Privacy Policy

DATA PRIVACY NOTICE

1. Purpose of this Notice and the Data Controller

The purpose of this Notice is to describe, in full detail, and in accordance with Regulation EU 2016/679 (General Data Protection Regulation, "GDPR") the data processing activity of REKK Energiapiaci Tanácsadó Kft. (seat: 1116 Budapest, Kubikos utca 18., company registry number: Cg. 01-09-332222, email address: ) as data controller (the "Data Controller") in connection with the purpose set forth in Section 2 below.

2. Purpose of processing

2.1 Newsletter

The purpose of the data processing is to process the personal data of those who register themselves at the rekk.hu webpage operated by the Data Controller for contacting purposes of for sending out the newsletters.

2.2 Events

The purpose of the data processing is to register the participants at rekk.hu webpage for the events organized by the Data Controller or by the REKK Foundation (seat: 1118 Budapest, Mányoki út 14. I 4/A., registry number: 01-01-0012221, email address: ).

3. Data subjects and categories of data processed

The data subjects are the individuals registering on the newsletter and/or the events.

The Data Controller processes the following personal data of the data subjects for the purpose set forth in Section 2.1 above: email address, surname, forename, organization, country, preferred language, area of interest.

The Data Controller processes the following personal data of the data subjects for the purpose set forth in Section 2.2 above: surname, forename, workplace/university, position, email address, and billing information (company name, seat, other data to be indicated on the invoice, postal address, eligibility for discount, and the photo/video image taken at the events.

The source of the above personal data shall be the data subject concerned.

4. Legal basis of the processing

The legal basis of the data processing is the express, previous and informed consent of the data subjects.

The consent to the data process is provided willfully. The data subject shall be entitled to withdraw its consent at any time by providing a notice to the Data Controller; in such case the withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal. In case the data subject rejects to provide its consent, or withdraws their consent, it may cause that the Data Controller shall not be able to contact the data subject, the data subject may not receive the newsletter and/or may not participate in the event.

5. Access to the data

The personal data may be accessed by those employees of the Data Controller who are responsible for the newsletter and who organize the events.

The photo/video images taken at the events may be published on the rekk.hu and the rekk.org webpages.

6. Data processor

Data processing activities shall be provided by contractors, service providers of the Data Controller who are engaged to provide services involving data processing services.

The Data Controller shall ensure with appropriate measures that data processors acting on behalf of the Data Controller shall act and process personal data that was made available for them in accordance with the instructions of the Data Controller and in accordance with the relevant Hungarian and EU laws.

7. Data transfer

The personal data may be disclosed to the competent authorities and/or courts in connection with procedures initiated in front of such authorities/courts. In connection with such procedures, personal data may also be disclosed to the Data Controller's legal counsel or other professional advisers.

The personal data may be transferred, for administrative purposes, to the REKK Foundation.

8. Transfer of personal data to third country

The Data Controller shall not transfer the personal data to companies located in third countries (outside the EEA).

9. Data retention

The personal data will be retained by the Data Controller until the consent is withdrawn or for 7 (seven) days after the event.

10. Cookie notice

You can access to the cookie policy – which contains information on how the Data Controller uses cookies and other similar technologies - of the Data Controller by clicking to this link: https://rekk.hu/cookies

11. Data Subject rights

Pursuant to applicable Hungarian and EU data protection laws the data subject may have the right to: (i) request access to his personal data; (ii) request rectification of his personal data; (iii) request erasure of his personal data; (iv) request restriction of processing of his personal data; and (v) object to the processing of his personal data.

(i) Right of access: The data subject may have the right to obtain confirmation as to whether or not his personal data is being processed, and, where that is the case, to request access to the personal data and to certain information relating to the data process.

The right of access applies to – inter alia – the following information: purposes of the processing, the categories of personal data processed, and the recipients or categories of recipient to whom the personal data have been or will be disclosed.

Furthermore, the data subject may have the right to obtain a copy of his personal data processed by the Data Controller.

Right to rectification: In certain cases, the data subject may have the right to request the rectification of inaccurate personal data, or the completion of incomplete personal data.

Right to erasure (right to be forgotten): In certain cases, the data subject may have the right to request the erasure of his personal data, and the Data Controller may be obliged to erase such personal data.

Right to restriction of processing: In certain cases, the data subject may have the right to request the restriction of the processing of his personal data. In this case, the respective data may be processed only for certain purposes.

Right to object: In certain cases, the data subject may have the right to object to the processing of his personal data, and the Data Controller may be required to cease the processing of such data.

It may be possible that the Data Controller is unable to fully or partially grant a request related to the above rights due to the nature of the data. In addition, the above rights are not absolute, and the exercise of the above rights may be subject to conditions pursuant to applicable data protection laws.

The data subject may also lodge a complaint with the National Authority for Data Protection and Freedom of Information (seat: 1024 Budapest, Szilágyi Erzsébet fasor 22/C., Hungary, Telephone: +36 (1) 391 1400, E-mail: , website: www.naih.hu) or may initiate court proceedings before the court having competence over his place of domicile or habitual residence in connection with the unlawful data processing.

12. Contact

The data subject may exercise his rights set out in Section 11 by sending an e-mail to the Data Controller's email address, or by sending a postal letter to the Data Controller's seat. The Data Controller will respond to any requests within the shortest time possible, but in any case no later than within 1 (one) month.

13. Amendment of the Notice

The Data Controller may amend the present Notice unilaterally at any time due to any changes in applicable laws or the Data Controller's data processing operations. The date of the last update is indicated at the end of the Notice.

Last update: 18th June, 2019