on the processing of personal data in connection with the website of Fiers M\u00e1rton Sole Proprietor<\/p>\n\n\n\n
Fiers M\u00e1rton Sole Proprietor, as controller, hereby informs Data Subjects about the processing of their personal data pursuant to Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC, the \u2018General Data Protection Regulation\u2019.<\/p>\n\n\n\n
Fiers M\u00e1rton Sole Proprietor 52508877 (registered office: 2230 Gy\u00f6mr\u0151, E\u00f6tv\u00f6s utca 14., Registration number: 52508877, tax number: 73016953-1-33, Email: marton.fiers@gmail.com<\/a>)<\/p>\n\n\n\n Processing in connection with the controller\u2019s website available at fierostudio.hu<\/p>\n\n\n\n No automated decision-making, including profiling, takes place during processing.<\/p>\n\n\n\n The service provider is not obliged to examine whether the data subject is authorised to provide the data they have submitted. The applicant bears sole responsibility for having such authorisation.<\/p>\n\n\n\n Access to the data is granted to employees acting on behalf of the Controller who need such access to perform their duties and who are aware of the obligations relating to the processing of the data.<\/p>\n\n\n\n Personal data are not transferred to third parties for processing.<\/p>\n\n\n\n General rules on informing the data subject and the right to information<\/p>\n\n\n\n Before processing begins, and at the latest when the data subject\u2019s personal data are obtained, the controller must provide the data subject with detailed information. This concerns the information on processing contained in this Notice.<\/p>\n\n\n\n The controller is responsible for providing the prior information.<\/p>\n\n\n\n In addition to the prior information above, you may request information from the controller at any stage of processing, as set out below. In this case, the controller must provide the information without delay and no later than within 30 days. The one-month period may be extended by a maximum of 2 months only where justified.<\/p>\n\n\n\n The controller may refuse to provide information only if it proves that the data subject cannot be identified or that the data subject\u2019s request is manifestly unfounded, repetitive or excessive.<\/p>\n\n\n\n If the controller takes no action, that is, fails to fulfil its obligation to provide information, it must inform the data subject within 30 days of its failure to act, the reasons for this, and the data subject\u2019s right to lodge a complaint or seek a judicial remedy in connection with the processing. Further details on complaints and judicial remedies are provided below in this notice.<\/p>\n\n\n\n The controller must provide information and take action for the data subject free of charge. Exceptionally, however, the controller may charge a reasonable fee or refuse to provide information and take action if the data subject\u2019s request is manifestly unfounded, repetitive or excessive.<\/p>\n\n\n\n The data subject is entitled to obtain confirmation from the controller as to whether their personal data are being processed and, where this is the case, to obtain access to the personal data and the following information:<\/p>\n\n\n\n Under the right of access, the data subject must, upon request, be informed of the following:<\/p>\n\n\n\n The controller shall provide the data subject with a copy of the personal data undergoing processing. For further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs; if such costs arise, we will inform the data subject of them in advance.<\/p>\n\n\n\n Where the data subject submits the request electronically, our company shall provide the information in a commonly used electronic format, unless the data subject requests another format.<\/p>\n\n\n\n The data subject is entitled to obtain from the controller, upon request and without undue delay, the rectification of inaccurate personal data concerning them. Taking into account the purposes of processing, the data subject is entitled to have incomplete personal data completed, including by means of providing a supplementary statement.<\/p>\n\n\n\n The data subject is entitled to obtain from the controller the erasure of personal data concerning them without undue delay, and the controller is obliged to erase such personal data without undue delay where one of the following grounds applies:<\/p>\n\n\n\n Where the controller has made the personal data public and is obliged to erase them pursuant to the above list, it shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers processing the data that the data subject has requested the erasure of any links to, or copies or replications of, those personal data.<\/p>\n\n\n\n The controller is not obliged to comply with a request for erasure in the cases set out above where processing is necessary:<\/p>\n\n\n\n Where any of the above reasons applies and the controller is not obliged to comply with the data subject\u2019s request for erasure, it must inform the data subject of this circumstance and the reason for it within 25 days.<\/p>\n\n\n\n The data subject is entitled to obtain restriction of processing from the controller upon request where one of the following applies:<\/p>\n\n\n\n Where processing has been restricted as set out above, such personal data may, with the exception of storage, be processed only with the data subject\u2019s consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.<\/p>\n\n\n\n The controller shall inform the data subject whose processing has been restricted at their request as set out above before the restriction is lifted.<\/p>\n\n\n\n The controller must communicate any rectification, erasure or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.<\/p>\n\n\n\n The data subject is entitled to receive the personal data concerning them which they have provided to a controller in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from the controller to which they were provided, where:<\/p>\n\n\n\n In exercising the right to data portability as set out above, the data subject is entitled to request that the personal data be transmitted directly from one controller to another, where technically feasible.<\/p>\n\n\n\n The exercise of the right to data portability must not prejudice the right to erasure. The right to data portability must not adversely affect the rights and freedoms of others.<\/p>\n\n\n\n The data subject is entitled to object at any time, on grounds relating to their particular situation, to the processing of their personal data. In this case, the controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for processing which override the data subject\u2019s interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims.<\/p>\n\n\n\n Where personal data are processed for direct marketing purposes (e.g. sending marketing letters to customers), the data subject is entitled to object at any time to the processing of personal data concerning them for such purposes, including profiling insofar as it relates to direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data may no longer be processed for those purposes.<\/p>\n\n\n\n Where processing is based on the data subject\u2019s consent (e.g. sending marketing newsletters), the data subject is entitled to withdraw that consent at any time. However, withdrawal of consent does not render processing carried out before withdrawal unlawful.<\/p>\n\n\n\n Consent is withdrawn if the data subject deletes their own user account; consent to the processing of personal data may also be withdrawn by email, by sending an erasure request to marton.fiers@gmail.com<\/a>.<\/p>\n\n\n\n In other words, what can the data subject do if they believe their personal data are not being processed properly?<\/p>\n\n\n\n The data subject is entitled to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if they consider that the processing of personal data concerning them infringes the law. In Hungary, the competent supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).<\/p>\n\n\n\n Exercising the right to lodge a complaint does not preclude the data subject from seeking other administrative or judicial remedies if they consider that their personal data are being processed unlawfully. Thus, they may also initiate administrative or judicial proceedings at the same time as exercising their right to lodge a complaint.<\/p>\n\n\n\n A complaint may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information, whose contact details are as follows:<\/p>\n\n\n\n Name: Hungarian National Authority for Data Protection and Freedom of Information<\/p>\n\n\n\n Registered office: 1055 Budapest, Falk Miksa utca 9-11.<\/p>\n\n\n\n Postal address: 1530 Budapest, Pf.: 5.<\/p>\n\n\n\n Telephone: +36 1 391 1400<\/p>\n\n\n\n Fax: +36 1 391 1410<\/p>\n\n\n\n2. Description of the processing carried out<\/h3>\n\n\n\n
Purpose of processing<\/th> Legal basis for processing<\/th> Categories of data processed<\/th> Duration of processing<\/th><\/tr><\/thead> Handling messages sent via the contact form, callback requests and requests for quotations.<\/td> The data subject\u2019s voluntary consent.<\/td> The data subject\u2019s name, email address, telephone number, and any personal data that the data subject refuses to provide for the purpose of making contact.<\/td> Until the purpose of processing ceases to exist.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n 3. Information on the use of a processor<\/h3>\n\n\n\n
4. Rights of the data subject in relation to processing<\/h3>\n\n\n\n
\n
Right to information<\/h4>\n\n\n\n
The data subject\u2019s right of access<\/h4>\n\n\n\n
\n
Right to rectification<\/h4>\n\n\n\n
Right to erasure, the \u2018right to be forgotten\u2019<\/h4>\n\n\n\n
\n
\n
Right to restriction of processing<\/h4>\n\n\n\n
\n
the controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise or defence of legal claims; or<\/li>\n\n\n\nNotification obligation regarding rectification or erasure of personal data or restriction of processing<\/h4>\n\n\n\n
Right to data portability<\/h4>\n\n\n\n
\n
Right to object<\/h4>\n\n\n\n
Right to withdraw consent<\/h4>\n\n\n\n
Remedies, right to lodge a complaint, judicial remedy<\/h4>\n\n\n\n
Right to lodge a complaint<\/h4>\n\n\n\n