This privacy notice summarises the data processing carried out by Design Kft. (registered office: 6000 Kecskemét, Ipar u. 6., Hungary; hereinafter: the Controller) in relation to visitors to the designkft.hu website.
Please read this privacy notice carefully and, if you have any questions about the processing of your personal data, do not hesitate to contact us at one of the contact details below.
1. The Controller
- Controller: Design Kft.
- Registered office: 6000 Kecskemét, Ipar u. 6., Hungary
- Postal address: 6000 Kecskemét, Ipar u. 6., Hungary
- Email: info@designkft.hu
2. The personal data processed
2.1 Contacting us
- Purpose of processing: The purpose of the processing is to enable the Controller to answer and respond to your question or request and thereby, where possible, to fulfil what is set out in your enquiry.
- Legal basis for processing: The consent of the data subject, Article 6(1)(a) GDPR
- Categories of data processed: Any personal data that you, as the data subject, provide to the Controller when contacting us, typically name, telephone number and email address.
- Duration of processing: The Controller processes the personal data until the question has been answered, until the request you submitted has been settled, or until you withdraw your consent. After this, all personal data provided by you is permanently and irrecoverably deleted.
- Recipients with whom we share the data: As a general rule, we do not share the personal data provided when you contact us with any third party.
- Measures taken to ensure the security of the data: Only those colleagues whose duties require it have access to the data collected when you contact us. We process personal data electronically.
2.2 Processing for the purpose of keeping in touch about posts
- Purpose of processing: The purpose of the processing is to notify you about the Controller's relevant content and posts.
- Legal basis for processing: The consent of the data subject, Article 6(1)(a) GDPR
- Categories of data processed: Email address.
- Duration of processing: On the basis of consent as the legal basis, the Controller processes the personal data until the purpose of the processing ceases to exist or until consent is withdrawn.
- Recipients with whom we share the data: We do not share the data with any third party.
- Measures taken to ensure the security of the data: We retain the personal data until consent is withdrawn, but for no longer than 5 years from the date of collection.
2.3 Cookie management
- Purpose of processing: The Controller uses cookies on its website, and the service providers engaged by the Controller may place cookies on the visitor's computer in order to display targeted advertisements to them and to analyse the use of the website.
- Legal basis for processing: For cookies necessary for the operation of the website, the legitimate interest of the Controller, Article 6(1)(f) GDPR. For analytics and marketing cookies, the consent of the data subject, Article 6(1)(a) GDPR
- Categories of data processed: Data of the user's computer; the IP address used by the visitor, the type of browser and the characteristics of the operating system of the device used for browsing.
- Duration of processing: The Controller processes the personal data until you withdraw your consent (by disabling the use of cookies in your browser), or for a maximum period of 2 years. After this, the personal data is deleted.
- Recipients with whom we share the data: Google Ireland Ltd, Meta Platforms Ltd.
- Measures taken to ensure the security of the data: For a period of 2 years from the last visit to the website
3. Processors and transfer of the data
Hosting for the designkft.hu website is provided by Márkaépítés Profin Kft. (registered office: 6000 Kecskemét, Horváth Döme krt. 14, ground floor 10, Hungary), which means that the data stored on the website is stored on the provider's server.
In addition to the above, the Controller may hand over the personal data you have provided to the competent authority, court or applicant in the event of a request from an authority or court, or where justified in order to protect the rights and freedoms of the Controller or of others. Should this occur, the Controller will notify you of it without delay.
4. General data security measures
In order to guarantee an appropriate level of data security, the Controller has assessed the risks arising in connection with its processing operations and evaluated them from various perspectives in terms of the severity of the risks and the likelihood of their occurrence.
In operating its IT systems, the Controller provides the necessary access management, internal organisational and technical solutions to ensure that your data cannot come into the possession of unauthorised persons and that unauthorised persons cannot delete, extract from the system or modify the data. We also enforce data protection and data security requirements towards our processors by means of prior assessment and a data processing agreement.
We keep records of any personal data breaches and, where necessary, inform you of any incidents that arise.
Internet communication between the Controller and visitors to the Controller's website is encrypted end to end and takes place via the https (http+ssl) protocol.
The Controller applies password protection on its computers and provides its IT equipment with protection against intrusion.
The Controller provides the computers it owns with appropriate passwords and destroys its data storage devices in accordance with a disposal protocol established for this purpose.
5. Rights of data subjects
You are entitled at any time to request information by post, electronically or by telephone, using the contact details set out in this notice, about the personal data we process concerning you.
At your request we will inform you about:
- the data processed,
- the purpose of the processing,
- its legal basis,
- its duration,
- who receives or has received your data and for what purpose.
We provide the information in writing within one month of submission of the request, on paper or electronically, depending on the form of the request.
You may object at any time to the processing of your personal data. We will examine the objection within the shortest possible time from its submission, but within one month at the latest, decide whether it is well founded and inform you of the decision.
You are entitled at any time to request the erasure of the personal data we process, or the rectification of personal data recorded incorrectly.
In addition, we will block your personal data if you so request, or if, on the basis of the information available to us, it can be assumed that erasure would harm your legitimate interests. We process personal data blocked in this way for as long as the purpose of processing or the legitimate interest that precluded the erasure of the personal data continues to exist.
Using the contact details provided in this notice, the data subject may request that the Controller restrict the processing of their personal data (by clearly indicating the restricted nature of the processing and by ensuring that it is kept separately from other data) where
- they contest the accuracy of their personal data (in this case the Controller restricts the processing for the period during which it verifies the accuracy of the personal data);
- the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of their use instead;
- the Controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
- the data subject has objected to the processing (in this case the restriction applies for the period until it is established whether the controller's legitimate grounds override those of the data subject).
Using the contact details provided in this notice, you are entitled to receive the personal data concerning you that you have provided to the Controller in a structured, commonly used, machine-readable format, and you are also entitled to transmit that data to another controller without hindrance from the Controller.
We comply with requests for access, erasure, rectification, restriction, data portability and blocking as soon as possible, but within one month at the latest, and notify you accordingly. If we have been unable to grant your request, we will also notify you within one month.
If we have transferred the data to another person with your consent, we will also notify the recipient of the data transfer of the necessary steps.
Where we process your personal data on the basis of your consent, you are entitled to withdraw your consent at any time. You may withdraw your consent by contacting the Controller at the contact details set out in this notice and, where otherwise justified, the Controller ensures that you can withdraw your consent to the processing in simpler ways as well.
If you are visually impaired or elderly, you may ask the Controller – at the contact details set out in this Privacy Notice – to provide the content of the Privacy Notice in Word (text) format or in a large-print version.
You are also entitled to lodge a complaint with the
Hungarian National Authority for Data Protection and Freedom of Information
- 1055 Budapest, Falk Miksa utca 9-11., Hungary;
- www.naih.hu,
- Telephone: +36 (1) 391-1400
- Email: ugyfelszolgalat@naih.hu
, or to enforce your rights relating to the processing of personal data before the court having competence and jurisdiction under Act CXXX of 2016 on the Code of Civil Procedure.
You can find the competent court at the following link:
https://birosag.hu/birosag-kereso
You may exercise the rights listed in this notice at any time by contacting the Controller by email or otherwise in writing. In connection with your enquiry, you may be asked to identify yourself or to provide other data relating to you that serve to verify your entitlement. We handle the enquiry in the manner set out in the “Contacting us” section of this privacy notice.
You can contact the Controller using the contact details set out in section 1.
Design Kft.
Controller