Privacy Statement
Purpose of Privacy Statement
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Regulation 95/46 / EC (hereinafter "GDPR" or "Regulation") the compliance processes of GrabMax Kft. and the rules for the processing of personal data in these processes.
Personal Data
Under the Regulation, "any information relating to an identified or identifiable natural person" shall be considered as personal data. An individual may be identified, directly or indirectly, in particular by reference to one or more factors, such as name, location, online identification or physical, physiological, genetic, intellectual, economic, cultural or social identity of the natural person.
GDPR compliance
We guarantee the confidentiality, integrity and availability of the processed data and that only protected persons / systems have access to the protected data, whether in digital or paper-based data processing.
Your data protection rights
-
Access rights;
The controller shall provide the data subject with a copy of the personal data subject to the processing free of charge.
-
Right to rectification;
The data subject shall have the right to obtain from the controller the rectification of inaccurate personal data relating to him or her without undue delay.
-
Deletion and cancellation of data;
The data subject shall have the right to delete the personal data concerning him or her without undue delay upon request, if
-
personal data are no longer needed for the purpose for which they were collected,
-
the data subject withdraws his consent as the basis for the processing and there is no other legal basis for the processing,
-
the data subject objects to the processing of his or her data and there is no overriding legitimate reason, data management,
A request for cancellation should only concern data whose consent is based on the legal basis of the data subject (eg. account data) or data processed on the basis of a weighing of interests.
The data subject may not exercise his or her right to delete or forget only if the data controller continues to process the data for the reasons described in the Regulation. For example, if further storage of data is required for the filing, validation, or defense of legal claims, the deletion request may be denied.
-
-
Restricting processing;
The data subject shall have the right to limit the processing of data upon request, if
-
the person concerned contests the accuracy of the personal data,
-
the data processing is unlawful and the data subject opposes the deletion of the data,
-
the controller no longer needs the personal data, but the data subject requires them for legal purposes.
-
-
The right to data portability;
In the context of the right to data portability, the data subject may retrieve and pass on data previously transferred to the controller. The purpose of the authorization is to allow the transfer of personal data between different service providers without hindrance
It is clear from the law that the right to data portability can only be exercised if the personal data requested are processed by automated means, the data subject has given his or her prior consent to the processing or has been transferred in connection with the performance of a contract to which the contractor is a party.
Legal basis
The processing of personal data is only lawful if and to the extent that at least one of the following is true:
-
the data subject has given his consent to the processing of his personal data for one or more specific purposes;
-
processing is necessary for the performance of a contract to which the data subject is party or in order to take action at the request of the data subject prior to the conclusion of the contract;
-
processing is necessary for compliance with a legal obligation to which the controller is subject;
-
processing is necessary for the protection of the vital interests of the data subject or another natural person;
-
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
-
processing is necessary for the protection of the legitimate interests of the controller or of a third party, unless those interests override the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular if the data subject is a child.
Client/Partner information
Natural persons shall have the right to be informed in a concise, transparent and easily accessible manner, in a clear and comprehensible manner, of the processing of their personal data, in particular:
-
the identity and contact details of the controller,
-
the contact details of the DPO,
-
the purpose for which the personal data are to be processed and the legal basis for the processing,
-
in the case of processing on grounds of "legitimate interest", the reasons for it
-
the recipients of the personal data
-
adequate safeguards for transfers outside the EU,
-
the intended duration of the data processing,
-
the right of the data subject to request from the controller access to, rectification, erasure or restriction of the processing of personal data concerning him or her, and his or her right to data protection,
-
the right to lodge a complaint to the supervisory authority,
-
whether the provision of the data is a prerequisite for the conclusion of the contract and the possible consequences of failure to provide the information,
-
possible automated decision making, including profiling.
Cookie policy
The website contains various cookies:
-
First-party (delivered by the website's own engine) session cookie does not require the user's consent.
-
First-party tracking cookies require user consent.
-
Third-party cookies (cookies provided by others, such as Google Analytics) require user consent.
We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you've provided to them or that they've collected from your use of their services.
Cookies are small text files that can be used by websites to make a user's experience more efficient.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Necessary (10)
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Name
_GRECAPTCHA
Provider
GooglePurpose
This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
Type
HTTP Cookie
Name
_Secure-3PSIDCC
Provider
GooglePurpose
We use this cookie to display ads that are more relevant to you and your interests.
Type
HTTP Cookie
Name
_Secure-1PAPISID
Provider
GooglePurpose
We use this cookie to display ads that are more relevant to you and your interests.
Type
HTTP Cookie
Name
_Secure-3PSID
Provider
GooglePurpose
We use this cookie to display ads that are more relevant to you and your interests.
Type
HTTP Cookie
Name
_Secure-1PSID
Provider
GooglePurpose
We use this cookie to display ads that are more relevant to you and your interests.
Type
HTTP Cookie
Name
SAPISID
Provider
GooglePurpose
This DoubleClick cookie is usually set by advertising partners on the website and is used to profile the interests of visitors to the website and to serve relevant ads on other websites. This cookie works by uniquely identifying your browser and device.
Type
Name
APISID
Provider
GooglePurpose
This DoubleClick cookie is usually set by advertising partners on the website and is used to profile the interests of visitors to the website and to serve relevant ads on other websites. This cookie works by uniquely identifying your browser and device.
Type
Name
SSID
Provider
GooglePurpose
Google sets a number of cookies on all pages that contain Google Maps.
Type
HTTP Cookie
Name
SID
Provider
GooglePurpose
Google uses this cookie for security purposes. It contains digitally signed and encrypted records of the user's Google Account ID and last login time. This cookie allows Google to block a wide range of attacks, such as attempts to steal the content of forms you fill out on websites.
Type
Name
HSID
Provider
GooglePurpose
Google uses this cookie for security purposes. It contains digitally signed and encrypted records of the user's Google Account ID and last login time. This cookie allows Google to block a wide range of attacks, such as attempts to steal the content of forms you fill out on websites.
Type
HTTP Cookie
Statistics (17)
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Name
_dc_gtm_UA-#
Provider
GooglePurpose
Used by Google Tag Manager to control the loading of a Google Analytics script tag.
Type
HTTP Cookie
Name
_ga
Provider
GooglePurpose
Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Type
HTTP Cookie
Name
_gid
Provider
GooglePurpose
Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Type
HTTP Cookie
Name
SIDCC
Provider
GooglePurpose
Google Analytics uses this security cookie to protect user data from unauthorised access.
Type
Name
1P_JAR
Provider
GooglePurpose
Set by Google. This group sets a unique identifier to remember your preferences and other information, such as site statistics and track conversion rates.
Type
Name
CONSENT
Provider
GooglePurpose
Set by Google. This group sets a unique identifier to remember your preferences and other information, such as site statistics and track conversion rates.
Type
Name
NID
Provider
GooglePurpose
Set by Google. This group sets a unique identifier to remember your preferences and other information, such as site statistics and track conversion rates.
Type
HTTP Cookie
Name
OTZ
Provider
GooglePurpose
It uses Google Analytics, which provides aggregated analysis of visitors to your website.
Type
Name
S
Provider
GooglePurpose
Google Analytics may collect certain information to improve its services, including the pages users visit most often and whether users receive error messages from certain pages.
Type
HTTP Cookie
Name
_hjlncludedInSample
Provider
Purpose
This Hotjar cookie provides Hotjar with information about whether the user fits the sample used to train the statistics.
Type
HTTP Cookie
Name
_hjid
Provider
Purpose
It is set on the first visit to the website. It ensures that data from subsequent visits to the same website are associated with the same user ID.
Type
Name
_clck
Provider
MS ClarityPurpose
Persists the Clarity User ID and preferences, unique to that site, on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
Type
HTTP Cookie
Name
_clsk
Provider
MS ClarityPurpose
Connects multiple page views by a user into a single Clarity session recording by registering statistical data about the user's behaviour.
Type
HTTP Cookie
Name
CLID
Provider
MS ClarityPurpose
Identifies the first-time Clarity saw this user on any site using Clarity. Collects data about the user's navigation and behaviour on the website. This data is used for statistical purposes.
Type
HTTP Cookie
Name
MUID
Provider
MS ClarityPurpose
Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.
Type
HTTP Cookie
Name
SM
Provider
MS ClarityPurpose
Used in synchronizing the MUID across Microsoft domains.
Type
flag
Data breach reporting
A privacy incident is a security breach that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access of your personal data. The privacy incident shall be reported to the data protection authority without undue delay and, if possible, no later than 72 hours after it is brought to the attention of the data protection authority, unless the privacy incident is likely to endanger the rights and freedoms of individuals.
Data Privacy Officer
Our Data Privacy Officer is Ms. Kinga Dékány.
Email: dekany.kinga@encosoft.hu
Data Protection Authority
National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11.
Mail Address: 1363 Budapest, Pf.: 9.
Phone: +3613911400
Fax: +3613911410
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/