May 15-20, 2023
at the cereal research nonprofit ltd. (gk)
szeged, hungary
PRIVACY NOTICE AND INFORMATION ON THE PROCESSING OF PERSONAL DATA
CONFERENCE REGISTRATION
The protection of personal data is the utmost importance to us, and this Privacy Notice explains what personal data we process about you, for what purposes and on what legal basis. The Privacy Notice also contains your rights.
Data of the Data Controller
Data Controller: Cereal Research Non-profit Ltd.
Headquarters: 6726 Szeged, Alsó-kikötő sor 9.
Company registration number: 06-09-013499
Tax number: 18460777-2-06
Website: www.cerealszeged2023.eu
Phone: +3662435235
Contact details of the Data Protection Officer:
Laws on which the processing is based
- Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR)
- Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.)
- Act V of 2013 on the Civil Code (Civil Code Act)
- Act CLV of 1997 on Consumer Protection
- Act C of 2000 on Accounting
|
Data management activities
Registration for the https://www.cerealszeged2023.eu conference
|
|
Taking photos and video footage at the event
|
|
Signing the participation/attendance sheet
|
|
Management of conference/event speaker’s data
|
|
Complaints handling
|
|
|
Data security measures
The Data Controller shall take appropriate IT, technical and personnel measures to protect the personal data it processes against, inter alia, unauthorised access or unauthorised alteration.
Rights of the data subject in relation to data processing
The Authority shall comply with a request to exercise the rights of the data subject within a maximum of one month from the date of receipt of the request. The date of receipt of the request shall not count towards the time limit. The Authority may, where necessary, taking into account the complexity of the request and the number of requests, extend this time limit by a further two months. The Authority shall inform the person concerned of the extension, stating the reasons for the delay, within one month of receipt of the request.
The right of access
The data subject shall have the right to obtain from the Authority, through the contact details provided in point 1, information as to whether or not personal data concerning him or her are being processed and, if such processing is taking place, the right to be informed that
- which personal data are processed by the Authority; on what legal basis; for what purpose; for how long; and
- to whom, when, under what law, to which personal data the Authority has given access or to whom it has transmitted personal data;
- the source of your personal data;
- whether the Authority uses automated decision-making and its logic, including profiling.
The Authority shall provide a copy of the personal data which are the subject of the processing free of charge for the first time upon request by the data subject, and may charge a reasonable fee based on administrative costs thereafter.
In order to ensure data security and to protect the rights of the data subject, the Authority shall verify the identity of the data subject and of the person who wishes to exercise the right of access, and to this end, the provision of information, access to or copying of data shall be subject to the identification of the data subject.
The right to rectification
Given the nature of the processing, the exercise of this right by the data subject is logically excluded.
Right to blocking (restriction of processing)
The data subject is entitled to the right to may request, through the contact details provided in point 1, that the processing of his or her personal data be restricted by the Authority (by clearly indicating the limited nature of the processing and ensuring that it is kept separate from other data) if he or she contests the accuracy of his or her personal data (in which case the Authority will restrict the processing for the period of time necessary to verify the accuracy of the personal data); the processing is unlawful and the data subject opposes the erasure of the data and requests instead that its use be restricted; the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or the data subject has objected to the processing (in which case the restriction applies for a period of time until it is established whether the legitimate grounds of the controller override the legitimate grounds of the data subject).
The right to protest
The data subject may object to the processing of his or her personal data if he or she considers that the Authority is processing his or her personal data in a way that is incompatible with the purposes of this privacy notice, by using the contact details provided in point 1. In such a case, the Authority must demonstrate compelling legitimate grounds for the processing of the personal data which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
The right to erasure
The data subject may exercise the right to erasure in relation to the processing described in this notice only if the data are no longer necessary for the performance of a task carried out in the exercise of official authority vested in the Authority.
Right to legal redress
If the data subject considers that the Authority has infringed the applicable data protection requirements in the processing of his or her personal data, he or she may lodge a complaint with the Authority (National Authority for Data Protection and Freedom of Information, address: 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf. 9. E-mail: [email protected], website: www.naih.hu) or may take the matter to court, which will rule on the matter out of turn, in order to protect his or her data. In this case, you are free to choose whether to bring your action before the courts having jurisdiction for the place of residence (permanent address) or the place of stay (temporary address) or the place where the Authority is established. You can find the court of the place of residence or domicile at http://birosag.hu/ugvfelkapcsolati-portal/birosag-kereso. The competent court for the place where the Authority is located is the Metropolitan Court of Budapest.
The data subject may exercise the right to erasure in relation to the processing described in this notice only if the data are no longer necessary for the performance of a task carried out in the exercise of official authority vested in the Authority.
Data processing information on data transmission related to the use of online payment services
Who handles your personal data?
The data controller is Cereal Research Non-profit Ltd. (6726 Szeged, Alsó-kikötő sor 9, Telephone: +36 62/435-235 Fax:
What part of your personal data is processed, for what purpose, on what legal basis and for how long?
The purpose of processing personal data, the legal basis thereof and the duration of the processing, as well as the scope of the processed data are summarized in the table below:
|
Range of processed data |
I. Your |
|
Purpose of the data processing |
more secure customer authentication performed by the issuing bank |
|
Legal basis of the data processing |
your consent |
|
Duration of the data processing |
In the case of personal data, for the duration of 3DS authentication, following which the data will be deleted. |
|
What rights do you have? |
Pursuant to Regulation 2016/679/EU of the European Parliament and the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, you |
|
Who are the recipients of your personal data? |
Cereal Research Non-profit Ltd. |
|
What happens if you do not consent to the processing of your personal data listed in Section II? |
If you do not consent to the transfer of data, the payment process will takes place as follows: The merchant will redirect you to the CIB Bank website, where you will have to enter your card details (card number, expiration date, validation code). CIB Bank will then redirect you to the website of the bank that issued your card, where you will have to complete an identification process (e.g. by entering a code sent to your mobile phone). If the identification is successful, the payment will be completed and you will receive a notification of the transaction. You will then be automatically redirected to the merchant’s interface. |
|
What remedies are available to you? |
In connection with the lawfulness of data processing, you may request that the National Authority for Data Protection and Freedom of (1055 Budapest, Falk Miksa utca 9-11., Postal address: 1363 Budapest, Pf.: 9., website: www.naih.hu, phone: +36 (1) 391-1400, fax: +36 (1) 391-1410, central e-mail address: [email protected]) initiate a proceeding or you may turn to the court. We recommend that you contact our Data Protection Officer before turning to the National Authority for Data Protection and Freedom of Information or to the court. |
|
How to contact the Data Protection Officer? |
Declaration
I declare that I have understood and acknowledged the information related to data processing. I hereby voluntarily and in possession of appropriate information give my consent to Cereal Research Non-profit Ltd. to transfer my freely given personal data
to CIB Bank Zrt. for the purposes specified in the above prospectus.
Data processing information on data transmission related to the use of online payment services