top of page

 

PRIVACY POLICY

Who is the Data Controller for the processing of your data?

 

The data controller for the processing of the data is Gábor Mészáros self-imployed (tax number: 71463160-1-43, registered office: 1126 Budapest, Márvány street 33., the Controller). The contact details are as follows:

  • Contact: Zsuzsanna dr. Ócsai

  • Address: 1142 Budapest, Erzsébet királyné street 43/B.

  • E-mail: info@govguru.hu

The Data Controller process the personal datas as a fundamental right. This privacy policy gives information what is the legal base to collect the personal datas, how to exercices the rights, or other significant aspects by the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016) and other Hungarian sectoral legislation, specially Act CXII of 2011, on Informational Self-determination and Freedom of Information, which was endorsed by the National Assembly on 11 July 2011.

The Data Controller appoint a protection officer who can help you comprehensive information and detailed assistance. The contact details are as follows:

  • Contact: Zsuzsanna dr. Ócsai

  • Address: 1142 Budapest, Erzsébet királyné street 43/B.

  • E-mail: info@govguru.hu

 

Definitions

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

‘filing system’ means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.

 

‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

 

‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

 

‘representative’ means a natural or legal person established in the Union who, designated by the controller or processor in writing pursuant to Article 27, represents the controller or processor with regard to their respective obligations under this Regulation.

What type of personal information does Data Controller collect?

The Controller use the personal datas according to the privacy policy or use the received details for any purposes.

According to the purpose limitation the  Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’) and collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, not be considered to be incompatible with the initial purposes.

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

  1. the purposes of the processing;

  2. the categories of personal data concerned;

  3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

  5. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

  6. the right to lodge a complaint with a supervisory authority;

  7. where the personal data are not collected from the data subject, any available information as to their source;

  8. the existence of automated decision-making, including profiling at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

 

The collected personal datas shall provide the Controller with all information which is necessary from the consent.

If the consent send an email to the Controller from the website, it means she/he allows to process the personal datas. In this case the aim is to contact with the consent.

The plea of the processing is a legitimate interest of the data controller concerned to reply for the e-mail, and the legitimate interest of the consent to get the answer by email. These personal datas are not allowed anymore.

 

How long do we keep the data?

If the consent send an email to the Controller via the website, it means she/he allows to process the personal datas. In this case the aim is to contact with the consent.

The plea of the processing is a legitimate interest of the data controller concerned to reply for the e-mail, and the legitimate interest of the consent to get the answer by email. These personal datas are not allowed anymore.

After keep in touch with the consent, the Controller will fill the forms or sign in your name and on your behalf. Meanwhile the Controller will processing the personal datas. The controller should not retain personal data for the sole purpose of being able to react to potential requests. 

For using the services people don’t need to register for the website, so the Controller don’t process the personal datas in this case.

The Controller declares that it has adopted all the technical and organisational measures necessary to guarantee the security and integrity of the personal data it processes, and to prevent the loss, alteration and/or access of the same by unauthorised third parties.

 

What authorises us to process the data?

The Controller use the personal datas according to the privacy policy or use the received details for any purposes.

According to the purpose limitation the  Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’) and collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, not be considered to be incompatible with the initial purposes.

If the consent send an email to the Controller via the website, it means she/he allows to process the personal datas. In this case the aim is to contact with the consent.

 

1.Execution of the agreement

The legal basis for processing the personal data of the interested party which is collected is the execution of the sale and purchase agreement. In this regard, the interested party is obliged to provide that data necessary for its execution. If we are not provided with this data, the sale and purchase cannot be executed.

2. Legal obligations

The management and issue of the sales invoice is based on the legal obligation of Controller in its relationship with its customers.

3. Consent

In relation to the following purposes, the legal basis for the processing of the personal data of the interested party will be the consent of the same, in cases where it has been given:

  • Respond to the request.

  • Contracting, final certificate or invoices drawn up.

The withdrawal of consent of said processing on the part of the interested party shall not affect the execution of the sale and purchase agreement entered into by the same and Controller.

Legitimate interest

The legitimate interest consists of being able to guarantee that the website remains secure, and to help Controller understand the requirements, expectations and degree of satisfaction of the users and, consequently, improve the services. All these actions will be performed to improve the degree of satisfaction of the customer and guarantee a unique browsing experience.

 

What are your rights in relation to personal data? 

You have the following rights, which may be exercised via the e-mail address info@govguru.com:

Right of access

You have the right to obtain confirmation whether at Controller we are processing personal data that concerns you, or not, in addition to how to access the personal data Controller possesses about you.

Right of modification

You have the right to ask Controller to rectify the personal data whenever they are inaccurate, or to complete them whenever they are incomplete.

Right to erasure/right to be forgotten

You may ask us for your personal data to be erased whenever, among other reasons, the data are no longer necessary for the purposes they were collected for.

Right to restriction

You have the right to request the restriction of the processing of your data, in which case we will only keep them for the exercise or defence of complaints.

Right to data portability

You have right to receive the personal data in a structured, commonly-used and machine-readable, and to transmit them to another controller whenever the processing is based on consent or on a contract, and is carried out by automated means.

Right to object

You may object to the processing of personal data based on the public or legitimate interest pursued by Controller, including profiling. In this case, Controller will cease to process the data, except for compelling legal grounds or the exercise or defence of possible legal claims.

Automated individual decisions

You have the right not to be the object of a decision based solely on automated processing, including profiling, while produces a legal effect on you or significantly affects you in a similar manner. However, it will not be possible to exercise said right in cases where the decision is necessary for the formalisation or execution of a contract between you and Controller; it is authorised by the law applicable to Controller provided it establishes the appropriate measures to safeguard its rights, freedoms and legitimate interests; or where it is based on your explicit consent.

Right to lodge a complaint

You have the right to lodge a complain to the Hungarian 

To make the application, we may ask you to accredit your identity.


Legal remedy

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

 

In Hungary named Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Contacts of NAIH:

Website: http://naih.hu/

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.

Mailing adress: 1530 Budapest, Pf.: 5.

Phone: +36-1-391-1400

Fax: +36-1-391-1410

Email: ugyfelszolgalat@naih.hu

 

Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation.

 

Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.

 

If you have any complaint by processing the personal datas, please contact us. Every compliant will be expostulate within 30 days.

 

The privacy policy was agreed in 1th of July in 2019.

bottom of page