Gnes Fordító Iroda

Gnes Fordító Iroda Kft. (Address: 8360 Keszthely, Kísérleti utca 8, Floor 1, Door 2, hereinafter referred to as the service provider or data controller) acknowledges the contents of this legal notice as binding upon itself as a data controller.

The service provider is committed to ensuring that all data processing related to its activities complies with this policy, applicable national legislation, and European Union legal acts.

This Privacy Policy applies to the following domain:

• gnesforditoiroda.hu

The data protection guidelines related to the data processing activities of the data controller are continuously available at gnesforditoiroda.hu/en/privacy-policy.

The data controller reserves the right to modify this notice at any time. Affected parties will be informed of any changes in a timely manner.

If you have any questions regarding this notice, please write to us, and we will respond to your inquiry.

The data controller is committed to protecting the personal data of its customers and partners and considers respecting their right to informational self-determination of utmost importance. The data controller handles personal data confidentially and takes all necessary security, technical, and organizational measures to ensure the safety of the data.

The data controller outlines its data processing practices below.

The company can be contacted via the phone number and email address listed below.

• Data Controller: Gnes Fordító Iroda Kft.
• Registered Office: 8360 Keszthely, Kísérleti utca 8, Floor 1, Door 2
• Mailing Address: 8360 Keszthely, Kísérleti utca 8, Floor 1, Door 2
• Tax Number: 29267396-1-20
• Registration Number: 20-09-077644
• Website: gnesforditoiroda.hu
• Phone Number: +36 30 359 7299
• Email Address: info@gnesforditoiroda.hu

The data controller does not engage in activities that require the appointment of a data protection officer.

The data controller selects and operates IT tools used in the provision of its services in a manner that ensures the processed data:

• Availability: Accessible to those authorized.
• Data Authenticity: Guaranteeing its authenticity and authentication.
• Data Integrity: Retaining its unaltered state.
• Data Confidentiality: Protected against unauthorized access.

The data controller employs appropriate measures to protect data against unauthorized access, alteration, transfer, disclosure, deletion, destruction, and accidental loss.

The data controller implements technical, organizational, and structural measures to ensure the security of data processing, providing a level of protection that corresponds to the risks associated with data processing.

During data processing, the data controller maintains:

• Confidentiality: Ensuring information is accessible only to authorized individuals.
• Integrity: Protecting the accuracy and completeness of information and the methods of its processing.
• Availability: Ensuring that authorized users can access the required information and related tools when needed.

Cookies gather information about visitors and their devices, remembering individual settings that can be used during online transactions, eliminating the need for re-entry. They simplify website usage, ensure a quality user experience, and assist in the collection of statistical information about visitors.

To provide personalized service, a small data package called a cookie is placed on the user’s computer and read during subsequent visits. If the browser sends back a previously saved cookie, the cookie operator can link the user’s current visit to previous ones, but only regarding its own content.

Some cookies do not contain personal information that identifies individual users, while others include a secret, randomly generated number sequence stored on the user’s device to ensure user identification.

These cookies aim to enable visitors to browse the gnesforditoiroda.hu website smoothly and without interruptions, use its features, and access its services. These cookies remain valid until the end of the session (browsing) and are automatically deleted when the browser is closed or when the device used for browsing is shut down.

The gnesforditoiroda.hu website also uses third-party cookies such as Google Analytics. By utilizing the statistical service provided by Google Analytics, the gnesforditoiroda.hu domain website collects information about how visitors use the website. This data is used to improve the website and enhance the user experience. These cookies remain on the visitor’s computer or other browsing devices until they expire or until the visitor deletes them.

The legal basis for cookie management is the visitor’s consent, in accordance with Article 6(1)(a) of the relevant regulation.

If you do not accept the use of cookies, certain features of the websites listed in Section 3.2.2 may not be available or may function incorrectly.

More information about deleting cookies in common browsers can be found at the following links:

• Firefox: Deleting cookies placed by websites on the computer
• Chrome: Deleting, enabling, and managing cookies in Chrome
• Safari: Managing cookies and website data in the Safari app on Mac

The data management activities of the data controller are based on voluntary consent or legal authorization. For data management based on voluntary consent, the individuals concerned may withdraw their consent at any stage of the data processing.

In certain cases, laws make it mandatory to manage, store, or transfer certain provided data, of which we inform our clients separately. We remind data providers to ensure that if they provide personal data that doesn’t belong to them, it is their responsibility to obtain the consent of the individual concerned.

The principles of data management are in compliance with the applicable data protection laws, including but not limited to:

• Act CXII of 2011 – on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
• Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) – on the protection of natural persons regarding the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR);
• Act V of 2013 – on the Civil Code (Ptk.);
• Act C of 2000 – on Accounting (Accounting Act);
• Act LIII of 2017 – on the Prevention of Money Laundering and Terrorist Financing (AML Act);
• Act CCXXXVII of 2013 – on Credit Institutions and Financial Enterprises (Hpt.).

The data controller has prepared a data map that defines the scope of processed data, their use, legal basis, and retention period.

Through the website, it is possible to request quotes. The personal data collected during the ordering process are:

• Name (mandatory field)
• Address (mandatory field)
• Email address (mandatory field)
• Phone number (mandatory field)

For certain services, such as website maintenance, additional personal data may also be provided.

Purpose of data processing (intended use of the processed data): The data are used to fulfill the order.

Legal basis for data processing: Contractual agreement.
Retention period: Duration of the business relationship or upon deletion request.

The personal data requested during contact are:

• Name (mandatory field)
• Email address (mandatory field)
• Phone number (optional field, may be provided for callback requests)

Purpose of data processing (intended use of the processed data): The data are used for contact and to fulfill the order.

Legal basis for data processing: Voluntary consent.
Retention period: Duration of the business relationship or upon deletion request.

The personal data requested and obtained during contact are:

• Name
• Phone number

Purpose of data processing (intended use of the processed data): The data are used for contact and to fulfill the order.

Legal basis for data processing: Voluntary consent.
Retention period: Duration of the business relationship or upon deletion request.

The following personal data and contact details of company executives and contacts are stored:

• Name
• Address
• Email address
• Phone number

Purpose of data processing (intended use of the processed data): The data are used for contact and communication.

Legal basis for data processing: Legitimate interest.
Retention period: Duration of the business relationship or until deletion request.

 The data controller enters into contracts with clients for ordered services, and as part of this process, the following data is collected:

• Name
• Address
• Email address

Purpose of data processing (intended use of the processed data): Invoicing.

Legal basis for data processing: Legal obligation.
Retention period: Based on legal requirements, current year + 5 years.

Your personal data (i.e., data that can be associated with you) may be processed by us in the following ways:

• Technical data related to the computer, browser, internet address, and the pages visited that you use to maintain your internet connection are automatically generated in our computer system.
• Additionally, you can provide your name, contact details, or other information if you wish to establish personal contact with us while using the website.
  Technically recorded data during system operation: the data from the user’s logging-in computer, recorded automatically by the domain system of gnesforditoiroda.hu as a result of technical processes.

Automatically recorded data are logged by the system without the user’s specific statement or action during login and logout.
These data cannot be linked with other personal user data, except in cases required by law. The data are accessible exclusively by the gnesforditoiroda.hu domain.

As part of its business activities, the data controller uses the following data processors:

Hosting Service:

• Company Name: Websupport Magyarország Kft.
• Headquarters: 1132 Budapest, Victor Hugo Street 18-22.
• Email Address: info@mhosting.hu
• Phone Number: +36 1 700 2323

Privacy Policy: https://www.mhosting.hu/adatvedelem
Scope of accessed data: Content of the website on the gnesforditoiroda.hu domain and emails sent to addresses based on this domain.

Data are transferred to the United States of America, which is subject to an adequacy decision made on July 12, 2016 (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en).

The adequacy decision also applies to data controllers Google (https://policies.google.com/privacy/frameworks) and Meta (Facebook) (https://www.facebook.com/about/privacyshield).

The data subject may request information about the processing of their personal data, as well as the correction, deletion, or withdrawal of their data, except in cases of mandatory processing. They may also exercise their rights to data portability and objection in the manner indicated at the time of data collection or via the above contact details of the data controller.

The data controller shall take appropriate measures to ensure that all information regarding personal data processing, as specified in Articles 13 and 14 of the GDPR, along with communications under Articles 15–22 and 34, is provided to the data subject in a concise, transparent, intelligible, and easily accessible manner, using clear and plain language.

The data subject has the right to receive confirmation from the data controller as to whether their personal data is being processed and, if so, to access the personal data and the following information:

• The purposes of processing;
• The categories of personal data concerned;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, especially recipients in third countries or international organizations;
• The envisaged storage period for the personal data;
• The right to rectification, erasure, or restriction of processing and the right to object;
• The right to lodge a complaint with a supervisory authority;
• Information about the sources of the data;
• The existence of automated decision-making, including profiling, along with clear and comprehensible information about the logic involved and the significance and foreseeable consequences of such processing for the data subject.

The data controller shall provide the information within one month of receiving the request.

The data subject has the right to request the correction of inaccurate personal data and the completion of incomplete data processed by the data controller.

The data subject has the right to request the erasure of their personal data without undue delay if any of the following reasons apply:

• The personal data are no longer needed for the purposes for which they were collected or otherwise processed;
• The data subject withdraws their consent, and there is no other legal basis for processing;
• The data subject objects to processing, and there are no overriding legitimate grounds for processing;
• The personal data were unlawfully processed;
• The personal data must be erased to comply with legal obligations under Union or Member State law;
• The personal data were collected in connection with offering services related to the information society.

However, the right to erasure cannot be exercised if the processing is necessary for the following reasons:

• For exercising the right of freedom of expression and information;
• For compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority;
• For reasons of public health, archival purposes, or statistical purposes in the public interest;
• For the establishment, exercise, or defense of legal claims.

The data subject has the right to request restriction of processing if any of the following conditions apply:

• The data subject contests the accuracy of the data, for the period enabling verification of the data’s accuracy;
• The processing is unlawful, and the data subject opposes deletion, requesting restriction instead;
• The data controller no longer needs the data for processing purposes, but the data subject requires it for legal claims;
• The data subject objects to the processing, pending verification of whether the controller’s legitimate interests override theirs.

If processing is restricted, personal data may only be processed with the data subject’s consent, or for legal claims, the protection of another’s rights, or for important public interests of the Union or Member State.

The data subject has the right to receive the personal data provided to the controller in a structured, commonly used, and machine-readable format and to transfer this data to another controller.

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data based on public interest or the exercise of official authority, or for the purposes of legitimate interests pursued by the controller or a third party, including profiling. In the event of an objection, the controller shall no longer process the data unless compelling legitimate grounds for processing override the data subject’s interests, rights, and freedoms, or unless processing serves legal claims.

The data subject has the right not to be subject to a decision based solely on automated data processing – including profiling – which produces legal effects concerning them or similarly significantly affects them.

The data subject has the right to withdraw their consent at any time.

The data subject has the right to turn to a court if their rights are violated. The court will act promptly in such cases.

Complaints can be filed with the National Authority for Data Protection and Freedom of Information:

• Name: National Authority for Data Protection and Freedom of Information
• Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C
• Mailing Address: 1530 Budapest, P.O. Box 5
• Phone: +36 1 391 1400
• Fax: +36 1 391 1410
• Email: ugyfelszolgalat@naih.hu
• Website: naih.hu

For data processing not explicitly mentioned in this notice, information will be provided at the time the data is collected. Customers are informed that courts, prosecutors, investigative authorities, administrative authorities, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, and other legally authorized bodies may request information, data disclosure, transfers, or provision of documents from the data controller. The data controller will disclose personal data to these authorities only to the extent strictly necessary to fulfill the purpose of the request, provided the authority specifies the precise purpose and scope of the data required.