Information on data processing related to newsletters

1.     Name and contact details of data controller

1.1.    In regard to the data processing in question

Name of controller: Szépművészeti Múzeum (Museum of Fine Arts)
Seat: 1146 Budapest, Dózsa György út 41.
Email address: aW5mbyMxISsjc3plcG11dmVzemV0aS5odQ==
manages your personal data in its capacity as data controller (hereinafter: Controller). You, a natural person identified or identifiable during data processing, will be the subject of data processing.

1.2. Controller determines the purposes and instruments of the processing of personal data. Processing means any operation or set of operations which are performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2. The purpose and duration of data processing

2.1. The purpose of data processing: Controller’s management of visitor’s contact data for the purpose of sending newsletters.

2.2.    The duration of data processing: until the revocation of the consent granted here.

3. The scope of data involved in the data management; the legal basis for data processing

3.1. During the data processing in question Controller manages the following personal data: name and e-mail address

3.2. The legal basis of the data processing is your concrete, voluntary, informed – based on the conditions stated in this information – and explicit consent. [based on the relevant provisions of Act CXII of 2011 on the right of informational self-determination and the freedom of information, and Regulation (EU) 1016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, or GDPR)].

4. The rights you as the subject of the data processing are granted

4.1. You, as the subject of data processing are granted the following rights in regard to the processing of your personal data:

4.1.1. You have the right to request Controller to grant you access to your personal data it manages;
[Right of access makes it possible for you to receive feedback from Controller if there is any ongoing processing operation involving your personal data, and if so, you are entitled to access your personal data and request information from Controller about the given data processing operation.]

4.1.2. you have the right to request the correction or deletion of your personal data, as well as the limitation of such data;
[The right of correction and deletion (the “right to be forgotten”) makes it possible for you to request Controller to correct inaccurate or incomplete data or to delete your personal data. If you request the limitation of your personal data, Controller can limit data processing based on your request. If you contest the accuracy of your personal data, the duration of said limitation applies to the period of time required by the Controller to verify the accuracy of said data. You have the right to request the limitation of the use of your personal data if the data processing is unlawful but you oppose the deletion of such data. You can also make such a request if Controller no longer needs your personal data for the purpose of data processing but you want the limitation of data procession for the presentation of legal demands, their enforcement or protection]

4.1.3. you are granted the right of data portability;
[within the scope of the right of data portability you are entitled to receive your personal data placed at the disposal of Controller in a structured, widely used and machine-readable format; moreover, you are entitled to forward these data to another controller without it being prevented by Controller. If technically possible, you can also request that Controller directly forward your personal data to another controller.]

4.1.4. you are granted the right to partly or fully withdraw your consent to the processing of your personal data at any time.
[Please note that such withdrawal does not affect the lawfulness of data processing operations conducted based on your consent prior to withdrawal]

4.2. You as the subject of data processing can exercise your rights specified above in point 4.1 based on existing Hungarian legislation [especially Act CXII of 2011 on the right of informational self-determination and the freedom of information] and the EU’s data protection regulations [especially Regulation (EU) 1016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation] in writing: either by post to Controller’s seat specified in point 1 of this information document, or electronically, via email sent to the e-mail address also specified in point 1.

5. The right to file a complaint; settling claims in court; compensation for unlawful data processing

5.1. If you believe your rights were violated during the processing of your personal data, you have the following options:

  • you can directly contact Controller by post or via email; Controller’s contact details are specified in point 1.
  • you can file a complaint with the competent supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság [NAIH] (Hungarian National Authority for Data Protection and the Freedom of Information). NAIH’s contact details: Seat: H-1125 Budapest, Szilágyi Erzsébet fasor 22/c. Phone number: +36-1-391-1400 E-mail address: dWd5ZmVsc3pvbGdhbGF0IzEhKyNuYWloLmh1
  • you can go to law if your data were unlawfully processed or if the requirements of data protection were violated. Pursuant to regulations, you can be entitled to compensation or restitution. You can find information about the scope of authority of the courts and their contact details at www.birosagok.hu

6. Publishing declarations made in connection with data processing and the obligation of data provision

6.1. You can send your requests, statements, observations and questions in regard to data processing and the contents of the present information document by post to controller’s seat specified in point 1 or to Controller’s e-mail address, also specified in point 1.

6.2. You are under no obligation to grant your consent to the processing of your personal data. If you do not wish to give your consent for the processing of such data, you will not receive any newsletters from Controller.

Place and date: Budapest, 16 May 2018.

Name of Controller: Szépművészeti Múzeum