Data protection

Data Protection Notice

Introduction

The service provider / data controller, in the course of operating the website, manages the data of persons registered on the site in order to provide them with appropriate services.

The service provider fully intends to comply with the statutory requirements regarding the processing of personal data, in particular those set out in Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and with regard to Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.

Service provider / data controller details:

Name / company name:
WNT Technológiai Szerelő és Szolgáltató Kft.

Registered office:
4002 Debrecen, Richter Gedeon utca 39.

Tax number:
23360587-2-09

Data Protection Authority registration number (NAIH):

Website name, address:
http://www.wntkft.hu

Accessibility of this Privacy Notice:
https://www.wntkft.hu/adatkezelesi-tajekoztato

Contact details of the data controller:

Name / company name:
WNT Technológiai Szerelő és Szolgáltató Kft.

Registered office:
4002 Debrecen, Richter Gedeon utca 39.

Postal address:
4002 Debrecen, Richter Gedeon utca 39.

E-mail:
info@wntkft.hu

Telephone:
+36 30 399 69 49

⸻

Definitions
 • GDPR (General Data Protection Regulation): the new Data Protection Regulation of the European Union;
 • processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
 • processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
 • personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
 • controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
 • consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
 • personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
 • recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
 • third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

⸻

Principles of data processing

The controller declares that it processes personal data in accordance with this privacy notice and complies with the provisions of applicable laws, with particular regard to the following:
 • Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
 • Personal data shall be collected for specified, explicit and legitimate purposes.
 • The purpose of processing personal data must be adequate, relevant and limited to what is necessary.
 • Personal data must be accurate and kept up to date; inaccurate personal data shall be erased without delay.
 • Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary. Longer storage shall only take place if it is carried out for archiving in the public interest, scientific or historical research purposes, or statistical purposes.
 • Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
 • The principles of data protection shall apply to any information relating to an identified or identifiable natural person.

Important Data Processing Information

The purpose of data processing is that the service provider / data controller, in the course of operating the website, can provide appropriate additional services to persons registered on the site.

The legal basis for processing is the consent of the data subject.

The scope of data subjects: the registered users of the website.

Duration of processing and erasure of data:
The duration of processing always depends on the specific user purpose, but data must be erased immediately if the originally set purpose has been fulfilled. The data subject may withdraw their consent to data processing at any time by sending a letter to the contact e-mail address. If there is no legal obstacle to erasure, the data will be deleted.

Persons entitled to access the data: the controller and its employees.

The data subject may request from the controller access to personal data concerning him or her, as well as their rectification, erasure or restriction of processing, and may object to the processing of such personal data, and also has the right to data portability.

The data subject may withdraw their consent to processing at any time, but such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

The data subject has the right to lodge a complaint with the supervisory authority.

If the data subject wishes to use the benefits of registration, i.e. to use the website’s related service, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data, and the failure to provide data does not entail any disadvantage for them. However, certain functions of the website may not be available without registration.

The data subject has the right to obtain from the controller without undue delay the rectification or completion of inaccurate personal data concerning him or her.

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller is obliged to erase such personal data without undue delay where there is no other legal ground for processing.

Personal data may be modified or deleted by e-mail, phone or post, using the above contact details.

⸻

Cookies

Our company’s website, like most websites, uses cookies. These small data files, called cookies, are placed on the user’s device by the visitor’s browser. These files do not store information that directly identifies the visitor or personal data, but some of them are necessary for the operation of the site, others are used for visitor statistics, and some may be used for displaying advertisements.

The satisfaction and data security of our visitors are important to us, which is why we use SSL certificates and ensure that our visitors can learn what cookies we use and for what purpose.

Our website stores cookies on the visitor’s device for the following purposes:
 • session and technical cookies: used to record page views by the visitor – these cookies are deleted when the browser is closed, but if not, they only store minimal information about which page was visited from the visitor’s device and what settings were used,
 • Google Analytics cookies: for visitor statistics – not mandatory, but useful to know how many people visit us.

How does Google use cookies? You can learn more at the following link:
Google Privacy Policy

Most browsers automatically accept cookies. Users can disable cookies in their browsers, but if they do so, some functions necessary for the proper use of certain websites may not be available.

Before using the website, the visitor can decide to accept or reject cookies. If they do not want to use cookies at all, they can disable them in their browser. Useful information can be found in the browser’s help or on the Symantec website.

As mentioned above, some cookies are technically necessary, which do not require separate acceptance, but we must inform our visitors about them!

⸻

Google Analytics

Our website □ uses / X does not use Google Analytics.

In case Google Analytics is used:

Google Analytics uses first-party cookies to generate reports for its clients about the usage habits of website users.

On behalf of the website operator, Google uses the information to evaluate how users use the website. As an additional service, it prepares reports on website activity for the website operator so that it can provide further services.

Data is stored on Google servers in encrypted form to prevent misuse.

Disabling Google Analytics can be done as follows (quote from Google’s page):

Website users who do not want Google Analytics JavaScript to report on their data can install the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser add-on can be used in most modern browsers. The Google Analytics opt-out add-on does not prevent data from being sent to the website itself or to other web analytics services.

More information:
https://support.google.com/analytics/answer/6004245?hl=en

Google Privacy Policy: https://policies.google.com/privacy?hl=en

Detailed information on the use and protection of data can be found at the above links.

Detailed privacy information:
https://static.googleusercontent.com/media/www.google.com/en//intl/en/policies/privacy/google_privacy_policy_en.pdf

Data Processors

Hosting provider:

Name / company name:
ELME-PROJEKT Oktatási és Szolgáltató Kft.

Registered office:
4174 Bihartorda, Kossuth u. 43.

Telephone:
+36 70/622 3222

E-mail:
info@elmeprojekt.hu

The data you provide are stored on the server operated by the hosting provider. Access to the data is restricted to our employees and the staff operating the server, all of whom are responsible for handling the data securely.
 • Nature of the activity: hosting service, server service.
 • Purpose of processing: ensuring the operation of the website.
 • Data processed: personal data provided by the data subject.
 • Duration of processing and deadline for deletion: data processing lasts until the end of the website’s operation, or in accordance with the contractual agreement between the website operator and the hosting provider. If necessary, the data subject may also request the deletion of their data directly from the hosting provider.
 • Legal basis for processing: the data subject’s consent, or processing based on legislation.

⸻

Rights Related to Data Processing

Right to information
Through the provided contact details, you may request information from us about what data our company processes about you, on what legal basis, for what purpose, from what source, and for how long. Upon your request, we will provide information without undue delay, but no later than within 30 days, to the e-mail address you specify.

Right to rectification
Through the provided contact details, you may request us to modify any of your data. We will act upon your request without undue delay, but no later than within 30 days, and will notify you at the e-mail address you specify.

Right to erasure (“right to be forgotten”)
Through the provided contact details, you may request us to delete your data. We will act upon your request without undue delay, but no later than within 30 days, and will notify you at the e-mail address you specify.

Right to restriction of processing
Through the provided contact details, you may request us to restrict the processing of your data. Restriction will continue for as long as the reason you specify makes it necessary. We will act upon your request without undue delay, but no later than within 30 days, and will notify you at the e-mail address you specify.

Right to object
Through the provided contact details, you may object to the processing of your data. We will examine the objection within the shortest possible time, but no later than 15 days, decide whether it is justified, and inform you of our decision by e-mail.

⸻

Remedies in Connection with Data Processing

If you experience unlawful data processing, please notify our company so that we can restore lawful conditions as soon as possible. We will do everything we can to resolve the issue in your interest.

If, in your opinion, the lawful condition cannot be restored, please notify the authority at the following contact details:

National Authority for Data Protection and Freedom of Information (NAIH)

Mailing address: 1530 Budapest, P.O. Box 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Telephone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
URL: https://naih.hu
Coordinates: N 47°30’56’’; E 18°59’57’’

Laws Forming the Basis of Data Processing
 • REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
 • Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
 • Act LXVI of 1995 on Public Records, Public Archives, and the Protection of Private Archival Material.
 • Government Decree No. 335/2005 (XII. 29.) on the General Requirements for Records Management by Public Service Bodies.
 • Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.