Information about the Imperium Machinae Kft. on its personal data processing activities

which has been prepared in order to comply with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (hereinafter “the Regulation”).

1. Name and contact details of the Data Controller:

Name of the Data Controller: Imperium Machinae Kft. (company registration number: 13-09-196044, tax number: 26558819-2-13, registered office: 2310 Szigetszentmiklós, Ősz utca 14., hereinafter referred to as the Employer)

Contact details of the Data Controller:
– e-mail: imperium@imme.hu
– phone: +36 (30) 477 3271

2. Name and contact details of the Data Controller’s representative:

Name of the Data Controller’s representative: Antal Csongor Kessler, Managing Director

Contact details of the Data Controller’s representative:
– e-mail: imperium@imme.hu
– phone: +36 (30) 477 3271

3. Purposes and legal grounds for processing:

3.1. Purpose of the processing:

Maintaining contacts with Clients, Operators (hereinafter collectively referred to as: the “Data Subject”), performance of contracts, legal interests.

3.2. Legal basis for processing:

The data processing is primarily based on the Regulation 6. Article 2(1) b), i.e. the processing is necessary for the performance of the contract. In the case of assistants, Regulation 6. Article 3(1) (a), i.e. the processing is based on the data subject’s consent.

4. Consequences of failure to provide data:

If the data subject does not provide the necessary data, the Data Controller cannot provide the services.

5. Categories of personal data processed by the controller and their source:

Categories of personal data:
– name of the natural person, mother’s name, date and place of birth, address, tax number, telephone number, e-mail address, bank account number
– the name, registered office, company registration number, tax number, statistical number, name, telephone number, e-mail address, bank account number of the authorised representative, of a non-natural person

Source of personal data: directly from the data subject.

6. Details of the data processors to whom the personal data processed may be transferred:

The controller will not transfer the personal data of the data subject to a processor or to a third country. They may only be issued at the request of an authority or official body with the appropriate legal basis.

7. Duration of storage of personal data processed by the controller:

The Data Controller shall store the supporting documents necessary for the fulfilment of tax and accounting obligations for the period prescribed by the tax and accounting legislation in force, so the duration of the retention of the data included in the contract shall also be in accordance with this period, unless there is another purpose and legal basis for the processing (e.g. enforcement of a legal claim).

The period of data processing by the Facilitator shall be 1 year from the conclusion of the last contract facilitated by the data subject, but shall not extend to the withdrawal of the data subject’s consent.

8. Data subject’s rights in relation to data processing:

8.1. Right of access to the personal data processed

The data subject shall have the right to access his or her personal data processed by the controller and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the data processors with whom the personal data have been or will be disclosed;
(d) the envisaged storage period of the personal data or, where this is not possible, the criteria for determining that period;
(e) the data subject shall have the right to obtain from the controller the rectification, erasure or restriction of the processing of personal data concerning him or her and to object to the processing of such personal data;
(f) the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information and to apply to the courts;

The data controller shall provide the data subject with a copy of the personal data processed upon request. For additional copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs. Where the data subject has made a request for access by electronic means, the controller shall provide the information in electronic format, unless the data subject requests otherwise.

8.2. Right of rectification

The data subject shall have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data relating to him or her.
The data subject has the right to request that incomplete personal data be completed.

8.3. Right of cancellation

The data subject shall have the right to obtain from the controller the erasure of personal data relating to him or her without undue delay, and the controller shall be obliged to erase personal data relating to him or her without undue delay, if one of the following grounds applies:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the personal data have been unlawfully processed;
(c) or the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject.

The data subject may not exercise the right to erasure if the processing:
a) for the exercise of the right to freedom of expression;
(b) for the purposes of complying with an obligation under Union or Member State law to process personal data or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. has been transferred to the controller, or;
(c) necessary for the establishment, exercise or defence of legal claims.

8.4. Right to restrict processing

The data subject shall have the right to obtain, at his or her request, restriction of processing by the controller if one of the following conditions is met:
(a) the data subject contests the accuracy of the personal data, in which case the restriction shall apply for the period of time necessary to allow the controller to verify the accuracy of the personal data;
(b) the processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use;
(c) the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims.

In the case of restrictions on processing, personal data may be processed only with the consent of the data subject, except for storage, or for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or an important public interest of the Union or of a Member State. The controller shall inform the data subject in advance of the lifting of the restriction on processing if the conditions for the restriction no longer apply.

8.5. The right to data portability

The data subject has the right to receive these data concerning his or her personal data processed by the controller in a structured, commonly used, machine-readable format and the right to transmit these data without the data to another controller. controller prevents this.

In exercising this right, the data subject may request the direct transfer of his or her personal data between controllers, where technically feasible.

8.6. For redress

The controller shall assist the data subject to comply with 8.1.-8.5. point. exercise the rights set out in points (a) and (b). The controller may not refuse to comply with a data subject’s request to exercise those rights unless the data subject proves that he or she cannot be identified.

The controller shall inform the data subject of the measures taken on the basis of the request to exercise the above rights without undue delay and in any event within one month of receipt of the request. This deadline may be extended by two months if necessary, given the complexity of the application and the number of applications. The data controller shall inform the data subject of the extension of the time limit within one month of receipt of the request, stating the reason for the delay.

Where the data subject has made the request by electronic means, the information shall be provided electronically where possible, unless the data subject requests otherwise.

If the controller fails to take action at the request of the data subject, the controller shall inform the data subject of the reasons for the non-action without delay and at the latest within one month of receipt of the request.

In the event of failure to take action by the controller, the data subject shall be subject to the provisions of Law 52. § (1) of the Freedom of Information Act 2011. CXII. an investigation by lodging a complaint with the National Authority for Data Protection and Freedom of Information, alleging that there has been a breach or imminent threat of a breach in relation to the processing of your personal data.

The investigation of the National Authority for Data Protection and Freedom of Information is free of charge and the costs of the investigation are paid in advance by the Authority.

In the event of a breach of his or her rights under this Notice, the data subject may also take legal action against the controller. The court has jurisdiction to rule on the case. You can choose to bring the action in the court of the place where you live or stay. The court will rule on the case out of turn.