Privacy Policy

Official name:              Jonatán-Sodalitas Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság

Translated from:           Jonathan-Sodalitas Commercial and Service Limited Liability Company

https://eprayapp.org  website and EprayApp (iOS and Android) users

Introduction

The service provider/data controller processes the data of the persons registered on the website during the website's operation to provide them with an appropriate service.

The service provider intends to fully comply with the legal requirements for the processing of personal data, in particular those of Regulation (EU) No 2016/679 of the European Parliament and the Council (EU).

This privacy notice is based on Regulation (EU) No 2016/679 of the European Parliament and the Council on the protection of personal data of natural persons and the free movement of data, taking into account the content of Act CXII of 2011 on the right to informational self-determination and freedom of information.

Name of service provider, data controller:

Contact details of the controller:

Definitions

• the GDPR  (General Data Protection Regulation) is the new Data Protection Regulation of the European Union;
• data processing: any operation or set of operations performed on personal data or data files by automated or non-automated means, such as collection, recording, organization, layout, storage, conversion or alteration, query, consultation, use, communication, transmission, dissemination, or otherwise making available, alignment or interconnection, restriction, erasure or destruction;
• data processor: means any natural or legal person, public authority, agency, or any other body that processes personal data on behalf of the controller;
• personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person;
• data controller: means a natural or legal person, public authority, agency, or any other body that determines the purposes and means of personal processing data independently or together with others; where the purposes and means of processing are determined by Union or Member State law, the controller or specific criteria for the designation of the controller may be determined by Union or Member State law;
• consent of the data subject: a voluntary, specific and informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by an unambiguous, affirmative action, indicates his or her consent to the processing of personal data concerning him or her;
• data protection incident: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.
• recipient: the natural or legal person, public authority, agency, or any other body to whom the personal data are disclosed, whether or not they are third parties. Public authorities which have access to personal data by Union or Member State law in the context of an individual investigation shall not be considered as recipients; the processing of such data by those public authorities should comply with the applicable data protection rules by the purposes for which they are processed;
• third party: means a natural or legal person, public authority, agency, or any other body other than the data subject, the controller, the processor, or the persons authorized to process personal data under the direct direction of the controller or processor;

Guidelines for data processing

The controller declares that he/she handles the personal data by the data management notice and complies with the provisions of the relevant legislation, paying particular attention to the following:

The processing of personal data should be carried out lawfully, fairly, and transparently for the data subject.

Personal data may only be collected for specific, explicit, and legitimate purposes.

The purpose of the processing of personal data should be appropriate and relevant and should only be to the extent necessary.

Personal data must be accurate and up-to-date. Inaccurate personal data shall be deleted without delay.

Personal data should be stored in such a way as to allow the identification of the data subjects only for a necessary period. Personal data may be stored for a more extended period only if stored for archiving purposes in the public interest, for scientific and historical research purposes, or statistical purposes.

The processing of personal data shall be carried out in such a way as to ensure the adequate security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage, by applying appropriate technical or organizational measures.

The principles of data protection shall apply to all information relating to an identified or identifiable natural person.

Important data management information

The purpose of data processing is to enable the service provider/data controller to provide adequate additional services to the persons registered on the site during the website's operation.

The legal basis for data processing is the consent of the data subject.

The data subjects are the registered users of the website.

Duration of data processing and deletion of data. The data processing time depends on the specific user purpose, but the data must be deleted immediately if the initially stated purpose has already been achieved. Your consent to data processing may be revoked at any time by sending a letter to the contact e-mail address. If there is no legal impediment to erasure, your data will be deleted.

The controller and his/her employees are entitled to know the data.

The data subject may request the controller to access, rectify, delete or restrict the processing of personal data relating to him or her and may object to the processing of such personal data and the data subject's right to portability.

The data subject may withdraw his or her consent to data processing at any time, but this does not affect the lawfulness of the processing carried out based on the consent before the withdrawal.

The person concerned may exercise the right to complain about the supervisory authority.

If the data subject wishes to use the advantages of registration, i.e., to use the website's services, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data; there are no adverse consequences for the failure to provide data. However, it is not possible to use certain functions of the website without registration.

The data subject shall have the right, at his request, to rectify or supplement inaccurate personal data concerning him or her without undue delay.

The data subject shall have the right, at his request, to delete inaccurate personal data concerning him or her without undue delay, and the controller shall be obliged to delete the personal data relating to the data subject without undue delay unless there is any other legal basis for the processing.

You can change or delete your data by e-mail or letter using the above contact details.

Registration and data processing on the website

The data controller informs users that EprayApp (ios and android) and the website can only be used after registration.

The purpose of data processing is to provide services and to contact you.

The legal basis for registration processing is your consent.

 The data subjects are the registered users of the website.

Duration of data processing. Data processing is carried out until the withdrawal of consent. You may withdraw your consent to data processing at any time by sending a letter to the contact e-mail address.

The data is deleted when the consent to data processing is revoked. You may withdraw your consent to data processing at any time by sending a letter to the contact e-mail address.

The controller and his/her employees are entitled to know the data.

Method of storage of data: electronic.

You can change or delete your data by e-mail, phone, or letter using the above contact details.

The provision of personal data is necessary for identification and contact in databases. The exact company name and address are required for invoicing, which is a legal obligation.

The user can consent to data processing by deliberately ticking the empty checkbox on the website and specifically for this purpose.

As the data subject, you may object to the processing of your data in this respect. You are entitled to the procedure detailed above and this information, and the legislation described in the prospectus.

The data subjects are the registered users of the website.

Duration of data processing. Data processing is subject to legal requirements or withdrawal of consent. You may withdraw your consent to data processing at any time by sending a letter to the contact e-mail address.

The data is deleted when the consent to data processing is revoked. You may withdraw your consent to data processing at any time by sending a letter to the contact e-mail address. Billing information may be deleted by a legal requirement.

The controller and his/her employees are entitled to know the data.

Method of storage of data: electronic.

You can change or delete your data by e-mail or letter using the contact details provided above.

The data subject may object to the processing of his or her personal data, in this respect he/she is entitled to the procedure according to the data management information detailed above and this information, as well as the legislation described in the prospectus.

Send newsletter/inquiry

The website operator declares that he fully complies with the relevant legal provisions in the course of the information and brochures published by him. You further say that when you sign up for a newsletter, you cannot verify the authenticity of your contact information or determine whether the information provided relates to an individual or business.

The purpose of data processing is to send professional brochures, electronic messages containing advertisements, polls, information, newsletters, from which you can unsubscribe at any time without consequences. 

The legal basis for data processing is your consent. Please note that the user may give his/her prior and express consent to be contacted by the service provider with his polls, information, and other mailings at the e-mail address provided at the time of registration. As a result, the user may consent to the service provider processing the necessary personal data for this purpose.

Please note that if you wish to receive a newsletter from us, you are obliged to provide the necessary data. In case of non-provision of data, we will not be able to send you newsletters.

Duration of data processing. Data processing is carried out until the withdrawal of consent. You may withdraw your consent to data processing at any time by sending a letter to the contact e-mail address.

The data is deleted when the consent to data processing is revoked. You may withdraw your consent to data processing at any time by sending a letter to the contact e-mail address.

Consent may also be revoked based on the link in the newsletters sent out.

The controller and his/her employees are entitled to know the data.

Method of storage of data: electronic.

You can change or delete your data by e-mail or mail using the contact options provided above.

Please note that neither the username nor the email address requires any information that indicates your identity. For example, you don't need your username or email address to include your name. You are entirely free to choose if you provide a user name or email address that contains information about your identity. The email address, which serves to keep in touch, is necessary for the newsletter or professional information sent to you to reach its destination.

Cookies

Cookies are placed on the user's computer by the websites visited and contain page settings or login status information.

Cookies are, therefore, small files created by the websites you visit. They improve the user experience by saving your browsing data. Cookies help the website remember your website's settings and offer locally relevant content.

The service provider's website sends a small file (cookie) to the computer of the visitors of the website to establish the fact and time of the visit. The service provider informs the visitor of the website.

The user may accept cookies by expressly declaring (clicking on the "I ACCEPT THE USE OF COOKIES" button).

The user can request more information about cookies by clicking on the REQUEST BUTTON FOR MORE INFORMATION.

The visitors of the website are the data subjects.

The purpose of data processing is additional service, identification, tracking of visitors.

Legal basis for data processing. The user's consent is not required if the service provider needs the use of cookies.

The scope of the data: unique identification number, time, setup data.

The user can delete cookies from browsers at any time in the Settings menu.

Data controllers are entitled to know the data. The controller does not process personal data using cookies.

Method of storage of data: electronic.

Social media

A social media site is a media tool where a message is distributed through social users. Social media uses the Internet and online publishing options to turn users from content adopters to content editors.

Social media is a platform for internet applications that contains user-generated content such as Facebook, Instagram, Twitter, etc.

Social media may include public speeches presentations, presentations, products, or services.

Forms of information published on social media can include forums, blog posts, images, video, audio, message boards, email messages, etc.

By the above, the scope of the data processed may be the user's public profile picture in addition to the personal data.

Scope of data subjects: all registered users.

The purpose of the data collection is to promote the website or the related website.

The legal basis for data processing is the voluntary consent of the data subject.

Duration of data processing: according to the regulations viewed on the given social media site.

Deadline for data erasure: according to the regulations that can be viewed on the given social media site.

According to the regulations that can be viewed on the given social media site, they are entitled to know the data.

Rights related to data processing: according to the regulations that can be viewed on the given social media site.

Method of storage of data: electronic.

It is important to note that when a user uploads or submits any personal data, it gives the social media operator a valid worldwide license to store and use such content. Therefore, it is essential to ensure that the user has full privileges to communicate the published information. However, this is always the user's responsibility, so if the user publishes data about the system operated by the service provider that he does not have permission to post, the Service Provider is not liable for the user's conduct.

Google Analytics

Our website uses Google Analytics x  uses  □ does not use it

If you're using Google Analytics:

Google Analytics compiles a report to its customers on the habits of the website users based on first-party cookies.

On behalf of the website operator, Google uses the information to

evaluate how users use the website. As an additional service, it prepares reports related to the website's activity to the website operator to perform other services.

The data is stored in coded format on Google's servers to make it more difficult and prevent data misuse.

To disable Google Analytics, do the following: Quote from the page:

Site users who don't want Google Analytics to report their data in JavaScript can install the Google Analytics opt-out browser extension. The extension prohibits Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser extension is available in most newer browsers. The Google Analytics opt-out browser extension prevents data from being sent to the website itself and other Internet analytics services.

https://support.google.com/analytics/answer/6004245?hl=en

Google Privacy Policy:  https://policies.google.com/privacy?hl=en

Information on the use and protection of data is available in detail in the links above.

Data protection in detail: https://static.googleusercontent.com/media/www.google.com/hu//intl/en/policies/privacy/google_privacy_policy_en.pdf

Processors

Hosting provider:

The data you provide is stored on a server operated by the hosting service provider. The data can only be accessed by our employees or the staff operating the server, but they are all responsible for the safe handling of the data.

Name of activity: hosting service, server service.

Purpose of data processing: to ensure the operation of the website.

Data processed: personal data provided by the data subject

Duration of data processing and deadline for erasure of data. Data processing until the end of the operation of the website or according to the contractual agreement between the website operator and the hosting service provider. If necessary, the data subject may request the deletion of his/her data by contacting the hosting service provider.

The legal basis for data processing is the consent of the data subject or data processing based on the law.

Rights related to data processing

Right to request information

You may ask us for information about our company's data, on what legal basis, for what purpose of data processing, from what source, for how long. At your request, we will send you information immediately, but within a maximum of 30 days, to the e-mail contact details provided by you.

Right to rectification

You may ask us to modify any of your data through the contact details provided. We will take immediate action, but within a maximum of 30 days, at your request, and we will send you information to the e-mail contact details provided by you.

Right to erasure

You may request us to delete your data through the contact details provided. At your request, we will do so without delay, but within a maximum of 30 days, and we will send you information to the e-mail contact details provided by you.

Right to block

You may request the blocking of your data from us through the contact details provided. The siege will last as long as the reason you have indicated necessitates the storage of the data. At your request, we will do so without delay, but within a maximum of 30 days, and we will send you information to the e-mail contact details provided by you.

Right to protest

You may object to the processing through the contact details provided. We will examine the objection as soon as possible, but within a maximum of 15 days from the submission of the request, we will decide on its merits, and we will inform you of your decision by e-mail.

Possibility of enforcing data processing

In case of unlawful data processing experienced by you, please notify us, so it is possible to restore the legal status within a short period. For your sake, we will do our utmost to resolve the problem outlined.

If you do not believe that the legal status can be restored, please get in touch with the authority at the following contact details:

National Authority for Data Protection and Freedom of Information

Postal address: 1530 Budapest, Pf.: 5.

Address: 1125 Budapest, Elisabeth Szilágyi Fasor 22/c Phone: +36 (1) 391-1400 Fax: +36 (1) 391-1410 E-mail: customer service (at) naih.hu URL: https://naih.hu Coordinates: N 47°30'56''; K 18°59'57''

Legislation on which data processing is based

• Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and the free movement of such data and repealing Regulation (EC) No 95/46 (General Data Protection Regulation).
• Act CXII of 2011 on the right to informational self-determination and freedom of information.
• Act LXVI of 1995 on public documents, public archives, and the protection of private libraries.
• Regulation (EC) No 335/2005 of the ECHR of 29.1.2005 on general requirements for managing documents by bodies with a public service mission Gov. Decree.
• Act CVIII of 2001 on certain aspects of e-commerce services and information society services.
• Act C of 2003 on Electronic Communications.