DATA PROCESSING BROCHURE

1. Name of Data Processor

Company name: Science Office Complex Korlátolt Felelősségű Társaság
Registered office: 1134 Budapest, Váci út 33.
Company registration number: 01-09-974438
Tax identification number: 23705201-2-44
Office Building owned by the Company: Science Park Office Building
Address of Office Building: 1117 Budapest, Irinyi József u. 4-20.
Data Processor’s e-contact: Antal.Laszlo@whitestar-realestate.hu

 

  1. Rules of Data Processing

 This Data Processing Brochure shall be valid from 1 January 2017 until withdrawn.

As the operator of www.sciencepark.hu (hereinafter the “Website”), Science Office Complex Korlátolt Felelősségű Társaság (hereinafter the “Company”) informs its visitors that it only processes personal data in relation to the Website in accordance with the provisions of this Data Processing Brochure.

This Brochure has been prepared on the basis of the Company’s Data Protection and Data Security Policy and its scope extends to all processes performed in the course of the operation of the Website by the Company during which the processing of personal data takes place as per Section 3 (2) of Act CXII of 2011 on the Right of Informational Self-Determination and on the Freedom of Information (hereinafter the “Info Act”).

The terms used in this Brochure correspond to the explanatory definitions referred to in Section 3 of the Info Act.

The Company declares that it shall only process personal data to exercise its rights or to perform its obligations. The Company will not use the processed personal data for any private purposes and the processing of the data shall comply with the principle of purpose limitation at all times, i.e. once the purpose of data processing ends or if the processing of the data is otherwise illegal, the data shall be deleted.

The Company shall only process personal data with the data subject’s prior consent or, in duly justified cases, as provided by statute.

The aim of this Brochure is to ensure that the Company informs the data subject about the purpose and legal basis of data processing as well as all material information concerning data processing prior to recording any data.

  1. Enforcing the Rights of Data Subjects

Any natural person directly or indirectly identifiable by reference to specific personal data may request information on his/her personal data being processed, the rectification of his/her personal data and – with the exception of data processing ordered by statute – the deletion of his/her personal data at the Company’s indicated contact details.

The Company shall give a written response in a readily intelligible form to any requests received from the data subject concerning the processing of his/her personal data within 15 days (or in the case of an objection within 5 days) at the latest.

Such information shall include the information referred to in Section 15 (1) of the Info Act, provided that the provision of such information to the data subject may not be refused by statute.

In principle, the information shall be provided free of charge and the Company shall only charge a fee in the cases referred to in Section 15 (5) of the Info Act.

The Company shall only refuse a request for the reasons referred to in Section 9 (1) and Section 19 of the Info Act and such refusal shall be reasoned in writing at all times with reference to the information provided for in Section 16 (2) of the Info Act.

The head of the organisational unit processing the data shall rectify any incorrect data, provided that the necessary correct data and the authentic instruments testifying to their correctness are available, and shall ensure that the processed personal data are deleted if any of the reasons referred to in Section 17 (2) of the Info Act apply.

The head of the organisational unit processing the data shall suspend data processing for the duration of the adjudication of an objection by the data subject against the processing of his/her personal data (but no more than 5 days), shall examine the grounds of the objection and make a decision about which he shall inform the data subject in accordance with the provisions of Section 21 (2) of the Info Act.

If the objection is justified, the head of the organisational unit processing the data shall act in accordance with the provisions of Section 21 (3) of the Info Act.

The Company shall compensate for damage caused by the unlawful processing of the data subject’s data or by the breach of the data security requirements and shall also pay the restitution due in cases where the data subject’s personal rights are infringed by the Company or by the data processor employed by the Company. However, the Company shall be exempt from liability for damages and the obligation to pay restitution if it can prove that the damage or the infringement of the data subject’s personal rights was caused by force majeure beyond the scope of data processing. Similarly, the Company shall not pay compensation if the damage results from the aggrieved party’s intentional or grossly negligent conduct.

The data subject may refer any complaints concerning the Company’s data processing operations to NAIH:

name:                                  National Authority for Data Protection and Freedom of Information

registered office:            1024 Budapest, Szilágyi Erzsébet fasor 22/C.

website:                             www.naih.hu

  1. Data Processing Occurring during the Use of the Company’s Website

4.1. Data Processing by the Website

No automatic data collection (cookies) or registration takes place on the website.

4.2. Contacting the Company Online

Visitors can contact the Company on the Company’s website: the relevant data required for contact can be provided by completing a form.

The legal basis for these data processing operations is the data subject’s consent [Section 5 (1) a) and 6 (6) of the Info Act], whereby in other cases opened at the data subject’s request, as regards the personal data he/she has supplied, the data subject’s consent shall be deemed to have been granted.

the purpose of data processing: to facilitate liaising with the Company, registration

the set of data being processed: name,  e-mail address, telephone number, reason for contact

the legal basis of data processing: the data subject’s consent as per Section 5 (1) a) of the Info Act.

the time limit of data storage: if the data subject does not become the Company’s client, his/her data shall be stored until the resolution of the reason for contact (i.e. the achievement of the purpose of contact), while if the data subject becomes the Company’s client, his/her data shall be stored as long as he/she remains the Company’s client

the method of data storage: electronic

  1. Issues not addressed in this Brochure

Issues not addressed herein shall be governed by the provisions of the Info Act.