Privacy Notice

What kind of personal data are being processed and why is the processing necessary?

Categories of data:

We will process data that you provide when you order our service or complete and submit an online request for information form. The personal data we process may include the type of service selected, client name, company name, taxpayer identification number/VAT number, registered office of the company, e-mail address, telephone number and comments, if any. No special categories of personal data are processed as specified in Article 9 of GDPR.

We use cookies on our website and we process the following data automatically when visiting the website: IP address, country, browser used, type of device and operating system and version number, language settings, date of visit, website visit details.

Purpose of and legal basis for the processing:

The purposes of processing your personal data are to allow you to order the services offered by ABT Hungária Tanácsadó Kft. and us to provide you with these services and respond to your requests for information. In the case of data processed for the purpose of fulfilment of orders, the legal basis for the processing is the performance of the contract concluded between you and the controller, while in the case of data processed to respond to requests for information, the legal basis for the processing is the legitimate interest of the controller. Without processing these data, it would be impossible to satisfy the requirements set out in our General Terms and Conditions (GTC), which you accepted by placing an order, or to provide the service ordered by you and respond to your inquiries.

Another purpose of the processing is to communicate with you, which is closely related to the fulfilment of orders. The legal basis for such processing is the legitimate interest of the controller. The controller has a legitimate interest in being able to effectively communicate with its clients in the course of the provision of its services.

In the case of data processed for the purpose of operating our website, the legal basis for the processing is legitimate interest of the data controller. The controller has a legitimate interest in proper operation of the website.

In addition, the controller processes your personal data for the purpose of exercising any legal claims that may arise after the termination of our business relationship based on its legitimate interest.

Who and how processes my data? Who are allowed to access my data and what are they allowed to do with them?

Controllers:

ABT Hungária Tanácsadó Kft. (HU-1037 Budapest, Montevideo utca 3. A. ép., Tel.: +36 1 430-3400, abt.hu, abt@abt.hu)

The above controllers are considered to be joint controllers, and therefore they determine the purposes and means of the processing jointly, and are jointly responsible for the processing.

Controllers’ personnel authorised to access the data:

In the controllers’ organisations, access to personal data is restricted to those who have a business need to know them. These people are the following:

legal advisers
staff in charge of invoicing
staff in charge of e-mail and telephone communication

The controller, in order to provide you with proper services, use data processors that perform tasks related to the controller’s activities.

Processors:

Endurance International Group, Inc. (10 Corporate Drive, Burlington, MA 01803, USA; representative office in Europe: AppMachine B.V., Sophialaan 32, 8911 AE Leeuwarden, The Netherlands; privacy@endurance.com; https://www.endurance.com) – web hosting service
MPC Hardver Számítógép-kereskedelmi és Szolgáltató Kft. (registered office: HU-3300 Eger, Petőfi Sándor utca 19.; e-mail address: info@mpchardver.eu, telephone number: +36 36 786 071) – providing technical background (system administration and monitoring duties; physical and operating system level operation of the controller's servers)
Collective Art Kft. (HU-1053 Budapest, Veres Pálné utca 13., Fsz. 4.; http://collectiveart.hu/) – providing technical background related to the website and performing development tasks

In the processors’ organisations, access to personal data is restricted to those who have a business need to know them. These people are the following:

Endurance International Group, Inc.: web hosting administration staff
MPC Hardver Számítógép-kereskedelmi és Szolgáltató Kft.: system administrators and system support stuff
Collective Art Kft.: web developer

Our web hosting service provider transfers personal data outside the European Economic Area (EEA). For transfers of personal information outside the EEA, such transfers will either be under the Commission’s model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses), pursuant to Decision 2004/915/EC and 2010/87/EU; or rely on the EU-US Privacy Shield Framework.

For how long will you process my personal data?

Data required to fulfil your order will be processed for this purpose as long as it is necessary for the provision of the service or performance of the contract, that is, as long as there is an ongoing cooperation between us and you or your business. Data required for invoicing will be retained in accordance with the applicable statutory provisions, with due consideration of the limitation periods under the legislation on accounting. Data provided by you for the purposes of communication or request for information will be processed for these purposes until the end of the cooperation between us and you or your company, but in any case, at the latest until when the corresponding purpose or legal basis ceases to exist. The controller will continue to process your personal data for the purpose of exercising any legal claims for a period of 5 years after the termination of our business relationship. In the case of data processing for the purpose of the website operation, the duration of data processing is 2 years from the visit.

How do you protect my personal data?

Your personal data are stored in a password protected system, which is subject to regular reviews. In addition, in order to protect your personal data, access to personal data is restricted, and communications take place via an encrypted channel.

What rights do I have in relation to the processing of my personal data?

right to transparent information – you may request information on the processing of personal data concerning you at any time;
right to access your personal data – you may access at any time personal data concerning you that we process;
at your request, right to have your data corrected or erased;
right to restriction of processing;
right to data portability (only with regard to personal data processed based on a consent or a contract and in the case of automated processing);
right to object – you may at any time object to the processing of personal data concerning you based on a legitimate interest;
right to an effective legal remedy – in cases where your rights are violated, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information, or seek judicial remedy.

Whom can I contact if I need legal or judicial remedy or have a question?

Please contact our colleagues who are more than happy to help you and answer your inquiries.
HU-1037 Budapest, Montevideo utca 3/a
Telephone: +36 1 430-3400
E-mail: gdpr@abt.hu

Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH).
Contact details of the Hungarian National Authority for Data Protection and Freedom of Information:
HU-1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Web: www.naih.hu
Telephone: +36-1-391-1400
The court of competent jurisdiction
In Hungary, at the data subject’s request, the action may be brought before the court that is competent based on the domicile or the place of residence of the data subject.