Privacy policy

Introduction

The Pro Jugendstil Foundation/Young Artists for the Culture/.

Tax ID: 18232039-1-41

(hereinafter referred to as: Service Provider, data controller) is subject to the following regulations:

In accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation 95/46/EC (General Data Protection Regulation), we hereby provide the following information.

This data protection regulation governs the data processing of the following websites/mobile applications: https://theflockproject.hu

The data processing information is available from the following page: https://theflockproject.hu/en/privacy/

The amendments to the regulations will enter into force upon publication at the above address.

Data controller and contact details

Name: Pro Jugendstil Foundation/Young Artists for Culture/

Registered at: 1025.Budapest, Kupeczky u. 8.
Telephone: +36703213537
Contact email: info@theflockproject.hu

Definitions

1. “personal data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2. ‘processing’ means any operation or set of operations which is performed on personal data or on sets of data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
3. ‘controller’ means the natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law;
4. ‘processor’ means the natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
5. ‘recipient’ means the natural or legal person, public authority, agency or any other body to which personal data are disclosed, whether or not it is a third party. Public authorities which may have access to personal data in the context of an individual investigation in accordance with Union or Member State law shall not be considered recipients; the processing of such data by such public authorities shall be in accordance with the applicable data protection rules in relation to the purposes of the processing;
6. ‘consent of the data subject’ means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject, by a statement or by a clear affirmative action, signifies agreement to personal data relating to him or her being processed;
7. ‘data breach’ means any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
8. "profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal characteristics relating to a natural person, in particular to analyse or predict characteristics relating to his or her performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Principles governing the processing of personal data

Personal data:

1. shall be processed lawfully and fairly and in a manner that is transparent to the data subject ("lawfulness, fairness and transparency");
2. collected only for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific and historical research purposes or statistical purposes shall not be considered incompatible with the initial purpose in accordance with Article 89(1) ("purpose limitation");
3. adequate and relevant in relation to the purposes of the processing and limited to what is necessary ('data economy');
4. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate in relation to the purposes of the processing are erased.

5. stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for a longer period only where the personal data are processed for archiving purposes in the public interest, scientific and historical research purposes or statistical purposes in accordance with Article 89(1), subject to the implementation of appropriate technical and organisational measures to safeguard the rights and freedoms of data subjects (‘storage limitation’);

6. processed in such a way that appropriate technical or organisational measures ensure the security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage (‘integrity and confidentiality’).

The controller shall be responsible for compliance with the above and shall be able to demonstrate such compliance (‘accountability’).

The data controller declares that its data is processed in accordance with the principles set out in this section.

CONTACT / REQUEST A QUOTE

1. The fact of data collection, the scope of data processed and the purpose of data processing:

Personal data	purpose of data collecting	Legal basis
Name	Identification	Article 6(1)(a) of the GDPR
E-mail	Contact
Phone number	Contact
Message content, if it contains personal data	Required for response

The email address does not need to contain any personal information.

2. Scope of data subjects: All data subjects who send a message via the contact form.

3. Duration of data processing, deadline for data deletion: The data controller processes personal data until the purpose of data processing is achieved, but for a maximum of 2 years. If one of the conditions set out in Article 17(1) of the GDPR is met, data processing will last until the data subject requests deletion.

4. Potential data controllers entitled to access the data, recipients of personal data: Personal data may be processed by the data controller's authorized employees.

5. Description of the data subjects' rights related to data processing:
The data subject may request from the data controller access to, rectification, erasure or restriction of processing of personal data concerning him or her, and
the data subject has the right to data portability and to withdraw consent at any time.

6. The data subject may request access to, erasure, modification or restriction of processing of personal data, or data portability in the following ways:

by post to 1025. Budapest, Kupeczky u. 8.
telephone: +36703213537
by e-mail to info@theflockproject.hu.

7. Legal basis for data processing: consent of the data subject, Article 6 (1) a). If you contact us, you agree that we process your personal data (name, telephone number, e-mail address) provided to us during the contact in accordance with this policy.

8. We would like to inform you that

this data processing is based on your consent and is necessary to provide an offer.
you are required to provide your personal data in order to be able to contact us.
Failure to provide data will result in you being unable to contact the data controller.
The withdrawal of consent does not affect the lawfulness of data processing based on consent prior to its withdrawal.

SUBSCRIPTION TO THE NEWSLETTER

The Service Provider does not send unsolicited advertising messages, and the User may unsubscribe from the newsletters free of charge, without limitation or justification. In this case, the Service Provider deletes all personal data from its records and does not contact the User with further offers.

4. The fact of data collection, the scope of the processed data and the purpose of data processing:

Personal data	Purpose of data processing	Legal bases
Name, e-mail	Identification, enabling subscription to the newsletter/promotional coupons.	Consent of the data subject, Article 6 (1) a). Section 6 (5) of Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activity.
Date of subscription	Performance of a technical operation.
IP address at time of subscription	Performing a technical operation

5. Scope of data subjects: All data subjects who subscribe to the newsletter.

6. Purpose of data processing: sending electronic messages to the data subject, providing information about current information, presentations, etc.

7. Duration of data processing, deadline for data deletion: Data processing lasts until consent is withdrawn (unsubscribe, request for deletion by the data subject), or the newsletter is terminated.

8. Potential data controllers authorized to view the data, recipients of personal data: Personal data may be processed by the data controller, as well as its sales and marketing staff, in compliance with the above principles.

9. Description of the rights of the data subjects in relation to data processing:

The data subject may request from the data controller access to personal data concerning him/her, rectification, erasure or restriction of processing, and
may object to the processing of his/her personal data and
the data subject has the right to data portability and to withdraw consent at any time.
10. The data subject may initiate access to personal data, deletion, modification or restriction of processing, data portability or objection in the following ways:

by post at 1025. Budapest, Kupeczky u. 8.
telephone: +36703213537
by e-mail at info@theflockproject.hu

11. The data subject may unsubscribe from the newsletter at any time, free of charge.

12. We inform you that

data processing is based on your consent.
you are required to provide personal data if you would like to receive our newsletter.
failure to provide data will mean that we will not be able to send you the newsletter.
we would like to inform you that you can withdraw your consent at any time by clicking on unsubscribe.
the withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal.

COOKIE-K PROCESSING

We only use so-called session cookies that are absolutely necessary for the operation of the site. The cookies we use (which serve to facilitate the more convenient use of the website) disappear when you close the browser.

Cookie type	Legal bases	Duration of data processing
Session cookies	No data processing is performed using this cookie.	The period until the relevant visitor session is closed, i.e. it only remains on the computer until the browser is closed.

Description of the data subject's rights regarding data processing: The data subject has the option to delete cookies in the Tools/Settings menu of the browser, usually under the Privacy menu settings.

Most browsers used by our users allow you to set which cookies should be saved and to allow (specific) cookies to be deleted again. If you restrict the storage of cookies on certain websites or do not allow third-party cookies, this may mean that our website can no longer be used in its entirety. Here you will find information on how to customize cookie settings for common browsers:

Google Chrome (https://support.google.com/chrome/answer/95647?hl=hu)

Internet Explorer (https://support.microsoft.com/hu-hu/help/17442/windows-internet-explorer-delete-manage-cookies)

Firefox (https://support.mozilla.org/hu/kb/sutik-engedelyezese-es-tiltasa-amit-weboldak-haszn)

Safari (https://support.apple.com/hu-hu/guide/safari/sfri11471/mac)

DATA PROCESSORS USED

Hosting service provider

1. Activity provided by the data processor: Hosting service

2. Name and contact details of the data processor:
Rackhost Zrt., 1132 Budapest, Victor Hugó utca 18-22.

Registered office: 6722 Szeged, Tisza Lajos körút 41.

Email: info@rackhost.hu, Phone number: +36 1 445 1200

3. Fact of data processing, scope of data processed: All personal data provided by the data subject.

4. Scope of data subjects: All data subjects using the website/mobile application.

5. Purpose of data processing: Making the website/mobile application available and operating it properly.

6. Duration of data processing, deadline for data deletion: Data processing lasts until the termination of the agreement between the data controller and the hosting service provider, or until the data subject submits a request for deletion to the hosting service provider.

7. Legal basis for data processing: Article 6(1)(c) and (f) and Section 13/A(3) of Act CVIII of 2001 on certain issues of electronic commerce services and information society services. Legitimate interest is the proper operation of the website, protection against attacks and fraud.

Other data processors (if any)

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4.)

Rights of data subjects

1. Right of access

You have the right to obtain from the controller information as to whether or not personal data concerning you are being processed and, where such processing is taking place, access to the personal data and the information listed in the Regulation.

2. Right to rectification

You have the right to obtain from the controller, upon request, the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the completion of incomplete personal data, including by means of a supplementary statement.

3. Right to erasure

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, and the controller is obliged to erase personal data concerning you without undue delay under certain conditions.

4. Right to be forgotten

Where the controller has made personal data public and is obliged to erase them, the controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform the controllers processing the data that you have requested the erasure of links to or copies or replications of those personal data.

5. Right to restriction of processing

You have the right to obtain from the controller restriction of processing where one of the following conditions applies:

You contest the accuracy of the personal data, in which case the restriction shall apply for a period enabling the controller to verify the accuracy of the personal data;

the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead;

the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
you have objected to the processing; in this case, the restriction shall apply for a period of time until it is determined whether the legitimate grounds of the controller override your legitimate grounds.

6. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the controller to whom the personal data were provided (...)

7. Right to object

In the case of processing based on legitimate interest or public authority as legal grounds, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data concerning you (...), including profiling based on those provisions.

8. Objection to direct marketing

If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such purposes, including profiling, where this is related to direct marketing. If you object to the processing of your personal data for such purposes, your personal data will no longer be processed for such purposes.

9. Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The previous paragraph shall not apply where the decision:

is necessary for the conclusion or performance of a contract between you and the controller;

is permitted by Union or Member State law applicable to the controller, which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or is based on your explicit consent.

Possibility of lodging a complaint

A complaint against a possible infringement of the controller’s rights can be lodged with the National Data Protection and Freedom of Information Authority:

National Data Protection and Freedom of Information Authority
1055 Budapest, Falk Miksa utca 9-11.
Mailing address: 1363 Budapest, Pf. 9.
Telephone: +36 -1-391-1400
Fax: +36-1-391-1410
E-mail: ugyfelszolgalat@naih.hu