MTVA – Legal and Privacy Statement
Privacy Statement
By registration, sending an email or signing up for our newsletter on our website (the Internet service available on the website: www.mtva.hu) you accept the terms set out below.
Confidential treatment of data is in compliance with the applicable laws on privacy and data protection, in particular with the laws below:
Act CXII of 2011 on the Right of Informational Self-Determination and the Freedom of Information (the two Acts altogether shall be referred to as “Privacy Act”);
Act CXIX of 1995 on the Management of Name and Address Data for the Purpose of Research and Direct Marketing (“Direct Marketing Act” or “DM Act”);
Act CVIII of 2001 on Electronic Commerce Services and Specific Issues of Services Related to Information Society (“Electronic Commerce Act”).
Definitions
Definitions identified herein mean the definitions set out in the Applicable Laws.
The Legal Basis for Data Management
Personal data may only be managed, if
- the person concerned gives his/her consent to it, or
- it is limited to a set of data as specified under law or authorization pursuant to law, enabling a local government ordinance to fulfill a particular public purpose.
For public purpose the law may ordain the disclosure of personal data, by specifically stating the set of data concerned. Otherwise, revealing personal data requires the consent of the person concerned while disclosing specific data requires the written consent of the person concerned. Should any doubt arise, it is viewed that the person concerned has not given the consent. Data revealed by the person concerned for publication purposes or in a public appearance are viewed as if the person concerned has given the consent.
Personal data may solely be managed for a specific purpose to exercise a right and satisfy an obligation. Each phase of data management must meet the above requirement. Only such personal data may be managed that is vital information for the execution of data management and adequate to fulfill the set goal to the extent and over the time necessary to reach the set goal.
Data Transfer and Linking Various Kinds of Data Management
Data may be transferred and the various kinds of data management may only be linked, if the person concerned has given the consent or if it is permitted by law and if terms for each and every personal datum are executed.
Data Security
The data controller and the data processor as part of their activities are obliged to assure data security as well as to take technical and organizational measures and to establish procedural provisions necessary to comply with law and other privacy and confidentiality regulations. Data must be protected, especially from unauthorized access, modification, publication, deletion, damage or destruction.
The Purpose and Scope of Data Management
By registration, sending an email or signing up for our newsletter on our website, you have given your consent to using your personal data for the purposes identified below:
- to keep in touch with you,
- to provide information to you regularly in our newsletter,
- to organize online press conferences,
- for indirect marketing,
- for data management and market research by disclosing questions asked on our website and via email using the email addresses provided on our website.
Collecting data indirectly (using logs):
Logs:
The server operated by MTVA stores the following data of people visiting the website:
- The type of web browser,
- the time of entering the website,
- the time of leaving the website, and
- the IP address of the those visiting the website.
The above data are logged to perform website traffic statistics, to assure the safe operation of the website, and to detect and prevent illegal external attacks harming or threatening the integrity of the website.
Data logs are updated on a daily basis, statistical analyses are carried out on them generating logbooks monthly which are stored on the server of MTVA for the period of a year.
Legal Remedies
If your are prejudiced, despite your objections, for the way your personal data is treated, you may seek the following legal remedies:
- You may request information on how your personal data is managed as well as the correction of such data;
- Upon your request we provide you information on your data processed by us or the data processor acting on our behalf as well as on the purpose, legal basis and period of data management and the name, address (registered seat) and the data management activities of the data processor and who is or has been given the data and for what purpose. Within the shortest time possible or within no more than 25 days of your request, unless a shorter time is prescribed by law, we provide you a written notice including clear and understandable information on the requested data.
- Your personal data shall be cancelled upon your request if data management is unlawful, if the purpose of data management has ceased to exist, if your data is incomplete or false and cannot be legally corrected unless cancellation is forbidden by law, if the period allowed for storing data under law has expired or if cancellation is ordered by court or the data protection supervisor. You and others having been transferred the data for data management will be notified about the correction or the cancellation of the data. Notice may be omitted if it does not cause prejudice to the person concerned with respect to the purpose of data management.
You may object to the management of your personal data:
- if managing or transferring your personal data is solely meant to perform the legal obligation of the data controller or to realize the legal interests of the data controller, the data importer or a third party save the event of obligatory data management;
- if data is utilized and transferred for direct marketing, public opinion polling or scientific research;
- in other cases as specified by law.
MTVA as data controller – having suspended data management – shall review the case and inform in written form the person concerned about the decision within the shortest time possible or within no more than 25 days of the objection, unless a shorter time is prescribed by law. If the objection is justified, data management including collecting additional data and data transfer will be terminated, data will be blocked and information about the objection and the consecutive steps and measures that have been taken will be provided to the persons having received the data concerned and those who are bound to take measure to execute the objection.
If you should disapprove of the decision made, you may refer the case to court within 15 days of your acceptance of the decision. Please note that your data may not be cancelled if data management has been performed to comply with law. However, data must not be transferred to a data importer if the data controller has approved the objection or the court has justified the objection.
In the event of prejudiced rights, you may bring the case to court against the data controller. In such a case the court shall act out of turn. Depending on the preference of the person concerned the law suit may be brought on in the court of either the permanent or temporary residence of the person concerned.