out online transactions, so that visitors do not have to re-enter them;
  • they make the website easier to use and provide a high-quality user experience.

•  

In order to provide a personalised service, a small data package, known as a cookie, is placed on the user’s computer and read back during a later visit. If the browser sends back a previously saved cookie, the service provider managing the cookie is able to link the user’s current visit with previous visits, but only in relation to its own content.

3.2.2 Strictly Necessary Session Cookies

The purpose of these cookies is to enable visitors to browse the afmtec.hu website fully and smoothly, use its functions, and access the services available on the website. The validity period of this type of cookie lasts until the end of the session, that is, until the browsing session ends. When the browser is closed, these cookies are automatically deleted from the computer or other device used for browsing.

3.2.3 Third-party Cookies (Analytics)

The www.afmtec.hu website also uses third-party cookies provided by Google Analytics and Google Search Console. By using the statistical services of Google Analytics and Google Search Console, afmtec.hu collects information about how visitors use the website. This data is used for the purpose of improving the website and enhancing the user experience. These cookies remain on the visitor’s computer or other device used for browsing, and in the browser of that device, until they expire or until the visitor deletes them.

4. Purpose, Method and Legal Basis of Data Processing

It is important to us to provide a high standard of service; therefore, the data and information provided may be used for the following purposes:

• ensuring the provision of the services available on the website;
• sending newsletters;
• market research and market analysis;
• remarketing;
• preparing statistics;
• technical development of the IT system.

•  

4.1 General Data Processing Principles

The data processing activities carried out by AFMTEC Services Kft. are based on voluntary consent and/or statutory authorisation. In the case of data processing based on voluntary consent, data subjects may withdraw their consent at any stage of the data processing.

In certain cases, the processing, storage or transfer of a certain scope of the data provided is required by law, of which our clients will be separately informed.

We draw the attention of persons providing data to AFMTEC Services Kft. that, where they provide personal data other than their own, it is their responsibility to obtain the consent of the data subject concerned.

The data processing principles of AFMTEC Services Kft. are in line with the applicable legislation relating to data protection, in particular the following:

• Act CXII of 2011 on Informational Self-Determination and Freedom of Information — Info Act;
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC — General Data Protection Regulation, GDPR;
• Act V of 2013 on the Civil Code — Civil Code;
• Act C of 2000 on Accounting — Accounting Act;
• Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing — AML Act;
• Act CCXXXVII of 2013 on Credit Institutions and Financial Enterprises — Credit Institutions Act.

 

 

5. Physical Storage Locations of Data

Your personal data (that is, data that can be associated with you personally) may come into our possession in the following ways. On the one hand, in connection with maintaining the internet connection, technical data relating to the computer used by you, your browser, your internet address and the pages visited are automatically generated in our IT system. On the other hand, you may also provide your name, contact details or other data if you wish to establish personal contact with us while using the website.

The data technically recorded during the operation of the system include the data of the data subject’s computer used for logging in, which are generated during the use of the website and recorded by the afmtec.hu system as an automatic result of technical processes. The automatically recorded data are automatically logged by the system upon entry and exit, without any separate declaration or action by the data subject. These data cannot be linked to other personal user data, except in cases required by law. Only afmtec.hu has access to these data.

6. Rights of Data Subjects and Available Legal Remedies

The data subject may request information regarding the processing of their personal data, and may request the rectification of their personal data or — with the exception of mandatory data processing — the erasure of such data or the withdrawal of their consent.

The data subject may also exercise their right to data portability and their right to object, in the manner indicated at the time the data were collected, or by contacting the Data Controller using the contact details provided above.

6.1 Right to Information

AFMTEC Services Kft. takes appropriate measures to provide data subjects with all information relating to the processing of personal data referred to in Articles 13 and 14 of the GDPR, as well as all notifications pursuant to Articles 15–22 and 34, in a concise, transparent, intelligible and easily accessible form, using clear and plain language.

6.2 Right of Access by the Data Subject

The data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning them are being processed. Where such processing is taking place, the data subject has the right to access the personal data and the following information:

• the purposes of the data processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• the envisaged period for which the personal data will be stored;
• the right to request rectification, erasure or restriction of processing, and the right to object to processing;
• the right to lodge a complaint with a supervisory authority;
• information regarding the source of the data;
• the existence of automated decision-making, including profiling, as well as meaningful information about the logic involved and the significance and envisaged consequences of such processing for the data subject.

The Data Controller shall provide the requested information no later than one month from the date of submission of the request.

6.3 Right to Rectification

The data subject may request the rectification of inaccurate personal data concerning them processed by AFMTEC Services Kft., as well as the completion of incomplete personal data.

6.4 Right to Erasure

The data subject has the right to request that AFMTEC Services Kft. erase personal data concerning them without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws the consent on which the processing is based, and there is no other legal basis for the processing;
• the data subject objects to the processing, and there are no overriding legitimate grounds for the processing;
• the personal data have been unlawfully processed;
• the personal data must be erased in order to comply with a legal obligation under European Union or Member State law applicable to the Data Controller;
• the personal data have been collected in connection with the offer of information society services.

•  

The erasure of data may not be initiated if the data processing is necessary: for exercising the right to freedom of expression and information; for compliance with a legal obligation under European Union or Member State law applicable to the Data Controller requiring the processing of personal data, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller; for reasons of public interest in the area of public health, or for archiving purposes, scientific and historical research purposes or statistical purposes in the public interest; or for the establishment, exercise or defence of legal claims.

6.5  Right to Restriction of Processing

At the request of the data subject, AFMTEC Services Kft. shall restrict the data processing if one of the following conditions is met:

• • the data subject contests the accuracy of the personal data, in which case the restriction shall apply for the period enabling the verification of the accuracy of the personal data;

• • the processing is unlawful, and the data subject opposes the erasure of the data and instead requests the restriction of their use;

• • the Data Controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or

• • the data subject has objected to the processing; in this case, the restriction shall apply for the period until it is determined whether the legitimate grounds of the Data Controller override the legitimate grounds of the data subject.

Where processing is subject to restriction, the personal data may, with the exception of storage, only be processed with the consent of the data subject, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

6.6 Right to Data Portability

The data subject is entitled to receive the personal data concerning them, which they have provided to the data controller, in a structured, widely used, machine-readable format, and to transmit these data to another data controller.

6.7 Right to Object

The data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of their personal data where such processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller, or where processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party, including profiling based on those provisions. In the event of an objection, the Data Controller may no longer process the personal data, unless the processing is justified by compelling legitimate grounds which override the interests, rights and freedoms of the data subject, or which are related to the establishment, exercise or defence of legal claims.

6.8  Automated Decision-Making in Individual Cases, Including Profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which would produce legal effects concerning them or similarly significantly affect them.

6.9 Right to Withdraw Consent

The data subject has the right to withdraw their consent at any time.

6.10 Right to Apply to a Court

In the event of a violation of their rights, the data subject may bring proceedings against the Data Controller before a court. The court shall act in the matter as a matter of urgency.

6.11 Data Protection Authority Procedure

A complaint may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information:

Name: Nemzeti Adatvédelmi és Információszabadság Hatóság

Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Postal address: 1530 Budapest, Pf.: 5.

Telephone: 0613911400

Fax: 0613911410

E-mail: ugyfelszolgalat@naih.hu

Website: http://www.naih.hu

7. Other Provisions

Information on data processing activities not listed in this notice shall be provided at the time the data are collected.

We inform our clients that the court, the public prosecutor, the investigating authority, the minor offence authority, the administrative authority, the Hungarian National Authority for Data Protection and Freedom of Information, the National Bank of Hungary, or other bodies authorised by law may contact the Data Controller for the purpose of providing information, communicating data, transferring data, or making documents available.

AFMTEC Services Kft. shall disclose personal data to the authorities — provided that the authority has indicated the precise purpose and the scope of the data — only in such quantity and to such extent as is absolutely necessary for the fulfilment of the purpose of the request.