Privacy Statement
Table of Contents
- Particulars of the Controller
- Legislative background, legal basis and purpose of data processing performed on the web site, the scope of the processed personal data and the term of data processing
- Data processing
- Data security measures
- Rights of the data subject
- Remedies
Particulars of the Controller
Name of the controller: ERP Consulting Zrt. (hereinafter: Controller)
Postal address of the Controller: 1037 Budapest, Montevideo út 6.
Email address of the controller: info@erp.hu
Phone number of the controller: +36 1 488 7388
Website: http://erp.hu
The legal basis of data processing performed on the website, legal basis, purpose, the scope of the processed personal data and the term of data processing
- Legislation serving as the basis of data processing
- The purpose of data processing performed on the website and the scope of personal data processed in relation to the use of the website
- Act CXII of 2011 on Informational self-determination and freedom of information (Information Act);
- Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Electronic Commerce Act).
- REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC
Based on the principles of purpose limitation and data minimisation, personal data may be processed only for specific purposes, in order to exercise rights and discharge duties, to the extent and for the time necessary for the accomplishment of the given purpose, and only in respect of personal data that is essential for the accomplishment of the purpose of data processing and are suitable for the accomplishment of such purpose. Data processing must comply with this purpose in every stage.
No user registration is needed for using the website of www.erp.hu or for viewing its contents. Personal data is controlled based on the voluntary consent of the User, which voluntary consent shall be granted by the User by initiating the use of and using the website.
Personal data processed using the web site of www.erp.hu:
- The IP address of the user
The SAP helpdesk system of the Controller is available through the link provided on the website of www.erp.hu, which is available exclusively for our contracted partners under a contractual relationship for this service. The previously registered ID and the password for the ID should be used for login.
The following data is processed during the conclusion of the contract, the registration for the helpdesk system and when logging into that system:
- surname and forename of the helpdesk user
- email address of the helpdesk user
Data are not stored and processed on the website but in the closed internal IT system of the Controller. The link provided on the website provides for accessing this system.
Interfaces operated by third parties that are available on the links provided on the website of www.erp.hu.
The Controller shall not transfer any personal data provided by the User to the third parties mentioned above. The privacy statement of the relevant party contains information concerning the personal data necessary for using the third party website and for the registration on it.
The Controller shall not be liable in any way in relation to the processing of the User’s personal data by a third party.
The duration of data processing
The duration of data processing is defined according to the legal requirements, the legitimate interest, the time necessary for the accomplishment of the purpose, the conditions defined in the contract and the withdrawal of consent.
Data security measures
The Controller declares that it has adopted appropriate security measures in order to protect the personal data against unauthorised access, modification, forwarding, publication, deletion or destruction, furthermore, against accidental destruction and damage and becoming unavailable owing to changes in the applied technology.
You have the following rights in data processing
- right to information
- right to rectification
- right to data erasure
- right to data blocking
- right to object
During data processing, you are entitled to request information from the Controller on the processing of your personal data. The Controller shall provide information in writing in an accessible format within the shortest possible time, but within 25 days at latest, detailing the processed data, the purpose, legal basis and duration of data processing, furthermore, about the persons have or had received the data and the purpose of forwarding (if data has also been forwarded).
Within the term of data processing, you are entitled to request the Controller to rectify your personal data. The Controller shall fulfil your request within 15 days at the latest.
You are entitled to request the erasure of your personal data, which the Controller shall perform within 15 days at the latest. The right of erasure does not apply if the Controller is legally obliged to retain the data or when, in accordance with subsection 6 (5) of the Information Act, the Controller is entitled to continue processing the personal data (e.g. related to invoicing). We erase your personal data if its processing is illegal, if you request so, if the purpose of data processing ceased, if your data is incomplete or wrong, and this state cannot be rectified legitimately.
You may ask the Controller to block the personal data if the erasure of the data would violate the legitimate interests of the data subject. Personal data blocked through such means may be processed only while the purpose preventing the erasure of the personal data still applies.
You may object to the processing of your personal data (if the processing or forwarding the personal data is only required for the fulfilment of a legal duty applicable to the Controller, or for enforcing the legitimate interests of the Controller, the recipient of the data or a third party, with the exception of mandatory data processing, and in the case defined in subsection 6 (5) of the Information Act) if using or forwarding the personal data takes place for direct marketing, opinion surveys or scientific research without your consent.
The Controller shall assess the objection as soon as possible, but within 15 days at latest, and it shall decide whether it is justified and inform you of the decision in writing. If the Controller fails to fulfil the request of the data subject for rectification, blocking or erasure, then it shall communicate the factual and legal reasons of the rejection of the request for rectification, blocking or erasure within 15 days following the date of the receipt of the request, which shall be done in writing or, with the consent of the data subject, electronically.
Legal remedies
Complaint with the Controller: Zsolt Ákos Jeney – Member of the Board
Email address: info@erp.hu
Telephone number: +36 1 488 7388
Mail address: 1037 Budapest, Montevideo út 6.
If you believe that the Controller has violated any of the legal requirements on data processing, or failed to fulfil any of your requests, then in order to terminate the suspected illegitimate data processing, you may initiate investigative proceedings of the National Data Protection and Freedom of Information Authority (postal address: 1530 Budapest, Pf.: 5., email: ugyfelszolgalat@naih.hu).
Please also note that in the case of any violation of the legal provisions on data control, or if the Controller failed to fulfil any of your requests, you may commence legal proceedings against the Controller in court.
Variation of this Privacy Statement The Controller reserves the right to vary this Privacy Statement. By using the website after the effective date of such variation, you are deemed to accept the updated Privacy Statement.